OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • /usr/local/etc/bogonsv6 too big
« previous next »
  • Print
Pages: [1] 2

Author Topic: /usr/local/etc/bogonsv6 too big  (Read 9844 times)

ekke

  • Newbie
  • *
  • Posts: 10
  • Karma: 0
    • View Profile
/usr/local/etc/bogonsv6 too big
« on: February 07, 2018, 12:02:23 am »

https://www.dropbox.com/s/7tswaldhlmkdgyg/opnsense.PNG?dl=0

ll /usr/local/etc/bogonsv6
-rw-r--r--  1 root  wheel  1492763 Jan 30 23:09 /usr/local/etc/bogonsv6

I get a error when OPNSense tries to load this list. for now I have commented it out.

« Last Edit: February 07, 2018, 12:04:23 am by ekke »
Logged

phoenix

  • Sr. Member
  • ****
  • Posts: 480
  • Karma: 54
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #1 on: February 07, 2018, 07:24:48 am »
I can't imagine why it's that large, mine isn't:

ll /usr/local/etc/bogonsv6
-rw-r--r--  1 root  wheel  860 Feb  1 11:58 /usr/local/etc/bogonsv6

Perhaps your is a hangover from the last release of OPNsense that you had installed or is this a clean install?
Logged
Regards


Bill

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12789
  • Karma: 1096
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #2 on: February 07, 2018, 02:14:44 pm »
It's normally over 1 MB once updated. The small file is the bootstrap file we ship with the core package.

If bogons are too big, you will have to disable them. Never heard of it before, half-guessing it is due to your hardware... how much RAM do you have?


Cheers,
Franco
Logged

marjohn56

  • Hero Member
  • *****
  • Posts: 1674
  • Karma: 161
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #3 on: February 07, 2018, 02:50:39 pm »
Here's mine for comparision

admin@gateway:~ % ll /usr/local/etc/bogonsv6
-rw-r--r--  1 root  wheel  1508542 Feb  1 03:16 /usr/local/etc/bogonsv6
Logged
OPNsense 21.7 - Qotom Q355G4 - ISP - Community Fibre 1Gbps.

Team Rebellion Member - If we've helped you remember to applaud

mausy5043

  • Jr. Member
  • **
  • Posts: 58
  • Karma: 5
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #4 on: February 07, 2018, 04:46:04 pm »
Quote from: phoenix on February 07, 2018, 07:24:48 am
I can't imagine why it's that large, mine isn't:

ll /usr/local/etc/bogonsv6
-rw-r--r--  1 root  wheel  860 Feb  1 11:58 /usr/local/etc/bogonsv6

There is a *really* well-hidden option in Firewall > Diagnostics > pfTables
The button in the top-right corner : [Update bogons]. When clicked it downloads the latest list of bogons. Which can be fairly large.

Code: [Select]
$ la /usr/local/etc/bogons*
-rw-r--r--  1 root  wheel    62572 Feb  7 16:44 /usr/local/etc/bogons
-rw-r--r--  1 root  wheel      132 Jan 29 13:12 /usr/local/etc/bogons.sample
-rw-r--r--  1 root  wheel  1514021 Feb  7 16:44 /usr/local/etc/bogonsv6
-rw-r--r--  1 root  wheel      860 Jan 29 13:12 /usr/local/etc/bogonsv6.sample

And looking at my logs I see nothing special.

Code: [Select]

Feb  7 16:43:45 gateway configd.py: [dc6fa705-7811-47fd-a2d1-9c4bbc11a04b] request content of pf bogons table
Feb  7 16:44:04 gateway configd.py: [b4dfd709-84b2-41da-bc55-e26c2bab476f] update bogons database
Feb  7 16:44:04 gateway root: rc.update_bogons is starting up
Feb  7 16:44:04 gateway root: rc.update_bogons is beginning the update cycle
Feb  7 16:44:05 gateway root: rc.update_bogons is ending the update cycle
Feb  7 16:44:05 gateway configd.py: [2edfb7f2-a740-488b-a2e4-0aee5e383c64] request content of pf bogons table
Feb  7 16:46:22 gateway configd.py: [3f82124c-4eca-4186-b412-d5e27172e084] request content of pf bogonsv6 table

