Is the NethSecurity update server on a break?

Hey everyone!
Since this morning, my beloved NethSecurity firewall has been showing me a friendly notice: “Update server is under maintenance. Please try again later.”
Now, I know NethSecurity is rock-solid, but I didn’t know the update servers needed such a long coffee break! :hot_beverage::sweat_smile:

Does anyone know if there’s actually maintenance going on, or did the server decide to take a day off?
We NethSecurity users are a patient bunch, but an update every now and then wouldn’t hurt, right? :wink:

Thanks in advance for any insights!

2 Likes

I took the enterprise distribution service offline to avoid updates. We spotted an issue with 8.7.0 due to a race condition at boot that could take dnsmasq down. Issue is resolved and a new image is being released.

Instead of fidgeting around with the files in the service, I sent the server straight to maintenance for the time being :grimacing:

It’s coming back online now.

4 Likes

Thank you so much for the quick update! :grinning_face_with_smiling_eyes:

I see the team never sleeps and acts with surgical precision! :laptop::high_voltage:

Thanks for saving us from a potential dnsmasq disaster and for your excellent work in resolving the race condition in record time! You’re all wizards! :man_mage::sparkles:

The server maintenance was a small price to pay for such an important fix. Keep up the amazing work, you’re awesome! :clap:

3 Likes

Since it’s offline again, just giving a heads up:

3 Likes

:white_check_mark: We are online again!

The issue affecting IPsec tunnels has been identified and fixed.
It is now safe to proceed with the upgrade to version 8.7.1.

:wrench: What to do

  • If you haven’t upgraded yet to version 8.7.1, you can now safely proceed with the update.

  • If you already upgraded yesterday (October 30, 2025) to version 8.7.1 simply click the “Check for fixes” button on the updates page to force the update.

2 Likes

It’s strange, because I have two different nethsecurity devices on two different (and unrelated) networks. On the first one, yesterday I was able to update to version 8.7.0 without any problems, and today to 8.7.1.

On the second one, however, I had problems yesterday and had to reinstall Nethsecurity with version 8 24.10 and restore a backup I had made previously, because after the update it stopped working properly and I left users without internet for an hour.

Coincidentally, today when I tried to update this second machine, I still get the error message that appeared yesterday, when I assume you had shut down the update server, and I am unable to update that machine.

I restarted the computer and logged back into the web interface. I also tried to update it using the command that fails via ssh, but without luck:
/usr/libexec/rpcd/ns.update call check-system-update

perfect :wink:

1 Like

The machine where you’re experiencing issues, which version is it currently running?

If it’s running version 8.7, can you check whether it resolves names correctly?
If it doesn’t, try restarting the dnsmasq service with:

/etc/init.d/dnsmasq restart

than try again to update

As I mentioned in my previous message, I have two machines. Both had the previous version of Nethsec (8 24.10). On one, everything went smoothly when updating to 8.7.0 (and then to 8.7.1), but on the other, when updating to 8.7.0, it stopped working and I had to reinstall version 8 24.10 and restore a backup with the configuration. That second machine is now not updating (well, it wasn’t updating on Friday, I don’t know about now, as I don’t have access to it).

I needed to force reboot (reboot -f) my NethSec, after reboot the update was working.

1 Like

I performed a normal reboot via the graphical interface. Is it different with reboot -f?

In my case a normal reboot didn’t work so I forced it. Maybe it was another issue.

The problem stills after doing reboot -f via ssh:

Hello, could you share the output of opkg update?
Please be aware that if you have a subscription active the output could contain sensitive information, you can safely remove the them.

Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/targets/x86/64/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_core
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/targets/x86/64/packages/Packages.sig
Signature check passed.
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/base/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_base
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/base/Packages.sig
Signature check passed.
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/luci/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_luci
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/luci/Packages.sig
Signature check passed.
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/nethsecurity/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_nethsecurity
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/nethsecurity/Packages.sig
Signature check passed.
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_packages
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/packages/Packages.sig
Signature check passed.
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/nethsecurity_routing
Downloading ``https://updates.nethsecurity.nethserver.org/stable/24.10.0/packages/x86_64/routing/Packages.sig
Signature check passed.

That’s weird, everything is working fine, and you have good URLs.

To force the update, you can flash the image manually by downloading it from here: Download — NethSecurity documentation

1 Like

It seems that something has gone wrong. I cannot access the machine remotely after updating by uploading the image. I’ll have to go there in person and see what happens.

I can log in successfully to the machine’s terminal, but I can’t access it remotely, even from within the same network. Ping it doesn’t work, and both the eth0 and eth1 interfaces are up.

Smells like something swapped, try to swap eth0 and eth1 cables, this is being reported in very few cases after the update.

Oh, you beat me to it! Actually, a little while ago I tried changing the cable positions and now it works. I’ll have to reconfigure this again, because I prefer it the way it was before. Is this a bug or is it normal?