assorted bugs in Inti setup

assorted bugs in Inti setup

[Havoc Pennington]

Hi,

If anyone has time to look at these issues, I'd appreciate it:

 - people report funny "permission denied" error messages;
   I've seen this myself for http://sources.redhat.com/inti/docs.html ,
   where I get permission denied about half the time I hit reload.
   I can't reproduce it right this minute, so maybe it was fixed.

 - about five minutes ago I couldn't log in to the FTP site via 
   Internet Explorer, but now it seems to like Mozilla

 - List archives at http://sources.redhat.com/ml/inti/ are broken; 
   click on the July-Sept link and there's no page associated

 - http://sources.redhat.com/lists.html should list
   inti@sources.redhat.com

If I can fix any of these myself, feel free to let me know.

Thanks,
Havoc

Re: assorted bugs in Inti setup

[Jim Kingdon]

> - http://sources.redhat.com/lists.html should list
>   inti@sources.redhat.com

Sorry for missing this the first time (it is documented in
http://sources.redhat.com/sourceware/procedures/new-list.txt but
some dofus apparently didn't follow the docs ;-)).  Fixed.

> - List archives at http://sources.redhat.com/ml/inti/ are broken; 
>   click on the July-Sept link and there's no page associated

Oh, you mean when I follow
http://sources.redhat.com/sourceware/procedures/new-list.txt and
create .qmail-inti I'm not suppose to just put the literal strings
"PROJECTNAME" and "LISTNAME" into the file? ;-)

Fixed.

On the subject of manual processes, if anyone wants to try to put up
the sourceforge code I'd be glad to advise.  It might require more
hardware, though (it's your typical PHP and MySQL dynamic style
website, which I also find annoying in that documents don't get cached
as well as on a static website like sources.redhat.  Of course the
upside is that pages can be customized for each user, e.g. the
sourceforge code now has themes support).

The good news is that I think it would get along OK with qmail and
such.  Mailing lists and things like CVS are fairly loosely tied into
the PHP side of sourceforge.  Putting in GNATS would also be
relatively easy; just link to the cgi-bin/<mumble> link for GNATS
instead of the sourceforge bug-tracker.

As for your other problems, Havoc, not sure I have a lot to say other
than "works for me" :-(.  Maybe those symptoms are familiar to someone
else?  Or you can figure anything more out about what makes them
happen?

Re: assorted bugs in Inti setup

[Havoc Pennington]

Jim Kingdon <kingdon@panix.com> writes: 
> Fixed.
> 

Many thanks, Jim.
 
> As for your other problems, Havoc, not sure I have a lot to say other
> than "works for me" :-(.  Maybe those symptoms are familiar to someone
> else?  Or you can figure anything more out about what makes them
> happen?

Dunno, they work for me today too. Go figure. Maybe it's just a
symptom of heavy load on the machine or something...

Havoc

Re: assorted bugs in Inti setup

[Tom Tromey]

Havoc> Dunno, they work for me today too. Go figure. Maybe it's just a
Havoc> symptom of heavy load on the machine or something...

I can't explain the permission denied problem.

The ftp problem is just that our ftp access is tightly throttled.  You
have to use a mirror.

Tom

Re: assorted bugs in Inti setup

[Jason Molenda]

On Sat, Aug 19, 2000 at 10:38:16AM -0400, Havoc Pennington wrote:

> 
>  - people report funny "permission denied" error messages;

Look over the /www/logs/sourceware-error_log file to narrow this down.
I've never seen anything like that.

>  - about five minutes ago I couldn't log in to the FTP site via 
>    Internet Explorer, but now it seems to like Mozilla

IE doesn't handle the 'Server too busy, try a mirror' error message
at all - when the ftp server denies your anon access, IE pops up a
login box saying that you need to specify a username/password (read:
it interprets the 'server too busy' as a 'login failure, try again')

J

Re: assorted bugs in Inti setup

[Havoc Pennington]

Jason Molenda <jason-swarelist@molenda.com> writes:
> On Sat, Aug 19, 2000 at 10:38:16AM -0400, Havoc Pennington wrote:
> 
> > 
> >  - people report funny "permission denied" error messages;
> 
> Look over the /www/logs/sourceware-error_log file to narrow this down.
> I've never seen anything like that.
>

I'll check the log next time I see the error.
 
> >  - about five minutes ago I couldn't log in to the FTP site via 
> >    Internet Explorer, but now it seems to like Mozilla
> 
> IE doesn't handle the 'Server too busy, try a mirror' error message
> at all - when the ftp server denies your anon access, IE pops up a
> login box saying that you need to specify a username/password (read:
> it interprets the 'server too busy' as a 'login failure, try again')
> 

Right, I tried just 'ftp' instead of a web browser and discovered the
30-user limit (we probably have the bandwidth somewhere at Red Hat to
just put up a $1000 machine that could handle a lot more users, don't
we? - I guess it's stuck on lack of an admin like everything else).

I'll mirror things on gnome.org I guess.

Havoc

Re: assorted bugs in Inti setup

[Jason Molenda]

On Sat, Aug 19, 2000 at 04:10:15PM -0400, Havoc Pennington wrote:

> Right, I tried just 'ftp' instead of a web browser and discovered the
> 30-user limit (we probably have the bandwidth somewhere at Red Hat to
> just put up a $1000 machine that could handle a lot more users, don't
> we? - I guess it's stuck on lack of an admin like everything else).

I know nothing about the RH network facilities, but I can say that
the current sourceware+gcc T1 line is set up so that additional T1
lines can be bonded to it.  Increasing the bandwith this way would
cost real cash, though (I think it's to the tune of $1.5-2k/month).
And even if that was added, I don't know if it'd be worth increasing
te max number of simultaneous connections - the cygwin+gcc ftp
usage would just expand to eat up the additioal network bandwidth.
It'd probably be better to use it for interactive (web, mail, cvs)
to get through.  (unlike right now, where trying to read the list
archives over the web during the day can appear like the site is
off-line at times)

J

Re: assorted bugs in Inti setup

[Jeffrey A Law]

 In message < y5wu2chnhaw.fsf@icon.labs.redhat.com >you write:
  > Right, I tried just 'ftp' instead of a web browser and discovered the
  > 30-user limit (we probably have the bandwidth somewhere at Red Hat to
  > just put up a $1000 machine that could handle a lot more users, don't
  > we? - I guess it's stuck on lack of an admin like everything else).
  > 
  > I'll mirror things on gnome.org I guess.
We're looking at various options -- from getting more raw bandwidth into
that machine to a mirror in NC (or both).

In the short term I've added *.redhat.com to the list of domains that are
allowed to avoid the user limits :-)

jeff

Re: assorted bugs in Inti setup

[Gerald Pfeifer]

On Sat, 19 Aug 2000, Jason Molenda wrote:
> And even if that was added, I don't know if it'd be worth increasing
> te max number of simultaneous connections - the cygwin+gcc ftp
> usage would just expand to eat up the additioal network bandwidth.

For GCC we already made significant changes to avoid direct references
to our FTP server (just pointing to mirrors instead), only the snapshot
mails still refer to the FTP server.

Looking at last week's stats...

  Project name   Total bytes HTTP bytes  HTTP files  FTP bytes  FTP files
  -------------- ----------- ---------- ----------- ---------- ----------
  /cygwin           28824.0M    3148.3M      239641   25675.7M      26871
  /gcc              14828.1M    2243.3M      209969   12584.9M       6681
  /gdb              11675.9M     201.6M        6829   11474.3M       2392
  /sourcenav         7714.6M     192.6M       22281    7522.0M       3231

...we see that Cygwin FTP consumes nearly one third of the bandwith.

Perhaps GDB also emphasizing mirror sites more strongly could help a bit.

Gerald
-- 
Gerald "Jerry" pfeifer@dbai.tuwien.ac.at http://www.dbai.tuwien.ac.at/~pfeifer/

Re: assorted bugs in Inti setup

[Chris Faylor]

On Wed, Aug 23, 2000 at 01:02:47AM +0200, Gerald Pfeifer wrote:
>On Sat, 19 Aug 2000, Jason Molenda wrote:
>>And even if that was added, I don't know if it'd be worth increasing te
>>max number of simultaneous connections - the cygwin+gcc ftp usage would
>>just expand to eat up the additioal network bandwidth.
>
>For GCC we already made significant changes to avoid direct references
>to our FTP server (just pointing to mirrors instead), only the snapshot
>mails still refer to the FTP server.
>
>Looking at last week's stats...
>
>Project name Total bytes HTTP bytes HTTP files FTP bytes FTP files
>-------------- ----------- ---------- ----------- ---------- ----------
>/cygwin           28824.0M    3148.3M      239641   25675.7M      26871
>/gcc              14828.1M    2243.3M      209969   12584.9M       6681
>/gdb              11675.9M     201.6M        6829   11474.3M       2392
>/sourcenav         7714.6M     192.6M       22281    7522.0M       3231
>
>...we see that Cygwin FTP consumes nearly one third of the bandwith.

We emphasize mirror sites in the cygwin project too but...  well...
these are cygwin users.  The words "mirror" and "site" in the same sentence
is probably immensely confusing to many of them.

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 07:32:04PM -0400, Chris Faylor wrote:

> We emphasize mirror sites in the cygwin project too but...  well...
> these are cygwin users.  The words "mirror" and "site" in the same sentence
> is probably immensely confusing to many of them.

One possibility would be to restrict access to /pub/cygwin and
/pub/gcc altogether except from class mirrors.  We've done this in
the past, e.g. for a few days when a new gcc release is made.  Both
of these projects have extensive mirror sites, so the inconvenience
should not be that bad -- mainly forcing people to learn to type
some other hostname instead of "gcc.gnu.org" or "sourceware.cygnus.com".

Well, an idea,

Jason

Re: assorted bugs in Inti setup

[Chris Faylor]

On Tue, Aug 22, 2000 at 04:48:44PM -0700, Jason Molenda wrote:
>
>On Tue, Aug 22, 2000 at 07:32:04PM -0400, Chris Faylor wrote:
>>We emphasize mirror sites in the cygwin project too but...  well...
>>these are cygwin users.  The words "mirror" and "site" in the same
>>sentence is probably immensely confusing to many of them.
>
>One possibility would be to restrict access to /pub/cygwin and /pub/gcc
>altogether except from class mirrors.  We've done this in the past,
>e.g.  for a few days when a new gcc release is made.  Both of these
>projects have extensive mirror sites, so the inconvenience should not
>be that bad -- mainly forcing people to learn to type some other
>hostname instead of "gcc.gnu.org" or "sourceware.cygnus.com".
>
>Well, an idea,

It's a good idea, IMO.  How do we restrict access to the cygwin directory?

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 08:37:41PM -0400, Chris Faylor wrote:

> 
> It's a good idea, IMO.  How do we restrict access to the cygwin directory?
> 

/sourceware/ftp/etc/ftpaccess (under RCS control) includes this example:

  # Don't allow downloading of the following files/directories.
  noretrieve relative /bin/ /etc/ /lib/ core

  # Add <dir>/ to the noretrieve line above, then uncomment this line
  # to restrict access to a direcotry to just mirror sites.
  # /pub/gcc/releases/gcc-2.95.2/
  # It has been reported that folks can use the tar feature of the
  # ftp server to download restricted directories.  It is suggested
  # that a file called ".notar" in the restricted directory may
  # prevent this.
  #allow-retrieve relative class=mirrors /pub/gcc/releases/gcc-2.95.2/

People who try to retrieve anything under /pub/cygwin would get a
'Access denied' type of message -- you'll probably want to add
something like a /pub/README.cygwin explaining what is going on.

