Re: [gentoo-security] Using a gentoo box to cache windows updates & mac updates

[Ben Anderson <ben@ormond.unimelb.edu.au>]

Squid doesn't work properly to cache the updates without hacking it 
(unless MS have made some squid friendly changes in version 5 -- I'm not 
holding my breath)...

My rudimentary understanding is the updates send unique queries, 
including per-machine unique data as part of the request which prevents 
most of the data being cached, even if the updates data is identical.

Refer to:  http://www.glob.com.au/windowsupdate_cache/ for more info.

Microsoft SUS is probably the most reliable automated solution I'm aware 
of (if you have control of the machines you are trying to update).

Good luck!
Ben.


Ochal Christophe wrote:
> Ben Koren schreef:
>> I don't have a script on hand to show you as an example, but I had a
>> small script for doing the windows updates. Basically, I went through
>> and downloaded all of the updates manually (the kb****** executables
>> from MS). Then I threw them all in a a folder on a flash drive and had a
>> small script execute them one by one - so for each client's machine I
>> would stick in my flash drive and run the update script. Obviously, new
>> KB's are bound to come out, so I usually ran Windows Update after that,
>> but it still saved a load on bandwidht. I don't have a solution for the
>> Mac updates. Hope this helps!
> 
> That's one possibility, but rather clumsy, and i'd have to rely on my 
> collegue's to help keep the local repository on the media up to date, 
> knowing some of my collegue's, i don't see that happen ;)
> 
> Squid sofar seems the best route to follow
-- 
gentoo-security@gentoo.org mailing list