Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Avaliable Packages missing cant seem to find

    Scheduled Pinned Locked Moved General pfSense Questions
    84 Posts 6 Posters 15.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      comet424
      last edited by

      here is image after i do a reboot i checked package manger and it shows up.. and i took a dnslookup… i find that people say use the filter reload so you don't have to reboot the pfsense computer but i find that does nothing.. a real reboot makes it work for a bit
      0_1540407431309_pf4.JPG

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by Derelict

        It would help to use name servers that actually respond if you are having DNS issues. Those 103.86.96/99 servers look like they are garbage. Why use them?

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @Derelict
          last edited by

          @derelict said in Avaliable Packages missing cant seem to find:

          Those 103.86.96/99 servers look like they are garbage. Why use them?

          Have to HIDE my p0rn surfing from my ISP don't ya know ;) Those are nordvpn dns servers..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • GrimsonG
            Grimson Banned
            last edited by

            Just switch to the resolver, it's much more reliable than those NordVPN DNS servers.

            1 Reply Last reply Reply Quote 0
            • C
              comet424
              last edited by comet424

              lol haha ya gotta hide the porn.. lol it also for geo location websites i cant access when im in Canada and i want other content
              and ya those servers are the nordvpn.. it just started not to long ago this issue

              as for the resolver is that the dns resolver ..
              this is my setup for that
              0_1540410298064_dnsre1.JPG 0_1540410308975_dnsre2.JPG 0_1540410328685_dnsre3.JPG

              GrimsonG 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Well your clients might be using pfsense, which pfsense resolves. But from your dns diag output you don't have pfsense pointing to itself (resolver)

                So it has to use whatever shitty dns you tell it to use, like those nordvpn servers that don't answer or answer in 200+ ms

                Just let pfsense point to itself - loopback 127.0.0.1, and NOTHING else and yes have the resolver enabled and NOT in forwarder mode and you should be good and pfsense can find anything it needs to find to update itself.

                If you want some clients to use your vpn dns - then point to them on the client side, etc.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • GrimsonG
                  Grimson Banned @comet424
                  last edited by

                  @comet424 said in Avaliable Packages missing cant seem to find:

                  it just started not to long ago this issue

                  Then contact their support if their DNS servers are flaky, maybe they forgot to update the DNSSEC root key.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Good luck them even knowing what that is ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • C
                      comet424
                      last edited by comet424

                      john not sure how to set it to look at itself at 127.0.0.1 i know that's one of the rules or nat settings
                      and not sure what a dnssec root key is anyways

                      and i forget someone else was helping me before with nordvpn setup was that you john... here i thought nordvpn was a good company but i having issues …

                      go figure lol

                      and i unchecked the dns query forwarding

                      GrimsonG 1 Reply Last reply Reply Quote 0
                      • C
                        comet424
                        last edited by

                        so hopefully that fixes it the unchecked query

                        if this all doesn't work does that mean there is a problem with the nordvpn servers?

                        1 Reply Last reply Reply Quote 0
                        • GrimsonG
                          Grimson Banned @comet424
                          last edited by

                          @comet424 said in Avaliable Packages missing cant seem to find:

                          here i thought nordvpn was a good company but i having issues

                          The business model of all those VPN providers is based on FUD, so you can't call any of them "good". Some may even be worse than your actual ISP when it comes to collecting data.

                          1 Reply Last reply Reply Quote 0
                          • C
                            comet424
                            last edited by comet424

                            ah ok.. ya i did it cuz of data collecting but mostly i sick and tired im in Canada and cant see Olympics time and i wanna see the usa footage and boom you cant geo location shit.. hate that crap lol and if i get Netflix apparently usa Netflix better then Canada content.. or anything really just frustrating.. i need to immigrant to usa lol
                            but what does FUD mean
                            so grimson you don't believe in vpns then i take it.. i just learning as i go teach myself and read etc try to make best educated guesses

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              You need to uncheck Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall in System > General to have it use the resolver.
                              However you have the resolver in forwarding mode anyway so it too will be using those DNS servers defined there rather than the root servers.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                Which looks like it will be fine if you set the firewall itself to use 8.8.8.8 and 8.8.4.4.

                                If you want the CLIENTS to resolve using those crappy NordVPN DNS servers then tell the CLIENTS to use those as their DNS servers. Either using DHCP or static config on the CLIENTS themselves.

                                No reason to hobble the firewall itself just because you want some clients to do this VPN geo-shifting thing.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • C
                                  comet424
                                  last edited by

                                  oh ok ill look i had unchecked do not do dns query forwarding under the OpenVPN client..
                                  and what does FUD stand for..

                                  and ok thanks for inpuit

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    https://en.wikipedia.org/wiki/Fear,_uncertainty_and_doubt

                                    Basically VPN providers telling people that if you don't use a VPN your identity will be stolen in seconds etc. 😉

                                    There are many legitimate reasons to use a VPN of course...

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      comet424
                                      last edited by

                                      so I changed it so those crapy vpn dns are under dhcp server
                                      and I left the 8 8 8 8
                                      but still package manger looses the packages
                                      0_1540479774023_pf5.JPG 0_1540479888785_pf6.JPG 0_1540479986390_pf7.JPG
                                      0_1540480127909_pf8.JPG

                                      now the 3 last pics I did after I unchecked the disable dns forwarder with it checked and without it checked.. didn't work.. but it always works after a reboot of the pfsense… then time goes by yesterday it was still working after couple hours... but this morning boom gone..

                                      so where else do I look for this happening to resolve

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        comet424
                                        last edited by

                                        0_1540480297727_pf9.JPG

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          what is the point of pointing pfsense to 8.8.8.8? All that is need for pfsense is loopback..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            comet424
                                            last edited by

                                            because derelict said to set it to 8,8,8,8

                                            ok ill delete that dns too.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.