Nilfred Posted February 26, 2005 Share Posted February 26, 2005 I was wondering if someone already did this. Any clue may help me.If not I'll do the best I can. This is the idea:When you first intall any Symantec product it may need many liveupdate connections to get updated, so imagine you reformat your disk every day, same files are dowloaded again and again, or in a enterprise environment many PCs gets the same files from the unique Internet connection avaliable.Symantec products are configurable to use other servers than symantec ones.I have:Apache httpd 2.0.53mod_perl 2.0 RC1mod_proxy (maybe useless)mod_diskcacheThen when a liveuptate request to http://mylocalserver/liveuptate is issued:Test if the file requested is in the cache.Test if a newer file in http://liveupdate.symantecliveupdate.comServe the file and get a copy in the diskThis should be easy, maybe some experienced webmaster can tell me what shoul I put in httpd.conf Alias /liveupdate "E:/Liveupdate"<Directory "E:/Liveupdate"> Options Indexes MultiViews AllowOverride None Order allow,deny Allow from all</Directory> Link to comment Share on other sites More sharing options...
KAndle Posted March 23, 2005 Share Posted March 23, 2005 You may want to do it that way but LiveUpdate files can be downloaded from a share. Get the LiveUpdate Administration Utility. You may have a need for using a web server but it is simpler to do this through a share. First you have to overwrite a .dll on each pc and add a config file to each pc that tells liveupdate where to point. There are readmes with the utility. Hope that helps. Link to comment Share on other sites More sharing options...
Nilfred Posted March 23, 2005 Author Share Posted March 23, 2005 I already aware of Liveupdate Administration Utility, but if you use that a bit you'll discover that it does not download all updates, so Symantec products still download new updates when not conected to the network share, and even re-download some updates.The other adverse effect is the download of unneeded files, because LAU does not know which files really you need and dowload all. Link to comment Share on other sites More sharing options...
KAndle Posted March 23, 2005 Share Posted March 23, 2005 I have to download around 200 megs through the LUA to get all of my needed updates. I haven't had the problem you spoke of. I am running LUA with the Corporate Edition 8 and haven't noticed any "extra" updates. Dunno maybe I just haven't checked recently... Link to comment Share on other sites More sharing options...
KAndle Posted March 23, 2005 Share Posted March 23, 2005 How do you plan on updating then anyway? With a downloaded .exe files? What liveupdate file would you look for? How do you plan on replictating the detect functions for different verisons of the AV, LiveUpdate, other products & whatnot? Just curious, I would like to use a better way that doesn't redownload updates on the server as well. Symantec told me for a network with 100 users to just connect to the internet and stagger the download times. They told me LUA is meant for larger networks... but I have used it with no problems for almost 2 years now. Link to comment Share on other sites More sharing options...
Nilfred Posted March 23, 2005 Author Share Posted March 23, 2005 Glossary:LU=LiveUpdateAS=Apache httpd serverLUA=LAU=LiveUpdate Administration UtilityThe trick is simple:LU is instructed via configuration files to connect to http://mylocalserver/liveuptate/ to get updates User launch LU LU connects to the AS I has control on LU request a file If the file isn't on the AS, AS request the file to http://liveupdate.symantecliveupdate.com/ and download locally to AS If the file is on the AS, AS check the file against http://liveupdate.symantecliveupdate.com/ and download locally to AS if It's newer AS send requested file to LUSome illiterate to http request may think point 6 is worthless, this is done via