From owner-freebsd-hubs@FreeBSD.ORG Fri Feb 20 02:15:00 2004 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4F73E16A4CE for ; Fri, 20 Feb 2004 02:15:00 -0800 (PST) Received: from postman.arcor.de (postman2.arcor-online.net [151.189.0.152]) by mx1.FreeBSD.org (Postfix) with ESMTP id BA41143D1D for ; Fri, 20 Feb 2004 02:14:59 -0800 (PST) (envelope-from eikemeier@fillmore-labs.com) Received: from fillmore.dyndns.org (port-212-202-184-227.reverse.qdsl-home.de [212.202.184.227]) (authenticated bits=0)i1KAEwf5001445 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Fri, 20 Feb 2004 11:14:58 +0100 (MET) Received: from [172.16.0.2] (helo=fillmore-labs.com) by fillmore.dyndns.org with esmtp (Exim 4.30; FreeBSD) id 1Au7gO-000Fdi-8M for hubs@FreeBSD.org; Fri, 20 Feb 2004 11:14:56 +0100 Message-ID: <4035DE20.20103@fillmore-labs.com> Date: Fri, 20 Feb 2004 11:14:56 +0100 From: Oliver Eikemeier Organization: Fillmore Labs GmbH - http://www.fillmore-labs.com/ MIME-Version: 1.0 To: hubs@FreeBSD.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit User-Agent: KMail/1.5.9 Subject: Distribution of the FreeBSD vulnerability database X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: FreeBSD Distributions Hubs: mail sup ftp List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Feb 2004 10:15:00 -0000 Dear hub maintainers, I'm working on a project that notifies system adminstrators of vulnerabilities in installed packages, it is available as port security/portaudit. I need to distribute a database with a list of vulnerable ports that is daily updated. The database is ~ 2k in size, but I expect it to grow. Currently I'm using public_distfiles of my freefall account and fetch from MASTER_SITE_LOCAL. This approach is suboptimal, because - it takes long for all mirrors to get the update - I have to refetch the whole file, since I can not simply check if an update is available I guess it would be better to distribute this file by http and have an additional url where I can just check the current version/md5/whatever, but I have absolutely no clue which load this will place on the servers. Any advice from the experts? Thanks Oliver (sorry for the repost, I seems like my first didn't come through)