Filter Reload Status is never "done"
quadrinary last edited by
For the last couple of weeks, I've been noticing that some firewall rules are taking FOREVER to finally work, and if I look at the filter status after creating/editing a rule, what formerly took 2-3 seconds to say "Done" now takes minutes or even hours. It seems as if the reload is stuck in a loop - I'll notice the same things over and over again, starting with "Initializing" then going onto each of the NAT rules, firewall rules, squid hooks, etc until i see "Initializing" again and the whole thing starts over.
I've been pouring over our NAT rules and I don't see any conflicts there or in the firewall rules either. All the while, CPU use is at 100%. What could be causing this?
The system log might have some clues, and perhaps if you watch "top -SH" from the console you'll spot the process using up the CPU time.