Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fetching package: connection reset by peer

    Scheduled Pinned Locked Moved pfSense Packages
    89 Posts 4 Posters 17.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DaddyGoD
      DaddyGo @float
      last edited by

      @float said in Fetching package: connection reset by peer:

      none of the IPV4 DNS-servers are responding,

      that's what I saw too

      Cats bury it so they can't see it!
      (You know what I mean if you have a cat)

      1 Reply Last reply Reply Quote 0
      • DaddyGoD
        DaddyGo @float
        last edited by

        @float

        what do you use, Unbound?

        Cats bury it so they can't see it!
        (You know what I mean if you have a cat)

        1 Reply Last reply Reply Quote 0
        • F
          float
          last edited by

          Yes, dns resolver

          DaddyGoD 1 Reply Last reply Reply Quote 0
          • DaddyGoD
            DaddyGo @float
            last edited by

            @float
            and....????

            968f8502-9d3e-4235-8323-03eaafbeb4a3-image.png

            Cats bury it so they can't see it!
            (You know what I mean if you have a cat)

            1 Reply Last reply Reply Quote 0
            • F
              float
              last edited by

              These are my servers:

              5be2b400-8247-4ecf-8310-72491c24b1ff-image.png

              DaddyGoD 1 Reply Last reply Reply Quote 0
              • DaddyGoD
                DaddyGo @float
                last edited by DaddyGo

                @float

                unnecessary so many DNS servers
                and by that you throw your privacy

                is IPv6 important to you?
                it’s not really time yet, so

                5f5f8013-a6ae-4a3f-828b-d89405cc5788-image.png

                ++++edit:
                it won’t make life faster just tell more everyone what you want to know 😉

                ++++edit2:
                DoT and DNSSEC are very important towards CloudFlare (1.1.1.1 / 1.0.0.1)

                like:

                66574136-a4e6-422c-ba35-7bfe1bd82fa1-image.png

                Cats bury it so they can't see it!
                (You know what I mean if you have a cat)

                1 Reply Last reply Reply Quote 0
                • RicoR
                  Rico LAYER 8 Rebel Alliance
                  last edited by

                  What's not to understand about plain VANILLA for testing? 😑

                  -Rico

                  DaddyGoD 1 Reply Last reply Reply Quote 0
                  • F
                    float
                    last edited by

                    @DaddyGo Yes, I know. I was testing with multiple DNS server, but the error stays the same "no response" from IPv4 dns server. I"ll reinstall tomorrow :-)

                    DaddyGoD 1 Reply Last reply Reply Quote 0
                    • DaddyGoD
                      DaddyGo @Rico
                      last edited by DaddyGo

                      @Rico said in Fetching package: connection reset by peer:

                      What's not to understand about plain VANILLA for testing?

                      Huuu, but confident 🙄
                      We're not talking about anymore, my friend Rico ...
                      Also read a little above

                      Cats bury it so they can't see it!
                      (You know what I mean if you have a cat)

                      1 Reply Last reply Reply Quote 0
                      • DaddyGoD
                        DaddyGo @float
                        last edited by

                        @float said in Fetching package: connection reset by peer:

                        I"ll reinstall tomorrow :-)

                        I look forward to your feedback 😉

                        Cats bury it so they can't see it!
                        (You know what I mean if you have a cat)

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Mmm, must be something specific to you. I can install fine to a 7100 here:

                          [2.4.5-RELEASE][admin@7100.stevew.lan]/root: pkg -d install whois
DBG(1)[57064]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense-core
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/packagesite.txz with opts "i"
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/packagesite.txz with opts "i"
pfSense repository is up to date.
All repositories are up to date.
DBG(1)[57064]> want to get an advisory lock on a database
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	whois: 5.2.17 [pfSense]

Number of packages to be installed: 1

58 KiB to be downloaded.

Proceed with this action? [y/N]: y
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz with opts "i"
[1/1] Fetching whois-5.2.17.txz: 100%   58 KiB  59.1kB/s    00:01    
Checking integrity...DBG(1)[57064]> Binary> loading /var/cache/pkg/whois-5.2.17-e7a0f0313c.txz
DBG(1)[57064]> check integrity for 1 items added
 done (0 conflicting)
DBG(1)[57064]> want to upgrade advisory to exclusive lock
[1/1] Installing whois-5.2.17...
[1/1] Extracting whois-5.2.17: 100%
DBG(1)[57064]> release an exclusive lock on a database
DBG(1)[57064]> release an advisory lock on a database

                          Weird it's just that pkh though. You might have a corrupted version cached maybe?
                          Try: pkg-static clean

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • F
                            float
                            last edited by float

                            I tried to install the package again this morning (without reinstalling). No issues. The package installed.

                            The only issue remaining is the non response from the external DNS servers:

                            742beef2-076c-47cc-bed8-a82c9b07693f-image.png

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Probably this:
                              https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html?highlight=pkg%20server#pkg-pfsense-org-has-no-a-aaaa-record

                              1 Reply Last reply Reply Quote 0
                              • F
                                float
                                last edited by

                                The problem occurs for every lookup.

                                39ab6921-d0ca-49ea-8128-61d662aa99e8-image.png

                                Is this normal behavior because of this option:

                                8a139290-99a6-4e9e-be1d-ffb2f9f14969-image.png

                                DaddyGoD 1 Reply Last reply Reply Quote 0
                                • DaddyGoD
                                  DaddyGo @float
                                  last edited by DaddyGo

                                  @float said in Fetching package: connection reset by peer:

                                  Is this normal behavior because of this option:

                                  Hmmmm 😉 sure

                                  6ff55e61-0fbc-4fac-8d6f-e4fcc4c20b1e-image.png

                                  btw:
                                  what does DNS lookup point to 1.1.1.1?

                                  dc8af711-abb2-48fb-acdc-05bb7df7b2aa-image.png

                                  Cats bury it so they can't see it!
                                  (You know what I mean if you have a cat)

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    float
                                    last edited by

                                    Option disabled:

                                    173b52c2-244d-4d8b-b3dd-850053852e5b-image.png

                                    Option enabled:

                                    a6777f78-54ef-431d-be8b-d1f03ef6c68b-image.png

                                    DaddyGoD 1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Mmm, no response from Cloudflare is not good. Not much we can do about that though. You don't have some conflicting route for 1.x.x.x somehow?

                                      You should remove those servers if they are not giving you responses.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • DaddyGoD
                                        DaddyGo @float
                                        last edited by

                                        @float

                                        Ohhh....interesting
                                        what packages are running? Snort or Suricata, pfBlockerNG ....?

                                        Cats bury it so they can't see it!
                                        (You know what I mean if you have a cat)

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          float
                                          last edited by

                                          All my IPv4 DNS-servers are not responding.

                                          DaddyGoD 1 Reply Last reply Reply Quote 0
                                          • DaddyGoD
                                            DaddyGo @float
                                            last edited by DaddyGo

                                            @float said in Fetching package: connection reset by peer:

                                            All my IPv4 DNS-servers are not responding.

                                            because the Suricata
                                            home NET / external NET

                                            c82db21e-04fc-4962-aead-be14ae718dd3-image.png

                                            or pfBlockerNG blocks lists CloudFlare DNS IPs in a stupid way

                                            617c9333-f60a-4820-a55e-de25cebe5836-image.png

                                            Cats bury it so they can't see it!
                                            (You know what I mean if you have a cat)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.