Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #159649

Re: Whitelist security.debian.org

Show all headers | View raw

Brian a écrit :
> On Thu 22 Oct 2015 at 11:44:41 +0200, Sven Hartge wrote:
> 
>> Pascal Hambourg <pascal@plouf.fr.eu.org> wrote:
>>> Greencopper a écrit :
>>  
>>>> Most likely OpenDNS has some load balancing of their own perhaps
>>>> forwarding the request to different internal servers.
>>>>
>>>> Perhaps the only solution is to fix a specific IP address for
>>>> security.debian.org in my local DNS server and then only use that!
>>>
>>> Or don't use OpenDNS servers.
>>
>> Or don't try to build firewall rules based on DNS lookups.
> 
> Or amend sources.list to not require DNS. 149.20.20.6 is schein; use
> villa if preferred.
> 
>   deb ftp://149.20.20.6/debian-security jessie/updates main

I don't second that suggestion because it has several drawbacks.
- It cancels the redundancy provided by security.debian.org.
- It does not work with HTTP, so you have to use FTP which is harder to
manage by firewalls.
- If one day this one address does not serve as a Debian security mirror
any more, you're stuck.
- Changing a mirror forces APT to reload all the package list at the
next update. This can be annoying with a low speed link.

I was serious when suggesting not tu use OpenDNS. Why use it if you have
your own local recursive DNS cache ?

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Whitelist security.debian.org Greencopper <greencoppermine@gmail.com> - 2015-10-22 03:30 +0200
  Re: Whitelist security.debian.org Greencopper <greencoppermine@gmail.com> - 2015-10-22 03:50 +0200
    Re: Whitelist security.debian.org Pascal Hambourg <pascal@plouf.fr.eu.org> - 2015-10-22 09:40 +0200
      Re: Whitelist security.debian.org Sven Hartge <sven@svenhartge.de> - 2015-10-22 11:50 +0200
        Re: Whitelist security.debian.org Brian <ad44@cityscape.co.uk> - 2015-10-22 12:10 +0200
          Re: Whitelist security.debian.org Pascal Hambourg <pascal@plouf.fr.eu.org> - 2015-10-22 21:10 +0200
            Re: Whitelist security.debian.org Brian <ad44@cityscape.co.uk> - 2015-10-22 22:00 +0200
              Re: Whitelist security.debian.org Pascal Hambourg <pascal@plouf.fr.eu.org> - 2015-10-23 00:00 +0200

csiph-web