Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fetching package: connection reset by peer

    Scheduled Pinned Locked Moved pfSense Packages
    89 Posts 4 Posters 15.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      float
      last edited by float

      [2.4.5-RELEASE][admin@]/root: fetch -v -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
      resolving server address: firmware.netgate.com:443
      SSL options: 83004bff
      Peer verification enabled
      Using CA cert file: /usr/local/etc/ssl/cert.pem
      Verify hostname
      TLSv1.2 connection established using ECDHE-RSA-AES256-GCM-SHA384
      Certificate subject: /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=      .netgate.com
      Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
      requesting https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
      remote size / mtime: 59136 / 1580490860
      /dev/null 82% of 57 kB 595 Bps 17s
      fetch: https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz: Connection reset by peer

      And no issue with another package:
      [2.4.5-RELEASE][admin@]/root: fetch -v -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
      resolving server address: firmware.netgate.com:443
      SSL options: 83004bff
      Peer verification enabled
      Using CA cert file: /usr/local/etc/ssl/cert.pem
      Verify hostname
      TLSv1.2 connection established using ECDHE-RSA-AES256-GCM-SHA384
      Certificate subject: /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.netgate.com
      Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
      requesting https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/arm-none-eabi-gcc-6.4.0_7.txz
      remote size / mtime: 20132092 / 1580488881
      /dev/null 19 MB 1164 kBps 17s

      1 Reply Last reply Reply Quote 0
      • DaddyGoD
        DaddyGo
        last edited by

        is there any way (PC, MAC, Linux) to download the file behind pfSense?
        you said you can access the download with a browser

        6843c8a3-92f2-4d07-8d90-22a5d1dd0e0c-image.png

        Cats bury it so they can't see it!
        (You know what I mean if you have a cat)

        1 Reply Last reply Reply Quote 0
        • F
          float
          last edited by float

          Yes, the file is on my windows desktop. I can download it with my other freebsdserver too.

          [@ ~]$ fetch -o /dev/null https://firmware.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz
          /dev/null 57 kB 304 kBps 00s

          DaddyGoD 1 Reply Last reply Reply Quote 0
          • RicoR
            Rico LAYER 8 Rebel Alliance
            last edited by

            I'd try to reinstall pfSense and check again vanilla with fetch from the local console.

            -Rico

            DaddyGoD 1 Reply Last reply Reply Quote 0
            • DaddyGoD
              DaddyGo @float
              last edited by

              @float said in Fetching package: connection reset by peer:

              Yes, the file is on my windows desktop. I can download it with my other freebsdserver too.

              Well, then the package is passed trough on pfSense, ergo something happens in the XG-7100

              when, the box want to install the package on your own

              Cats bury it so they can't see it!
              (You know what I mean if you have a cat)

              1 Reply Last reply Reply Quote 0
              • DaddyGoD
                DaddyGo @Rico
                last edited by DaddyGo

                @Rico said in Fetching package: connection reset by peer:

                I'd try to reinstall pfSense and check again vanilla with fetch from the local console.

                that is exactly what I would do

                +++edit:
                you have a factory snapshot of the XG-7100 😉

                Cats bury it so they can't see it!
                (You know what I mean if you have a cat)

                1 Reply Last reply Reply Quote 0
                • F
                  float
                  last edited by

                  Ok, i'll reinstall. The other thing that is quite weird is that none of the IPV4 DNS-servers are responding, but all the IPV6 are.

                  DaddyGoD 2 Replies Last reply Reply Quote 0
                  • DaddyGoD
                    DaddyGo @float
                    last edited by

                    @float said in Fetching package: connection reset by peer:

                    none of the IPV4 DNS-servers are responding,

                    that's what I saw too

                    Cats bury it so they can't see it!
                    (You know what I mean if you have a cat)

                    1 Reply Last reply Reply Quote 0
                    • DaddyGoD
                      DaddyGo @float
                      last edited by

                      @float

                      what do you use, Unbound?

                      Cats bury it so they can't see it!
                      (You know what I mean if you have a cat)

                      1 Reply Last reply Reply Quote 0
                      • F
                        float
                        last edited by

                        Yes, dns resolver

                        DaddyGoD 1 Reply Last reply Reply Quote 0
                        • DaddyGoD
                          DaddyGo @float
                          last edited by

                          @float
                          and....????

