Pfblocker strange problem: out of memory, not loading rules



  • I encountered a strange problem with pfblocker on ad64, pfSense v2.1.5.
    I get the message at the dashboard:

    php: rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:38: cannot define table pfBlockerRussen: Cannot allocate memory - The line in question reads [38]: table <pfblockerrussen> persist file "/var/db/aliastables/pfBlockerRussen.txt"</pfblockerrussen>
    

    The dashboard shows 28% memory used (4GB installed) imbf usage is low by about 14%, state table shows 0% used, all the pfblocker aliases show green, but apparently all internet is gone.

    The whole thing appears every time when an IP-change (ISP disconnect) happens.

    Restarting pfblocker resolves the problem.

    I have snort, avahi, cups, squid 3.3.1 and squidguard installed. So far no other problems here.



  • Although its been a while since your question, maybe its still useful to answer . I found somewhere on this forum that increasing Firewall Maximum Table Entries  (its under  system>advanced>Firewall/NAT) solves the problem of loading the blocking rules. Personally I increased it to 20000000 without problem but maybe even 1/10 of that is fine.

    John


Log in to reply