Re: [CentOS] cr repo and firewalling

2013-01-18 Thread Tilman Schmidt
Am 15.01.2013 21:58, schrieb Markus Falb: I would like to install the packages from the continuous release repo and the yum config for this repo says baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/ well, I definitely do not want to allow worldwide outgoing http so I try

Re: [CentOS] cr repo and firewalling

2013-01-18 Thread Les Mikesell
On Fri, Jan 18, 2013 at 3:23 AM, Tilman Schmidt t.schm...@phoenixsoftware.de wrote: Am 15.01.2013 21:58, schrieb Markus Falb: I would like to install the packages from the continuous release repo and the yum config for this repo says

[CentOS] cr repo and firewalling

2013-01-15 Thread Markus Falb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I find myself in a complicated situation and would like to ask the oracle (choke!) for help. I would like to install the packages from the continuous release repo and the yum config for this repo says

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread zGreenfelder
Hi, I find myself in a complicated situation and would like to ask the oracle (choke!) for help. I would like to install the packages from the continuous release repo and the yum config for this repo says baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/ well, I definitely

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Nicolas Thierry-Mieg
Markus Falb wrote: Hi, I find myself in a complicated situation and would like to ask the oracle (choke!) for help. I would like to install the packages from the continuous release repo and the yum config for this repo says baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread John R Pierce
On 1/15/2013 1:18 PM, Nicolas Thierry-Mieg wrote: pick a mirror that's close to you and trustworthy (ie stays up to date), and use that as your baseurl. or build your own inhouse mirror, and aim the BaseURL at it instead. I use a script like this... $ cat lftp.sh #!/bin/sh

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Markus Falb
On 15.1.2013 22:18, Nicolas Thierry-Mieg wrote: Markus Falb wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? pick a mirror that's close to you and trustworthy (ie stays up to date), and use that as your baseurl. you

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Markus Falb
On 15.1.2013 22:53, John R Pierce wrote: On 1/15/2013 1:18 PM, Nicolas Thierry-Mieg wrote: pick a mirror that's close to you and trustworthy (ie stays up to date), and use that as your baseurl. or build your own inhouse mirror, and aim the BaseURL at it instead. Yes, that sounds reliable

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Markus Falb
On 15.1.2013 22:10, zGreenfelder wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? - -- Kind Regards, Markus Falb I think your best bet would be either 1) take a host you're more comfortable with having http access to

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread John R Pierce
On 1/15/2013 2:07 PM, Markus Falb wrote: Yes, that sounds reliable although it takes a lot of disk space. disk is cheap. anyways, its peanuts. $ du -hs centos/{5.8,6.3} 43G centos/5.8 66G centos/6.3 unless you rent your storage from {netapps,emc}, thats nothing. it doesn't have

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Nicolas Thierry-Mieg
Markus Falb wrote: On 15.1.2013 22:18, Nicolas Thierry-Mieg wrote: Markus Falb wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? pick a mirror that's close to you and trustworthy (ie stays up to date), and use that as

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread zGreenfelder
in line editing. If I understood what you said I would rephrase it with less words like 1) set up a proxy [and filter the host: header (if you feel the need to] 2) do a local mirror 3) bypass DNS and just use a particular mirror host (some better suggestions proposed for putting the IP in

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Nicolas Thierry-Mieg
Nicolas Thierry-Mieg wrote: Markus Falb wrote: On 15.1.2013 22:18, Nicolas Thierry-Mieg wrote: Markus Falb wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? pick a mirror that's close to you and trustworthy (ie stays

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Markus Falb
On 15.1.2013 23:28, Nicolas Thierry-Mieg wrote: Markus Falb wrote: On 15.1.2013 22:18, Nicolas Thierry-Mieg wrote: Markus Falb wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? pick a mirror that's close to you and

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Johnny Hughes
On 01/15/2013 02:58 PM, Markus Falb wrote: Hi, I find myself in a complicated situation and would like to ask the oracle (choke!) for help. I would like to install the packages from the continuous release repo and the yum config for this repo says

Re: [CentOS] cr repo and firewalling

2013-01-15 Thread Nicolas Thierry-Mieg
Markus Falb wrote: On 15.1.2013 23:28, Nicolas Thierry-Mieg wrote: Markus Falb wrote: On 15.1.2013 22:18, Nicolas Thierry-Mieg wrote: Markus Falb wrote: dns round robin is not very helpful for me doing firewall rules. How would you solve this yum and firewall thing? pick a mirror that's