• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Pfblocker strange problem: out of memory, not loading rules

Scheduled Pinned Locked Moved pfSense Packages
2 Posts 2 Posters 1.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • _
    _igor_
    last edited by Dec 26, 2014, 8:28 AM

    I encountered a strange problem with pfblocker on ad64, pfSense v2.1.5.
    I get the message at the dashboard:

    php: rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:38: cannot define table pfBlockerRussen: Cannot allocate memory - The line in question reads [38]: table <pfblockerrussen> persist file "/var/db/aliastables/pfBlockerRussen.txt"</pfblockerrussen>
    

    The dashboard shows 28% memory used (4GB installed) imbf usage is low by about 14%, state table shows 0% used, all the pfblocker aliases show green, but apparently all internet is gone.

    The whole thing appears every time when an IP-change (ISP disconnect) happens.

    Restarting pfblocker resolves the problem.

    I have snort, avahi, cups, squid 3.3.1 and squidguard installed. So far no other problems here.

    1 Reply Last reply Reply Quote 0
    • J
      JohnPFsense
      last edited by Jan 26, 2015, 2:15 PM

      Although its been a while since your question, maybe its still useful to answer . I found somewhere on this forum that increasing Firewall Maximum Table Entries  (its under  system>advanced>Firewall/NAT) solves the problem of loading the blocking rules. Personally I increased it to 20000000 without problem but maybe even 1/10 of that is fine.

      John

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received