How do you "make install" without direct internet access?

Kris Kennaway kris at obsecurity.org
Wed Nov 24 07:36:38 PST 2004


On Wed, Nov 24, 2004 at 11:04:46AM +0000, Dick Davies wrote:
> * Doug Poland <doug at polands.org> [1129 21:29]:
> > On Tue, Nov 23, 2004 at 01:22:07PM -0800, Ralph wrote:
> 
> > > actually, since I was in csh, the setenv FTP_PROXY
> > > my.internal.proxy:80 worked like a charm, except that,
> > > for some reason, fetch refuses to work without
> > > internet DNS resolution.  As with our environment, no
> > > internal hosts have external DNS resolution - how do
> > > you solve that?
> > > 
> > If you have ssh access out through the firewall, you can tunnel DNS (and
> > http/ftp) requests through a *well-connected* Unix host.  
> 
> Well, yeah, but then you might as well not bother with a proxy...
> 
> That sounds like a bug to me - I guess most people use fetch with proxies
> so the proxy will cache the distfiles rather than to allow isolated machines
> to get on the network, which might explain why it's not been spotted before?

No, most people who have proxies that allow them to fetch from the
internet have DNS servers that let them resolve the internet - that's
a very weird setup you have there, and not very useful, as you have
discovered.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20041124/798b44c9/attachment.bin


More information about the freebsd-questions mailing list