• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Fetching package: connection reset by peer

Scheduled Pinned Locked Moved pfSense Packages
89 Posts 4 Posters 14.8k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    float
    last edited by Sep 13, 2020, 12:51 PM

    8d395eb0-9ff9-448e-b4e6-1f815af8ce18-image.png

    D 1 Reply Last reply Sep 13, 2020, 12:53 PM Reply Quote 0
    • D
      DaddyGo @float
      last edited by DaddyGo Sep 13, 2020, 12:54 PM Sep 13, 2020, 12:53 PM

      @float

      can you PING 1.1.1.1 under windows or linux (behind pfSense)
      what do you see in the firewall log then?

      +++edit:
      this can also be interesting

      9e1faf4f-7bb9-4e7a-91c6-8fed4bc7f04d-image.png

      Cats bury it so they can't see it!
      (You know what I mean if you have a cat)

      1 Reply Last reply Reply Quote 0
      • F
        float
        last edited by float Sep 13, 2020, 1:03 PM Sep 13, 2020, 1:02 PM

        I changed the dns server to only 8.8.8.8

        I can ping it:

        5a730425-3036-463c-9c3b-7dcbe5dcd782-image.png

        I can resolve hosts:

        Sep 13 15:03:07 	unbound 	36154:0 	info: control cmd: stats_noreset
Sep 13 15:03:02 	unbound 	36154:1 	info: validation success 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:1 	info: validate(nxdomain): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:1 	info: validated DNSKEY 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:1 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:1 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:1 	info: response for 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:0 	info: validation success 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:0 	info: validate(nxdomain): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:0 	info: validated DNSKEY 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:0 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:0 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:0 	info: response for 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:1 	info: resolving 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:1 	info: validated DS 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:1 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:1 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:1 	info: response for 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:0 	info: resolving 193.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:0 	info: validated DS 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:0 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:0 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:0 	info: response for 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:1 	info: resolving 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:1 	info: query response was NXDOMAIN ANSWER
Sep 13 15:03:02 	unbound 	36154:1 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:1 	info: response for 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:0 	info: resolving 193.in-addr.arpa. DS IN
Sep 13 15:03:02 	unbound 	36154:0 	info: query response was NXDOMAIN ANSWER
Sep 13 15:03:02 	unbound 	36154:0 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:0 	info: response for 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:1 	info: resolving 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:0 	info: resolving 157.228.27.193.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validation success time-a.timefreq.bldrdoc.gov. AAAA IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validate(cname_noanswer): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:2 	info: validation success time-c.timefreq.bldrdoc.gov. AAAA IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validate(cname_noanswer): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:2 	info: validation success time-b.timefreq.bldrdoc.gov. AAAA IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validate(cname_noanswer): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DNSKEY nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DNSKEY nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DNSKEY nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:2 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:2 	info: response for nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validation success time-b.timefreq.bldrdoc.gov. AAAA IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validate(cname_noanswer): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:3 	info: validation success time-a.timefreq.bldrdoc.gov. AAAA IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validate(cname_noanswer): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:3 	info: validated DNSKEY nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validated DNSKEY nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:3 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:3 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:3 	info: response for nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:1 	info: validation success 124.25.26.194.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:1 	info: validate(nxdomain): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:1 	info: validated DNSKEY 194.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:1 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:1 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:1 	info: response for 194.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validation success 124.25.26.194.in-addr.arpa. PTR IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validate(nxdomain): sec_status_secure
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DNSKEY 194.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:2 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:2 	info: response for 194.in-addr.arpa. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: resolving nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DS nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DS nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:2 	info: validated DS nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:2 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:2 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:2 	info: response for nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:3 	info: resolving nist.gov. DNSKEY IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validated DS nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:3 	info: validated DS nist.gov. DS IN
Sep 13 15:03:02 	unbound 	36154:3 	info: query response was ANSWER
Sep 13 15:03:02 	unbound 	36154:3 	info: reply from <.> 8.8.8.8#853
Sep 13 15:03:02 	unbound 	36154:3 	info: response for nist.gov. DS IN
        D 1 Reply Last reply Sep 13, 2020, 1:11 PM Reply Quote 0
        • D
          DaddyGo @float
          last edited by Sep 13, 2020, 1:11 PM

          @float said in Fetching package: connection reset by peer:

          and inside pfSense? (nslookup)

          Cats bury it so they can't see it!
          (You know what I mean if you have a cat)

          1 Reply Last reply Reply Quote 0
          • F
            float
            last edited by Sep 13, 2020, 1:14 PM

            [2.4.5-RELEASE][admin@]/root: nslookup www.facebook.com 8.8.8.8
            Server: 8.8.8.8
            Address: 8.8.8.8#53

            Non-authoritative answer:
            www.facebook.com canonical name = star-mini.c10r.facebook.com.
            Name: star-mini.c10r.facebook.com
            Address: 157.240.210.35
            Name: star-mini.c10r.facebook.com
            Address: 2a03:2880:f121:83:face:b00c:0:25de

            D 1 Reply Last reply Sep 13, 2020, 1:26 PM Reply Quote 0
            • D
              DaddyGo @float
              last edited by DaddyGo Sep 13, 2020, 1:26 PM Sep 13, 2020, 1:26 PM

              @float

              Okay, if you like 8.8.8.8

              just a little plus, you might want to disable 53 if you only want to use DoT
              and point all DNS requests to pfSense (manualy or DHCP)
              try to use only static entries (DHCP) and uncheck it, this

              2482df19-ebfe-40d8-8d6d-f00cf8834357-image.png

              oh and get ready for the new craziness DoH 😉

              Cats bury it so they can't see it!
              (You know what I mean if you have a cat)

              1 Reply Last reply Reply Quote 0
              • F
                float
                last edited by Sep 13, 2020, 1:30 PM

                Thank you. Everything is working as it should, only pfsense is being funny, right?

