[CentOS] cr repo and firewalling

[Nicolas Thierry-Mieg]

Markus Falb wrote:
>
> Hi,
> I find myself in a complicated situation and would like to ask the
> oracle (choke!) for help. I would like to install the packages from
> the continuous release repo and the yum config for this repo says
>
> baseurl=http://mirror.centos.org/centos/$releasever/cr/$basearch/
>
> well, I definitely do not want to allow worldwide outgoing http so I
> try to find the IPs
>
> # host mirror.centos.org
> mirror.centos.org has address 93.113.36.66
>
> but! wait...
>
> # host mirror.centos.org
> mirror.centos.org has address 88.198.211.197
>
> dns round robin is not very helpful for me doing firewall rules.
> How would you solve this yum and firewall thing?

pick a mirror that's close to you and trustworthy (ie stays up to date), 
and use that as your baseurl.