Date: Tue, 14 Oct 2025 23:04:14 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 290243] pf: cannot define table table-name: Cannot allocate memory Message-ID: <bug-290243-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D290243 Bug ID: 290243 Summary: pf: cannot define table table-name: Cannot allocate memory Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: olivier@freebsd.org Here is a reproducible problem on 14 and current (script attached) on x86 a= nd ARM: We can=E2=80=99t load a table multiples time (like a blacklist table in cro= ntab). How to reproduce: sh ./pf-big-table.sh Id Refs Name 535 1 pf Loading a public IPv4 blocklist prod_data-shield_ipv4_blocklist.txt 1390 kB 1150 kBps = 01s System=E2=80=99s net.pf.request_maxcount (65535) too small to load this 997= 66 elements table Increasing it... net.pf.request_maxcount: 65535 -> 99767 System configured with net.pf.request_maxcount 65535 loading a 99766 table multiple times Try:=E2=80=AF1 current VM usage ITEM SIZE LIMIT USED FREE REQ FAIL SLEEP X= DOM pf table entries: 160, 200000, 0, 0, 0, 0, 0, = 0 Try:=E2=80=AF2 current VM usage ITEM SIZE LIMIT USED FREE REQ FAIL SLEEP X= DOM pf table entries: 160, 200000, 99767, 58, 99767, 0, 0, = 0 Try:=E2=80=AF3 current VM usage ITEM SIZE LIMIT USED FREE REQ FAIL SLEEP X= DOM pf table entries: 160, 200000, 99767, 99883, 199534, 0, 0, = 0 pf.conf:1: cannot define table shield_ipv4.blocklist: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-290243-227>