[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: first A record of security.debian.org extremely slow



also sprach Michal Sabala <saahbs@yahoo.com> [2006.02.20.2328 +0100]:
> host -t a security.debian.org
> security.debian.org has address 82.94.249.158   <----- slow

Please see 
  http://lists.debian.org/debian-security/2006/02/msg00041.html

> Editing /etc/hosts to contain:
> 128.101.80.133 security.debian.org
> 
> solves the problem. Our network is working properly BTW.

Please do not do this. A better fix is to REJECT 82.94.249.158/32
with iptables:

  iptables -I OUTPUT -d 82.94.249.158/32 -j REJECT

(amend as needed). This leaves a round-robin of two servers rather
than everyone banging on 128.101.80.133 (or the other one).

> Can somebody please take a look at 82.94.249.158 host/net please, please,
> please?

FWIW, this is not the list for such requests.
debian-admin@lists.debian.org are responsible for that.

> I'm considering starting to mirror security. I don't see a reason
> why security repository shouldn't be mirrored, while in reality
> tampering with packages on _any_ repository has the same outcome.

This has been discussed at length. Basically it's less to do with
tampering than with timeliness.

> Mike (not on the mailing list, please Cc).

Please set your Mail-Followup-Header correctly.

Cheers,

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <madduck@debian.org>
: :'  :    proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
 
"glaube heißt nicht wissen wollen, was wahr ist."
                                                 - friedrich nietzsche

Attachment: signature.asc
Description: Digital signature (GPG/PGP)


Reply to: