Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense-plus-pkg.netgate.com no DNS resolving

    Scheduled Pinned Locked Moved General pfSense Questions
    28 Posts 4 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator @stephenw10
      last edited by

      @stephenw10 said in pfsense-plus-pkg.netgate.com no DNS resolving:

      What error are you seeing from pkg -d update?

      bootableB 2 Replies Last reply Reply Quote 0
      • bootableB
        bootable @stephenw10
        last edited by

        @stephenw10 43bcba13-4873-4109-9162-7ed3ba1163d5-image.png

        It is me Ruben
        Bootable Computación - Argentina.
        pfSense/Netgate Certificate Partner
        Pardon for my English - I am not an English speaker.
        Thanks a lot for yours invaluable time.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Shows no route still not that it can't resolve it. Try: pkg -d4 update

          1 Reply Last reply Reply Quote 0
          • bootableB
            bootable @stephenw10
            last edited by

            @stephenw10 4d80919e-e577-496b-8ee5-e4d2ed80283a-image.png

            It is me Ruben
            Bootable Computación - Argentina.
            pfSense/Netgate Certificate Partner
            Pardon for my English - I am not an English speaker.
            Thanks a lot for yours invaluable time.

            GertjanG bootableB 2 Replies Last reply Reply Quote 0
            • GertjanG
              Gertjan @bootable
              last edited by Gertjan

              @bootable

              b6ecb35b-e106-4157-8a8f-5c90cb1b72d9-image.png

              Your pfSense can't reach the destination.
              This could be a local issue, or anywhere upstream.
              And an extra possibility for you : you use a VM ....

              edit

              pkg -4 -d4 update

              to force IPv4 usage ( and not the preferred IPv6 )

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              bootableB 1 Reply Last reply Reply Quote 0
              • bootableB
                bootable @Gertjan
                last edited by

                @gertjan yes that box is in a VM, directly connected to internet ( the WAN of the VM hasta Public ip address)

                It is me Ruben
                Bootable Computación - Argentina.
                pfSense/Netgate Certificate Partner
                Pardon for my English - I am not an English speaker.
                Thanks a lot for yours invaluable time.

                1 Reply Last reply Reply Quote 0
                • bootableB
                  bootable @bootable
                  last edited by

                  3a9c4671-e0c5-4126-8652-230a7035b7bf-image.png

                  @bootable said in pfsense-plus-pkg.netgate.com no DNS resolving:

                  @stephenw10 4d80919e-e577-496b-8ee5-e4d2ed80283a-image.png

                  It is me Ruben
                  Bootable Computación - Argentina.
                  pfSense/Netgate Certificate Partner
                  Pardon for my English - I am not an English speaker.
                  Thanks a lot for yours invaluable time.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Yeah it appears to be trying to use v6 and has no v6 routes.

                    -d4 forces it to use v4 and debug output.

                    The fact it's just timing out implies it still cannot reach it.

                    What routes do you have there? You have a default gateway set that is a gateway group with only one gateway in it. Which is odd.
                    Check Diag > Routes (or netstat -rn at the cli) to be sure you actually have a default route. And that you don't have any rogue routes that might be matching the server address.

                    bootableB 1 Reply Last reply Reply Quote 0
                    • bootableB
                      bootable @stephenw10
                      last edited by

                      @stephenw10

                      Using username "admin".
Keyboard-interactive authentication prompts from server:
| Password for admin@fw_pfsense.ycc.lan:
End of keyboard-interactive prompts from server
VMware Virtual Machine - Netgate Device ID: 5c18ec2339d787f345ad

*** Welcome to Netgate pfSense Plus 23.01-RELEASE (amd64) on fw_pfsense ***

 WAN (wan)       -> vmx1       -> v4: 000.000.000.000/24
 LAN (lan)       -> vmx0       -> v4: 000.000.000.000/24
 DMZ (opt1)      -> vmx2       -> v4: 000.000.000.000/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + Netgate pfSense Plus tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 8

