Nexus OSS showing 403 Forbidden for an specific machine, while other machine working correctly

Sonatype Nexus Repository
1

My recently configured Nexus Repository server that I am planning to build as a local proxy for chocolatey packages, was working nicely. However, suddenly, my client machine is getting 403 forbidden error while trying to pull packages from the server.

Same machine successfully installed packages from the nexus server and I can see those packages are caches in the local nexus repository. But it is now longer working. tried with other two machine to pull and install packages and it is working. It looks like nexus server is only rejecting that machine!

Tried to check the request log in nexus-data/log/request.log, if anything relevant I can find in there.
only got this lines of log which I am not sure if they are relevant:
10.36.86.14 - admin [23/Nov/2022:01:13:15 +0000] “POST /service/extdirect/poll/rapture_State_get HTTP/1.1” 200 2224 77 12 “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36” [qtp1575101663-403]
10.36.86.14 - admin [23/Nov/2022:01:18:15 +0000] “POST /service/extdirect/poll/rapture_State_get HTTP/1.1” 200 2224 77 10 “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36” [qtp1575101663-403]
10.36.86.14 - admin [23/Nov/2022:01:19:15 +0000] “POST /service/extdirect/poll/rapture_State_get HTTP/1.1” 200 2224 77 18 “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36” [qtp1575101663-403]
10.36.86.14 - admin [23/Nov/2022:01:20:15 +0000] “POST /service/extdirect/poll/rapture_State_get HTTP/1.1” 200 2224 77 11 “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36” [qtp1575101663-403]

Does anyone have any clue, what can go wrong?
PS: I can curl my nexus url from that machine. so proxy is not probably an issue.

2

A 403 would either indicate a permissions error or maybe that you aren’t hitting the machine you think you are. Those request.log lines are irrelevant as they are only for internal UI requests, but the request.log should show HTTP/1.1" 403 lines if the Nexus Repository server is returning the 403. You should also look at your nexus.log as that may provide a stacktrace if something is wrong. Remember if you are using the UI that you will only get the last x KB of the log file. You can download the log file with the download button, ask for a larger portion of the log, or click the little refresh icon in the Nexus Repository menu to refresh the log for the latest part.

3

Thanks for your reply.
One thing I think is important here is, the message is saying,

The remote server returned an error: (403) Forbidden.

Does it mean the external server that we are mirroring is blocking Nexus?
Nexus just showing that message what is is getting from the remote server?

We are mirroring community.chocolatey.org here for or ci/cd.

4

Nexus can simply return the status from the remote, but if one machine is working and the other is not I find that unlikely.