This forum is intended to provide straightforward answers for people trying to use DynFi Firewall Open Source firewalls.
We might also try to answer questions related to competitors firewall such as pfSense® and OPNsense® systems.
Moderator: gregober
-
DerpFox
- Posts: 5
- Joined: 29 Jan 2023, 05:35
Post
by DerpFox » 01 Apr 2023, 14:13
Hello,
When I try to update DynFi I get this message in the GUI
![2023-04-01_14-08.png](./download/file.php?id=109&sid=22027d033958c3c8059cc4a3ccf304f9)
- 2023-04-01_14-08.png (9.15 KiB) Viewed 6846 times
and in the logs I get this:
Code: Select all
***GOT REQUEST TO CHECK FOR UPDATES***
Fetching changelog information, please wait... fetch: http://packages.dynfi.com/packages/FreeBSD:13:amd64/changelog.txz: No address record
Updating DynFi-base repository catalogue...
pkg: http://packages.dynfi.com/base/FreeBSD:13:amd64/latest/meta.txz: No address record
repository DynFi-base has no meta file, using default settings
pkg: http://packages.dynfi.com/base/FreeBSD:13:amd64/latest/packagesite.pkg: No address record
pkg: http://packages.dynfi.com/base/FreeBSD:13:amd64/latest/packagesite.txz: No address record
Unable to update repository DynFi-base
Updating DynFi repository catalogue...
pkg: http://packages.dynfi.com/packages2/FreeBSD:13:amd64/meta.txz: No address record
repository DynFi has no meta file, using default settings
pkg: http://packages.dynfi.com/packages2/FreeBSD:13:amd64/packagesite.pkg: No address record
pkg: http://packages.dynfi.com/packages2/FreeBSD:13:amd64/packagesite.txz: No address record
Unable to update repository DynFi
Error updating repositories!
pkg: Repository DynFi cannot be opened. 'pkg update' required
pkg: Unknown repository: Dynfi
***DONE***
More info:
![2023-04-01_14-08.png](./download/file.php?id=109&sid=22027d033958c3c8059cc4a3ccf304f9)
- 2023-04-01_14-08.png (9.15 KiB) Viewed 6846 times
![2023-04-01_14-13.png](./download/file.php?id=111&sid=22027d033958c3c8059cc4a3ccf304f9)
- 2023-04-01_14-13.png (4.73 KiB) Viewed 6846 times
If you need anything more, I can show you with whatever you need.
-
Attachments
-
![2023-04-01_14-10.png (22.33 KiB) Viewed 6846 times 2023-04-01_14-10.png](./download/file.php?id=110&t=1&sid=22027d033958c3c8059cc4a3ccf304f9)
-
gregober
- Posts: 237
- Joined: 26 Mar 2019, 15:06
Post
by gregober » 03 Apr 2023, 11:36
Can you try to ping "packages.dynfi.com" from the CLI ?
I am suspecting a problem with DNS resolution.
-
DerpFox
- Posts: 5
- Joined: 29 Jan 2023, 05:35
Post
by DerpFox » 04 Apr 2023, 09:50
I'm not home right now where my Firewall is located. But from work I got these results :
Code: Select all
nslookup packages.dynfi.com
Serveur : xxxxxxxxxxxxxx
Address: aaa.bbb.ccc.ddd
Réponse ne faisant pas autorité :
Nom : packages.dynfi.com
Address: 188.165.99.10
Code: Select all
ping packages.dynfi.com
Envoi d’une requête 'ping' sur packages.dynfi.com [188.165.99.10] avec 32 octets de données :
Délai d’attente de la demande dépassé.
Délai d’attente de la demande dépassé.
Délai d’attente de la demande dépassé.
Délai d’attente de la demande dépassé.
Statistiques Ping pour 188.165.99.10:
Paquets : envoyés = 4, reçus = 0, perdus = 4 (perte 100%),
I also did the same from my phone connected via VPN to my DynFi firewall and got the same results. Same without VPN connected
I've also looked up on a couple DNS record lookup websites, each of them give the same IP address.
-
gregober
- Posts: 237
- Joined: 26 Mar 2019, 15:06
Post
by gregober » 04 Apr 2023, 10:42
Sorry, ping is blocked by our firewalls.
If DNS is working, you should try to check if you can reach port 80 which is used for package install:
Code: Select all
# nc -vz 188.165.99.10 443
Connection to 188.165.99.10 port 80 [tcp/http] succeeded!
-
DerpFox
- Posts: 5
- Joined: 29 Jan 2023, 05:35
Post
by DerpFox » 04 Apr 2023, 11:35
I connected via SSH to the firewall effectively there is a some DNS misshap.
So I digged a bit further, I had the "Do not use local DNS for this device" checked. But it seem the firewall didn't use the "outside" DNS listed to poll for DNS records.
Thank for your valuable help. And sorry for the stupid question and time lost.
-
gregober
- Posts: 237
- Joined: 26 Mar 2019, 15:06
Post
by gregober » 04 Apr 2023, 12:38
Well that's why forums are there
Happy to help… just spread the word about our distro. Thx !