Definitive server list for patching?

After two attempts of getting the firewall rules right to allow a server to patch itself (after akamai changed their IP address!), I've deployed Sun Update Connection Proxy only to discover yet another server requires access.
Is there a definitive list? So far I have:
- 198.232.168.136 (getupdates1.sun.com)
- 198.232.168.133 (cns-services.sun.com)
- 198.232.168.137 (cns-transport.sun.com)
- 72.5.124.61 (www.sun.com)
- 198.232.168.134 (getupdates.sun.com) - discovered with SUPC
- 193.38.108.198, 193.38.108.214 (a248.e.akamai.net) - although this changes from day-to-day
Perhaps 193.38.108.0/24 for akamai is better? And 198.232.168.0/24 for Sun's servers?
Any more additions that I should be aware of? This will save me bugging the firewall admin every 5 minutes to change the rule!
Iain

Unfortunately not. Whilst the firewall does an IP lookup when the rule is created, it isn't dynamic so it very quickly becomes out of date. Looking at traffic from the server, I think the patch software keeps trying Akamai, then falls back to Sun if/when that connection times out.
Having discussed it with colleagues, we think the best solution for now is to probably create a rule that allows the patch server to connect to any server on 443/tcp. That covers any change made by Akamai, although it's not an ideal solution.
Thanks for your comments.
Iain

Similar Messages

  • Format Of LDAP Server List for Netmail

    Could anyone please explain what the format for using an ldap server for address lookups in Netmail. ie:
    servername:port/searchbase or ldap://servername:port/searchbase. I have tried a few but can't seem to get it to work. Everytime I try to add a server to this list, the Java Netmail will not allow me compose a message.. anyone have any ideas..

    Chris -
    Each entry is a comma separated list of name/value pairs in the following format: name="value". Quotation marks are not allowed in any value. The valid names and corresponding preference are:
    name the user-friendly name for the server; this is what the user sees in the NetMail Address Search tab.
    server the host name of the LDAP server. If a port is needed, use host:port.
    base the search base expression, e.g., ou=People
    searchin the list of attributes to search in, e.g., cn,givenname
    result the attribute to use as the result, defaults to mail
    filter additional search filters to be applied
    referral whether or not to follow referrals, true or false
    Only the server value is required, all others are filled in with defaults if necessary. A typical entry might be:
    name="Company Address Book", server="ourldap.xyz.com", base="dc=xyz,dc=com"
    Stephen

  • SMDIAG_WIZARD: no server listed for selected solution

    Hello,
    I am trying to set up SMD for our Enterprise Portal 6.0 on Netweaver 04. I have defined a solution which includes this system and also shows the correct server. But when I run SMDIAG_WIZARD and select this solution no server shows up in the next step. This is the first Java application I am integrating, so not sure if I missed anything.
    Thanks.

    Hi Frederic,
    thanks. The missing part was the definition of the System Component. The Server is now showing up.
    Thanks for your help,
    Ingrid

  • Is there any way I can know what are the list of patches installed on Indesign Server CS5

    Hi All,
    Is there any way I can know what are the list of patches installed on Indesign Server CS5?
    Please let me know if the there is any command to do so.
    Thanks,
    Manjunath

    Is this link any help?
    http://www.btvision.bt.com/on-demand/?cat=filmclub
    It seems to give the film club info.
    If you sort the list by "ending" date, shoul should be able to find recently added ones.
    There are some useful help pages here, for BT Broadband customers only, on my personal website.
    BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

  • Microsoft best practices for patching a Cluster server

    Good morning! I was wondering if you had any web resources (Webcasts) or whitepapers on Microsoft best practices for patching a Cluster server? I will list what I seen online; the third one was very good:
    Failover Cluster Step-by-Step Guide: Configuring a Two-Node File Server Failover Cluster
    http://technet.microsoft.com/en-us/library/cc731844(v=ws.10).aspx
    Failover Clusters in Windows Server 2008 R2
    http://technet.microsoft.com/en-us/library/ff182338(v=ws.10)
    Patching Windows Server Failover Clusters
    http://support.microsoft.com/kb/174799/i

