[SOLVED] update failed 403 Forbidden

abeck007

New Member
Oct 14, 2024
5
1
3
i can't update and still appear the message from cli, anyone can help me to solve this my problems.

Repository list:
deb http://ftp.debian.org/debian bookworm main contrib

deb http://ftp.debian.org/debian bookworm-updates main contrib

# Proxmox VE pve-no-subscription repository provided by proxmox.com,
# NOT recommended for production use
deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription

# security updates
deb http://security.debian.org/debian-security bookworm-security main contrib

deb http://download.proxmox.com/debian/ceph-quincy bookworm no-subscription

Error message when try yo update:

Starting system upgrade: apt-get dist-upgrade
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
proxmox-kernel-6.8.12-2-pve-signed
The following packages will be upgraded:
base-files bash bind9-dnsutils bind9-host bind9-libs distro-info-data gnutls-bin
ifupdown2 initramfs-tools initramfs-tools-core krb5-locales less libarchive13
libc-bin libc-l10n libc6 libexpat1 libfreetype6 libglib2.0-0 libgnutls-dane0
libgnutls30 libgnutlsxx30 libgssapi-krb5-2 libgstreamer-plugins-base1.0-0
libk5crypto3 libkrb5-3 libkrb5support0 libnss-systemd libnvpair3linux liboath0
libopeniscsiusr libpam-systemd libproxmox-acme-perl libproxmox-acme-plugins
libproxmox-rs-perl libpve-cluster-api-perl libpve-cluster-perl libpve-common-perl
libpve-guest-common-perl libpve-http-server-perl libpve-notify-perl
libpve-rs-perl libpve-storage-perl libpython3.11-minimal libpython3.11-stdlib
libqt5core5a libqt5dbus5 libqt5network5 libseccomp2 libssl3 libsystemd-shared
libsystemd0 libudev1 libuutil3linux libzfs4linux libzpool5linux locales nano
novnc-pve open-iscsi openssh-client openssh-server openssh-sftp-server openssl
postfix proxmox-backup-client proxmox-backup-file-restore proxmox-firewall
proxmox-kernel-6.8 proxmox-offline-mirror-docs proxmox-offline-mirror-helper
proxmox-termproxy proxmox-widget-toolkit pve-cluster pve-container pve-docs
pve-esxi-import-tools pve-firewall pve-firmware pve-ha-manager pve-i18n
pve-manager pve-qemu-kvm python3-idna python3.11 python3.11-minimal qemu-server
spl ssh systemd systemd-boot systemd-boot-efi systemd-sysv udev zfs-initramfs
zfs-zed zfsutils-linux
97 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 7499 kB/343 MB of archives.
After this operation, 607 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Err:1 http://ftp.debian.org/debian bookworm/main amd64 libnss-systemd amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:2 http://ftp.debian.org/debian bookworm/main amd64 systemd-boot amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:3 http://ftp.debian.org/debian bookworm/main amd64 systemd-boot-efi amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:4 http://ftp.debian.org/debian bookworm/main amd64 libpam-systemd amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:5 http://ftp.debian.org/debian bookworm/main amd64 systemd amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:6 http://ftp.debian.org/debian bookworm/main amd64 libsystemd-shared amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:7 http://ftp.debian.org/debian bookworm/main amd64 systemd-sysv amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:8 http://ftp.debian.org/debian bookworm/main amd64 libsystemd0 amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:9 http://ftp.debian.org/debian bookworm/main amd64 udev amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
Err:10 http://ftp.debian.org/debian bookworm/main amd64 libudev1 amd64 252.30-1~deb12u2
403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/systemd-boot_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/systemd-boot-efi_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/libpam-systemd_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/systemd_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/libsystemd-shared_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/systemd-sysv_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/libsystemd0_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/udev_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Failed to fetch http://ftp.debian.org/debian/pool/main/s/systemd/libudev1_252.30-1~deb12u2_amd64.deb 403 Forbidden [IP: 151.101.2.132 80]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

System not fully up to date (found 98 new packages)
 
Looks like ftp.debian.org is explicitly disallowing you. It could also be a (corporate) firewall or proxy somewhere along the route between you and Debian. All of this is outside the control of Proxmox. Are you using a corporate/business system or renting a VPS or a shared IP address? Does apt update work fine?
If it is not deliberately blocked from your end, you could try another Debian mirror: https://www.debian.org/mirror/list .
 
