Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Apr 2006 01:27:49 +0200
From:      Reinhold Platzoeder <freebsd@violetlan.net>
To:        freebsd-questions@freebsd.org
Cc:        fbsd@a1poweruser.com
Subject:   Re: pf problem with table
Message-ID:  <20060420012749.151ad162@khumuleka>
In-Reply-To: <MIEPLLIBMLEEABPDBIEGEEBJHFAA.fbsd@a1poweruser.com>
References:  <20060419081712.4c5ac371@khumuleka> <MIEPLLIBMLEEABPDBIEGEEBJHFAA.fbsd@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 19 Apr 2006 07:41:33 -0400
"fbsd" <fbsd@a1poweruser.com> wrote:

> Error msg means there is something wrong with the content of
> /etc/pfdata/blocklist-p2p
> 
> check that there are no blank lines in that file.
> 
> make file with only ten entries and test.
> Then add more content until you break it.
> maybe 1.7 MB file size is to large for max table size
> 
> 
> 
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Reinhold
> Platzoeder
> Sent: Wednesday, April 19, 2006 2:17 AM
> To: freebsd-questions@freebsd.org
> Subject: pf problem with table
> 
> 
> Hi
> 
> I have a problem with FreeBSD 6 and pf
> I am trying to load a 1.7M file in to pf using a tables
> but I get this error
> 
> /etc/pf.conf:22: cannot define table p2pblock: Cannot allocate
> memory
> pfctl: Syntax error in config file: pf rules not loaded
> 
> the table config in pf.conf is
> table <p2pblock> persist file "/etc/pfdata/blocklist-p2p"
> block in log quick on $ext_if from <p2pblock> to any
> 
> I have tried it on two different machines and both gives me the same
> error
> 
> everything works when I comment these two lines out
> 
> Any ideas as to what i'm doing wrong?
> 
> Thanks
> 
> --
> Reinhold Platzoeder
> 
> reinhold@violetlan.net
> reinhold@webmail.co.za
> 
> http://www.violetlan.net
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"

Hi

My problem looks like the file is to big to be loaded into pf
My firewall stops responding when the file has about 7000 IPs in it
The old file has 104450 IPs in it and I would like to block them

Does anyone know how I can get this file to load into pf without
killing my machine?

Here is my top stats
last pid:  4899;  load averages:  0.00,  0.00,  0.00  up 1+02:06:53
01:23:55 30
processes:  1 running, 29 sleeping CPU states:  0.0% user, 0.0% nice,
0.0% system,  1.6% interrupt, 98.4% idle
Mem: 13M Active, 4884K Inact, 23M Wired, 2852K Cache, 13M Buf, 9788K
Free
Swap: 512M Total, 5364K Used, 507M Free, 1% Inuse

Thanks

-- 
Reinhold Platzoeder

reinhold@violetlan.net
reinhold@webmail.co.za

http://www.violetlan.net



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060420012749.151ad162>