                          968f8502-9d3e-4235-8323-03eaafbeb4a3-image.png

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          1 Reply Last reply Reply Quote 0
                          • F
                            float
                            last edited by

                            These are my servers:

                            5be2b400-8247-4ecf-8310-72491c24b1ff-image.png

                            DaddyGoD 1 Reply Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @float
                              last edited by DaddyGo

                              @float

                              unnecessary so many DNS servers
                              and by that you throw your privacy

                              is IPv6 important to you?
                              it’s not really time yet, so

                              5f5f8013-a6ae-4a3f-828b-d89405cc5788-image.png

                              ++++edit:
                              it won’t make life faster just tell more everyone what you want to know 😉

                              ++++edit2:
                              DoT and DNSSEC are very important towards CloudFlare (1.1.1.1 / 1.0.0.1)

                              like:

                              66574136-a4e6-422c-ba35-7bfe1bd82fa1-image.png

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              1 Reply Last reply Reply Quote 0
                              • RicoR
                                Rico LAYER 8 Rebel Alliance
                                last edited by

                                What's not to understand about plain VANILLA for testing? 😑

                                -Rico

                                DaddyGoD 1 Reply Last reply Reply Quote 0
                                • F
                                  float
                                  last edited by

                                  @DaddyGo Yes, I know. I was testing with multiple DNS server, but the error stays the same "no response" from IPv4 dns server. I"ll reinstall tomorrow :-)

                                  DaddyGoD 1 Reply Last reply Reply Quote 0
                                  • DaddyGoD
                                    DaddyGo @Rico
                                    last edited by DaddyGo

                                    @Rico said in Fetching package: connection reset by peer:

                                    What's not to understand about plain VANILLA for testing?

                                    Huuu, but confident 🙄
                                    We're not talking about anymore, my friend Rico ...
                                    Also read a little above

                                    Cats bury it so they can't see it!
                                    (You know what I mean if you have a cat)

                                    1 Reply Last reply Reply Quote 0
                                    • DaddyGoD
                                      DaddyGo @float
                                      last edited by

                                      @float said in Fetching package: connection reset by peer:

                                      I"ll reinstall tomorrow :-)

                                      I look forward to your feedback 😉

                                      Cats bury it so they can't see it!
                                      (You know what I mean if you have a cat)

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Mmm, must be something specific to you. I can install fine to a 7100 here:

                                        [2.4.5-RELEASE][admin@7100.stevew.lan]/root: pkg -d install whois
DBG(1)[57064]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense-core
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-core/packagesite.txz with opts "i"
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
DBG(1)[57064]> PkgRepo: verifying update for pfSense
DBG(1)[57064]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.conf with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/meta.txz with opts "i"
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/packagesite.txz with opts "i"
pfSense repository is up to date.
All repositories are up to date.
DBG(1)[57064]> want to get an advisory lock on a database
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	whois: 5.2.17 [pfSense]

Number of packages to be installed: 1

58 KiB to be downloaded.

Proceed with this action? [y/N]: y
DBG(1)[57064]> Fetch: fetching from: https://files01.netgate.com/pkg/pfSense_factory-v2_4_5_amd64-pfSense_factory-v2_4_5/All/whois-5.2.17.txz with opts "i"
[1/1] Fetching whois-5.2.17.txz: 100%   58 KiB  59.1kB/s    00:01    
Checking integrity...DBG(1)[57064]> Binary> loading /var/cache/pkg/whois-5.2.17-e7a0f0313c.txz
DBG(1)[57064]> check integrity for 1 items added
 done (0 conflicting)
DBG(1)[57064]> want to upgrade advisory to exclusive lock
[1/1] Installing whois-5.2.17...
[1/1] Extracting whois-5.2.17: 100%
DBG(1)[57064]> release an exclusive lock on a database
DBG(1)[57064]> release an advisory lock on a database

                                        Weird it's just that pkh though. You might have a corrupted version cached maybe?
                                        Try: pkg-static clean

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          float
                                          last edited by float

                                          I tried to install the package again this morning (without reinstalling). No issues. The package installed.

                                          The only issue remaining is the non response from the external DNS servers:

                                          742beef2-076c-47cc-bed8-a82c9b07693f-image.png

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Probably this:
                                            https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html?highlight=pkg%20server#pkg-pfsense-org-has-no-a-aaaa-record

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.