    Hi Vincent!
    I assume this step-by-step guide can also be used if you have more then 2 nodes, as long as you make sure majority of nodes are up (and quorum disk is available).
    I just had a strange experience during maintenance of 2 nodes (node nr 7 and nr 8) in a 8 node hyper-v cluster R2 SP1 with CSV. I used SCVMM2012 to put the nodes in maintenance mode. (live migrating all resources to other nodes.) I then look in "Failover cluster
    manager" to check that the nodes had been "Paused". And yes everything was just fine. I then did windows update and restartet, no problem. But after restart I wanted to run PSP (HP's update utility) to update some more drivers,software etc. During this PSP
    update, node nr 02 suddenly failed. This node is not even a HP Blade, so I'm not sure how, but I know network NIC drivers and software where updated from PSP. So my question is:
    Does changes in "Network Connections" on nodes in "Pause" mode affect other nodes in the cluster?
    The network are listed as "Up" during Pause mode, so the only thing I could think of is that during  PSPs driver/software update, NICs on node 07 and 08 were going down and up differently somehow making Node 02 fail.
    So now during maintenance (Vendor driver/software/firmware updates, not MS Patches) I first put the node in "Pause" mode then I stop cluster service, (and change it to disabled) making sure nothing can affect the cluster.
    Anders

  • 2K8 - Best practice for setting the DNS server list on a DC/DNS server for an interface

    We have been referencing the article 
    "DNS: DNS servers on <adapter name> should include their own IP addresses on their interface lists of DNS servers"
    http://technet.microsoft.com/en-us/library/dd378900%28WS.10%29.aspx but there are some parts that are a bit confusing.  In particular is this statement
    "The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain
    controller and it points only to itself for name resolution, it can become an island and fail to replicate with other domain controllers. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller.
    The loopback address should be configured only as a secondary or tertiary DNS server on a domain controller.”
    The paragraph switches from using the term "its own IP address" to "loopback" address.  This is confusing becasuse technically they are not the same.  Loppback addresses are 127.0.0.1 through 127.255.255.255. The resolution section then
    goes on and adds the "loopback address" 127.0.0.1 to the list of DNS servers for each interface.
    In the past we always setup DCs to use their own IP address as the primary DNS server, not 127.0.0.1.  Based on my experience and reading the article I am under the impression we could use the following setup.
    Primary DNS:  Locally assigned IP of the DC (i.e. 192.168.1.5)
    Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
    Tertiary DNS:  127.0.0.1
    I guess the secondary and tertiary addresses could be swapped based on the article.  Is there a document that provides clearer guidance on how to setup the DNS server list properly on Windows 2008 R2 DC/DNS servers?  I have seen some other discussions
    that talk about the pros and cons of using another DC/DNS as the Primary.  MS should have clear guidance on this somewhere.

    Actually, my suggestion, which seems to be the mostly agreed method, is:
    Primary DNS:  Locally assigned IP of the DC (i.e. 192.168.1.5)
    Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
    Tertiary DNS:  empty
    The tertiary more than likely won't be hit, (besides it being superfluous and the list will reset back to the first one) due to the client side resolver algorithm time out process, as I mentioned earlier. Here's a full explanation on how
    it works and why:
    This article discusses:
    WINS NetBIOS, Browser Service, Disabling NetBIOS, & Direct Hosted SMB (DirectSMB).
    The DNS Client Side Resolver algorithm.
    If one DC or DNS goes down, does a client logon to another DC?
    DNS Forwarders Algorithm and multiple DNS addresses (if you've configured more than one forwarders)
    Client side resolution process chart
    http://msmvps.com/blogs/acefekay/archive/2009/11/29/dns-wins-netbios-amp-the-client-side-resolver-browser-service-disabling-netbios-direct-hosted-smb-directsmb-if-one-dc-is-down-does-a-client-
    logon-to-another-dc-and-dns-forwarders-algorithm.aspx
    DNS
    Client side resolver service
    http://technet.microsoft.com/en-us/library/cc779517.aspx 
    The DNS Client Service Does Not Revert to Using the First Server in the List in Windows XP
    http://support.microsoft.com/kb/320760
    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
    This posting is provided AS-IS with no warranties or guarantees and confers no rights.
    I agree with this proposed solution as well:
    Primary DNS:  Locally assigned IP of the DC (i.e. 192.168.1.5)
    Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
    Tertiary DNS:  empty
    One thing to note, in this configuration the Best Practice Analyzer will throw the error:
    The network adapter Local Area Connection 2 does not list the loopback IP address as a DNS server, or it is configured as the first entry.
    Even if you add the loopback address as a Tertiary DNS address the error will still appear. The only way I've seen this error eliminated is to add the loopback address as the second entry in DNS, so:
    Primary DNS:  The assigned IP of another DC (i.e. 192.168.1.6)
    Secondary DNS: 127.0.0.1
    Tertiary DNS:  empty
    I'm not comfortable not having the local DC/DNS address listed so I'm going with the solution Ace offers.
    Opinion?

