Firewall: Aliases edit from console

[jjj]

"Use Device Polling" is not enabled.

[jimp]

From the console, look at the output of:

top -SH

[jjj]

[jimp]

Do you have Captive Portal enabled? And a bunch of connected CP clients?

Or do you have one of the "country block" or "ip block" packages installed? One of those (ab)used ipfw to load a bunch of IPs and it would do something like that.

[jjj]

Captive Portal is not enabled. No packages are installed. Fresh install as of last night.

[jimp]

ipfw wouldn't be running unless something loaded it. It doesn't load by default on a stock install.

[jjj]

What about restoring the configuration from a backup (without any packages)?

DHCP Server and IPSec are enabled, but no 3rd party packages are installed.

[jimp]

I think scheduled rules will also hit ipfw. Got any of those?

[jjj]

No. But Firewall > Schedule had an Always rule? I deleted it, but it didn't help.

Plus, Filter Reload is still saying "Creating rule HTTPS".

[jimp]

After you deleted the schedules, you may have to reboot

[jjj]

Looks like that did it. Back to 0% usage. Thanks for your help.