SCRUB Information and States empty



  • Guys,
    I'm stuck into a weird problem.
    I have a pfSense 2.1.3 (i386) box, configured on a VMWare ESXi 5, with 7 interfaces/VLANs (Only 1 WAN, all IPv4).

    My core switch is a Cisco Small Business appliance. I have a virtual switch configured at the VMWare. I am running this config about 2 and a half years.

    Never saw this problem before.

    It began yesterday, on the afternoon.

    I did not add any newer rule or package…

    I removed ALL previously installed packages, like pfBlocker and OpenVPN Client Exporter.

    I'm able to connect through OpenVPN (remote), I can RDP my Windows Servers, but inside the LAN, I can't resolve DNS amongst other things.

    I think the pfSense is blocking all outgoing connections, but it's not logging them too.

    On the filter reload status, it takes too long to pass through the "Setting up SCRUB information..." status.

    Another thing: my state table is empty! How can be possible? My network have approximately 1500 clients. No log for that too.

    I've already disabled this options: Scrub, Bogons, IP monitor. I saw this solution in another post.

    I am freakin' lost right now and my contractor is about to explode in anger.

    So, what else can I do?

    Best regards and thanks for the help!


  • Rebel Alliance Developer Netgate

    If you have no states, there are only two explanations:

    1. The firewall is off (packet filtering disabled)
    2. The firewall rules are not loading. Usually reported as an error in the GUI, but in case it isn't showing up there, from the console, run:

    pfctl -f /tmp/rules.debug
    


  • Thanks.

    I had a URL_BLACKLIST alias that was blocking all rules.

    Again, thanks.

    Best regards.


Log in to reply