MSFN Forums > Liveupdate Http Server Setup

Full Version: Liveupdate Http Server Setup

MSFN Forums > Coding, Scripting and Servers > Web Development (HTML, Java, PHP, ASP, XML, etc.)

Nilfred

Feb 26 2005, 04:47 PM

I was wondering if someone already did this. Any clue may help me.
If not I'll do the best I can. This is the idea:

When you first intall any Symantec product it may need many liveupdate connections to get updated, so imagine you reformat your disk every day, same files are dowloaded again and again, or in a enterprise environment many PCs gets the same files from the unique Internet connection avaliable.

Symantec products are configurable to use other servers than symantec ones.

I have:
Apache httpd 2.0.53
mod_perl 2.0 RC1
mod_proxy (maybe useless)
mod_diskcache

Then when a liveuptate request to http://mylocalserver/liveuptate is issued:
Test if the file requested is in the cache.
Test if a newer file in http://liveupdate.symantecliveupdate.com
Serve the file and get a copy in the disk

This should be easy, maybe some experienced webmaster can tell me what shoul I put in httpd.conf

CODE

Alias /liveupdate "E:/Liveupdate"

<Directory "E:/Liveupdate">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

KAndle

Mar 22 2005, 11:23 PM

You may want to do it that way but LiveUpdate files can be downloaded from a share. Get the LiveUpdate Administration Utility. You may have a need for using a web server but it is simpler to do this through a share. First you have to overwrite a .dll on each pc and add a config file to each pc that tells liveupdate where to point. There are readmes with the utility. Hope that helps.

Nilfred

Mar 23 2005, 12:15 PM

I already aware of Liveupdate Administration Utility, but if you use that a bit you'll discover that it does not download all updates, so Symantec products still download new updates when not conected to the network share, and even re-download some updates.
The other adverse effect is the download of unneeded files, because LAU does not know which files really you need and dowload all.

KAndle

Mar 23 2005, 12:48 PM

I have to download around 200 megs through the LUA to get all of my needed updates. I haven't had the problem you spoke of. I am running LUA with the Corporate Edition 8 and haven't noticed any "extra" updates. Dunno maybe I just haven't checked recently...

KAndle

Mar 23 2005, 01:13 PM

How do you plan on updating then anyway? With a downloaded .exe files? What liveupdate file would you look for? How do you plan on replictating the detect functions for different verisons of the AV, LiveUpdate, other products & whatnot? Just curious, I would like to use a better way that doesn't redownload updates on the server as well. Symantec told me for a network with 100 users to just connect to the internet and stagger the download times. They told me LUA is meant for larger networks... but I have used it with no problems for almost 2 years now.

Nilfred

Mar 23 2005, 04:21 PM

Glossary:
LU=LiveUpdate
AS=Apache httpd server
LUA=LAU=LiveUpdate Administration Utility

The trick is simple:

LU is instructed via configuration files to connect to http://mylocalserver/liveuptate/ to get updates
User launch LU
LU connects to the AS I has control on
LU request a file
If the file isn't on the AS, AS request the file to http://liveupdate.symantecliveupdate.com/ and download locally to AS
If the file is on the AS, AS check the file against http://liveupdate.symantecliveupdate.com/ and download locally to AS if It's newer
AS send requested file to LU

Some illiterate to http request may think point 6 is worthless, this is done via a "Conditional Get" http standard which in turn return 304 unmodified status code.

For those wondering how to get updates from other places, here is an example to get updates from CD-ROM source:
Settings.Hosts.LiveUpdate

