Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fetching package: connection reset by peer

    pfSense Packages
    4
    89
    10.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DaddyGoD
      DaddyGo @float
      last edited by

      @float said in Fetching package: connection reset by peer:

      I"ll reinstall tomorrow :-)

      I look forward to your feedback 😉

      Cats bury it so they can't see it!
      (You know what I mean if you have a cat)

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Mmm, must be something specific to you. I can install fine to a 7100 here:

        [2.4.5-RELEASE][admin@7100.stevew.lan]/root: pkg -d install whois
DBG(1)[57064]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense-core
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/packagesite.txz with opts "i"
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/packagesite.txz with opts "i"
pfSense repository is up to date.
All repositories are up to date.
DBG(1)[57064]> want to get an advisory lock on a database
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	whois: 5.2.17 [pfSense]

Number of packages to be installed: 1

58 KiB to be downloaded.

Proceed with this action? [y/N]: y
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz with opts "i"
[1/1] Fetching whois-5.2.17.txz: 100%   58 KiB  59.1kB/s    00:01    
Checking integrity...DBG(1)[57064]> Binary> loading /var/cache/pkg/whois-5.2.17-e7a0f0313c.txz
DBG(1)[57064]> check integrity for 1 items added
 done (0 conflicting)
DBG(1)[57064]> want to upgrade advisory to exclusive lock
[1/1] Installing whois-5.2.17...
[1/1] Extracting whois-5.2.17: 100%
DBG(1)[57064]> release an exclusive lock on a database
DBG(1)[57064]> release an advisory lock on a database

        Weird it's just that pkh though. You might have a corrupted version cached maybe?
        Try: pkg-static clean

        Steve

        1 Reply Last reply Reply Quote 0
        • F
          float
          last edited by float

          I tried to install the package again this morning (without reinstalling). No issues. The package installed.

          The only issue remaining is the non response from the external DNS servers:

          742beef2-076c-47cc-bed8-a82c9b07693f-image.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Probably this:
            https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html?highlight=pkg%20server#pkg-pfsense-org-has-no-a-aaaa-record

            1 Reply Last reply Reply Quote 0
            • F
              float
              last edited by

              The problem occurs for every lookup.

              39ab6921-d0ca-49ea-8128-61d662aa99e8-image.png

              Is this normal behavior because of this option:

              8a139290-99a6-4e9e-be1d-ffb2f9f14969-image.png

              DaddyGoD 1 Reply Last reply Reply Quote 0
              • DaddyGoD
                DaddyGo @float
                last edited by DaddyGo

                @float said in Fetching package: connection reset by peer:

                Is this normal behavior because of this option:

                Hmmmm 😉 sure

                6ff55e61-0fbc-4fac-8d6f-e4fcc4c20b1e-image.png

                btw:
                what does DNS lookup point to 1.1.1.1?

                dc8af711-abb2-48fb-acdc-05bb7df7b2aa-image.png

                Cats bury it so they can't see it!
                (You know what I mean if you have a cat)

                1 Reply Last reply Reply Quote 0
                • F
                  float
                  last edited by

                  Option disabled:

                  173b52c2-244d-4d8b-b3dd-850053852e5b-image.png

                  Option enabled:

                  a6777f78-54ef-431d-be8b-d1f03ef6c68b-image.png

                  DaddyGoD 1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Mmm, no response from Cloudflare is not good. Not much we can do about that though. You don't have some conflicting route for 1.x.x.x somehow?

                    You should remove those servers if they are not giving you responses.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • DaddyGoD
                      DaddyGo @float
                      last edited by

                      @float

                      Ohhh....interesting
                      what packages are running? Snort or Suricata, pfBlockerNG ....?

                      Cats bury it so they can't see it!
                      (You know what I mean if you have a cat)

                      1 Reply Last reply Reply Quote 0
                      • F
                        float
                        last edited by

                        All my IPv4 DNS-servers are not responding.

                        DaddyGoD 1 Reply Last reply Reply Quote 0
                        • DaddyGoD
                          DaddyGo @float
                          last edited by DaddyGo

                          @float said in Fetching package: connection reset by peer:

                          All my IPv4 DNS-servers are not responding.

                          because the Suricata
                          home NET / external NET

                          c82db21e-04fc-4962-aead-be14ae718dd3-image.png

                          or pfBlockerNG blocks lists CloudFlare DNS IPs in a stupid way

                          617c9333-f60a-4820-a55e-de25cebe5836-image.png

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          1 Reply Last reply Reply Quote 0
                          • F
                            float
                            last edited by

                            The problem occurred before installing pfblocker.

                            e03df456-6435-4195-9396-87b43707a54b-image.png

                            Installed packages:

                            575556de-9ae0-43b9-a6f1-5b8abbf79919-image.png

                            DaddyGoD 1 Reply Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @float
                              last edited by

                              @float said in Fetching package: connection reset by peer:

                              The problem occurred before installing pfblocker.

                              Temporarily stop all packages and PING out the box to 1.1.1.1

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Are you even using those? Unbound running in forwarding mode?

                                1 Reply Last reply Reply Quote 0
                                • F
                                  float
                                  last edited by float

                                  Yes in forward mode - I have no issues on the network clients - everything is resolved by pfsense

                                  3635f75a-bd12-4bc5-b57e-fb0772d6e834-image.png

                                  DaddyGoD 1 Reply Last reply Reply Quote 0
                                  • DaddyGoD
                                    DaddyGo @float
                                    last edited by DaddyGo

                                    @float

                                    Here the cat was buried...😉

                                    79d4227b-cfad-473f-adaf-74389a9df010-image.png

                                    because.... DoT!!!!

                                    da4e2003-21da-48e2-82a5-4186080438fa-image.png

                                    your shared image above....

                                    6e06cf28-17b3-44d5-9884-9442fd201021-image.png

                                    Cats bury it so they can't see it!
                                    (You know what I mean if you have a cat)

                                    DaddyGoD 1 Reply Last reply Reply Quote 0
                                    • F
                                      float
                                      last edited by float

                                      Yes, I changed them 5 minutes ago to test and take a screenshot
                                      Do you mean that the no response is normal in "dns lookup" because they have to use port 853 and not the standard port 53?

                                      DaddyGoD 1 Reply Last reply Reply Quote 0
                                      • DaddyGoD
                                        DaddyGo @DaddyGo
                                        last edited by

                                        @DaddyGo

                                        TRY:
                                        DNS hostname - cloudflare-dns.com

                                        Cats bury it so they can't see it!
                                        (You know what I mean if you have a cat)

                                        1 Reply Last reply Reply Quote 0
                                        • DaddyGoD
                                          DaddyGo @float
                                          last edited by

                                          @float said in Fetching package: connection reset by peer:

                                          because they have to use port 853 and not the standard port 53?

                                          BINGO

                                          90d18f64-ae5b-4842-9d5f-32aca309297c-image.png

                                          Cats bury it so they can't see it!
                                          (You know what I mean if you have a cat)

                                          1 Reply Last reply Reply Quote 0
                                          • F
                                            float
                                            last edited by

                                            Ok, thanks. So I don't have to worry about the "dns lookup" saying no response?

                                            c353d42f-7c32-4eb4-823c-7d3b9d0826a0-image.png

                                            DaddyGoD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post