From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from qs51p00im-qukt01072102.me.com (qs51p00im-qukt01072102.me.com [17.57.155.11]) by sourceware.org (Postfix) with ESMTPS id D131E3858C56 for ; Tue, 26 Mar 2024 18:13:30 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D131E3858C56 Authentication-Results: sourceware.org; dmarc=pass (p=reject dis=none) header.from=cicku.me Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=cicku.me ARC-Filter: OpenARC Filter v1.0.0 sourceware.org D131E3858C56 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=17.57.155.11 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1711476812; cv=none; b=XhfilWeYWWTUOBoIHVNcEowm1C+rzBIbjMwLDkGNcN7SagdlvOeQ3pwZa3JwcMKQ9OkXDlSKCNISxPz9ru6c6whT6nz3CfLlppgObNWeo6uh709L9ptm9h91QJIK/D0jdTYlzl0gBCnAcAmLr7vunV2QvSFZTSeXQt5xHe+hDR8= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1711476812; c=relaxed/simple; bh=j6J8zwH0IH1XCrI04CEe44B/mtSDGL1QfzelAfiEWwg=; h=DKIM-Signature:From:Mime-Version:Subject:Date:Message-Id:To; b=ZyfMdJB8yQa5JvtSRebdB1OHGpgXE5+Y3EF2oGb3XG03/7pstv6S7vPNJhLtOArJSiJj/k/ahhycXOYSsN+AJZKBR94xGkd3NdXXBxuw1ZeSLAFsCLA9L6/Ortd/xLAEGHycG9u8PaQvtgy/FsQpEajJkrp7T4ivN4XWk9Te4QU= ARC-Authentication-Results: i=1; server2.sourceware.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cicku.me; s=sig1; t=1711476810; bh=j6J8zwH0IH1XCrI04CEe44B/mtSDGL1QfzelAfiEWwg=; h=Content-Type:From:Mime-Version:Subject:Date:Message-Id:To; b=xJV36vAQubPQcZe5tWx6dlZeZXFlyyZO3tBVrrVfV2Nog+J8Mh7bkpfn1sh2OurA6 Cp6/QnYjTK1fKt78hr0U7HgIIDqcei9UPAZbZhYHUFipegHRT8crXam3OSjVIxVA5M l9E2fLxcjFbfDY3TWkl6KUBBsVm9XrtIvP/O35o6JJMrkObwz6RaLA6OOIQBurjJ9N LQWJkZ9NTY1V6b7LvIgOhhJRVV5zbBn/n60OeBe12K+ocTVoIXnPnF4CZu02PQIU8a azsp7zc+fQNZYTCy1KyyGaV7QUo2H/TFoAlwk7edAXMnpDNFS4K2mqCvx+ymLyTV/n GOWHz6stcc41g== Received: from smtpclient.apple (qs51p00im-dlb-asmtp-mailmevip.me.com [17.57.155.28]) by qs51p00im-qukt01072102.me.com (Postfix) with ESMTPSA id A003A340197; Tue, 26 Mar 2024 18:13:29 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Christopher Meng Mime-Version: 1.0 (1.0) Subject: Re: Mirror announcement Date: Tue, 26 Mar 2024 14:13:18 -0400 Message-Id: <7475E6CC-779B-499D-AD51-A50FE2AA98CE@cicku.me> References: Cc: cygwin@cygwin.com In-Reply-To: To: Jon Turney X-Mailer: iPhone Mail (21D61) X-Proofpoint-ORIG-GUID: 6C-UG_1QcE4erfdf4m1ptuOFjmICBdqe X-Proofpoint-GUID: 6C-UG_1QcE4erfdf4m1ptuOFjmICBdqe X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-26_07,2024-03-21_02,2023-05-22_02 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 malwarescore=0 clxscore=1030 suspectscore=0 mlxscore=0 bulkscore=0 mlxlogscore=481 phishscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2308100000 definitions=main-2403260131 X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_INFOUSMEBIZ,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Hi, UA could be something unique similar to =E2=80=9CCygwin mirror/0.01=E2=80=9D= and I can whitelist then, but having =E2=80=9Cpython-urlli will definitely t= rigger the WAF. While I can completely disable the check without issues, if you want to carr= y a specific UA feel free to do it and I will then white list based on UA. Let me know when you are ready. Sent from my iPhone > On Mar 26, 2024, at 1:40=E2=80=AFPM, Jon Turney wrote: >=20 > =EF=BB=BFOn 26/03/2024 14:10, Christopher Meng via Cygwin wrote: >> Hi, This mirror is actually behind CDN which is "global", so I'm not sure= if you can handle such of mirror on your end for redirect. >=20 > OK, I'll leave the location unspecified. >=20 > I gave it a brief test with our setup program and things seem to work corr= ectly (which shouldn't be surprising since it just uses the wininet > API to fetch files). >=20 > However, it seem our mirror checking script seems to get told "403 Forbidd= en" when it tries to check if you are up to date. >=20 > Can you tell me (privately, if you like) what User-Agent: it should presen= t? Or suggest another mechanism to allow it access? >=20