Project

General

Profile

Actions

Bug #13408

open

pfctl can fail to load a new ruleset.

Added by Steve Wheeler about 2 months ago. Updated 30 days ago.

Status:
Ready To Test
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
22.11
Release Notes:
Default
Affected Version:
Affected Architecture:
All

Description

In some circumstances pfctl fails to load the rulset after it's updated. It shows errors like:

There were error(s) loading the rules: pfctl: pfctl_rules - The line in question reads [0]: @ 2022-08-04 19:43:08

The ruleset file, /tmp/rules.debug, appears correctly populated.

Trying to load the ruleset manually with verbose logging shows on the same error and not the expected rule list.

Trussing pfctl shows only that is cannot access pf to load the rules after boot:

ioctl(3,DIOCXBEGIN,0xbfbfd9d0) ERR#16 'Device busy'

Most users who have seen this have rebooted and loaded the ruleset successfully but not all.

This is not only immediately after upgrade where there may be components of the previous release still present.

See: https://forum.netgate.com/topic/173923/strange-error-there-were-error-s-loading-the-rules-pfctl-pfctl_rules/

We are seeing this in 22.05-rel but have previously seen similar errors in 2.7 snapshots

Actions #1

Updated by Kristof Provost 30 days ago

  • Status changed from New to Ready To Test

This will be fixed by https://cgit.freebsd.org/src/commit/?id=6ab80e7275091c900da8d2e84a7b0bb4c34a1e41
I've also merged it into devel-12 as b2f21e9050cd2748afc721ee8e41a5fcbf5973ed

Actions

Also available in: Atom PDF