Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fetching package: connection reset by peer

    Scheduled Pinned Locked Moved pfSense Packages
    89 Posts 4 Posters 17.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      float
      last edited by

      No.

      [2.4.5-RELEASE][admin@*]/root: fetch -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
      /dev/null 82% of 57 kB 596 Bps 17s
      fetch: https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz: Connection reset by peer

      1 Reply Last reply Reply Quote 0
      • F
        float
        last edited by

        Resolving the website takes also very long.
        DNS issue?

        6f82a5b6-fc3f-4e3a-a63c-5209b188b6fd-image.png

        1 Reply Last reply Reply Quote 0
        • RicoR
          Rico LAYER 8 Rebel Alliance
          last edited by

          Yeah there must be a problem between you and the netgate server.
          Other files are working for you?!

          [2.4.5-RELEASE][admin@pfSense2.localdomain]/root: fetch -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
/dev/null                                               19 MB 2118 kBps    09s
[2.4.5-RELEASE][admin@pfSense2.localdomain]/root:

          -Rico

          1 Reply Last reply Reply Quote 0
          • F
            float
            last edited by float

            Yes, no problem with other files. The only problem is with the "whois" package.

            [2.4.5-RELEASE][admin@*]/root: fetch -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
            /dev/null 19 MB 1239 kBps 16s

            DaddyGoD 1 Reply Last reply Reply Quote 0
            • RicoR
              Rico LAYER 8 Rebel Alliance
              last edited by

              What's the output here?

              [2.4.5-RELEASE][admin@pfSense2.localdomain]/root: fetch -v -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
resolving server address: firmware.netgate.com:443
SSL options: 83004bff
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
TLSv1.2 connection established using ECDHE-RSA-AES256-GCM-SHA384
Certificate subject: /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.netgate.com
Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
requesting https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
remote size / mtime: 59136 / 1580490860
/dev/null                                               57 kB  319 kBps    00s
[2.4.5-RELEASE][admin@pfSense2.localdomain]/root:

              -Rico

              1 Reply Last reply Reply Quote 0
              • DaddyGoD
                DaddyGo @float
                last edited by

                @float said in Fetching package: connection reset by peer:

                Yes, no problem with other files.

                This means that it is not just a DNS issue. (and access time)
                Since, for example, I was able to install iperf perfectly with OP

                Cats bury it so they can't see it!
                (You know what I mean if you have a cat)

                1 Reply Last reply Reply Quote 0
                • F
                  float
                  last edited by float

                  [2.4.5-RELEASE][admin@]/root: fetch -v -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
                  resolving server address: firmware.netgate.com:443
                  SSL options: 83004bff
                  Peer verification enabled
                  Using CA cert file: /usr/local/etc/ssl/cert.pem
                  Verify hostname
                  TLSv1.2 connection established using ECDHE-RSA-AES256-GCM-SHA384
                  Certificate subject: /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=                  .netgate.com
                  Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
                  requesting https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
                  remote size / mtime: 59136 / 1580490860
                  /dev/null 82% of 57 kB 595 Bps 17s
                  fetch: https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz: Connection reset by peer

                  And no issue with another package:
                  [2.4.5-RELEASE][admin@]/root: fetch -v -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
                  resolving server address: firmware.netgate.com:443
                  SSL options: 83004bff
                  Peer verification enabled
                  Using CA cert file: /usr/local/etc/ssl/cert.pem
                  Verify hostname
                  TLSv1.2 connection established using ECDHE-RSA-AES256-GCM-SHA384
                  Certificate subject: /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.netgate.com
                  Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
                  requesting https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
                  remote size / mtime: 20132092 / 1580488881
                  /dev/null 19 MB 1164 kBps 17s

                  1 Reply Last reply Reply Quote 0
                  • DaddyGoD
                    DaddyGo
                    last edited by

                    is there any way (PC, MAC, Linux) to download the file behind pfSense?
                    you said you can access the download with a browser

                    6843c8a3-92f2-4d07-8d90-22a5d1dd0e0c-image.png

                    Cats bury it so they can't see it!
                    (You know what I mean if you have a cat)

                    1 Reply Last reply Reply Quote 0
                    • F
                      float
                      last edited by float

                      Yes, the file is on my windows desktop. I can download it with my other freebsdserver too.

