RHEL/OEL/Centos 7 ⇒ Ошибки в работе yum

[Roadder]

Доброго времени суток!
Столкнулся с интересной проблемой, а именно:
Есть dns-сервер на Centos 7, находящийся в DMZ за статическим NATом. Пинги проходят, DNS работает, 53, 80 и 443 порты на firewalld открыты. Всё замечательно, кроме одного - не работает YUM!

Код: Выделить всё

yum update
Loaded plugins: fastestmirror
Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock error was
14: curl#56 - "Recv failure: Connection reset by peer"


 One of the configured repositories failed (Unknown),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=<repoid> ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable <repoid>
        or
            subscription-manager repos --disable=<repoid>

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true

Cannot find a valid baseurl for repo: base/7/x86_64

Насколько я понимаю yum работает на 80 порту.

Код: Выделить всё

tcpdump -i eno1 -vvn port 80
tcpdump: listening on eno1, link-type EN10MB (Ethernet), capture size 65535 bytes
d

09:39:19.642696 IP (tos 0x0, ttl 64, id 26783, offset 0, flags [DF], proto TCP (6), length 60)
    192.168.16.10.47536 > 85.236.43.108.http: Flags [S], cksum 0x5239 (incorrect -> 0xcd8d), seq 2230863821, win 29200, options [mss 1460,sackOK,TS val 4140882 ecr 0,nop,wscale 7], length 0
09:39:19.709790 IP (tos 0x0, ttl 255, id 0, offset 0, flags [DF], proto TCP (6), length 48)
    85.236.43.108.http > 192.168.16.10.47536: Flags [S.], cksum 0x4ddb (correct), seq 643941440, ack 2230863822, win 29200, options [mss 1380,nop,nop,sackOK], length 0
09:39:19.709836 IP (tos 0x0, ttl 64, id 26784, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.16.10.47536 > 85.236.43.108.http: Flags [.], cksum 0x5225 (incorrect -> 0x7a4f), seq 1, ack 1, win 29200, length 0
09:39:19.709965 IP (tos 0x0, ttl 64, id 26785, offset 0, flags [DF], proto TCP (6), length 181)
    192.168.16.10.47536 > 85.236.43.108.http: Flags [P.], cksum 0x52b2 (incorrect -> 0xe70f), seq 1:142, ack 1, win 29200, length 141
09:39:19.710105 IP (tos 0x0, ttl 255, id 30922, offset 0, flags [DF], proto TCP (6), length 40)
    85.236.43.108.http > 192.168.16.10.47536: Flags [.], cksum 0x7a4f (correct), seq 1, ack 142, win 29059, length 0
09:39:19.710123 IP (tos 0x0, ttl 255, id 14525, offset 0, flags [DF], proto TCP (6), length 40)
    85.236.43.108.http > 192.168.16.10.47536: Flags [R], cksum 0x7a5b (correct), seq 643941441, win 29059, length 0
^C
6 packets captured
6 packets received by filter
0 packets dropped by kernel

Может кто-нибудь уже сталкивался с подобной проблемой?