Mirrolist for pfblockerng

Support for security such as Firewalls and securing linux
Post Reply
User avatar
Hagbarth
Posts: 2
Joined: 2020/03/29 08:39:29

Mirrolist for pfblockerng

Post by Hagbarth » 2020/03/29 09:09:09

Hi all,

I am running a CentOS 8 Notebook behind a PFSense with a Squid proxy. Everthing works fine until now, but I need a Mirror list for Updating the CentOS. Until now I cannot find a list to download a Mirror list for pfblockng the I can whitelist the update Mirror. I created some rules and aliasesfrom https://www.centos.org/download/mirrors/ but it seems the system wants to connect always to another mirror. Any suggestions where can I find a Mirror list?

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Mirrolist for pfblockerng

Post by TrevorH » 2020/03/29 09:35:05

You cannot. There is no complete list and never will be as the mirror network is not controlled by CentOS and the people that run mirrors are free to change the ip addresses of their servers whenever they want. In any case, connections are made (mostly) on port 80 and I really doubt if you want to completely control what web sites your users and servers can connect to to the point where you can only see things on the internet that have been whitelisted.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

User avatar
Hagbarth
Posts: 2
Joined: 2020/03/29 08:39:29

Re: Mirrolist for pfblockerng

Post by Hagbarth » 2020/03/29 20:25:50

Thanks for the reply. But where are the mirrors stored in the the system they want to connect to? I thought in /etc but it seems, here not all mirrorr seems to be listet. Anyway: Is there a method where I can download the updates via the proxy? Which file I have to edit? Sorry but the search didn't help in this case

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Mirrolist for pfblockerng

Post by TrevorH » 2020/03/29 20:32:30

If you're set up to use mirrorlist= in the repo file then it asks that for a list of the urls to use and the mirrorlist server returns a list for it to use. If you want to fix to a particular server then you need to comment the mirrorlist= line and uncomment the baseurl= line and point to a specific mirror that will always be used.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply