Re: How to best whitelist CDN deb.debian.org?

From	Andy Smith <andy@strugglers.net>
Newsgroups	linux.debian.user
Subject	Re: How to best whitelist CDN deb.debian.org?
Date	2022-01-19 15:50 +0100
Message-ID	<DHkrE-5eF-3@gated-at.bofh.it> (permalink)
References	<DHdzP-1an-1@gated-at.bofh.it> <DHk8i-585-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Jan 19, 2022 at 02:20:08PM +0000, Andy Smith wrote:
> If you have a secure network that must not be able to connect out to
> arbitrary web sites, I think you probably should be running a local
> proxy or Debian mirror outside of that network, then allowing your
> secure network to use that and that alone.

I forgot to add: a good option might be apt-cacher-ng which is
packaged in Debian.

You can list the sites that are allowed e.g. deb.debian.org and then
you'd set it as a proxy on the hosts in your secure network. They'd
only be able to download stuff from http://deb.debian.org/… and
you'd get caching in there as a bonus. It would not be possible to
use it to contact any other site (by URL).

You can probably do a similar thing with other more general web
proxies like squid.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

How to best whitelist CDN deb.debian.org? Andreas Ames <andreas.0815.qwertz@gmail.com> - 2022-01-19 08:30 +0100
  Re: How to best whitelist CDN deb.debian.org? Tim Woodall <debianuser@woodall.me.uk> - 2022-01-19 10:20 +0100
  Re: How to best whitelist CDN deb.debian.org? Andy Smith <andy@strugglers.net> - 2022-01-19 15:30 +0100
    Re: How to best whitelist CDN deb.debian.org? Tim Woodall <debianuser@woodall.me.uk> - 2022-01-19 15:40 +0100
    Re: How to best whitelist CDN deb.debian.org? Andy Smith <andy@strugglers.net> - 2022-01-19 15:50 +0100

csiph-web