Date: Fri, 20 Sep 2024 12:39:16 +0200 From: Alexander Leidinger <Alexander@Leidinger.net> To: Kristof Provost <kp@freebsd.org> Cc: FreeBSD Security list <freebsd-security@freebsd.org> Subject: Re: "Unknown error" message from pfctl on an existing table Message-ID: <fd348924171cd6f608b4660b9abdadc7@Leidinger.net> In-Reply-To: <D89F8745-42F8-4586-A2C5-8116EF3C0029@FreeBSD.org> References: <e3eeae1bad4f182bad5abbf281a7bb26@Leidinger.net> <f3b1ade48b9bb0d7891b643defcc7b16@Leidinger.net> <E1944C83-4692-42B9-BBC3-C065EE9D84A1@FreeBSD.org> <c24980270caff52d5d1def3a5e9ae02a@Leidinger.net> <D89F8745-42F8-4586-A2C5-8116EF3C0029@FreeBSD.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
Am 2024-09-20 12:27, schrieb Kristof Provost:
> On 20 Sep 2024, at 11:21, Alexander Leidinger wrote:
>> When I list the non-working table (crowdsec-blocklists):
>> ---snip---
>> openat(AT_FDCWD,"/dev/pf",O_RDONLY,00) = 3 (0x3)
>> ioctl(3,DIOCGETALTQSV1,0x19fc93899a90) ERR#19 'Operation not
>> supported by device'
>> openat(AT_FDCWD,"/dev/pf",O_RDWR,00) = 4 (0x4)
>> socket(PF_NETLINK,SOCK_RAW,16) = 5 (0x5)
>> setsockopt(5,270,11,0x19fc93899a2c,4) = 0 (0x0)
>> getsockopt(5,SOL_SOCKET,SO_RCVBUF,0x19fc93899a24,0x19fc93899a28) = 0
>> (0x0)
>> ioctl(3,DIOCRGETADDRS,0x19fc938990f0) = 0 (0x0)
>> ioctl(3,DIOCRGETADDRS,0x19fc938990f0) ERR#22 'Invalid
>> argument'
>> issetugid() = 0 (0x0)
>> ---snip---
>>
> That’s not the error code I see for a non-existent table, so it’s not
> quite the same issue.
>
> DIOCRGETADDRS returns EINVAL, which is probably because the table is
> running into the net.pf.request_maxcount limit. Try increasing that
> sysctl.
Yes:
# pfctl -t crowdsec-blocklists -T show | wc -l
74167
Thanks!
Alexander.
--
http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF
http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----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=Swg3
-----END PGP SIGNATURE-----
home |
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fd348924171cd6f608b4660b9abdadc7>