windows update cache

Adrian Chadd adrian at
Sat Sep 29 01:47:13 UTC 2007

On Fri, Sep 28, 2007, Seth Mattinen wrote:

> One could try to transparently proxy requests to windows update over to 
> the WSUS server. No idea if that'll work though. I'm no windows expert, 
> nor was I trying to provide some total solution, I was just trying to 
> point out it uses TCP on port 8530 and one could try to use that to 
> their advantage.

Yup, transproxying windows updates access works fine.

What I'd like to see is more use of service discovery, but what happens when
someone hacks your WSUS server? Or hijacks your DNS? Or your squid box? :)
(Come on DNSSEC..)


More information about the NANOG mailing list