• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

can't update pfsense or install packages

Scheduled Pinned Locked Moved General pfSense Questions
148 Posts 9 Posters 30.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Aug 9, 2023, 5:55 PM

    Try running a packet capture on WAN when you are trying to check. Filter by our subnet 208.123.73.0/24.
    Make sure you see traffic leavning for the pkg servers at 208.123.73.207 or .209.
    If something upstream is blocking that you should see that in a reply since it shows 'permission denied'

    1 Reply Last reply Reply Quote 0
    • M
      mrrobot @Leonardo 5
      last edited by Aug 9, 2023, 5:57 PM

      @Leonardo-5 its gonna be complecated updating or installing packages in this case 😭

      L 1 Reply Last reply Aug 9, 2023, 6:06 PM Reply Quote 0
      • L
        Leonardo 5 @mrrobot
        last edited by Aug 9, 2023, 6:06 PM

        @mrrobot If I find a solution, I will post here and tag you.
        @stephenw10 . I will try. Thank you for helping.

        M 1 Reply Last reply Aug 9, 2023, 6:25 PM Reply Quote 0
        • N
          nimrod
          last edited by Aug 9, 2023, 6:13 PM

          Try this.

          Go to System / General Setup

          Do not change anything and just click Save.

          1 Reply Last reply Reply Quote 0
          • M
            mrrobot @Leonardo 5
            last edited by Aug 9, 2023, 6:25 PM

            @Leonardo-5 thank you mate, i was gonna try to connect the pfsense appliance as a client at a friend and try to update to see what happens (my friend has a different isp from mine), i ll keep u updated as well ;)

            1 Reply Last reply Reply Quote 1
            • N
              NETLOGIC
              last edited by NETLOGIC Aug 9, 2023, 6:49 PM Aug 9, 2023, 6:44 PM

              I am also seeing issues updating the Available Package lists for SG-6100 today.
              Was all working perfectly yesterday.

              Noticed that I could not check for Firmware also but that was resolved by toggle and save of previous stable release to current stable release.

              Now it appears that I cannot see available packages or install any packages.

              Here is a dump of command line to try

              Shell Output - pkg-static -d4 update

              DBG(1)[83227]> pkg initialized
              Updating pfSense-core repository catalogue...
              DBG(1)[83227]> PkgRepo: verifying update for pfSense-core
              DBG(1)[83227]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.conf
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.conf with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.conf with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.conf with opts "i4"
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.txz
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.txz with opts "i4"
              pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/meta.txz: Bad Request
              repository pfSense-core has no meta file, using default settings
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.pkg
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.pkg with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.pkg with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.pkg with opts "i4"
              pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.pkg: Bad Request
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.txz
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.txz with opts "i4"
              pkg-static: https://pfsense-plus-pkg00.atx.netgate.com/pfSense_plus-v23_05_1_amd64-core/packagesite.txz: Bad Request
              Unable to update repository pfSense-core
              Updating pfSense repository catalogue...
              DBG(1)[83227]> PkgRepo: verifying update for pfSense
              DBG(1)[83227]> PkgRepo: need forced update of pfSense
              DBG(1)[83227]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.conf
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.conf with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.conf with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.conf with opts "i4"
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.txz
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.txz with opts "i4"
              pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/meta.txz: Bad Request
              repository pfSense has no meta file, using default settings
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.pkg
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.pkg with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.pkg with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.pkg with opts "i4"
              pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.pkg: Bad Request
              DBG(1)[83227]> Request to fetch pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.txz
              DBG(1)[83227]> opening libfetch fetcher
              DBG(1)[83227]> Fetch > libfetch: connecting
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.txz with opts "i4"
              DBG(1)[83227]> Fetch: fetching from: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.txz with opts "i4"
              pkg-static: https://pfsense-plus-pkg01.atx.netgate.com/pfSense_plus-v23_05_1_amd64-pfSense_plus_v23_05_1/packagesite.txz: Bad Request
              Unable to update repository pfSense
              Error updating repositories!

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Aug 9, 2023, 6:57 PM

                @NETLOGIC said in can't update pfsense or install packages:

                Bad Request

                That Bad Request error means that then client didn't send a currently valid certificate. So either it can't pull a new cert or simply hasn't tried.
                Try running pfSense-repoc first.

                N 1 Reply Last reply Aug 9, 2023, 7:20 PM Reply Quote 0
                • N
                  NETLOGIC @stephenw10
                  last edited by Aug 9, 2023, 7:20 PM

                  @stephenw10 After issuing the following command at the command line:

                  pfsense-repoc

                  I saw this:

                  pfSense-repoc: failed to fetch the repo data
                  failed to read the repo data.

                  1 Reply Last reply Reply Quote 0
                  • S
                    stephenw10 Netgate Administrator
                    last edited by Aug 9, 2023, 7:23 PM

                    Try: pfSense-upgrade -dc

                    What errors are shown?

