• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

22.05-RELEASE (amd64) Unable to check for updates?

General pfSense Questions
6
61
18.4k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • T
    TAC57 @stephenw10
    last edited by May 28, 2023, 8:33 PM

    @stephenw10
    This from my windows command prompt:
    Microsoft Windows [Version 10.0.19045.3031]
    (c) Microsoft Corporation. All rights reserved.

    C:\Users\Tom>ping 9.9.9.9

    Pinging 9.9.9.9 with 32 bytes of data:
    Reply from 9.9.9.9: bytes=32 time=266ms TTL=57
    Reply from 9.9.9.9: bytes=32 time=15ms TTL=57
    Reply from 9.9.9.9: bytes=32 time=15ms TTL=57
    Reply from 9.9.9.9: bytes=32 time=16ms TTL=57

    Ping statistics for 9.9.9.9:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 15ms, Maximum = 266ms, Average = 78ms

    C:\Users\Tom>ping 1.1.1.1

    Pinging 1.1.1.1 with 32 bytes of data:
    Reply from 1.1.1.1: bytes=32 time=267ms TTL=57
    Reply from 1.1.1.1: bytes=32 time=16ms TTL=57
    Reply from 1.1.1.1: bytes=32 time=15ms TTL=57
    Reply from 1.1.1.1: bytes=32 time=15ms TTL=57

    Ping statistics for 1.1.1.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 15ms, Maximum = 267ms, Average = 78ms

    C:\Users\Tom>ping 8.8.8.8

    Pinging 8.8.8.8 with 32 bytes of data:
    Reply from 8.8.8.8: bytes=32 time=14ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=13ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=14ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=14ms TTL=115

    Ping statistics for 8.8.8.8:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 13ms, Maximum = 14ms, Average = 13ms

    C:\Users\Tom>ping acb.netgate.com

    Pinging acb.netgate.com [208.123.73.212] with 32 bytes of data:
    Reply from 208.123.73.212: bytes=32 time=39ms TTL=51
    Reply from 208.123.73.212: bytes=32 time=39ms TTL=51
    Reply from 208.123.73.212: bytes=32 time=38ms TTL=51
    Reply from 208.123.73.212: bytes=32 time=39ms TTL=51

    Ping statistics for 208.123.73.212:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
    Minimum = 38ms, Maximum = 39ms, Average = 38ms

    1 Reply Last reply Reply Quote 0
    • T
      TAC57 @SteveITS
      last edited by TAC57 May 28, 2023, 8:59 PM May 28, 2023, 8:57 PM

      @SteveITS I have DNS resolver enabled. What is the easiest way to turn all this off?

      And this has to be related:
      An error occurred while uploading the encrypted Netgate pfSense Plus configuration to https://acb.netgate.com/save ( Unable to resolve acb.netgate.com ) @ 2023-05-28 16:49:05

      login-to-view

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by May 29, 2023, 12:42 AM

        Do you have the DNS resolver set to forwarding mode though?

        If you do try just unchecking that so it resolves directly.

        T 1 Reply Last reply May 29, 2023, 1:44 PM Reply Quote 0
        • T
          TAC57 @stephenw10
          last edited by May 29, 2023, 1:44 PM

          @stephenw10 It was, unchecking made no difference.

          1 Reply Last reply Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by May 30, 2023, 11:49 AM

            Hmm. Just to be clear is that failing to resolve any host? Even when resolving directly?

            That sounds like it must be something blocking DNS requests from the firewall. But I expect anything doing that to apply to NAT'd traffic from clients behind it also. 🤔

            T 1 Reply Last reply May 30, 2023, 12:12 PM Reply Quote 0
            • T
              TAC57 @stephenw10
              last edited by TAC57 May 30, 2023, 12:43 PM May 30, 2023, 12:12 PM

              @stephenw10 I'm sorry but I don't understand your question. Is there a screenshot you'd like to see or some setting I can change that might solve this issue.

              BTW I ran the dig command from a Raspberry Pi on my network:
              crites@raspberrypi:~ $ dig +short @9.9.9.9 firmware.netgate.com
              208.123.73.207
              208.123.73.209

              crites@raspberrypi:~ $ dig +short @9.9.9.9 acb.netgate.com
              208.123.73.212

              I have a basic homelab setup with some desktop computer, TrueNAS server running Plex, and some IOT stuff.

              S 1 Reply Last reply May 30, 2023, 12:44 PM Reply Quote 0
              • S
                SteveITS Galactic Empire @TAC57
                last edited by May 30, 2023, 12:44 PM

                @TAC57 You’ve posted DNS to third party servers works from devices on LAN but not pfSense. Which implies something is blocking it. Can you post your LAN rules and any floating rules, and routes (diagnostics menu)?

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                T 1 Reply Last reply May 30, 2023, 1:23 PM Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by May 30, 2023, 12:47 PM

                  I meant does Diag > DNS Lookup fail for any host or just firmware.netgate.com?

                  Are you running Snort or Suricata?

                  T 1 Reply Last reply May 30, 2023, 1:21 PM Reply Quote 0
                  • T
                    TAC57 @stephenw10
                    last edited by May 30, 2023, 1:21 PM

                    @stephenw10 Before rebooting I'd get the Unable to check for updates and DNS Lookup would not report anything from any host. On rebooting pfsense it now reports on the latest version. And DNS Lookup does report back (see below) and it reports back from google.com

                    I am running Snort.

                    login-to-view

                    1 Reply Last reply Reply Quote 0
                    • T
                      TAC57 @SteveITS
                      last edited by May 30, 2023, 1:23 PM

                      @SteveITS I'm not running any floating rules. Can DM you my routes?