                      [@ ~]$ fetch -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
                      /dev/null 57 kB 304 kBps 00s

                      DaddyGoD 1 Reply Last reply Reply Quote 0
                      • RicoR
                        Rico LAYER 8 Rebel Alliance
                        last edited by

                        I'd try to reinstall pfSense and check again vanilla with fetch from the local console.

                        -Rico

                        DaddyGoD 1 Reply Last reply Reply Quote 0
                        • DaddyGoD
                          DaddyGo @float
                          last edited by

                          @float said in Fetching package: connection reset by peer:

                          Yes, the file is on my windows desktop. I can download it with my other freebsdserver too.

                          Well, then the package is passed trough on pfSense, ergo something happens in the XG-7100

                          when, the box want to install the package on your own

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          1 Reply Last reply Reply Quote 0
                          • DaddyGoD
                            DaddyGo @Rico
                            last edited by DaddyGo

                            @Rico said in Fetching package: connection reset by peer:

                            I'd try to reinstall pfSense and check again vanilla with fetch from the local console.

                            that is exactly what I would do

                            +++edit:
                            you have a factory snapshot of the XG-7100 😉

                            Cats bury it so they can't see it!
                            (You know what I mean if you have a cat)

                            1 Reply Last reply Reply Quote 0
                            • F
                              float
                              last edited by

                              Ok, i'll reinstall. The other thing that is quite weird is that none of the IPV4 DNS-servers are responding, but all the IPV6 are.

                              DaddyGoD 2 Replies Last reply Reply Quote 0
                              • DaddyGoD
                                DaddyGo @float
                                last edited by

                                @float said in Fetching package: connection reset by peer:

                                none of the IPV4 DNS-servers are responding,

                                that's what I saw too

                                Cats bury it so they can't see it!
                                (You know what I mean if you have a cat)

                                1 Reply Last reply Reply Quote 0
                                • DaddyGoD
                                  DaddyGo @float
                                  last edited by

                                  @float

                                  what do you use, Unbound?

                                  Cats bury it so they can't see it!
                                  (You know what I mean if you have a cat)

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    float
                                    last edited by

                                    Yes, dns resolver

                                    DaddyGoD 1 Reply Last reply Reply Quote 0
                                    • DaddyGoD
                                      DaddyGo @float
                                      last edited by

                                      @float
                                      and....????

                                      968f8502-9d3e-4235-8323-03eaafbeb4a3-image.png

                                      Cats bury it so they can't see it!
                                      (You know what I mean if you have a cat)

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        float
                                        last edited by

                                        These are my servers:

                                        5be2b400-8247-4ecf-8310-72491c24b1ff-image.png

                                        DaddyGoD 1 Reply Last reply Reply Quote 0
                                        • DaddyGoD
                                          DaddyGo @float
                                          last edited by DaddyGo

                                          @float

                                          unnecessary so many DNS servers
                                          and by that you throw your privacy

                                          is IPv6 important to you?
                                          it’s not really time yet, so

                                          5f5f8013-a6ae-4a3f-828b-d89405cc5788-image.png

                                          ++++edit:
                                          it won’t make life faster just tell more everyone what you want to know 😉

                                          ++++edit2:
                                          DoT and DNSSEC are very important towards CloudFlare (1.1.1.1 / 1.0.0.1)

                                          like:

                                          66574136-a4e6-422c-ba35-7bfe1bd82fa1-image.png

                                          Cats bury it so they can't see it!
                                          (You know what I mean if you have a cat)

                                          1 Reply Last reply Reply Quote 0
                                          • RicoR
                                            Rico LAYER 8 Rebel Alliance
                                            last edited by

                                            What's not to understand about plain VANILLA for testing? 😑

                                            -Rico

                                            DaddyGoD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.