CODE

HOSTS\0\ACCESS=D:\Av\LiveUpdate
HOSTS\0\ACCESS2=D:\Av\LiveUpdate
HOSTS\0\IS_SYMANTEC=NO
HOSTS\0\NAME=Buscando actualizaciones en unidad de CD-ROM D:...
HOSTS\0\LOGIN=nologinrequired
HOSTS\0\PASSWORD=nopassword
HOSTS\0\SUBNET=0.0.0.0
HOSTS\0\SUBNETMASK=0.0.0.0
HOSTS\0\TYPE=LAN
HOSTS\1\ACCESS=E:\Av\LiveUpdate
HOSTS\1\ACCESS2=E:\Av\LiveUpdate
HOSTS\1\IS_SYMANTEC=NO
HOSTS\1\NAME=Buscando actualizaciones en unidad de CD-ROM E:...
HOSTS\1\LOGIN=nologinrequired
HOSTS\1\PASSWORD=nopassword
HOSTS\1\SUBNET=0.0.0.0
HOSTS\1\SUBNETMASK=0.0.0.0
HOSTS\1\TYPE=LAN
HOSTS\2\ACCESS=liveupdate.symantecliveupdate.com
HOSTS\2\ACCESS2=http://liveupdate.symantecliveupdate.com
HOSTS\2\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\2\LOGIN:ENC=YBR#A%5\(CI
HOSTS\2\NAME=liveupdate.symantecliveupdate.com
HOSTS\2\PASSWORD:ENC=YBR#A%5\(CI
HOSTS\2\SUBNET=0.0.0.0
HOSTS\2\SUBNETMASK=0.0.0.0
HOSTS\2\TYPE=HTTP
HOSTS\3\ACCESS=liveupdate.symantec.com
HOSTS\3\ACCESS2=http://liveupdate.symantec.com
HOSTS\3\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\3\LOGIN:ENC=YBR#A%5\(CI
HOSTS\3\NAME=liveupdate.symantec.com
HOSTS\3\PASSWORD:ENC=YBR#A%5\(CI
HOSTS\3\SUBNET=0.0.0.0
HOSTS\3\SUBNETMASK=0.0.0.0
HOSTS\3\TYPE=HTTP
HOSTS\4\ACCESS=update.symantec.com/opt/content/onramp
HOSTS\4\ACCESS2=ftp://update.symantec.com/opt/content/onramp
HOSTS\4\IS_SYMANTEC:ENC=N%9-U,&[>@M
HOSTS\4\LOGIN:ENC=V!0QDU7."^$C(%+!24M?+A
HOSTS\4\NAME=update.symantec.com
HOSTS\4\PASSWORD:ENC=L"`';1^I=[DC(%+!24M?+A
HOSTS\4\SUBNET=0.0.0.0
HOSTS\4\SUBNETMASK=0.0.0.0
HOSTS\4\TYPE=FTP
HOSTS\NUM_HOSTS=5

Settings.Merge.LiveUpdate

CODE

PREFERENCES\CORPORATE_MODE=YES
PREFERENCES\ALL TRANSPORTS AVAILABLE=YES

Copy these files to:

CODE

<Program Files Path>\Symantec\LiveUpdate\

When LU runs, these files are deleted after merged to Settings.LiveUpdate

To test if LUA is doing its job well, shut down LUA server or remove the share, then supposedly LU will not get any new update... But you may see new downloads or redownloads as I get.

KAndle

Mar 23 2005, 07:26 PM

I can just switch the config file to go back out to the Internet out but I haven't had a need in a while. On my laptop I just download the exe updates when I need them. I just did a direct LiveUpdate for the first time in at least 5 months and saw nothing but a definition file update. I didn't err on the conservative side when selecting the programs to get downloads for. Plus when the share is down if the config file isn't switched updates stop. No redownloading. No manual LiveUpdate. What updates are not and redownloading??? Is this a known problem? Do you have a link on this? Sorry to be a pain but I just want to make sure now that other users configured differently than me might have problems. Firewall users & whatnot... This place has a site license & a bunch of laptops.

Nilfred

Mar 24 2005, 05:18 AM

Your questions are far beyond the scope of this topic.
I only need help configuring my Apache server like this:

CODE

LoadModule proxy_module modules/mod_proxy.so
LoadModule cache_module modules/mod_cache.so
<IfModule mod_cache.c>
LoadModule disk_cache_module modules/mod_disk_cache.so
<IfModule mod_disk_cache.c>
CacheRoot c:/cacheroot
CacheSize 204800
CacheEnable disk /liveupdate/
CacheDirLevels 2
CacheDirLength 3
</IfModule>
</IfModule>

ProxyRequests Off

<Proxy *>
Order Deny,Allow
Deny from all
Allow from 192.168.0
</Proxy>

<Location /liveupdate/>
ProxyPass http://liveupdate.symantecliveupdate.com/
ProxyPassReverse http://liveupdate.symantecliveupdate.com/
</Location>

But still need some advice.
A pure perl implementation should be greatly appreciated.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.