Looks like ftp.debian.org is explicitly disallowing you. It could also be a (corporate) firewall or proxy somewhere along the route between you and Debian. All of this is outside the control of Proxmox. Are you using a corporate/business system or renting a VPS or a shared IP address? Does apt update work fine?
If it is not deliberately blocked from your end, you could try another Debian mirror: https://www.debian.org/mirror/list .
this message for apt update:

root@juragan:~# apt update
Hit:1 http://ftp.debian.org/debian bookworm InRelease
Get:2 http://ftp.debian.org/debian bookworm-updates InRelease [55.4 kB]
Hit:3 http://security.debian.org/debian-security bookworm-security InRelease
Hit:4 http://download.proxmox.com/debian/pve bookworm InRelease
Get:5 http://download.proxmox.com/debian/ceph-quincy bookworm InRelease [3,470 B]
Get:6 http://download.proxmox.com/debian/ceph-quincy bookworm/no-subscription amd64 Packages [41.5 kB]
Fetched 100 kB in 3s (40.1 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
97 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@juragan:~#
 
Hi, did you run these commands in order #1 apt update and then #2 apt-get upgrade or apt-get dist-upgrade ? (apologize if this is silly question, but was not mentioned)

also what is output of "curl http://ftp.debian.org/debian" in cli.
thankyou for you're respond, maybe you can see the message error after repository list and i used the command with apt-get dist-upgrade,

curl http://ftp.debian.org/debian:
root@juragan:~# curl http://ftp.debian.org/debian
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="http://ftp.debian.org/debian/">here</a>.</p>
<hr>
<address>Apache Server at ftp.debian.org Port 80</address>
</body></html>
root@juragan:~#
 
Last edited:
thankyou for you're respond, maybe you can see the message error after repository list and i used the command with apt-get dist-upgrade,

curl http://ftp.debian.org/debian:
root@juragan:~# curl http://ftp.debian.org/debian
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="http://ftp.debian.org/debian/">here</a>.</p>
<hr>
<address>Apache Server at ftp.debian.org Port 80</address>
</body></html>
root@juragan:~#

may I ask you to run

curl -O http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb

or, this will be binary output.

curl --output - http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb
 
root@juragan:~# curl -O http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 5362 100 5362 0 0 42879 0 --:--:-- --:--:-- --:--:-- 43241
root@juragan:~# curl --output - http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb
<!-- IE friendly error message walkround.
if error message from server is less than
512 bytes IE v5+ will use its own error
message instead of the one returned by
server. -->






<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE">
<meta name="viewport" content="width=device-width, initial-scale=1">
<style type="text/css">
body {
height: 100%;
font-family: Helvetica, Arial, sans-serif;
color: #6a6a6a;
margin: 0;
display: flex;
align-items: center;
justify-content: center;
}
input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea {
color: #262626;
vertical-align: baseline;
margin: .2em;
border-style: solid;
border-width: 1px;
border-color: #a9a9a9;
background-color: #fff;
box-sizing: border-box;
padding: 2px .5em;
appearance: none;
border-radius: 0;
}
input:focus {
border-color: #646464;
box-shadow: 0 0 1px 0 #a2a2a2;
outline: 0;
}
button {
padding: .5em 1em;
border: 1px solid;
border-radius: 3px;
min-width: 6em;
font-weight: 400;
font-size: .8em;
cursor: pointer;
}
button.primary {
color: #fff;
background-color: rgb(47, 113, 178);
border-color: rgb(34, 103, 173);
}
.message-container {
height: 500px;
width: 600px;
padding: 0;
margin: 10px;
}
.logo {
background: url(https://globalurl.fortinet.net:8010/XX/YY/ZZ/CI/MGPGHGPGPFGHDDPFGGHGFHBGCHEGPFBGAHAH) no-repeat left center;
height: 267px;
object-fit: contain;
}
table {
background-color: #fff;
border-spacing: 0;
margin: 1em;
}
table > tbody > tr > td:first-of-type:not([colspan]) {
white-space: nowrap;
color: rgba(0,0,0,.5);
}
table > tbody > tr > td:first-of-type {
vertical-align: top;
}
table > tbody > tr > td {
padding: .3em .3em;
}
.field {
display: table-row;
}
.field > :first-child {
display: table-cell;
width: 20%;
}
.field.single > :first-child {
display: inline;
}
.field > :not(:first-child) {
width: auto;
max-width: 100%;
display: inline-flex;
align-items: baseline;
virtical-align: top;
box-sizing: border-box;
margin: .3em;
}
.field > :not(:first-child) > input {
width: 230px;
}
.form-footer {
display: inline-flex;
justify-content: flex-start;
}
.form-footer > * {
margin: 1em;
}
.text-scrollable {
overflow: auto;
height: 150px;
border: 1px solid rgb(200, 200, 200);
padding: 5px;
font-size: 1em;
}
.text-centered {
text-align: center;
}
.text-container {
margin: 1em 1.5em;
}
.flex-container {
display: flex;
}
.flex-container.column {
flex-direction: column;
}
</style>
<title>Web Application Firewall</title>
</head>
<body><div class="message-container">
<div class="logo"></div>
<h1>Web Application Firewall</h1>
<p>This transfer is blocked by a Web Application Firewall.</p>
<table><tbody>
<tr>
<td colspan="2">This transfer is blocked.</td>
</tr>
<tr>
<td>URL</td>
<td>http://ftp.debian.org/debian/pool/main/s/systemd/libnss-systemd_252.30-1~deb12u2_amd64.deb</td>
</tr>
<tr>
<td>Event ID</td>
<td>90300017</td>
</tr>
<tr>
<td>Event Type</td>
<td>signature</td>
</tr>
</tbody></table>
</div></body>
</html>

root@juragan:~#
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!