I tend to agree with @franco that this might be a memory problem.
« Last Edit: February 07, 2018, 04:57:39 pm by mausy5043 »
Logged
:-D  Hobbyist programmer since 1986

phoenix

  • Sr. Member
  • ****
  • Posts: 480
  • Karma: 54
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #5 on: February 07, 2018, 07:18:01 pm »
Quote from: franco on February 07, 2018, 02:14:44 pm
It's normally over 1 MB once updated. The small file is the bootstrap file we ship with the core package.
My mistake.  :-[ Doesn't that file get updated automatically? I always assumed that was the case, I've just updated it manually via the helpful hint from mausy5043 and it's now the 1.5MB size.
Logged
Regards


Bill

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12789
  • Karma: 1096
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #6 on: February 07, 2018, 08:49:52 pm »
Bill, do you have IPv6 turned off under Firewall: Settings: Advanced?


Cheers,
Franco
Logged

phoenix

  • Sr. Member
  • ****
  • Posts: 480
  • Karma: 54
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #7 on: February 07, 2018, 08:54:49 pm »
Hi Franco

Yes, IPv6 is enabled and has been since I went to fibre in August last year.
Logged
Regards


Bill

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12789
  • Karma: 1096
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #8 on: February 07, 2018, 08:58:47 pm »
Hmm, and do you set "block bogons" anywhere in your interfaces?

Also in your system log do you see "Not saving IPv6 bogons table (IPv6 Allow is off and table-entries limit is potentially too low" ?


Cheers,
Franco
Logged

ekke

  • Newbie
  • *
  • Posts: 10
  • Karma: 0
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #9 on: February 07, 2018, 09:13:05 pm »
Quote from: franco on February 07, 2018, 02:14:44 pm
It's normally over 1 MB once updated. The small file is the bootstrap file we ship with the core package.

If bogons are too big, you will have to disable them. Never heard of it before, half-guessing it is due to your hardware... how much RAM do you have?


Cheers,
Franco

xeon 1230v3 8GB RAM
Logged

phoenix

  • Sr. Member
  • ****
  • Posts: 480
  • Karma: 54
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #10 on: February 07, 2018, 09:17:27 pm »
Quote from: franco on February 07, 2018, 08:58:47 pm
Hmm, and do you set "block bogons" anywhere in your interfaces?
Yes, it's set on the WAN interface only and nowhere else.

Quote from: franco on February 07, 2018, 08:58:47 pm
Also in your system log do you see "Not saving IPv6 bogons table (IPv6 Allow is off and table-entries limit is potentially too low" ?
Nothing except the fact I started the update and the file did get updated.
Logged
Regards


Bill

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12789
  • Karma: 1096
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #11 on: February 07, 2018, 09:31:41 pm »
Weird, but out of ideas. :(
Logged

phoenix

  • Sr. Member
  • ****
  • Posts: 480
  • Karma: 54
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #12 on: February 07, 2018, 09:44:08 pm »
Quote from: franco on February 07, 2018, 09:31:41 pm
Weird, but out of ideas. :(
No worries, I didn't miss it when it wasn't running. :)
Logged
Regards


Bill

Ren

  • Jr. Member
  • **
  • Posts: 52
  • Karma: 3
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #13 on: February 07, 2018, 10:05:54 pm »
i had the same issue after updating last night. I ended up bumping the Firewall Maximum Table Entries to 500,000 and rebooting. I can spare 500MB of RAM for this.

Logged

marjohn56

  • Hero Member
  • *****
  • Posts: 1674
  • Karma: 161
    • View Profile
Re: /usr/local/etc/bogonsv6 too big
« Reply #14 on: February 07, 2018, 10:39:32 pm »
Perhaps why I have never had the issue, my FW Max Entries was already set to 1 Million. Plenty of RAM to play with.
Logged
OPNsense 21.7 - Qotom Q355G4 - ISP - Community Fibre 1Gbps.

Team Rebellion Member - If we've helped you remember to applaud

  • Print
Pages: [1] 2
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • /usr/local/etc/bogonsv6 too big
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2022 All rights reserved
  • SMF 2.0.18 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2