  • [Answered] List of patches for Solaris 10 SPARC 64 bit!

    Hi All,
    Installation document for 10g Release 2 (10.2) for Solaris Operating System (SPARC 64-Bit) does not mention anything about patches required on Solaris 10 (there is a list for Solaris 8 and 9).
    http://download.oracle.com/docs/cd/B19306_01/install.102/b15690/pre_install.htm#sthref110
    Can I safely assume that the installation of Solaris 10 contains all the required patches in this case?
    Thanks,
    Edited by: Satish Kandi on Nov 19, 2008 10:21 AM

    Hi Satish,
    I did not have access to ORACLE metalink so could not able check the doc which you reffered. But Checked the ORACLE installation doc, I suppose that is the required patches for 8 and 9 which you have to make sure of on Solaris 10.
    Other wise wait and see for other inputs too.
    Hemanth might reply back some thing.
    - Pavan Kumar N

  • Patch List for Self-Service Human Resources (SSHR) in HRMS 11i

    Friends -
    We are planning to implement Self-Service Human Resources in HRMS 11i. I am able to find out information using metalink note : Recommended Patch List for Self-Service Human Resources (SSHR) in HRMS 11i [ID 108897.1].
    As per note : 108897.1 there are bunch of patch details i am not sure which patch i need to apply currently we are on oracle apps 11.5.10.2 with Rup5
    SQL> SELECT
    2 BUG_NUMBER, DECODE(BUG_NUMBER,9062727,'K RUP5' ,7666111,'K RUP4' ,6699770,'K RUP3' ,5337777,'K RUP2',5055050,'K RUP1',3500000,'K',3333633,'J',3140000,'I',3233333,'H', 3116666 ,'G', 2968701, 'F'
    3 ,2803988, 'E','Unknown')
    4 FROM AD_BUGS
    5 WHERE BUG_NUMBER IN ('9062727','7666111','6699770','5337777','5055050','3500000','3333633','3140000','3233333','3116666','2968701', '2803988')
    6 and rownum=1
    7 order by 1 desc
    8 ;
    BUG_NUMBER DECODE(
    5337777 K RUP2
    Please let me know which patches i need to apply for SSHR as per metalink note : 108897.1
    Regards
    VSH

    Hi,
    I agree. However, I understand that the Patches search in My Oracle Support website mentions that the RUP patch is included in the next RUP patch available.
    Please note that you need to consider also the patches in the following documents on top of RUP 5.
    Note: 1075477.1 - Known Issues on Top of Patch 9062727 11i.HR_PF.K.DELTA.5 (11i HRMS RUP 5)
    Note: 1096417.1 - Applied Patch 9062727 (11i.Hr_pf.K.Delta.5) And Left With FFP<######> Invalid Packages
    Thanks,
    Hussein

  • The definitive field order list for all formats

    WANTED: The definitive field order list for all formats, NTSC and PAL.
    I have seen several such lists, but are they trustworthy?
    This one http://www.dvxuser.com/V6/showthread.php?t=125817 looks promising, but, for instance, how can HDTV 1080/24p have a field order of upper field first? - Isn't "p" without any fields?
    Anyway, if someone has seen such a definitive list, preferrably from some "official" source, please share.
    Thanks 

    Hi kalione,
    We’re always looking for ways to make browsing BestBuy.com easier. With the recent merger of the My Best Buy website into the main BestBuy.com page, it sounds like there may have been some changes to how you can view upcoming games! My apologies if there has been an added element of difficulty here.
    The method that zztoluca has explained is actually how I generally check for pre-orders we have listed, as I like looking at them by individual platform. If you start at the main “PRODUCTS” tab at the top of the main site, choose “Video Games, Movies, & Music” and then choose the console of your choice. Once there, there should be an option on the left under the “Games” section for browsing by Pre-orders. Here is an example of pre-orders listed for Xbox One.
    I hope this helps! Keep an eye on BestBuy.com as it’s constantly changing and evolving.
    Cheers,
    Brian|Senior Social Media Specialist | Best Buy® Corporate
     Private Message

  • How come my Ipad suddenly doesn't want to connect to the wi-fi anymore?  The server stopped for a few minutes and when it came back on, my ipad lists it as available, but says it's impossible to join.

    the connexion wi-fi was working fine.  Suddenty, the server stopped for a few minutes and when it came back on, I had no trouble using the internet on my laptop, but myIpad won't connect.  The wi-fi is listed, but it says impossible to connect.  I tried turning off the ipad, but the problem is still there.

