Allow Connections to Linux Update Servers
-
Hi, I have a linux server that is only allowed to make connections in ma LAN.
But I also want that automatic upgrades work.
The host uses this two update Servers:
ftp.de.debian.org
security.debian.orgI assume that the IP Adresses of this servers change.
I would like to have a possibility to allow connections to certain urls ?
1.) I know that I can create an alias to a URL that contains a list of IP Addresses
=> Do you know if there are "Update Server IPv4 Lists" for typical linux distros ?2.) I also checked if PFBlockerNG has a list like "IPv4 Update Servers for Debian/OpenSuse etv.."
I did not find a list like this.3.) Because I have different linux distros I dont want to use a local repo mirror ( that would be my last option , to create a host that acts as a update server and can talk to the internet and mirrors linux repositories )
4.) If there is no public List containing the linux Update Servers:
Is there a way to allow a Domain in PfSense ? -
@sfsdfsdfsdf said in Allow Connections to Linux Update Servers:
Is there a way to allow a Domain in PfSense ?
you can create an alias with the fqdn you want to allow, those are updated like every 5 minutes.. You can run into a problem sometimes when/if the clients and this list are not in sync and client tries to talk to a different iP then what is in the alias - more likely if the client doesn't use pfsense as its dns, etc.
But normally that should work.
While the IPs might change around a bit, ie round robin sort of thing.. They most likely don't really change and you could point to just 1 or a few of those IPs.. You could create your host override records in pfsense for specific fqdn you use to get your updates, so clients would always go to one of those IPs and you can allow those.
