Netgate SG-1000 microFirewall

Author Topic: when is the filter reloaded?  (Read 814 times)

0 Members and 1 Guest are viewing this topic.

Offline fluca1978

  • Full Member
  • ***
  • Posts: 137
  • Karma: +3/-0
    • View Profile
when is the filter reloaded?
« on: May 03, 2012, 01:51:41 am »
Hi all,
yesterday I got locked out my pfsense box, so I went to the console, opened the shell and typed a
Code: [Select]
pfctl -dto disable the firewall. It did not work, and looking at the pftop I saw that there were still connections being blocked by the firewall. No matter how many time I repeated the command or typed a flush on all rules, the firewall was always active. The only way I found to disable it was using the developer console. Now I'm guessing if the filter is somewhat automatically reloaded by some kind of event (e.g., squid proxy running or what) so that the console actions are vanished by the automatic filter reloading.

In my case I locked out because I removed an interface from the menu while the filter still had references on it (I thought the filter would have update itself but apparently it was not).

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21619
  • Karma: +1484/-26
    • View Profile
Re: when is the filter reloaded?
« Reply #1 on: May 07, 2012, 09:47:53 am »
It's reloaded every time a change is made that touches filter rules, and sometimes in the background when things need updating as well.

If something is broken in the ruleset, it can't be reloaded, so it may have been failing because of that. Sometimes broken packages can also prevent the filter rules from being reloaded properly.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!