[23.01-RELEASE][admin@fw_pfsense.ycc.lan]/root: clear
[23.01-RELEASE][admin@fw_pfsense.ycc.lan]/root: pkg -4 -d4 update
DBG(1)[75729]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[75729]> PkgRepo: verifying update for pfSense-core
DBG(1)[75729]> PkgRepo: need forced update of pfSense-core
DBG(1)[75729]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.conf with opts "i4"
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz with opts "i4"
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/meta.txz: Operation timed out
repository pfSense-core has no meta file, using default settings
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg with opts "i4"
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.pkg: Operation timed out
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz with opts "i4"
pkg: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_01_amd64-core/packagesite.txz: Operation timed out
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
DBG(1)[75729]> PkgRepo: verifying update for pfSense
DBG(1)[75729]> PkgRepo: need forced update of pfSense
DBG(1)[75729]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.conf
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.conf with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.conf with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.conf with opts "i4"
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz with opts "i4"
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/meta.txz: Operation timed out
repository pfSense has no meta file, using default settings
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg with opts "i4"
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.pkg: Operation timed out
DBG(1)[75729]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz
DBG(1)[75729]> opening libfetch fetcher
DBG(1)[75729]> Fetch > libfetch: connecting
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz with opts "i4"
DBG(1)[75729]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz with opts "i4"
pkg: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz: Operation timed out
Unable to update repository pfSense
Error updating repositories!
[23.01-RELEASE][admin@fw_pfsense.ycc.lan]/root:

                      netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags     Netif Expire
default            000.000.000.000        UGS        vmx1
1.1.1.1            000.000.000.000        UGHS       vmx1
10.10.1.5          link#10            UHS         lo0
10.10.1.6          link#10            UH       ovpns2
10.10.1.8          link#8             UHS         lo0
10.10.1.8/30       link#8             U       tun_wg0
10.10.10.0/24      link#9             U        ovpns1
10.10.10.1         link#9             UHS         lo0
127.0.0.1          link#5             UH          lo0
000.000.000.000/24      link#2             U          vmx1
000.000.000.000        link#2             UHS         lo0
000.000.000.000        link#2             UHS        vmx1
192.168.2.0/24     10.10.1.6          UGS      ovpns2
192.168.3.0/24     10.10.1.6          UGS      ovpns2
192.168.1N.0/24    link#1             U          vmx0
192.168.1X.1       link#1             UHS         lo0
192.168.1X.0/24    link#3             U          vmx2
192.168.1X.1       link#3             UHS         lo0

Internet6:
Destination                       Gateway                       Flags     Netif Expire
::1                               link#5                        UHS         lo0
fe80::%vmx0/64                    link#1                        U          vmx0
fe80::20c:29ff:fef6:61a9%vmx0     link#1                        UHS         lo0
fe80::%vmx1/64                    link#2                        U          vmx1
fe80::20c:29ff:fef6:61b3%vmx1     link#2                        UHS         lo0
fe80::%vmx2/64                    link#3                        U          vmx2
fe80::20c:29ff:fef6:61bd%vmx2     link#3                        UHS         lo0
fe80::%lo0/64                     link#5                        U           lo0
fe80::1%lo0                       link#5                        UHS         lo0
fe80::%ovpns1/64                  link#9                        U        ovpns1
fe80::20c:29ff:fef6:61a9%ovpns1   link#9                        UHS         lo0
fe80::%ovpns2/64                  link#10                       U        ovpns2
fe80::20c:29ff:fef6:61a9%ovpns2   link#10                       UHS         lo0
[23.01-RELEASE][admin@fw_pfsense.ycc.lan]/root:

                      It is me Ruben
                      Bootable Computación - Argentina.
                      pfSense/Netgate Certificate Partner
                      Pardon for my English - I am not an English speaker.
                      Thanks a lot for yours invaluable time.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        What happens if you try to fetch that file directly?:

                        [23.01-RELEASE][root@6100.stevew.lan]/root: fetch https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/OU=pfSense Plus/CN=pfsense-plus-pkg01.atx.netgate.com
36630304624640:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBSD-src-plus-RELENG_23_01/crypto/openssl/ssl/statem/statem_clnt.c:1921:
fetch: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_01_amd64-pfSense_plus_v23_01/packagesite.txz: Authentication error

                        You should see an authentication error like that fetching directly.

