nanog mailing list archives

Re: windows update cache


From: Adrian Chadd <adrian () creative net au>
Date: Sat, 29 Sep 2007 09:47:13 +0800


On Fri, Sep 28, 2007, Seth Mattinen wrote:

One could try to transparently proxy requests to windows update over to 
the WSUS server. No idea if that'll work though. I'm no windows expert, 
nor was I trying to provide some total solution, I was just trying to 
point out it uses TCP on port 8530 and one could try to use that to 
their advantage.

Yup, transproxying windows updates access works fine.

What I'd like to see is more use of service discovery, but what happens when
someone hacks your WSUS server? Or hijacks your DNS? Or your squid box? :)
(Come on DNSSEC..)



Adrian


Current thread: