Arch Linux

nadman10

Member

From: USA

Registered: 2005-10-15

Posts: 202

Pacman won't work after Shorewall install

Today I got shorewall and dnsmasq installed and operational. However, I can no longer install packages with pacman. I get the error:

:: Retrieving packages from core...
error: failed retrieving file 'gpm-1.20.6-5-i686.pkg.tar.gz' from mirrors.kernel.org : Connection refused
error: failed retrieving file 'links-2.2-4-i686.pkg.tar.xz' from mirrors.kernel.org : Connection refused
warning: failed to retrieve some files from core
error: failed to commit transaction (Connection refused)
Errors occurred, no packages were upgraded.

No matter which mirror I use. Any ideas?

And yes, I can ping google.com and other outside addresses.

Last edited by nadman10 (2010-09-21 22:19:16)

rockin turtle

Member

From: Montana, USA

Registered: 2009-10-22

Posts: 227

Re: Pacman won't work after Shorewall install

@nadman10

I've never used shorewall, but it appears to be a firewall.

It is unlikely that the default configuration of shorewall knows anything about pacman, and thus wouldn't allow the pacman protocol though.

You could try adding the following to your /etc/pacman.conf file under [options]:

XferCommand = /usr/bin/wget --passive-ftp -c %u -O %o

This would (I believe) cause pacman to use ftp to retrieve the data files which shorewall would (most likely) allow.

Of course, if pacman uses a standard protocol (like ftp) then this wouldn't fix your problem.  In that case you would have to look through the shorewall documentation to find out how to allow the pacman mirrors to have access to your machine.

tomk

Forum Fellow

From: Ireland

Registered: 2004-07-21

Posts: 9,839

Re: Pacman won't work after Shorewall install

There is no "pacman protocol" - the protocol used depends on the selected mirror i.e. it's either http or ftp.

Apart from that, rockin turtle is correct - shorewall is blocking connections, and needs to be configured to allow them through. I'd recommend you use http mirrors only, as ftp through a firewall can be difficult.

vitok

Member

Registered: 2011-07-31

Posts: 2

Re: Pacman won't work after Shorewall install

add to /etc/shorewall/rules

ACCEPT          $FW             net             tcp             www

Last edited by vitok (2011-11-11 18:06:14)