Jason

Re: assorted bugs in Inti setup

[Chris Faylor]

On Tue, Aug 22, 2000 at 05:47:15PM -0700, Jason Molenda wrote:
>On Tue, Aug 22, 2000 at 08:37:41PM -0400, Chris Faylor wrote:
>> It's a good idea, IMO.  How do we restrict access to the cygwin directory?
>
>/sourceware/ftp/etc/ftpaccess (under RCS control) includes this example:
>
>  # Don't allow downloading of the following files/directories.
>  noretrieve relative /bin/ /etc/ /lib/ core
>
>  # Add <dir>/ to the noretrieve line above, then uncomment this line
>  # to restrict access to a direcotry to just mirror sites.
>  # /pub/gcc/releases/gcc-2.95.2/
>  # It has been reported that folks can use the tar feature of the
>  # ftp server to download restricted directories.  It is suggested
>  # that a file called ".notar" in the restricted directory may
>  # prevent this.
>  #allow-retrieve relative class=mirrors /pub/gcc/releases/gcc-2.95.2/
>
>People who try to retrieve anything under /pub/cygwin would get a
>'Access denied' type of message -- you'll probably want to add
>something like a /pub/README.cygwin explaining what is going on.

So how do we allow mirrors to access the directory, then?

Do we only turn on access for a few days when something in latest is
updated?

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 09:43:16PM -0400, Chris Faylor wrote:

> So how do we allow mirrors to access the directory, then?

You'd do something like this:

noretrieve relative /bin/ /etc/ /lib/ core /pub/cygwin/latest/
allow-retrieve relative class=mirrors /pub/cygwin/latest/

The 'noretrieve' means that no one is allowed to access that
directory.  The 'allow-retrieve' adds permission for the class of
'mirrors' - they can now access that directory.

As per the comment, you should drop a '.notar' file in pub/cygwin/latest
as well.

There is only one noretrieve command in the ftpaccess file.  There
may be multiple allow-retrieve options.  See the ftpaccess(5) man
page for more details about these directives.

J

Re: assorted bugs in Inti setup

[Havoc Pennington]

Jason Molenda <jason-swarelist@molenda.com> writes:
> On Sat, Aug 19, 2000 at 10:38:16AM -0400, Havoc Pennington wrote:
> 
> > 
> >  - people report funny "permission denied" error messages;
> 
> Look over the /www/logs/sourceware-error_log file to narrow this down.
> I've never seen anything like that.
>

I'll check the log next time I see the error.
 
> >  - about five minutes ago I couldn't log in to the FTP site via 
> >    Internet Explorer, but now it seems to like Mozilla
> 
> IE doesn't handle the 'Server too busy, try a mirror' error message
> at all - when the ftp server denies your anon access, IE pops up a
> login box saying that you need to specify a username/password (read:
> it interprets the 'server too busy' as a 'login failure, try again')
> 

Right, I tried just 'ftp' instead of a web browser and discovered the
30-user limit (we probably have the bandwidth somewhere at Red Hat to
just put up a $1000 machine that could handle a lot more users, don't
we? - I guess it's stuck on lack of an admin like everything else).

I'll mirror things on gnome.org I guess.

Havoc

Re: assorted bugs in Inti setup

[Tom Tromey]

Havoc> Dunno, they work for me today too. Go figure. Maybe it's just a
Havoc> symptom of heavy load on the machine or something...

I can't explain the permission denied problem.

The ftp problem is just that our ftp access is tightly throttled.  You
have to use a mirror.

Tom

Re: assorted bugs in Inti setup

[Havoc Pennington]

Jim Kingdon <kingdon@panix.com> writes: 
> Fixed.
> 

Many thanks, Jim.
 
