Project

General

Profile

Actions
Copy link

Bug #16600

open

pfBlockerNG breaks HA XMLRPC sync

Added by Georgiy Tyutyunnik 1 day ago. Updated about 12 hours ago.

Status:
Feedback
Priority:
Normal
Assignee:
Marcos M
Category:
pfBlockerNG
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

tested on:
25.11-RELEASE (amd64)
built on Mon Dec 15 17:04:00 UTC 2025
FreeBSD 16.0-CURRENT

installation of the pfBlockerNG or pfBlockerNG-devel package (current version 3.2.13_1, same for devel) stops the secondary HA node from implementing the changes from the main node during XMLRPC sync
pfBlockerNG doesn't need to be started or have any config - installation breaks the XMLRPC sync config update, deinstallation fixes it immediately

Status_outputs attached for both nodes, after XMLRPC sync initiated from master, one case with no pfb on both nodes, another case with pfb installed on backup node only

Steps to reproduce:
1) enable XMLRPC sync on the master to backup;
2) install pfblockerNG on backup;
3) make the change in firewall rules on master, run the XMLRPC sync - sync event registers on backup but no changes in config

Files

Download all files
status_output_master_pfb-on-backup_case.tgz (178 KB) status_output_master_pfb-on-backup_case.tgz Georgiy Tyutyunnik, 12/22/2025 09:42 AM
status_output_backup_pfb-on-backup-case.tgz (186 KB) status_output_backup_pfb-on-backup-case.tgz Georgiy Tyutyunnik, 12/22/2025 09:42 AM
status_output_backup_no_pfb_case.tgz (184 KB) status_output_backup_no_pfb_case.tgz Georgiy Tyutyunnik, 12/22/2025 09:42 AM
status_output_master_no_pfb_case.tgz (171 KB) status_output_master_no_pfb_case.tgz Georgiy Tyutyunnik, 12/22/2025 09:42 AM
Actions
Copy link

Also available in: Atom PDF