OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: rhyse on June 01, 2017, 12:29:36 am

Title: Firehol Rules
Post by: rhyse on June 01, 2017, 12:29:36 am

Hi

I am trying ot integrate the Firehol Level 1 lists into opnsense at present. I am doing this via Firewall -> Aliases -> View -> URL Table (IPs) with the URL being https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset. On filter reload I am getting the following event logged

1496267674.0472: There were error(s) loading the rules: /tmp/rules.debug:24: cannot define table firehol_level1: Cannot allocate memory - The line in question reads [24]: table  persist file "/var/db/aliastables/firehol_level1.txt"

I have googled and come across some PFsense issues with similar messages particularly https://redmine.pfsense.org/issues/4876 (this may be of no relevance)

root@unfw01:~ # pfctl -f /tmp/rules.debug
/tmp/rules.debug:24: cannot define table firehol_level1: Cannot allocate memory
/tmp/rules.debug:26: cannot define table firehol_level2: Cannot allocate memory
/tmp/rules.debug:28: cannot define table firehol_level3: Cannot allocate memory
/tmp/rules.debug:30: cannot define table firehol_level4: Cannot allocate memory
pfctl: Syntax error in config file: pf rules not loaded

Hardware wise
Intel Celeron 3215U @ 1.70GHz (2 cores) (load at present (0.37,0.34,0.28)
8GB RAM (16% in use)
41GB disk (4% used, UFS)

Any thoughts ? Anyone able to replicate ?

Any help appreciated

Thanks

Title: Re: Firehol Rules
Post by: mimugmail on June 01, 2017, 12:26:36 pm

Same problem here, opened a ticket:

https://github.com/opnsense/core/issues/1666

Title: Re: Firehol Rules
Post by: mimugmail on June 01, 2017, 01:10:21 pm

Set the value like in the issue to 1Mio ...

Title: Re: Firehol Rules
Post by: rhyse on June 01, 2017, 05:35:14 pm

Up'ed the value and error has disappeared. Just need to see if there is any negative impact.

Thanks for you help