                      LAN rules:
                      login-to-view

                      S 1 Reply Last reply May 30, 2023, 1:25 PM Reply Quote 0
                      • S
                        SteveITS Galactic Empire @TAC57
                        last edited by May 30, 2023, 1:25 PM

                        @TAC57 and were those DNS IPs on the Snort alert page? That’s why I asked about Snort above. Reading back it sounds like a restart fixed it in January also. Restarting would empty the Snort block table.

                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                        Upvote 👍 helpful posts!

                        T 1 Reply Last reply May 30, 2023, 1:35 PM Reply Quote 1
                        • S
                          stephenw10 Netgate Administrator
                          last edited by May 30, 2023, 1:32 PM

                          Yup, disable Snort. Reboot. Retest.

                          T 1 Reply Last reply May 30, 2023, 1:45 PM Reply Quote 0
                          • T
                            TAC57 @SteveITS
                            last edited by May 30, 2023, 1:35 PM

                            @SteveITS
                            I've been running Snort forever. 😕 I'll disable it and see what happens.

                            login-to-view

                            1 Reply Last reply Reply Quote 0
                            • T
                              TAC57 @stephenw10
                              last edited by May 30, 2023, 1:45 PM

                              @stephenw10 I disabled Snort, rebooted and still unable to check for updates. Also, DNS Look up doesn't return any IPs.

                              login-to-view

                              login-to-view

                              1 Reply Last reply Reply Quote 0
                              • S
                                stephenw10 Netgate Administrator
                                last edited by stephenw10 May 30, 2023, 2:34 PM May 30, 2023, 2:32 PM

                                Make sure the Snort block table is actually cleared, assuming you had Snort in blocking mode. Check Diag > Tables > Snort2c.

                                Snort pulls new signatures automatically. It can start alerting/blocking things that were previously fine without warning!

                                T 1 Reply Last reply May 30, 2023, 10:02 PM Reply Quote 0
                                • T
                                  TAC57 @stephenw10
                                  last edited by May 30, 2023, 10:02 PM

                                  @stephenw10 Snort2c table is empty.

                                  I've disabled Snort and have rebooted pfsense.

                                  pfsense is still reporting 'Unable to check for updates'.

                                  Diag / DNS Lookup times out with firmware.netgate.com, google.com, 8.8.8.8. It took about 3 minutes to get the message 'Host "firmware.netgarte.com" cound not be resolved.'

                                  I can ping any of these host from a Raspberry Pi and replys.

                                  To switch from the Status / Dashboard screen to the System / Update screen takes 1.5 minutes and then about another 30 seconds to report that it's Unable to check for updates.

                                  I'm also still getting the notice "An error occurred while uploading the encrypted Netgate pfSense Plus configuration to https://acb.netgate.com/save ( Unable to resolve acb.netgate.com ) @ 2023-05-30 16:53:11"

                                  I'm running pfsense on a Zima SBC:
                                  Intel(R) Celeron(R) CPU N3450 @ 1.10GHz
                                  4 CPUs : 1 package(s) x 4 core(s)
                                  AES-NI CPU Crypto: Yes (active)
                                  IPsec-MB Crypto: Yes (inactive)
                                  QAT Crypto: No

                                  These are my installed packages / Services:
                                  login-to-view

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    stephenw10 Netgate Administrator
                                    last edited by May 30, 2023, 10:59 PM

                                    Oh you're not using the resolver (Unbound) at all. You're using the forwarder (DNSMasq).

                                    In that as a test I would try disabling DNSMasq and enabling Unbound and see if that makes any difference. With that it should resolve directly.

                                    D 1 Reply Last reply May 30, 2023, 11:04 PM Reply Quote 1
                                    • D
                                      DefenderLLC @stephenw10
                                      last edited by May 30, 2023, 11:04 PM

                                      @stephenw10 Plus he’s running practically running every pfSense package!

                                      T 1 Reply Last reply May 31, 2023, 1:49 AM Reply Quote 1
                                      • T
                                        TAC57 @DefenderLLC
                                        last edited by May 31, 2023, 1:49 AM

                                        @DefenderLLC If running a homelab with a TrueNAS Plex server, a few computers, and some IOT devices, what packages do you recommend to balance security, performance, and ease of use?

                                        I must admit I've implemented (or attempted) most of these packages after reading about, or seeing a video on, some cool package that I think I need or was interested in learning about. Most of these I've setup with videos from https://forums.lawrencesystems.com/.

                                        D 1 Reply Last reply May 31, 2023, 1:56 AM Reply Quote 0
                                        • D
                                          DefenderLLC @TAC57
                                          last edited by May 31, 2023, 1:56 AM

                                          @TAC57 judging by your screenshots, your CPU is not very powerful to be running all of those packages at the same time. Just wait until you actually start doing IPS blocking or turn on a bunch of rules with pfBlockerNG. How much memory do you have allocated to this box?

                                          T 1 Reply Last reply May 31, 2023, 10:22 AM Reply Quote 0
                                          23 out of 61
                                          • First post
                                            23/61
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.