Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Nov 2004 07:40:52 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        Dick Davies <rasputnik@hellooperator.net>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: How do you "make install" without direct internet access?
Message-ID:  <20041124154052.GB11795@xor.obsecurity.org>
In-Reply-To: <20041124110446.GD2355@lb.tenfour>
References:  <200411232158.53865.4711@chello.at> <20041123212208.81596.qmail@web53407.mail.yahoo.com> <20041123212853.GA16215@polands.org> <20041124110446.GD2355@lb.tenfour>

next in thread | previous in thread | raw e-mail | index | archive | help

--rJwd6BRFiFCcLxzm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Nov 24, 2004 at 11:04:46AM +0000, Dick Davies wrote:
> * Doug Poland <doug@polands.org> [1129 21:29]:
> > On Tue, Nov 23, 2004 at 01:22:07PM -0800, Ralph wrote:
>=20
> > > actually, since I was in csh, the setenv FTP_PROXY
> > > my.internal.proxy:80 worked like a charm, except that,
> > > for some reason, fetch refuses to work without
> > > internet DNS resolution.  As with our environment, no
> > > internal hosts have external DNS resolution - how do
> > > you solve that?
> > >=20
> > If you have ssh access out through the firewall, you can tunnel DNS (and
> > http/ftp) requests through a *well-connected* Unix host. =20
>=20
> Well, yeah, but then you might as well not bother with a proxy...
>=20
> That sounds like a bug to me - I guess most people use fetch with proxies
> so the proxy will cache the distfiles rather than to allow isolated machi=
nes
> to get on the network, which might explain why it's not been spotted befo=
re?

No, most people who have proxies that allow them to fetch from the
internet have DNS servers that let them resolve the internet - that's
a very weird setup you have there, and not very useful, as you have
discovered.

Kris

--rJwd6BRFiFCcLxzm
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBpKuEWry0BWjoQKURAg28AKCKyKW0byTLuAJEhPoucjgrg0+mZgCgyf7V
QO/os8tMBqFDFtYmuZd0Q7A=
=RLJ3
-----END PGP SIGNATURE-----

--rJwd6BRFiFCcLxzm--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041124154052.GB11795>