회원K몇달전부터 IDC의 모든장비에서 yum update가 안되고 있습니다.
오류 메시지는 아래와 같습니다.
dns 오류인가 해서, /etc/resolv.conf도 바꿔보고
/etc/yum.repos.d/CentOS-Base.repo의 baseurl 등도 바꿔봤는데
Openration too slow는 동일 합니다.
어떤 이유인지 원인을 몰라서 질문 드립니다.
===
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=extras&infra=stock error was
12: Timeout on http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=extras&infra=stock: (28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30 seconds')
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock error was
12: Timeout on http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock: (28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30 seconds')
* epel: mirror01.idc.hinet.net
* extras: ftp.daumkakao.com
* remi-safe: mirror.innosol.asia
* updates: ftp.daumkakao.com
http://ftp.daum.net/centos/6/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://ftp.daum.net/centos/6/os/x86_64/repodata/repomd.xml: (28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30 seconds')
Trying other mirror.
===
OUT 80번 포트 오픈 여부 테스트
# curl -iv http://ftp.daum.net
* About to connect() to ftp.daum.net port 80 (#0)
* Trying 113.29.189.165...
* Connected to ftp.daum.net (113.29.189.165) port 80 (#0)
curl -iv http://ftp.daum.net
* About to connect() to ftp.daum.net port 80 (#0)
* Trying 113.29.189.165... connected
* Connected to ftp.daum.net (113.29.189.165) port 80 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.21 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: ftp.daum.net
> Accept: */*
>
< HTTP/1.1 302 Found
HTTP/1.1 302 Found
< Date: Thu, 25 May 2017 06:37:44 GMT
Date: Thu, 25 May 2017 06:37:44 GMT
< Server: TS5K
Server: TS5K
< Location: http://ftp.daumkakao.com/
Location: http://ftp.daumkakao.com/
< Cache-Control: max-age=3600
Cache-Control: max-age=3600
< Expires: Thu, 25 May 2017 07:37:44 GMT
Expires: Thu, 25 May 2017 07:37:44 GMT
< Content-Length: 209
Content-Length: 209
< Content-Type: text/html; charset=iso-8859-1
Content-Type: text/html; charset=iso-8859-1
< Age: 5
Age: 5
< Connection: keep-alive
Connection: keep-alive
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="http://ftp.daumkakao.com/">here</a>.</p>
</body></html>
* Connection #0 to host ftp.daum.net left intact
* Closing connection #0
curl -iv 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
* About to connect() to mirrorlist.centos.org port 80 (#0)
* Trying 212.69.166.138... connected
* Connected to mirrorlist.centos.org (212.69.166.138) port 80 (#0)
> GET /?release=6&arch=x86_64&repo=updates&infra=stock HTTP/1.1
...
Server: PasteWSGIServer/0.5 Python/2.7.5
...
http://ftp.kaist.ac.kr/CentOS/6.9/updates/x86_64/
http://ftp.daumkakao.com/centos/6.9/updates/x86_64/
...
# curl -iv 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
* About to connect() to mirrorlist.centos.org port 80 (#0)
* Trying 85.236.43.108... connected
* Connected to mirrorlist.centos.org (85.236.43.108) port 80 (#0)
> GET /?release=6&arch=x86_64&repo=updates&infra=stock HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.21 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: mirrorlist.centos.org
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Thu, 25 May 2017 07:08:59 GMT
Date: Thu, 25 May 2017 07:08:59 GMT
< Server: PasteWSGIServer/0.5 Python/2.7.5
Server: PasteWSGIServer/0.5 Python/2.7.5
< Content-Length: 569
Content-Length: 569
< Content-Type: text/plain; charset=UTF-8
Content-Type: text/plain; charset=UTF-8
<
http://ftp.kaist.ac.kr/CentOS/6.9/updates/x86_64/
http://ftp.daumkakao.com/centos/6.9/updates/x86_64/
http://centos.mirror.cdnetworks.com/6.9/updates/x86_64/
http://ftp.neowiz.com/centos/6.9/updates/x86_64/
http://mirror.navercorp.com/centos/6.9/updates/x86_64/
http://data.nicehosting.co.kr/os/CentOS/6.9/updates/x86_64/
http://mirror.oasis.onnetcorp.com/centos/6.9/updates/x86_64/
http://ftp.jaist.ac.jp/pub/Linux/CentOS/6.9/updates/x86_64/
http://ftp.iij.ad.jp/pub/linux/centos/6.9/updates/x86_64/
http://ftp.yz.yamagata-u.ac.jp/pub/linux/centos/6.9/updates/x86_64/
* Connection #0 to host mirrorlist.centos.org left intact
8.8.8.8 핑가나요 이부분먼저 체크하는게 좋습니다.
ping 잘 나가고 있구요.
하고 한번 해보시죠?
저희는 7.2 인데,,,daumkakao 가 걸리는 경우가 좀 드물던데...
에스원 관제서 시큐아이 UTM 차단 했다고 합니다.
털썩.
왜??? yum을 차단??? -..-..
차단 풀었습니다.
같은 주소라도 User-Agent 등 에 따라 차단했나 보네요. ^^
풀었다는데 뭐가 또 문제인지.
UTM 관제 센터에 아래 2개 실행 결과를 알려주고, UserAgent 에서 'urlgrabber' 나 'yum' 단어 필터링을 삭제해해달라고 하면 되겠네요.
# curl -iv --user-agent 'IE' 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
-> 잘 열림
# curl -iv --user-agent 'urlgrabber/3.9.1 yum/3.2.29' 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
-> 멈춰버림
patch를 patch라 부르지 못하던 슬픔이 해결 됬습니다.
위 댓글 중
완료가 된것인지 잘 모르겠습니다
mirror.centos.org에 telnet, ftp, http와 같은 기본 agent만 허용하고
yum에 필요한 urlgrabber 등의 기본 agent를 모두 차단하고 있었던 것 입니다.
해결 방법은 UTM 차단 로그를 보고 리스트를 수정했던 것 입니다.
===
# curl -iv --user-agent 'IE' 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
-> 잘 열림
# curl -iv --user-agent 'urlgrabber/3.9.1 yum/3.2.29' 'http://mirrorlist.centos.org/?release=6&arch=x86_64&repo=updates&infra=stock'
-> 멈춰버림
담에 유사 증상시 유용하겠네요