[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Whitelist security.debian.org



There seems to be some geographically

El 21/10/15 a las 13:34, David Wright escribió:
Quoting Greencopper (greencoppermine@gmail.com):
I have a firewall with some whitelisted addresses for the kids, one of them is
security.debian.org.

The firewall flushes the tables with fresh IP addresses using a scripted
cronjob with a nslookup that pulls the addresses and automatically adds them to
the whitelist.

Doing a nslookup on the firewall and on the kids boxes provides the same IP
addresses for security.debian.org:

# nslookup security.debian.org
Non-authoritative answer:
Name:   security.debian.org
Address: 212.211.132.32
Name:   security.debian.org
Address: 195.20.242.89
Name:   security.debian.org
Address: 212.211.132.250

My whois shows those addresses are in Germany.
security.debian.org is in the US.

There seems to be a geographical dependent load balancing DNS server for security.debian.org; maybe that is the source of the OP's problem. From Mexico I get this:

$ host security.debian.org
security.debian.org has address 128.61.240.73
security.debian.org has address 149.20.20.6
security.debian.org has address 128.31.0.63
security.debian.org has IPv6 address 2001:4f8:8:36::6
security.debian.org has IPv6 address 2610:148:1f10:3::73
security.debian.org mail is handled by 10 mailly.debian.org.
security.debian.org mail is handled by 10 muffat.debian.org.

But in a recent thread, another user mentioned a different set of IP addresses; see <https://lists.debian.org/debian-user/2015/10/msg01070.html> and <https://lists.debian.org/debian-user/2015/10/msg01069.html>.

Regards.


Reply to: