[CentOS] cr repo and firewalling

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
I find myself in a complicated situation and would like to ask the
oracle (choke!) for help. I would like to install the packages from
the continuous release repo and the yum config for this repo says

baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/

well, I definitely do not want to allow worldwide outgoing http so I
try to find the IPs

# host mirror.centos.org
mirror.centos.org has address 93.113.36.66

but! wait...

# host mirror.centos.org
mirror.centos.org has address 88.198.211.197

dns round robin is not very helpful for me doing firewall rules.
How would you solve this yum and firewall thing?
- -- 
Kind Regards, Markus Falb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlD1wuEACgkQYoWFBIJE9eXs9wCghBGc/naF7c0ozZqJIw9huzXy
fJQAn2NLrGTz9cy06dp/HIHFufWxgv9N
=m2Of
-----END PGP SIGNATURE-----