                    N 1 Reply Last reply Aug 9, 2023, 7:25 PM Reply Quote 0
                    • N
                      NETLOGIC @stephenw10
                      last edited by NETLOGIC Aug 9, 2023, 7:31 PM Aug 9, 2023, 7:25 PM

                      @stephenw10
                      Command : /root: pfSense-upgrade -dc

                      pfSense-repoc-static: failed to fetch the repo data
                      failed to read the repo data.
                      failed to update the repository settings!!!
                      failed to update the repository settings!!!

                      However when I go to the main status page it shows that it can see and check for current firmware.

                      23.05.1-RELEASE (amd64)
                      built on Wed Jun 28 03:57:27 UTC 2023
                      FreeBSD 14.0-CURRENT

                      The system is on the latest version.
                      Version information updated at Wed Aug 9 12:25:29 MDT 2023

                      1 Reply Last reply Reply Quote 0
                      • S
                        stephenw10 Netgate Administrator
                        last edited by Aug 9, 2023, 7:33 PM

                        Ok send me your NDI in chat and I'll check it.

                        1 Reply Last reply Reply Quote 0
                        • E eduardomozart referenced this topic on Aug 10, 2023, 3:24 AM
                        • D Darkk referenced this topic on Aug 10, 2023, 3:28 AM
                        • L
                          Leonardo 5
                          last edited by Aug 10, 2023, 6:52 PM

                          Well, I don't know what I did, but it worked for about 10 minutes again and that is it, not working anymore.
                          I noticed that my ISP now supports ipv6, I started to configure ipv6 here, but ipv6 is so weird, I think I will not be able to configure in my setup.
                          Then I updated the Mikrotik's firmware and packages, which is my router that provides a WAN connection.

                          Weird, as I was writing this comment something changed, it is working again. Trying to update pfSense.
                          5e348358-585e-4c64-a9da-786b486ad783-image.png
                          0ddc2e40-cc4e-4d63-9ee6-1dda84e9eafc-image.png

                          1 Reply Last reply Reply Quote 0
                          • L
                            Leonardo 5
                            last edited by Aug 10, 2023, 6:54 PM

                            Update failed, the problem is back.
                            1900bc26-56fe-474d-a5f0-e901986c7626-image.png
                            53870b46-5259-4edc-83e1-ae126ac16af7-image.png

                            1 Reply Last reply Reply Quote 0
                            • S
                              stephenw10 Netgate Administrator
                              last edited by stephenw10 Aug 10, 2023, 7:42 PM Aug 10, 2023, 7:41 PM

                              'Permission Denied' like that really looks like something blocking access and sending that back via icmp. If you're not running pfblocker or Snort it pretty much has to be something upstream.

                              L 1 Reply Last reply Aug 10, 2023, 8:35 PM Reply Quote 0
                              • L
                                Leonardo 5 @stephenw10
                                last edited by Aug 10, 2023, 8:35 PM

                                @stephenw10 If on my computer within that network I can access the website and download the files, then does it mean that the connection is blocked within the pfSense environment? Is this logic correct? Or maybe because a different port is being used?
                                For example, I have no problems downloading files from https://pkg00-atx.netgate.com/.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  stephenw10 Netgate Administrator
                                  last edited by Aug 10, 2023, 8:53 PM

                                  Unlikely, it's just https. In that case I expect to see it blocked on the firewall itself. Usually that's Snort/Suricata but it could be anything blocking outbound traffic. pfBlocker adds rules that could do it. If you have user rules blocking outbound that could also do it.

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    Leonardo 5
                                    last edited by Aug 11, 2023, 1:52 PM

                                    This image is from a video.
                                    3da1ae34-d5ec-44f3-a2ed-b2d647ded859-image.png

                                    This is mine.
                                    848a7ff9-7d29-4fd3-bbf1-e93867a01a2c-image.png

                                    Shouldn't my DNS servers show up here as well? I think there is something wrong with my setup.

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      nimrod
                                      last edited by Aug 11, 2023, 1:59 PM

                                      I dont have any DNS servers on my WAN interface either. But i have no issues.

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        stephenw10 Netgate Administrator
                                        last edited by Aug 11, 2023, 2:52 PM

                                        They only show there if the WAN is being passed DNS servers by the upstream connection method. So PPPoE or DHCP usually.

                                        1 Reply Last reply Reply Quote 1
                                        • L
                                          Leonardo 5
                                          last edited by Aug 14, 2023, 7:56 PM

                                          I did a clean install of version 2.7 (I was using 2.6), before configuring something it was already blocked.

                                          1 Reply Last reply Reply Quote 0
                                          128 out of 148
                                          • First post
                                            128/148
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received