Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fetching package: connection reset by peer

    pfSense Packages
    4
    89
    10.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DaddyGoD
      DaddyGo @float
      last edited by DaddyGo

      @float

      Okay, if you like 8.8.8.8

      just a little plus, you might want to disable 53 if you only want to use DoT
      and point all DNS requests to pfSense (manualy or DHCP)
      try to use only static entries (DHCP) and uncheck it, this

      2482df19-ebfe-40d8-8d6d-f00cf8834357-image.png

      oh and get ready for the new craziness DoH 😉

      Cats bury it so they can't see it!
      (You know what I mean if you have a cat)

      1 Reply Last reply Reply Quote 0
      • F
        float
        last edited by

        Thank you. Everything is working as it should, only pfsense is being funny, right?

        DaddyGoD 1 Reply Last reply Reply Quote 0
        • DaddyGoD
          DaddyGo @float
          last edited by

          @float said in Fetching package: connection reset by peer:

          pfsense is being funny, right?

          The deeper you dive into it, the more funny it will be.
          You'll see how serious the stuff is.
          RED circle 18 - Caution this is addictive 😉

          Cats bury it so they can't see it!
          (You know what I mean if you have a cat)

          1 Reply Last reply Reply Quote 0
          • F
            float
            last edited by

            I reinstalled pfsense from the install image of netgate. Same issue. All the DNS-servers return "no response" on the firewall (no changes made on the settings). Nice extra problem: none of the clients can contact the dns servers, so they don't have any internet...

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by stephenw10

              After your restored your config I assume? The default install resolves as expected?

              1 Reply Last reply Reply Quote 0
              • F
                float
                last edited by

                I didn't restore my config. Default install doesn't resolve.

                DaddyGoD 1 Reply Last reply Reply Quote 0
                • DaddyGoD
                  DaddyGo @float
                  last edited by

                  @float said in Fetching package: connection reset by peer:

                  Default install doesn't resolve.

                  Can you only connect to your ISP's modem / router?

                  Cats bury it so they can't see it!
                  (You know what I mean if you have a cat)

                  1 Reply Last reply Reply Quote 0
                  • F
                    float
                    last edited by

                    I can resolve any host on pfsense, but not on the clients after pfsense. Pfsense is making the connection with the modem.

                    DaddyGoD 1 Reply Last reply Reply Quote 0
                    • DaddyGoD
                      DaddyGo @float
                      last edited by DaddyGo

                      @float said in Fetching package: connection reset by peer:

                      Pfsense is making the connection with the modem.

                      I was just wondering if you don't have some crazy ISP filtering ...

                      So,

                      Are the interfaces configured correctly in Unbound?
                      09632204-1594-48b3-8564-797527cbeb03-image.png

                      and

                      dd82f118-d3a3-48fb-bedc-1a09d10c2681-image.png

                      do clients' DNS point to pfSense?

                      c38a2df5-1cf9-431d-aae8-d07b9d432b52-image.png

                      Cats bury it so they can't see it!
                      (You know what I mean if you have a cat)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Can you ping out from clients by IP?

                        Is Unbound actually running? Any errors in the resolver log?

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • F
                          float
                          last edited by float

                          Ok, I found the error. Selecting "ALL" in "Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

                          DaddyGoD 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            @float said in Fetching package: connection reset by peer:

                            Sep 13 19:19:23 portal unbound: [50875:0] info: reply from <.> 1.0.0.1#853

                            That's not the default config, it's using DoT to cloudflare.

                            Does it resolve with the default config? Unbound resolving directly?

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @float
                              last edited by

                              @float said in Fetching package: connection reset by peer:

                              "Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

                              Hmmm 😉 ✋

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              F 1 Reply Last reply Reply Quote 0
                              • F
                                float @DaddyGo
                                last edited by float

                                @DaddyGo Weird, I just put "ALL" again and now it works. I'll reinstall and try again.

                                @stephenw10 I'll reinstall and try again.

                                DaddyGoD 1 Reply Last reply Reply Quote 1
                                • DaddyGoD
                                  DaddyGo @float
                                  last edited by

                                  @float said in Fetching package: connection reset by peer:

                                  I'll reinstall and try again.

                                  No, no, Unbound has to restart, it's such an animal

                                  Cats bury it so they can't see it!
                                  (You know what I mean if you have a cat)

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    float
                                    last edited by

                                    I want to know if you actually have to click on "ALL" in order to make it work. Because after I changed it to "LAN" and "localhost" it worked.

                                    DaddyGoD 1 Reply Last reply Reply Quote 0
                                    • DaddyGoD
                                      DaddyGo @float
                                      last edited by

                                      @float

                                      Don't forget that "ALL" includes the WAN!
                                      Unbound always restarts anyway, see DHCP leases or pfBlockerNG lists reload, etc

                                      Cats bury it so they can't see it!
                                      (You know what I mean if you have a cat)

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        float
                                        last edited by

                                        Then that would be the cause of my error. Weird because the default install of pfsense is "all"?

                                        DaddyGoD 1 Reply Last reply Reply Quote 0
                                        • DaddyGoD
                                          DaddyGo @float
                                          last edited by

                                          @float

                                          For me, the first is to configure the network interfaces and I don't care about the default config...

                                          So I haven't even dealt with it yet

                                          btw:
                                          The pfSense DNS system is atom safe and works very well

                                          Cats bury it so they can't see it!
                                          (You know what I mean if you have a cat)

                                          1 Reply Last reply Reply Quote 1
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Mmm, listening for queries on 'all' should not be a problem. That's the default setting as you say.
                                            Queries cannot actually come into WAN unless you have added rules to allow it.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post