> As for your other problems, Havoc, not sure I have a lot to say other
> than "works for me" :-(.  Maybe those symptoms are familiar to someone
> else?  Or you can figure anything more out about what makes them
> happen?

Dunno, they work for me today too. Go figure. Maybe it's just a
symptom of heavy load on the machine or something...

Havoc

assorted bugs in Inti setup

[Havoc Pennington]

Hi,

If anyone has time to look at these issues, I'd appreciate it:

 - people report funny "permission denied" error messages;
   I've seen this myself for http://sources.redhat.com/inti/docs.html ,
   where I get permission denied about half the time I hit reload.
   I can't reproduce it right this minute, so maybe it was fixed.

 - about five minutes ago I couldn't log in to the FTP site via 
   Internet Explorer, but now it seems to like Mozilla

 - List archives at http://sources.redhat.com/ml/inti/ are broken; 
   click on the July-Sept link and there's no page associated

 - http://sources.redhat.com/lists.html should list
   inti@sources.redhat.com

If I can fix any of these myself, feel free to let me know.

Thanks,
Havoc

Re: assorted bugs in Inti setup

[Chris Faylor]

On Tue, Aug 22, 2000 at 05:47:15PM -0700, Jason Molenda wrote:
>On Tue, Aug 22, 2000 at 08:37:41PM -0400, Chris Faylor wrote:
>> It's a good idea, IMO.  How do we restrict access to the cygwin directory?
>
>/sourceware/ftp/etc/ftpaccess (under RCS control) includes this example:
>
>  # Don't allow downloading of the following files/directories.
>  noretrieve relative /bin/ /etc/ /lib/ core
>
>  # Add <dir>/ to the noretrieve line above, then uncomment this line
>  # to restrict access to a direcotry to just mirror sites.
>  # /pub/gcc/releases/gcc-2.95.2/
>  # It has been reported that folks can use the tar feature of the
>  # ftp server to download restricted directories.  It is suggested
>  # that a file called ".notar" in the restricted directory may
>  # prevent this.
>  #allow-retrieve relative class=mirrors /pub/gcc/releases/gcc-2.95.2/
>
>People who try to retrieve anything under /pub/cygwin would get a
>'Access denied' type of message -- you'll probably want to add
>something like a /pub/README.cygwin explaining what is going on.

So how do we allow mirrors to access the directory, then?

Do we only turn on access for a few days when something in latest is
updated?

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 07:32:04PM -0400, Chris Faylor wrote:

> We emphasize mirror sites in the cygwin project too but...  well...
> these are cygwin users.  The words "mirror" and "site" in the same sentence
> is probably immensely confusing to many of them.

One possibility would be to restrict access to /pub/cygwin and
/pub/gcc altogether except from class mirrors.  We've done this in
the past, e.g. for a few days when a new gcc release is made.  Both
of these projects have extensive mirror sites, so the inconvenience
should not be that bad -- mainly forcing people to learn to type
some other hostname instead of "gcc.gnu.org" or "sourceware.cygnus.com".

Well, an idea,

Jason

Re: assorted bugs in Inti setup

[Jeffrey A Law]

 In message < y5wu2chnhaw.fsf@icon.labs.redhat.com >you write:
  > Right, I tried just 'ftp' instead of a web browser and discovered the
  > 30-user limit (we probably have the bandwidth somewhere at Red Hat to
  > just put up a $1000 machine that could handle a lot more users, don't
  > we? - I guess it's stuck on lack of an admin like everything else).
  > 
  > I'll mirror things on gnome.org I guess.
We're looking at various options -- from getting more raw bandwidth into
that machine to a mirror in NC (or both).

In the short term I've added *.redhat.com to the list of domains that are
allowed to avoid the user limits :-)

jeff

Re: assorted bugs in Inti setup

[Jim Kingdon]

> - http://sources.redhat.com/lists.html should list
>   inti@sources.redhat.com

Sorry for missing this the first time (it is documented in
http://sources.redhat.com/sourceware/procedures/new-list.txt but
some dofus apparently didn't follow the docs ;-)).  Fixed.

