blocklist-ipsets
blocklist-ipsets copied to clipboard
Temporary failure resolving 'de.archive.ubuntu.com'
Haveing the bogons blacklist
as part of the firehol.conf
file causes temporary failure resolving error and the command sudo apt update
on ubuntu 20.04 will end up with an error. The firehol.conf
file is as follows:
version 6
# Block bogons list
ipv4 ipset create bogons hash:net
ipv4 ipset addfile bogons ipsets/bogons.netset
# blacklist them
ipv4 blacklist full ipset:bogons
# Use the following to recognise RavenCore
server_ravencore_ports="tcp/8000"
client_ravencore_ports="default"
# Use the following to recognise RavenCore SSL
server_ravencoressl_ports="tcp/8080"
client_ravencoressl_ports="default"
# Use the following to recognise tinyproxy
server_tinyproxy_ports="tcp/8888"
client_tinyproxy_ports="default"
# Use the following to avoid dhcp-client from filling the logs
server_dhcpclient_ports="udp/63"
client_dhcpclient_ports="default"
interface any internet
# Use the following to enable all available protection
protection strong
server "ftp ssh smtp dns http https pop3 imap socks syslog tinyproxy ravencore ravencoressl" accept
client all accept
On ubuntu, run: sudo apt update
and you will get this error:
Err:1 http://mirror.example.de/ubuntu/packages focal InRelease
Temporary failure resolving
.
..
...
W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/focal/InRelease Temporary failure resolving 'de.archive.ubuntu.com'
W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/focal-updates/InRelease Temporary failure resolving 'de.archive.ubuntu.com'
W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/focal-backports/InRelease Temporary failure resolving 'de.archive.ubuntu.com'
W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/focal-security/InRelease Temporary failure resolving 'security.ubuntu.com'
....
.....
The update succeeds after commenting out the first block as follows:
# Block bogons list
##ipv4 ipset create bogons hash:net
##ipv4 ipset addfile bogons ipsets/bogons.netset
# blacklist them
##ipv4 blacklist full ipset:bogons
Run service firehol restart
and firehol start
then sudo apt update
and you are all set.
Why does the bogons list block ubuntu updates?