OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • Firehol Rules
« previous next »
  • Print
Pages: [1]

Author Topic: Firehol Rules  (Read 5631 times)

rhyse

  • Newbie
  • *
  • Posts: 14
  • Karma: 0
    • View Profile
Firehol Rules
« on: June 01, 2017, 12:29:36 am »
Hi

I am trying ot integrate the Firehol Level 1 lists into opnsense at present. I am doing this via Firewall -> Aliases -> View -> URL Table (IPs) with the URL being https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset. On filter reload I am getting the following event logged

1496267674.0472: There were error(s) loading the rules: /tmp/rules.debug:24: cannot define table firehol_level1: Cannot allocate memory - The line in question reads [24]: table  persist file "/var/db/aliastables/firehol_level1.txt"

I have googled and come across some PFsense issues with similar messages particularly https://redmine.pfsense.org/issues/4876 (this may be of no relevance)

root@unfw01:~ # pfctl -f /tmp/rules.debug
/tmp/rules.debug:24: cannot define table firehol_level1: Cannot allocate memory
/tmp/rules.debug:26: cannot define table firehol_level2: Cannot allocate memory
/tmp/rules.debug:28: cannot define table firehol_level3: Cannot allocate memory
/tmp/rules.debug:30: cannot define table firehol_level4: Cannot allocate memory
pfctl: Syntax error in config file: pf rules not loaded

Hardware wise
Intel Celeron 3215U @ 1.70GHz (2 cores) (load at present (0.37,0.34,0.28)
8GB RAM (16% in use)
41GB disk (4% used, UFS)

Any thoughts ? Anyone able to replicate ?

Any help appreciated

Thanks
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6340
  • Karma: 436
    • View Profile
Re: Firehol Rules
« Reply #1 on: June 01, 2017, 12:26:36 pm »
Same problem here, opened a ticket:

https://github.com/opnsense/core/issues/1666
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

mimugmail

  • Hero Member
  • *****
  • Posts: 6340
  • Karma: 436
    • View Profile
Re: Firehol Rules
« Reply #2 on: June 01, 2017, 01:10:21 pm »
Set the value like in the issue to 1Mio ...
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

rhyse

  • Newbie
  • *
  • Posts: 14
  • Karma: 0
    • View Profile
Re: Firehol Rules
« Reply #3 on: June 01, 2017, 05:35:14 pm »
Up'ed the value and error has disappeared. Just need to see if there is any negative impact.

Thanks for you help
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • Firehol Rules
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2