I could reproduce the problem on openSUSE Leap 42.1. The only additional thing I tried was to set FW_USE_IPTABLES_BATCH="no" in order to see if (by some stroke of luck) only the batch processing of iptables might be affected. Unfortunately, that only changed the process hanging from "iptables-batch" to "iptables" (no surprises there). The respective iptables/iptables-batch process is completely stuck and can not be killed even with "kill -5" or "kill -9". AK P.S. Changed "Product" and "Version" to 42.1.