                        bootableB 1 Reply Last reply Reply Quote 0
                        • bootableB
                          bootable @stephenw10
                          last edited by

                          @stephenw10

                          From a browser with https

                          8b1b4093-c16c-4caf-81ed-24a4e7f37a45-image.png

                          with out https from a browser

                          c457cf25-6d02-487c-9f9c-a3657edb79cd-image.png

                          From a cli on firewall

                          f8fe15b9-8e5e-4146-85b8-9548ba8992c4-image.png

                          It is me Ruben
                          Bootable Computación - Argentina.
                          pfSense/Netgate Certificate Partner
                          Pardon for my English - I am not an English speaker.
                          Thanks a lot for yours invaluable time.

                          bootableB 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            OK, go to System > Advanced > Networking and set 'Prefer IPv4 over IPv6'.

                            Then revisit the update page so it pulls a current repo data set.

                            bootableB 1 Reply Last reply Reply Quote 0
                            • bootableB
                              bootable @bootable
                              last edited by

                              Trace route from WebUI

                              2f9a97d3-b2a6-48b0-bd09-c6bb907c8c54-image.png

                              Trace route from CLI

                              d94ffc32-1849-4b7b-946b-faaafaf48d6b-image.png

                              It is me Ruben
                              Bootable Computación - Argentina.
                              pfSense/Netgate Certificate Partner
                              Pardon for my English - I am not an English speaker.
                              Thanks a lot for yours invaluable time.

                              1 Reply Last reply Reply Quote 0
                              • bootableB
                                bootable @stephenw10
                                last edited by

                                @stephenw10

                                38fbfac0-4794-4e55-8373-414203932165-image.png

                                478d2c70-b9f8-40b4-88e1-954226052b35-image.png

                                d4f7520a-c05f-4a96-862b-7c405132023c-image.png

                                It is me Ruben
                                Bootable Computación - Argentina.
                                pfSense/Netgate Certificate Partner
                                Pardon for my English - I am not an English speaker.
                                Thanks a lot for yours invaluable time.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Now go to System > Update > Update Settings and resave the branch there as 23.01 stable.

                                  You are hitting this: https://redmine.pfsense.org/issues/14137

                                  bootableB 1 Reply Last reply Reply Quote 0
                                  • bootableB
                                    bootable @stephenw10
                                    last edited by

                                    @stephenw10 Same issue the catalogue does not be updated !!

                                    2ab54432-583b-458d-b1d1-13a370434a55-image.png

                                    It is me Ruben
                                    Bootable Computación - Argentina.
                                    pfSense/Netgate Certificate Partner
                                    Pardon for my English - I am not an English speaker.
                                    Thanks a lot for yours invaluable time.

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Still no router to host so either there is no route somehow or it's resolving to some IP that's incorrect.
                                      Make sure it's actually resolving as expected:

                                      [23.01-RELEASE][root@6100.stevew.lan]/root: host pfsense-plus-pkg00.atx.netgate.com
pfsense-plus-pkg00.atx.netgate.com has address 208.123.73.207
pfsense-plus-pkg00.atx.netgate.com has IPv6 address 2610:160:11:18::207
[23.01-RELEASE][root@6100.stevew.lan]/root: host pfsense-plus-pkg01.atx.netgate.com
pfsense-plus-pkg01.atx.netgate.com has address 208.123.73.209
pfsense-plus-pkg01.atx.netgate.com has IPv6 address 2610:160:11:18::209

                                      Then run it with -d4 to get debug output and test over IPv4.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.