    Go through some basic troubleshooting steps.
    Settings>WiFi>Off, restart the iPad and turn WiFi on again.
    Settings>WiFi>Tap the blue arrow next to your home network name>Forget this Network, Restart the iPad and then try to join your network again.
    Settings>General>Reset>Reset Network Settings. Restart the iPad and try to join your network again.
    Finally, you can try rebooting the router. Unplug it for about 30 seconds and then plug it in again.

  • How to disable the Directory listing for the whole server or a particular a

    Please let me know how to disable the Directory listing for the whole server or a particular application.
    Thank You

    I want to disable the tab focusing( tab index) for a JTextField objectsLook through the API and find methods with the word "focus" in the method name.
    Also can u tell me about how to change the tab index orders for JTextFields."How to Use the Focus Sub System":
    http://java.sun.com/docs/books/tutorial/uiswing/misc/focus.html

  • Suggest adding weblogic server courses to approved course list for 10g OAS

    Although this is quite niche market i would suggest adding a weblogic server training course to the approved list for 10g OAS OCP.
    While not related to the OAS OCP exam it might be beneficial to experienced OAS people wishing to become familiar with weblogic for the future and as such is an sort of 'upgrade' path preparation.

    It is not uncommon for WebLogic applications to show performance issues from time-to-time.The truth of the matter is that most of your performance issues are solvable.
    Is it important to have deep WebLogic knowledge to help mitigate issues ??
    nebosh course

  • What do I do when Mail preferences will not open for me to edit server list

    When my wife tries to send mail a message says server listed doesn't work and asks if I want to edit the server list. When we attempt to do this from the message or from the tool bar, Preferences does not open. BTW It is not grayed out. WHen I log in on the same computer, I can open preferences.

    You don't say who your mail server is and what preferences are you trying to access? Just a thought, though, try going to Mail preferences, Accounts and Account Information. Is the "use only this server" box checked? Different mail servers require different settings. Gmail, for instance, requires that box to be unchecked. Good Luck
    RM

  • Patches List for Installation of Lanaguage for 11i and R12

    Kindlly let me know metalink notes ID for Patches List for Installation of Lanaguages for 11i and R12.

    Hi,
    Please refer to these docs.
    Oracle Applications NLS Release Notes, Release 11i (11.5.10.2) [ID 316804.1]
    Oracle Applications NLS Release Notes, Release 12.1 [ID 788053.1]
    Requesting Translation Synchronization Patches [ID 252422.1]
    How To Get The Guidelines To Install or Add the new NLS Language on E-Business Suite 11i or R12 ? [ID 1254325.1]
    How to resolve NLS translation issues in an Ebusiness Suite 11i and R12 environment [ID 394112.1]
    NLS Frequently Asked Questions [ID 399789.1]
    Thanks,
    Hussein

