Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Alias->URL Table (IPS)

    Scheduled Pinned Locked Moved 2.2 Snapshot Feedback and Problems - RETIRED
    3 Posts 2 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wcrowder
      last edited by

      Upon boot pfSense 2.2 takes 7 -10 minutes to load pfSense at the [Loading Firewall] line with 8 <aliases>_ <urls>Type <url table="" (ips)="">consisting of approx 129,000 URLs total over all 8 aliases in the following format. Files are clean. Using BBcan177's script from the https://forum.pfsense.org/index.php?topic=78062.0

      217.195.25.241
      218.75.155.41
      218.146.254.33
      220.181.150.161
      222.186.19.226

      There is very little processor, disk or network activity during this time. Can not find anything in the logs that show what it's doing.

      vmWare 5.5, VM with 1x2 cores, 4 gigs ram, 35 gb storage, 2.2 Alpha built on Fri Aug 01 15:39:34 CDT 2014

      Any suggestions?

      Thanks,
      Bill</url></urls></aliases>

      1 Reply Last reply Reply Quote 0
      • BBcan177B
        BBcan177 Moderator
        last edited by

        I built a pfSense 2.2 Box today:

        2.2-ALPHA (amd64)
        built on Wed Jul 30 10:58:12 CDT 2014
        FreeBSD xxxxx.xxxxxx.com 10.0-STABLE FreeBSD 10.0-STABLE #44 0d8378f(HEAD)-dirty: Wed Jul 30 11:11:05 CDT 2014 root@xxxx-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64

        I can confirm that I am seeing the same issue with Reboot where it takes a while to load the WEB GUI. However, the Shell (SSH) comes up fairly quick. I don't see any Firewall Log errors in the system.logs. This box (2.2) has only the LAN interface enabled and is using the GW from a LIVE 2.14 box. I didn't take a look at the console to see if the [Loading Firewall] message appears there?

        I also notice that alias's (URL Table - IPs) that were defined before shutdown are showing empty tables after reboot. 2.14 does not exhibit this behavior. All of the alias (URL Table - IPs) definitions are there, but they are empty.

        Previously when an alias was created, clicking "Save" would load the Alias, and you could see the Tables if you hovered over the rules that are defined with an "alias", or in Diagnostics:Table. With 2.2, "Save" does not reload the previously defined aliases.

        The only way to get the Aliases to show the IPs, is with a "pfctl" command:

        **/sbin/pfctl -t -T replace -f /PATH/TO/

        However, if you edit the Alias another time, and click "Save", it will clear the table again. Executing the pfctl command above will allow reloading the alias table.**

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • W
          wcrowder
          last edited by

          After looking around further creating an Alias of URLS in a URL_table(IPs) then creating Floating rules based on these aliases the rules do not populate the pf tables after saving them, you can see this by the command "pfctl -s labels".

          After executing the command "pfctl -t -T replace -f /PATH/TO/

          " manually the tables then load and function as expected per "pfctl -s labels".

          Also with these rules in place it takes 13 minutes for pfSense to boot at the first instance of "loading firewall" with 99.8 to 100% idle per Top during this idle time.

          From what I see the alias tables do not get populated and the floating rules based on these aliases do not function without manual intervention using the pfctl command. I am resorting to set up a cron job to reload the tables manually.

          Guys, am I missing something here?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.