Gentoo Archives: gentoo-user

From: Alan McKinnon <alan.mckinnon@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Restricting Firefox website access
Date: Fri, 09 Jan 2009 21:24:21
Message-Id: 200901092323.39850.alan.mckinnon@gmail.com
In Reply to: Re: [gentoo-user] Restricting Firefox website access by Grant
1 On Friday 09 January 2009 21:32:15 Grant wrote:
2 > >> > You could use iptables to block all traffic headed to port 80 with
3 > >> > exceptions for the domains you need.
4 > >>
5 > >> Would that cause problems with fetching packages for emerges?
6 > >
7 > > If you wget your packages using http, then yes. You could then:
8 > >
9 > > 1. Put all your mirror sites in the exception list. This can get tedious
10 > > as some ebuilds list many mirrors for sources
11 > >
12 > > or
13 > >
14 > > 2. wget using ftp
15 > >
16 > > or
17 > >
18 > > 3. set up a proxy
19 > >
20 > > The easiest is #2 by far
21 >
22 > Does portage use wget over http by default? Can I change a setting to
23 > make it use ftp?
24
25 Just give GENTOO_MIRRORS a usable ftp:// url in make.conf
26
27 There's nothing you can do about http URLs that might be in ebuilds. Those are
28 hardcoded and emerge will tell wget to use those exact URLs
29
30 --
31 alan dot mckinnon at gmail dot com