Re: Whitelist security.debian.org

2015-10-22 Thread Pascal Hambourg
Brian a écrit : > On Thu 22 Oct 2015 at 20:51:03 +0200, Pascal Hambourg wrote: > >> Brian a écrit : >>> >>> deb ftp://149.20.20.6/debian-security jessie/updates main > >> - It does not work with HTTP, so you have to use FTP which is harder to >> manage by firewalls. > > I could not get http to

Re: Whitelist security.debian.org

2015-10-22 Thread Brian
On Thu 22 Oct 2015 at 20:51:03 +0200, Pascal Hambourg wrote: > Brian a écrit : > > On Thu 22 Oct 2015 at 11:44:41 +0200, Sven Hartge wrote: > > > >> Pascal Hambourg wrote: > >>> Greencopper a écrit : > >> > Most likely OpenDNS has some load balancing of their own perhaps > forwarding

Re: Whitelist security.debian.org

2015-10-22 Thread Pascal Hambourg
Brian a écrit : > On Thu 22 Oct 2015 at 11:44:41 +0200, Sven Hartge wrote: > >> Pascal Hambourg wrote: >>> Greencopper a écrit : >> Most likely OpenDNS has some load balancing of their own perhaps forwarding the request to different internal servers. Perhaps the only solutio

Re: Whitelist security.debian.org

2015-10-22 Thread Brian
On Thu 22 Oct 2015 at 11:44:41 +0200, Sven Hartge wrote: > Pascal Hambourg wrote: > > Greencopper a écrit : > > >> Most likely OpenDNS has some load balancing of their own perhaps > >> forwarding the request to different internal servers. > >> > >> Perhaps the only solution is to fix a specifi

Re: Whitelist security.debian.org

2015-10-22 Thread Sven Hartge
Pascal Hambourg wrote: > Greencopper a écrit : >> Most likely OpenDNS has some load balancing of their own perhaps >> forwarding the request to different internal servers. >> >> Perhaps the only solution is to fix a specific IP address for >> security.debian.org in my local DNS server and then

Re: Whitelist security.debian.org

2015-10-22 Thread Pascal Hambourg
Greencopper a écrit : > > Most likely OpenDNS has some load balancing of their own perhaps forwarding > the request to different internal servers. > > Perhaps the only solution is to fix a specific IP address for > security.debian.org in my local DNS server and then only use that! Or don't use O

Re: Whitelist security.debian.org

2015-10-21 Thread Greencopper
This is actually getting very frustrating! Doing a nslookup specifying the DNS server provides different results when done minutes apart! $ nslookup security.debian.org 208.67.222.222 Server:208.67.222.222 Address:208.67.222.222#53 Non-authoritative answer: Name:security.debian.o

Re: Whitelist security.debian.org

2015-10-21 Thread Greencopper
>> Doing a nslookup on the firewall and on the kids boxes provides the same IP >> addresses for security.debian.org: >> >> # nslookup security.debian.org >> Non-authoritative answer: >> Name: security.debian.org >> Address: 212.211.132.32 >> Name: security.debian.org >> Address: 195.20.242.89 >

Re: Whitelist security.debian.org

2015-10-21 Thread Mario Castelán Castro
There seems to be some geographically El 21/10/15 a las 13:34, David Wright escribió: Quoting Greencopper (greencopperm...@gmail.com): I have a firewall with some whitelisted addresses for the kids, one of them is security.debian.org. The firewall flushes the tables with fresh IP addresses usi

Re: Whitelist security.debian.org

2015-10-21 Thread Pascal Hambourg
Greencopper a écrit : > > Doing a nslookup on the firewall and on the kids boxes provides the same IP > addresses for security.debian.org: > > # nslookup security.debian.org > Non-authoritative answer: > Name: security.debian.org > Address: 212.211.132.32 > Name: security.debian.org > Address

Re: Whitelist security.debian.org

2015-10-21 Thread Lars Noodén
On 10/21/2015 09:47 PM, Mario Castelán Castro wrote: >... > There seems to be a geographical dependent load balancing DNS server for > security.debian.org; maybe that is the source of the OP's problem. From > Mexico I get this: > ... I, too, get different answers depending on the country I check f

Re: Whitelist security.debian.org

2015-10-21 Thread Glenn English
On Oct 21, 2015, at 12:34 PM, David Wright wrote: >> # nslookup security.debian.org >> Non-authoritative answer: >> Name: security.debian.org >> Address: 212.211.132.32 >> Name: security.debian.org >> Address: 195.20.242.89 >> Name: security.debian.org >> Address: 212.211.132.250 > > My w

Re: Whitelist security.debian.org

2015-10-21 Thread David Wright
Quoting Greencopper (greencopperm...@gmail.com): > I have a firewall with some whitelisted addresses for the kids, one of them is > security.debian.org. > > The firewall flushes the tables with fresh IP addresses using a scripted > cronjob with a nslookup that pulls the addresses and automatically

Whitelist security.debian.org

2015-10-21 Thread Greencopper
I have a firewall with some whitelisted addresses for the kids, one of them is security.debian.org. The firewall flushes the tables with fresh IP addresses using a scripted cronjob with a nslookup that pulls the addresses and automatically adds them to the whitelist. Doing a nslookup on the firew