Firewall->Diagnostics->pfTables is empty

[elektroinside]

Running out of ideas for this evening :) ...

[elektroinside]

Maybe just this one:

-If you WinSCP to this path: /root/var/db/aliastables
-Delete everything related to that alias
-Delete the alias from the GUI

.. and recreate... will this populate the table?

[nqnguyen2]

Strange results for me. I tried the URL in OP's first post and it didn't work.

Doesn't work: http://ip.jchost03.pl/ip_zablokowane_ataki.txt
Doesn't work: ip.jchost03.pl/ip_zablokowane_ataki.txt
WORKS: http://www.ip.jchost03.pl/ip_zablokowane_ataki.txt (screenshot1)

Notice the "www" that allowed the pfTables to populate (screenshot2). OP, try what I did, hopefully it works for you too.

[franco]

It could be forcing a redirect that is not followed properly by the fetch library?

[gonzo]

I removed the ralias and the firewall rule, I made a new alias and rule, but it is still empty.

I also see the names of removed alaises (IP_ataki, ip_ataki, ip_blocked_ataki) how to remove them ?

[nqnguyen2]

Franco, good point I didn't think of but Fiddler doesn't show redirect.

gonzo, you might have to remove manually if a reboot doesn't work; /var/db/aliastables. Might as well reboot with all the work that you did anyway.

[gonzo]

FireWall already works in a production environment. Deleting this file will affect the operation of FW ?

[nqnguyen2]

No, it shouldn't affect production. It merely removes the alias from showing in the pfTables selection. If everything is working fine. I'd say leave it alone.

[gonzo]

I removed the contents of the catalog ( text files ) : /var/db/aliastables .
I have removed all aliases and all rules except one "Allow all" . This is the default rule that is installed with the system.

Before I start creating new aliases and new rules, I want to delete entries that I see : Firewall: Diagnostics: pfTables.

1) Why do I still see these entries? If all aliases and rules are removed ?
2) How can I delete these entries ?

[gonzo]

My question is too difficult or too simple ? . No one knows the answer ?

[elektroinside]

Firewall: Aliases: View -> you should not have any aliases here.
You should not have any files here: /var/db/aliastables

And maybe you should apply this patch from here (read the entire conversation):
https://github.com/opnsense/core/issues/2162

And then reboot, then recreate the aliases.

[elektroinside]

Works?