  • WebtopNaming - can not find server name for server ID

    We have a LB, and web servers in front of OpenSSO app servers in our environment.
    OpenSSO debug log CoreSystem fills up with lot of errors like these:
    ERROR: WebtopNaming.getServerFromID() can not find server name for server ID : 07
    com.iplanet.services.naming.ServerEntryNotFoundException: Cannot find server.
    Sometimes, it even complains about a server id (07 in the following trace) which doesn't even exist in the Site Id Table.
    There are no changes in the configuration. DNS is properly configured and all the servers and their connectivity are available. CoreSystem throws these errors even after a restart of opensso app servers.
    Any ideas about the root cause?
    amNaming:05/13/2011 10:22:37:009 AM PST: Thread[WebContainer : 0,5,main]
    Server Id Table -> {%protocol://%host:%port%uri/AssertionManagerServlet/AssertionManagerIF=iplanet-am-naming-samlassertionmanager-url, http://host4.company.com:8080/openSSO=04, com.iplanet.dpro.profile.agent.ProfileService=iplanet-am-naming-profile-class, %protocol://%host:%port%uri/SecurityTokenManagerServlet/SecurityTokenManagerIF=iplanet-am-naming-securitytokenmanager-url, %protocol://%host:%port%uri/authservice=iplanet-am-naming-auth-url, %protocol://%host:%port%uri/sts=sun-naming-sts-url, %protocol://%host:%port%uri/SAMLAwareServlet=iplanet-am-naming-samlawareservlet-url, http://host5.company.com:8080/openSSO=05, com.sun.identity.authentication.server.AuthXMLHandler=iplanet-am-naming-auth-class, com.sun.identity.policy.remote.PolicyRequestHandler=iplanet-am-naming-policy-class, %protocol://%host:%port%uri/loggingservice=iplanet-am-naming-logging-url, %protocol://%host:%port%uri/jaxrpc/=iplanet-am-naming-jaxrpc-url, %protocol://%host:%port%uri/FSAssertionManagerServlet/FSAssertionManagerIF=iplanet-am-naming-fsassertionmanager-url, %protocol://%host:%port%uri/identity/=sun-naming-idsvcs-rest-url, 03,05,04,02|03,01|03=iplanet-am-platform-site-id-list, %protocol://%host:%port%uri/identityservices/=sun-naming-idsvcs-jaxws-url, %protocol://%host:%port%uri/sts/mex=sun-naming-sts-mex-url, %protocol://%host:%port%uri/profileservice=iplanet-am-naming-profile-url, %protocol://%host:%port%uri/SAMLPOSTProfileServlet=iplanet-am-naming-samlpostservlet-url, 02|02,01|01,05|05,04|04=iplanet-am-platform-lb-cookie-value-list, %protocol://%host:%port%uri/SAMLSOAPReceiver=iplanet-am-naming-samlsoapreceiver-url, https://host4.company.com:8443/openSSO=01, com.sun.identity.log.service.LogService=iplanet-am-naming-logging-class, %protocol://%host:%port%uri/sessionservice=iplanet-am-naming-session-url, https://host5.company.com:8443/openSSO=02, %protocol://%host:%port%uri/policyservice=iplanet-am-naming-policy-url, iplanet-am-naming-service=serviceObjectClasses, com.iplanet.dpro.session.service.SessionRequestHandler=iplanet-am-naming-session-class, https://opensso-qa.company.com:443/openSSO=03}
    amNaming:05/13/2011 10:22:37:009 AM PST: Thread[WebContainer : 0,5,main]
    Site Id Table -> {03=03, 02=03, 01=03, 05=05, 04=04}
    amNaming:05/13/2011 10:22:37:009 AM PST: Thread[WebContainer : 0,5,main]
    Platform Servers -> [https://opensso-qa.company.com:443/openSSO, https://host5.company.com:8443/openSSO, https://host4.company.com:8443/openSSO, http://host4.company.com:8080/openSSO, http://host5.company.com:8080/openSSO]
    amNaming:05/13/2011 10:22:37:009 AM PST: Thread[WebContainer : 0,5,main]
    Platform Server IDs -> [03, 02, 01, 04, 05]
    amNaming:05/13/2011 10:22:37:010 AM PST: Thread[WebContainer : 0,5,main]
    ERROR: WebtopNaming.getServerFromID() can not find server name for server ID : 07
    com.iplanet.services.naming.ServerEntryNotFoundException: Cannot find server.
    at com.iplanet.services.naming.ServerEntryNotFoundException.<init>(ServerEntryNotFoundException.java:52)
    at com.iplanet.services.naming.WebtopNaming.getServerFromID(WebtopNaming.java:709)
    at com.iplanet.dpro.session.SessionID.setServerID(SessionID.java:380)
    at com.iplanet.dpro.session.SessionID.parseSessionString(SessionID.java:363)
    at com.iplanet.dpro.session.SessionID.getSessionServerID(SessionID.java:261)
    at com.iplanet.dpro.session.service.SessionService.isLocalSite(SessionService.java:881)
    at com.iplanet.dpro.session.Session.getSessionServiceURL(Session.java:1197)
    at com.sun.identity.authentication.UI.LoginServlet.initializeRequestContext(LoginServlet.java:153)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:578)
    at com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:459)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)

    Thank You for the response.
    Here is my site configuration in OpenSSO:
    There are 4 servers in the two opensso hosts (2 secure, 2 non secure)
    Servers:
    http://host4.company.com:8080/openSSO
    http://host5.company.com:8080/openSSO
    https://host4.company.com:8443/openSSO
    https://host5.company.com:8443/openSSO
    Only one site with secure URLs is configured
    Sites:
    site1
    Primary URL: https://opensso-qa.company.com:443/openSSO
    Assigned Servers:
    https://host4.company.com:8443/openSSO
    https://host5.company.com:8443/openSSO
    From the CoreSystem log, Server ID definitions are:
    https://host4.company.com:8443/openSSO=01
    https://host5.company.com:8443/openSSO=02
    https://opensso-qa.company.com:443/openSSO=03
    http://host4.company.com:8080/openSSO=04
    http://host5.company.com:8080/openSSO=05
    Sometimes it throws an exception with existing server IDs. But sometimes it also complains about non existing server IDs.

Maybe you are looking for