Are you getting 403's when downloading? Please read here first

Meta Elastic
378

Sure @carly.richmond Thank you
Awaiting for your reply!

380

@carly.richmond Is there any possibilities of blocking our [Chennai, TamilNadu, India] range of IP's?
Kindly check and let us know

381

Hi @Radhika1,

I'm following up with the team to confirm the state of the maven link you have provided. I'll keep you posted.

382

Thanks for the reply @carly.richmond ! Unfortunately still not working for me:

E: Failed to fetch https://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/InRelease  403  Forbidden [IP: 34.120.127.130 443]
E: The repository 'https://packages.elastic.co/elasticsearch/2.x/debian stable InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@ip-10-32-0-42:~# curl  http://ipinfo.io/  && echo
{
  "ip": "52.11.212.148",
  "hostname": "ec2-52-11-212-148.us-west-2.compute.amazonaws.com",
  "city": "Boardman",
  "region": "Oregon",
  "country": "US",
  "loc": "45.8399,-119.7006",
  "org": "AS16509 Amazon.com, Inc.",
  "postal": "97818",
  "timezone": "America/Los_Angeles",
  "readme": "https://ipinfo.io/missingauth"
}
383

Hi all,

I've had an update from the team that there was a 403 issue impacting some of our artifact locations. The fix has now been applied. Please check again and let us know if your issue persists.

If the issue persists please provide:

  1. The command you are running or URL of the artifact you are trying to access.
  2. The IP location you are attempting to access the artefact from in the ipinfo format presented in the root of this topic.

Hope that helps!

384

@carly.richmond Yes Thank you so much.

Now our team can able to get it

1 Like
385

Hi, can you unblock me please?
image

386

Sorry for the delay, wow it's working for us from this morning, next time I will get the IPs but we tried with multiple ways, web sites, curl and Chocolatey.

Thanks for your quick reply.

1 Like
387

Hi @cold_twilight,

There was a 403 issue yesterday that has now been resolved that is different to distinct IP blocks. Can you check and confirm if you're still having issues, and if so which artefact URL or command you are receiving the error on?

Thanks!

388

Hi @Seryozha2410,

Are you still having issues? I've checked out the ASN that your IP belongs to and it looks to be connected with a country that we cannot unblock, although your IP location is fine. Are you able to try downloading from another IP?

Hope that helps!

389

We seem to be unblocked today, thanks!

390

Hello,

It seems that our IP Address is blocked as well. Could you please unblock it? Thank you! The IP Address is 34.120.127.130.

Best Regards,
Metodi Sokolov

391

Fyi: msg": "Failed to update apt cache: E:Failed to fetch https://artifacts.elastic.co/packages/5.x/apt/dists/stable/InRelease 403 Forbidden [IP: 34.120.127.130 443], E:The repository 'https://artifacts.elastic.co/packages/5.x/apt stable InRelease' is no longer signed."}

392

Hello,

We are still getting forbidden, could we get a reply? Thanks!
Best regards

393

Hi @msokolov,

Welcome to the community! Thanks for your message. Looking at your IP and ASN info I see you're based in the US and using a Google LLC hosted IP. I've had a look at our config and I believe your ASN is already allowed under our rules.

We have seen issues with blocking on the Google CDN related to IPv6 being enabled before as covered in the further update in the root of this topic. Before I follow up with the team, can you check:

  1. If you have IPv6 enabled? If so can you disable IPv6.
  2. Are you able to install a more current version of the artefact successfully? It looks like you're trying to download an older version (5.x), which is post EOL.

If neither of the above resolve your issue please send on the precise command you are executing and a trace using the steps in this topic.

Hope that helps!

394

I have this issue with:

  • 78.47.95.45
  • 2a01:4f8:c013:37d0::/64
ipinfo 78.47.95.45
{
  "ip": "78.47.95.45",
  "city": "Falkenstein",
  "region": "Saxony",
  "country": "DE",
  "loc": "50.4779,12.3713",
  "org": "AS24940 Hetzner Online GmbH",
  "postal": "08223",
  "timezone": "Europe/Berlin",
  "readme": "https://ipinfo.io/missingauth"
}

ipinfo 2a01:4f8:c013:37d0::
{
  "ip": "2a01:4f8:c013:37d0::",
  "city": "Falkenstein",
  "region": "Saxony",
  "country": "DE",
  "loc": "50.4779,12.3713",
  "org": "AS24940 Hetzner Online GmbH",
  "postal": "08223",
  "timezone": "Europe/Berlin",
  "readme": "https://ipinfo.io/missingauth"
}

Exception:

Exception in thread "main" java.io.IOException: Server returned HTTP response code: 403 for URL: https://artifacts.elastic.co/downloads/elasticsearch-plugins/ingest-attachment/ingest-attachment-7.17.21.zip
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1998)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1599)
	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:223)
	at org.elasticsearch.plugins.cli.InstallPluginAction.downloadZip(InstallPluginAction.java:478)
	at org.elasticsearch.plugins.cli.InstallPluginAction.downloadAndValidate(InstallPluginAction.java:558)
	at org.elasticsearch.plugins.cli.InstallPluginAction.download(InstallPluginAction.java:318)
	at org.elasticsearch.plugins.cli.InstallPluginAction.execute(InstallPluginAction.java:242)
	at org.elasticsearch.plugins.cli.InstallPluginCommand.execute(InstallPluginCommand.java:88)
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:77)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)
	at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:95)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)
	at org.elasticsearch.plugins.cli.PluginCli.main(PluginCli.java:36)
	at org.elasticsearch.cli.Command.main(Command.java:77)
395

Hello,

IPv6 is enabled, however unused. Same issue without it. It seems that we used EOL version indeed, however we cannot use a newer one as the server seems blacklisted also.
I provide further information here:

403 Forbidden

Error: Forbidden

Your client does not have permission to get URL /GPG-KEY-elasticsearch from this server.

11:46:27.441371 <= Recv SSL data, 5 bytes (0x5) 0000: 17 03 03 00 22 ...." 11:46:27.441561 <= Recv SSL data, 1 bytes (0x1) 0000: 17 . 11:46:27.441723 => Send SSL data, 5 bytes (0x5) 0000: 17 03 03 00 22 ...." 11:46:27.441859 => Send SSL data, 1 bytes (0x1) 0000: 17 . 11:46:27.442016 == Info: Connection #0 to host artifacts.elastic.co left intact

Please whitelist our IP Address(34.120.127.130) as we have changed the repository to 6.x but still fails as the IP Is blacklisted.

396

Ah forgot to post, in the end the error is

Your client does not have permission to get URL /GPG-KEY-elasticsearch from this server.

397

Hello!
Please unblock ip: 5.75.247.14

{
ip: "5.75.247.14",
hostname: "static.14.247.75.5.clients.your-server.de",
city: "Falkenstein",
region: "Saxony",
country: "DE",
loc: "50.4779,12.3713",
org: "AS24940 Hetzner Online GmbH",
postal: "08223",
timezone: "Europe/Berlin"
}

I have the same error:

Failed to configure repo 'deb https://artifacts.elastic.co/packages/8.x/apt stable main': Error: HTTP 403: Forbidden reading /GPG-KEY-elasticsearch
398

Hi @msokolov,

As mentioned before, it looks like your ASN is covered under our rules. Are you still receiving the same issue downloading v8.x? v6.x is still EOL.

Can you send the --trace output as well please?