So, a bit more insight perhaps:

One of the lines that is causing a WARN log, is:
> WARN: Problem trying to run command: LANG=C sudo ipset del 
> PF-iL2_ID_10.19.0.0 10.19.218.65 2>&1 called from iptables_update_set. Child 
> exited with non-zero value 1 (pf::util::pf_run)

So, I would assume that the ipset PF-iL2_ID_10.19.0.0 exists, however it 
does not? See:

> root@pf:/usr/local/pf/logs# su pf
> $ sudo ipset -L
> Name: PF-iL2_ID1_10.19.0.0
> Type: bitmap:ip
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 8312
> References: 2
> Members:
>
> Name: PF-iL2_ID2_10.19.0.0
> Type: bitmap:ip
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 8312
> References: 2
> Members:
>
> Name: PF-iL2_ID3_10.19.0.0
> Type: bitmap:ip
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 8312
> References: 2
> Members:
>
> Name: PF-iL2_ID4_10.19.0.0
> Type: bitmap:ip
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 8312
> References: 2
> Members:
> 10.19.218.65
>
> Name: PF-iL2_ID5_10.19.0.0
> Type: bitmap:ip
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 8312
> References: 2
> Members:
>
> Name: pfsession_Unreg_10.19.0.0
> Type: bitmap:ip,mac
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 1048688
> References: 1
> Members:
> 10.19.218.61,3C:97:0E:2F:14:F8
>
> Name: pfsession_Reg_10.19.0.0
> Type: bitmap:ip,mac
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 1048688
> References: 1
> Members:
> 10.19.218.65,60:67:20:5D:74:98
>
> Name: pfsession_Isol_10.19.0.0
> Type: bitmap:ip,mac
> Header: range 10.19.0.0-10.19.255.255
> Size in memory: 1048688
> References: 1
> Members:

Hmm.

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to