Solved FreeBSD update, pkg audit server

Do we have a list with all/some IP's where a FreeBSD server needs to connect while using pkg audit and freebsd-update?
Is there a way to get notified if they change?
I need them for a firewall ACL
 
The url is
Code:
pkg -vv | grep "http:"
But the IP-address is I think based on location.
Something like the following can reveal the IP-addresses,
Code:
host pkg.freebsd.org
 
I know we have update.freebsd.org, update1.freebsd.org... update5.freebsd.org for downloading the updates.
For the pkg servers I'm not too worried since we have our own, I'm looking for the servers where pkg audit is contacting, like vuxml.freebsd.org.
 
pkg-audit(8):
Code:
ENVIRONMENT
     The following environment variables affect the execution of pkg audit.
     See pkg.conf(5) for further description.

     PKG_DBDIR

     VULNXML_SITE
Code:
% grep VULNXML_SITE /usr/local/etc/pkg.conf
#VULNXML_SITE = "http://vuxml.freebsd.org/freebsd/vuln.xml.xz";
 
If anyone is interested it looks the following IP's cover the servers for freebsd-update and pkg audit
  • 63.140.118.125
  • 96.47.72.77
  • 163.237.247.16
  • 204.15.11.69
  • 2610:1c1:1:606c::50:2
  • 2001:4978:1000::2319:16
  • 2620:11c:5001:1099:1337::117
 
host vuxml.freebsd.org
Code:
vuxml.freebsd.org is an alias for vuxml.geo.freebsd.org.
vuxml.geo.freebsd.org has address 139.178.72.205
vuxml.geo.freebsd.org has address 213.138.116.80
vuxml.geo.freebsd.org has IPv6 address 2604:1380:2000:9501::50:3
vuxml.geo.freebsd.org has IPv6 address 2001:41c8:112:8300::50:5
 
host vuxml.freebsd.org
Code:
vuxml.freebsd.org is an alias for vuxml.geo.freebsd.org.
vuxml.geo.freebsd.org has address 139.178.72.205
vuxml.geo.freebsd.org has address 213.138.116.80
vuxml.geo.freebsd.org has IPv6 address 2604:1380:2000:9501::50:3
vuxml.geo.freebsd.org has IPv6 address 2001:41c8:112:8300::50:5
Some new IP's here, may I ask where did you check?
 
Back
Top