No subject

(CDN), so to solve the issue the way you mention you would need to know
every possible IP address that Speedera uses currently for HP (even those
seldom used, e.g. during maintenance or outage), and also every IP address
Speedera might possibly use in the future as they grow or change their CDN.
Also, of course, HP could at any point change to Akamai or some other CDN,
or internal hosting, changing all the IP addresses.

You need to use a stateful inspection firewall that creates these
holes/conduits/whateveryouwannacallem dynamically, or "punt" and use a
proxy.


Pete.

"AnyBody43" <anybody43 at hotmail.com> wrote in message news:
<3adc58e4.0406171022.61118ff5 at posting.google.com>...
> Hi,
> 
> I need to configure a firewall to pass traffic from our internal 
> network to certain internet host (for example to allow ftp to
> ftp.hp.com) but many do diabolical load sharing/
> redundancy schemes and I get different A records returned every time
> I do a lookup.
> 
> So taking the case of ftp.hp.com, is there a way for the average
> punter to get a definitive list of the IP addresses currently
> in use by ftp.hp.com.
> 
> So far I have 
> 
> 66.98.244.52   
> 
> 161.114.22.105
> 161.114.22.111
> 
> 192.6.165.119 
> 
> 192.6.234.8
> 192.6.234.9
> 192.6.234.10
> 
> 192.151.52.187
> 192.151.53.86
> 
> Using nslookup against various name servers throught the world.
> 
> I do 
> nslookup
> set type=A   #default anyway?
> ftp.hp.com
> 
> 
> I hope that this is within the coverage of this group.
> 
> Thanks in advance.
> 
>