NethServer Version: 7.7
Module: baseline
Fresh installed a couple of days ago. Update and upgrade worked fine till this morning.
yum update
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile
Could not retrieve mirrorlist http://mirrorlist.nethserver.org/?release=7&repo=ce-base&arch=x86_64&nsrelease=7.7.1908 error was
12: Timeout on http://mirrorlist.nethserver.org/?release=7&repo=ce-base&arch=x86_64&nsrelease=7.7.1908: (28, ‘Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds’)
PING packages.nethserver.org (159.89.233.254) 56(84) bytes of data.
64 bytes from packages.nethserver.org (159.89.233.254): icmp_seq=1 ttl=52 time=105 ms
If I ask “mirrorlist.nethserver.org/?release=7&repo=ce-base&arch=x86_64&nsrelease=7.7.1908 ” to my browser it gives me a mirrorlist but if I wget it from terminal i have
[1] 6023
[2] 6024
[3] 6025
[2]- Done repo=ce-base
[root@box01 ~]# --2020-02-19 10:07:42-- http://mirrorlist.nethserver.org/?release=7
Resolving mirrorlist.nethserver.org (mirrorlist.nethserver.org )… 159.89.233.254
Connecting to mirrorlist.nethserver.org (mirrorlist.nethserver.org )|159.89.233.254|:80… connected.
HTTP request sent, awaiting response… 403 Forbidden
2020-02-19 10:07:42 ERROR 403: Forbidden.
I’m not experienced with rpm based distro, so please, could someone help me? What’s wrong?
Thanks in advance.
pike
(Michael Kicks)
February 19, 2020, 10:44am
2
Try with
yum update nethserver-subscription
then
yum update
Here you can find mirror status
http://mirror-status.nethserver.org/
Thank you but:
yum update nethserver-subscription
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile
Could not retrieve mirrorlist http://mirrorlist.nethserver.org/?release=7&repo=ce-base&arch=x86_64&nsrelease=7.7.1908 error was
12: Timeout on http://mirrorlist.nethserver.org/?release=7&repo=ce-base&arch=x86_64&nsrelease=7.7.1908: (28, ‘Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds’)
dnutan
(Marc)
February 19, 2020, 12:34pm
4
Some things you could try:
Restarting router/gateway.
Try to update using:
yum --disableplugin=fastestmirror update
Is there a proxy?
pike
(Michael Kicks)
February 19, 2020, 12:37pm
5
Server or Gateway installation?
It seams something related to firewall. If I “shorewall clean” update works … There is no rules but standard rules and only Fail2Ban and IDS touches firewall rules …
pike
(Michael Kicks)
February 20, 2020, 5:00pm
7
Thanks for not answering
Anyway: did you enable IDS/Suricata? Did you customized the rules?
NethServer Version: 7.4.1708
Module: Suricata IPS
Hi Community,
I found an interesting behaviour in suricata. If I block “Policy” rule category, yum is blocked. Yum-cron is affected too. In evebox I see:
ET POLICY GNU/Linux YUM User-Agent Outbound likely related to package management
Yum update does not work:
[root@nethserver markus]# yum update
Geladene Plugins: changelog, fastestmirror, nethserver_events, priorities
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arc…
Gosh! Pike! Please, forgive me … I’m so sorry. Yes, I installed suricata, activate all rules but levaed unchanged.
pike
(Michael Kicks)
February 20, 2020, 8:25pm
9
So maybe you can revert the selection (is quite a huge work to manage all of them) or change from block to warning… at least for some.
I do not have some “stock” suricata/IDP/IDS configuration to check… maybe you should take a look into docs?
https://docs.nethserver.org/en/v7/suricata.html
Yes, this is the way … this vm is a playground so I’ll do with no hurry.
Thank you again.