Reload Filter stuck on "Checking for filter PF hooks in package /usr/local/pkg/r

themrrobert

While trying to add a new firewall rule, I noticed the traffic wasn't being blocked as expected, so I watch the reload process, and it's stuck! I checked /tmp/rules.debug, and sure enough, the new rules are not present.

How can I get this to go through?

" Checking for filter PF hooks in package /usr/local/pkg/routed.inc… "...

kejianshi

I usually like to backup my settings and reinstall the box then restore settings when something so weird is going on.

themrrobert

Can't do that until after hours, is there something i can try?

I was thinking about killing check_reload_status and restarting, but not sure if thats where the issue lies

kejianshi

Not sure - perhaps someone else will have a better idea.

themrrobert

I'm surprised this hasn't been seen before, at least not that i could find

jimp

Check /tmp/PHP_errors.txt and/or /tmp/php_errors.txt

See if it's bailing out when trying to get past a certain point.

routed is from TIP, so if you don't use RIP, make sure it's disabled under Services > RIP

There's also an outside chance that something in routed.inc is corrupt, doing an in-place firmware upgrade may help there. Or just try to rm /usr/local/pkg/routed.inc (again, if you don't use RIP, this should be OK)

It may not be getting stuck on routed.inc but it could be whatever the next package is in line after it.

themrrobert

Seeing this:
[12-Aug-2013 16:51:28] PHP Warning: in_array(): Wrong datatype for second argument in /usr/local/www/system_advanced_firewall.php on line 441

However, by the night time the rules had finally been written to rules.debug and taken effect. Now when I make changes, i see the message "Checking for filter PF hooks…" for a second, then it goes to Done.

I checked out the routed.inc file and it looks good.

I think the power may have surged, the UPS was overloaded on bypass, and I noticed the system log was corrupt and i had to clear it.

If the issue crops up again ill be back