Added by rahulmkhj@gmail.com about 5 years ago. Updated almost 5 years ago.
100%
Description
Hi,
This is regarding opensuse mirror hosted with us at Esto Internet, India.
Following are the updates:
Kindly do the needful.
Thank you.
Rahul
Hello Rahul
I have removed the rsync service from our database.
Wrt stage access, both of the addresses (103.97.46.254, 2001:df4:a300:1::ffff) for 'opensuse.mirrors.estointernet.in' have access already, see https://progress.opensuse.org/issues/44903
Hi,
The mirror is being moved to new host, please update the allowed IP
addresses to following:
IPv4: 103.123.235.250
IPv6: 2403:8940:3:1::/64
Thank you.
Rahul
Hi.
Please do the needful.
Thank you.
Rahul
rahulmkhj@gmail.com wrote:
Hi,
The mirror is being moved to new host, please update the allowed IP
addresses to following:IPv4: 103.123.235.250
IPv6: 2403:8940:3:1::/64
THe latter is a range, please specify the host address.
Yes, that is a prefix. Because the server generates a new/random IP address
from the assigned prefix (based on MAC address, I guess) for security
purposes. I believe allowing a prefix should not be an issue. Please let me
know if that really is an issue.
rahulmkhj@gmail.com wrote:
Yes, that is a prefix. Because the server generates a new/random IP address
from the assigned prefix (based on MAC address, I guess) for security
purposes.
This method is rarely if ever used with servers, they require a fixed address.
I believe allowing a prefix should not be an issue. Please let me
know if that really is an issue.
Opening our rsync server to an entire /64 prefix is not an option.
A DNS lookup reveals '2403:8940:3:1::f' as the correct address:
host opensuse.mirrors.estointernet.in
opensuse.mirrors.estointernet.in has address 103.123.235.250
opensuse.mirrors.estointernet.in has IPv6 address 2403:8940:3:1::f
I have updated the ACL according to the above.
Yes, those are correct IP addresses to reach server from outside world, but
for connection from the server going towards internet the OS uses some tmp
address. Anyways, thanks for the update, I'll change my configuration as
per that.
I think we are done here? Closing.