Bug #15567
open
Continent Alias Lost at Start of pfBlockerNG
0%
Description
I am using the pfblockerNG created continent aliases e.g. "pfB_Europe_v4" in my firewall rules.
Unfortunately they are not available after restart of pfsense.
Without these aliases I am not able to connect to the instance until manual interaction.
What I already found out:
- They are still there seconds after reboot (due to /usr/local/pkg/pfblockerng/pfblockerng.sh aliastables?)
- They seem to get deleted when pfblockerNG is started
- They come back when the Cronjob is executed BUT connection is not possible as the firewall/filters are not reloaded automatically
- One has to manually trigger a filter reload to make it work
Would as well appreciate workaround suggestions.
Like is there a way to run a full sync on startup of pfblocker before aliases are cleaned?
Updated by Bryan Coutts 6 days ago
Did you ever find a workaround or fix for this? I'm having a very similar issue right now, except triggering a reload does not help. So far, the only solutions I've found are:
1) Changing the rule's source from the alias to "Any" and then back again, after which the issue recurs following a reboot.
2) Turning off the "Use RAM Disks" setting, which is not ideal.
My aliases are not empty, but I suspect they are at boot when the filter rules are created, which leads to:
"Rule skipped: Unresolvable source alias 'pfB_NAmerica_v4' for rule 'Allow WireGuard (IPv4)'" for every rule that contains an alias from pfBlockerNG.