                D 1 Reply Last reply Sep 13, 2020, 1:35 PM Reply Quote 0
                • D
                  DaddyGo @float
                  last edited by Sep 13, 2020, 1:35 PM

                  @float said in Fetching package: connection reset by peer:

                  pfsense is being funny, right?

                  The deeper you dive into it, the more funny it will be.
                  You'll see how serious the stuff is.
                  RED circle 18 - Caution this is addictive 😉

                  Cats bury it so they can't see it!
                  (You know what I mean if you have a cat)

                  1 Reply Last reply Reply Quote 0
                  • F
                    float
                    last edited by Sep 13, 2020, 4:14 PM

                    I reinstalled pfsense from the install image of netgate. Same issue. All the DNS-servers return "no response" on the firewall (no changes made on the settings). Nice extra problem: none of the clients can contact the dns servers, so they don't have any internet...

                    1 Reply Last reply Reply Quote 0
                    • S
                      stephenw10 Netgate Administrator
                      last edited by stephenw10 Sep 13, 2020, 4:40 PM Sep 13, 2020, 4:40 PM

                      After your restored your config I assume? The default install resolves as expected?

                      1 Reply Last reply Reply Quote 0
                      • F
                        float
                        last edited by Sep 13, 2020, 4:41 PM

                        I didn't restore my config. Default install doesn't resolve.

                        D 1 Reply Last reply Sep 13, 2020, 4:52 PM Reply Quote 0
                        • D
                          DaddyGo @float
                          last edited by Sep 13, 2020, 4:52 PM

                          @float said in Fetching package: connection reset by peer:

                          Default install doesn't resolve.

                          Can you only connect to your ISP's modem / router?

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          1 Reply Last reply Reply Quote 0
                          • F
                            float
                            last edited by Sep 13, 2020, 4:58 PM

                            I can resolve any host on pfsense, but not on the clients after pfsense. Pfsense is making the connection with the modem.

                            D 1 Reply Last reply Sep 13, 2020, 5:14 PM Reply Quote 0
                            • D
                              DaddyGo @float
                              last edited by DaddyGo Sep 13, 2020, 5:54 PM Sep 13, 2020, 5:14 PM

                              @float said in Fetching package: connection reset by peer:

                              Pfsense is making the connection with the modem.

                              I was just wondering if you don't have some crazy ISP filtering ...

                              So,

                              Are the interfaces configured correctly in Unbound?
                              09632204-1594-48b3-8564-797527cbeb03-image.png

                              and

                              dd82f118-d3a3-48fb-bedc-1a09d10c2681-image.png

                              do clients' DNS point to pfSense?

                              c38a2df5-1cf9-431d-aae8-d07b9d432b52-image.png

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              1 Reply Last reply Reply Quote 0
                              • S
                                stephenw10 Netgate Administrator
                                last edited by Sep 13, 2020, 5:18 PM

                                Can you ping out from clients by IP?

                                Is Unbound actually running? Any errors in the resolver log?

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • F
                                  float
                                  last edited by float Sep 13, 2020, 5:25 PM Sep 13, 2020, 5:21 PM

                                  Ok, I found the error. Selecting "ALL" in "Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

                                  D 1 Reply Last reply Sep 13, 2020, 5:26 PM Reply Quote 0
                                  • S
                                    stephenw10 Netgate Administrator
                                    last edited by Sep 13, 2020, 5:25 PM

                                    @float said in Fetching package: connection reset by peer:

                                    Sep 13 19:19:23 portal unbound: [50875:0] info: reply from <.> 1.0.0.1#853

                                    That's not the default config, it's using DoT to cloudflare.

                                    Does it resolve with the default config? Unbound resolving directly?

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      DaddyGo @float
                                      last edited by Sep 13, 2020, 5:26 PM

                                      @float said in Fetching package: connection reset by peer:

                                      "Network interfaces" doesn't work, but when I select "LAN" and "localhost" it works.

                                      Hmmm 😉 ✋

                                      Cats bury it so they can't see it!
                                      (You know what I mean if you have a cat)

                                      F 1 Reply Last reply Sep 13, 2020, 5:29 PM Reply Quote 0
                                      • F
                                        float @DaddyGo
                                        last edited by float Sep 13, 2020, 5:31 PM Sep 13, 2020, 5:29 PM

                                        @DaddyGo Weird, I just put "ALL" again and now it works. I'll reinstall and try again.

                                        @stephenw10 I'll reinstall and try again.

                                        D 1 Reply Last reply Sep 13, 2020, 5:31 PM Reply Quote 1
                                        • D
                                          DaddyGo @float
                                          last edited by Sep 13, 2020, 5:31 PM

                                          @float said in Fetching package: connection reset by peer:

                                          I'll reinstall and try again.

                                          No, no, Unbound has to restart, it's such an animal

                                          Cats bury it so they can't see it!
                                          (You know what I mean if you have a cat)

                                          1 Reply Last reply Reply Quote 0
                                          73 out of 89
                                          • First post
                                            73/89
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received