Get a Quote   (408) 943-4100               TrueNAS Discord      VendOp_Icon_15x15px   Commercial Support
TrueNAS.com Software Systems Company Community Security iX Portal Download

FreeBSD pf
core
TrueNAS 12.0

Versions Affected : All versions prior to TrueNAS 12.0-U3

Description

The net.pf.request_maxcount sysctl provides an upper bound on the amount of memory used by pf(4) to store various types of state.

Prior to FreeBSD 12.2 this sysctl was read-only and could only be adjusted via loader.conf(5). In FreeBSD 12.2, the sysctl was made writeable, but lost the ability to be adjusted from loader.conf(5). pf(4) may fail to load filtering rules if they cause the default request_maxcount bound to be exceeded. Users that relied on loader.conf to increase the request_maxcount value could see their rules fail to load.

Workaround

The value of request_maxcount may be set via sysctl.conf(5).

Mitigation

  • Upgrade to TrueNAS 12.0-U3 or later.

Commit

Further information