a "Conditional Get" http standard which in turn return 304 unmodified status code.For those wondering how to get updates from other places, here is an example to get updates from CD-ROM source:Settings.Hosts.LiveUpdateHOSTS\0\ACCESS=D:\Av\LiveUpdateHOSTS\0\ACCESS2=D:\Av\LiveUpdateHOSTS\0\IS_SYMANTEC=NOHOSTS\0\NAME=Buscando actualizaciones en unidad de CD-ROM D:...HOSTS\0\LOGIN=nologinrequiredHOSTS\0\PASSWORD=nopasswordHOSTS\0\SUBNET=0.0.0.0HOSTS\0\SUBNETMASK=0.0.0.0HOSTS\0\TYPE=LANHOSTS\1\ACCESS=E:\Av\LiveUpdateHOSTS\1\ACCESS2=E:\Av\LiveUpdateHOSTS\1\IS_SYMANTEC=NOHOSTS\1\NAME=Buscando actualizaciones en unidad de CD-ROM E:...HOSTS\1\LOGIN=nologinrequiredHOSTS\1\PASSWORD=nopasswordHOSTS\1\SUBNET=0.0.0.0HOSTS\1\SUBNETMASK=0.0.0.0HOSTS\1\TYPE=LANHOSTS\2\ACCESS=liveupdate.symantecliveupdate.comHOSTS\2\ACCESS2=http://liveupdate.symantecliveupdate.comHOSTS\2\IS_SYMANTEC:ENC=N%9-U,&[>@MHOSTS\2\LOGIN:ENC=YBR#A%5\(CIHOSTS\2\NAME=liveupdate.symantecliveupdate.comHOSTS\2\PASSWORD:ENC=YBR#A%5\(CIHOSTS\2\SUBNET=0.0.0.0HOSTS\2\SUBNETMASK=0.0.0.0HOSTS\2\TYPE=HTTPHOSTS\3\ACCESS=liveupdate.symantec.comHOSTS\3\ACCESS2=http://liveupdate.symantec.comHOSTS\3\IS_SYMANTEC:ENC=N%9-U,&[>@MHOSTS\3\LOGIN:ENC=YBR#A%5\(CIHOSTS\3\NAME=liveupdate.symantec.comHOSTS\3\PASSWORD:ENC=YBR#A%5\(CIHOSTS\3\SUBNET=0.0.0.0HOSTS\3\SUBNETMASK=0.0.0.0HOSTS\3\TYPE=HTTPHOSTS\4\ACCESS=update.symantec.com/opt/content/onrampHOSTS\4\ACCESS2=ftp://update.symantec.com/opt/content/onrampHOSTS\4\IS_SYMANTEC:ENC=N%9-U,&[>@MHOSTS\4\LOGIN:ENC=V!0QDU7."^$C(%+!24M?+AHOSTS\4\NAME=update.symantec.comHOSTS\4\PASSWORD:ENC=L"`';1^I=[DC(%+!24M?+AHOSTS\4\SUBNET=0.0.0.0HOSTS\4\SUBNETMASK=0.0.0.0HOSTS\4\TYPE=FTPHOSTS\NUM_HOSTS=5Settings.Merge.LiveUpdatePREFERENCES\CORPORATE_MODE=YESPREFERENCES\ALL TRANSPORTS AVAILABLE=YESCopy these files to:<Program Files Path>\Symantec\LiveUpdate\When LU runs, these files are deleted after merged to Settings.LiveUpdateTo test if LUA is doing its job well, shut down LUA server or remove the share, then supposedly LU will not get any new update... But you may see new downloads or redownloads as I get. Link to comment Share on other sites More sharing options...
KAndle Posted March 24, 2005 Share Posted March 24, 2005 I can just switch the config file to go back out to the Internet out but I haven't had a need in a while. On my laptop I just download the exe updates when I need them. I just did a direct LiveUpdate for the first time in at least 5 months and saw nothing but a definition file update. I didn't err on the conservative side when selecting the programs to get downloads for. Plus when the share is down if the config file isn't switched updates stop. No redownloading. No manual LiveUpdate. What updates are not and redownloading??? Is this a known problem? Do you have a link on this? Sorry to be a pain but I just want to make sure now that other users configured differently than me might have problems. Firewall users & whatnot... This place has a site license & a bunch of laptops. Link to comment Share on other sites More sharing options...
Nilfred Posted March 24, 2005 Author Share Posted March 24, 2005 Your questions are far beyond the scope of this topic.I only need help configuring my Apache server like this:LoadModule proxy_module modules/mod_proxy.soLoadModule cache_module modules/mod_cache.so<IfModule mod_cache.c> LoadModule disk_cache_module modules/mod_disk_cache.so <IfModule mod_disk_cache.c> CacheRoot c:/cacheroot CacheSize 204800 CacheEnable disk /liveupdate/ CacheDirLevels 2 CacheDirLength 3 </IfModule> </IfModule>ProxyRequests Off<Proxy *> Order Deny,Allow Deny from all Allow from 192.168.0</Proxy><Location /liveupdate/> ProxyPass http://liveupdate.symantecliveupdate.com/ ProxyPassReverse http://liveupdate.symantecliveupdate.com/</Location>But still need some advice.A pure perl implementation should be greatly appreciated. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now