Fetching package: connection reset by peer

stephenw10

Probably this:
https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html?highlight=pkg%20server#pkg-pfsense-org-has-no-a-aaaa-record

float

The problem occurs for every lookup.

Is this normal behavior because of this option:

DaddyGo

@float said in Fetching package: connection reset by peer:

Is this normal behavior because of this option:

Hmmmm sure

btw:
what does DNS lookup point to 1.1.1.1?

float

Option disabled:

Option enabled:

stephenw10

Mmm, no response from Cloudflare is not good. Not much we can do about that though. You don't have some conflicting route for 1.x.x.x somehow?

You should remove those servers if they are not giving you responses.

Steve

DaddyGo

@float

Ohhh....interesting
what packages are running? Snort or Suricata, pfBlockerNG ....?

float

All my IPv4 DNS-servers are not responding.

DaddyGo

@float said in Fetching package: connection reset by peer:

All my IPv4 DNS-servers are not responding.

because the Suricata
home NET / external NET

or pfBlockerNG blocks lists CloudFlare DNS IPs in a stupid way

float

The problem occurred before installing pfblocker.

Installed packages:

DaddyGo

@float said in Fetching package: connection reset by peer:

The problem occurred before installing pfblocker.

Temporarily stop all packages and PING out the box to 1.1.1.1

stephenw10

Are you even using those? Unbound running in forwarding mode?

float

Yes in forward mode - I have no issues on the network clients - everything is resolved by pfsense

DaddyGo

@float

Here the cat was buried...

because.... DoT!!!!

your shared image above....

float

Yes, I changed them 5 minutes ago to test and take a screenshot
Do you mean that the no response is normal in "dns lookup" because they have to use port 853 and not the standard port 53?

DaddyGo

@DaddyGo

TRY:
DNS hostname - cloudflare-dns.com

DaddyGo

@float said in Fetching package: connection reset by peer:

because they have to use port 853 and not the standard port 53?

BINGO

float

Ok, thanks. So I don't have to worry about the "dns lookup" saying no response?

DaddyGo

@float said in Fetching package: connection reset by peer:

dns lookup" saying no response?

but yes and it's getting weirder

stephenw10

No that not OK. All of those servers should respond to DoT queries.

If you have a host name there it must match as it will be used for verification. But you don't need to have one.

Steve

DaddyGo

Try something, really just optional

DNS hostname - cloudflare-dns.com