Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    SCRUB Information and States empty

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L Offline
      lucasrca
      last edited by

      Guys,
      I'm stuck into a weird problem.
      I have a pfSense 2.1.3 (i386) box, configured on a VMWare ESXi 5, with 7 interfaces/VLANs (Only 1 WAN, all IPv4).

      My core switch is a Cisco Small Business appliance. I have a virtual switch configured at the VMWare. I am running this config about 2 and a half years.

      Never saw this problem before.

      It began yesterday, on the afternoon.

      I did not add any newer rule or package…

      I removed ALL previously installed packages, like pfBlocker and OpenVPN Client Exporter.

      I'm able to connect through OpenVPN (remote), I can RDP my Windows Servers, but inside the LAN, I can't resolve DNS amongst other things.

      I think the pfSense is blocking all outgoing connections, but it's not logging them too.

      On the filter reload status, it takes too long to pass through the "Setting up SCRUB information..." status.

      Another thing: my state table is empty! How can be possible? My network have approximately 1500 clients. No log for that too.

      I've already disabled this options: Scrub, Bogons, IP monitor. I saw this solution in another post.

      I am freakin' lost right now and my contractor is about to explode in anger.

      So, what else can I do?

      Best regards and thanks for the help!

      This a UNIX country. On a quiet night, you can hear Windows rebooting.

      1 Reply Last reply Reply Quote 0
      • jimpJ Offline
        jimp Rebel Alliance Developer Netgate
        last edited by

        If you have no states, there are only two explanations:

        1. The firewall is off (packet filtering disabled)
        2. The firewall rules are not loading. Usually reported as an error in the GUI, but in case it isn't showing up there, from the console, run:

        pfctl -f /tmp/rules.debug
        

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • L Offline
          lucasrca
          last edited by

          Thanks.

          I had a URL_BLACKLIST alias that was blocking all rules.

          Again, thanks.

          Best regards.

          This a UNIX country. On a quiet night, you can hear Windows rebooting.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.