> - List archives at http://sources.redhat.com/ml/inti/ are broken; 
>   click on the July-Sept link and there's no page associated

Oh, you mean when I follow
http://sources.redhat.com/sourceware/procedures/new-list.txt and
create .qmail-inti I'm not suppose to just put the literal strings
"PROJECTNAME" and "LISTNAME" into the file? ;-)

Fixed.

On the subject of manual processes, if anyone wants to try to put up
the sourceforge code I'd be glad to advise.  It might require more
hardware, though (it's your typical PHP and MySQL dynamic style
website, which I also find annoying in that documents don't get cached
as well as on a static website like sources.redhat.  Of course the
upside is that pages can be customized for each user, e.g. the
sourceforge code now has themes support).

The good news is that I think it would get along OK with qmail and
such.  Mailing lists and things like CVS are fairly loosely tied into
the PHP side of sourceforge.  Putting in GNATS would also be
relatively easy; just link to the cgi-bin/<mumble> link for GNATS
instead of the sourceforge bug-tracker.

As for your other problems, Havoc, not sure I have a lot to say other
than "works for me" :-(.  Maybe those symptoms are familiar to someone
else?  Or you can figure anything more out about what makes them
happen?

Re: assorted bugs in Inti setup

[Chris Faylor]

On Tue, Aug 22, 2000 at 04:48:44PM -0700, Jason Molenda wrote:
>
>On Tue, Aug 22, 2000 at 07:32:04PM -0400, Chris Faylor wrote:
>>We emphasize mirror sites in the cygwin project too but...  well...
>>these are cygwin users.  The words "mirror" and "site" in the same
>>sentence is probably immensely confusing to many of them.
>
>One possibility would be to restrict access to /pub/cygwin and /pub/gcc
>altogether except from class mirrors.  We've done this in the past,
>e.g.  for a few days when a new gcc release is made.  Both of these
>projects have extensive mirror sites, so the inconvenience should not
>be that bad -- mainly forcing people to learn to type some other
>hostname instead of "gcc.gnu.org" or "sourceware.cygnus.com".
>
>Well, an idea,

It's a good idea, IMO.  How do we restrict access to the cygwin directory?

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Sat, Aug 19, 2000 at 10:38:16AM -0400, Havoc Pennington wrote:

> 
>  - people report funny "permission denied" error messages;

Look over the /www/logs/sourceware-error_log file to narrow this down.
I've never seen anything like that.

>  - about five minutes ago I couldn't log in to the FTP site via 
>    Internet Explorer, but now it seems to like Mozilla

IE doesn't handle the 'Server too busy, try a mirror' error message
at all - when the ftp server denies your anon access, IE pops up a
login box saying that you need to specify a username/password (read:
it interprets the 'server too busy' as a 'login failure, try again')

J

Re: assorted bugs in Inti setup

[Chris Faylor]

On Wed, Aug 23, 2000 at 01:02:47AM +0200, Gerald Pfeifer wrote:
>On Sat, 19 Aug 2000, Jason Molenda wrote:
>>And even if that was added, I don't know if it'd be worth increasing te
>>max number of simultaneous connections - the cygwin+gcc ftp usage would
>>just expand to eat up the additioal network bandwidth.
>
>For GCC we already made significant changes to avoid direct references
>to our FTP server (just pointing to mirrors instead), only the snapshot
>mails still refer to the FTP server.
>
>Looking at last week's stats...
>
>Project name Total bytes HTTP bytes HTTP files FTP bytes FTP files
>-------------- ----------- ---------- ----------- ---------- ----------
>/cygwin           28824.0M    3148.3M      239641   25675.7M      26871
>/gcc              14828.1M    2243.3M      209969   12584.9M       6681
>/gdb              11675.9M     201.6M        6829   11474.3M       2392
>/sourcenav         7714.6M     192.6M       22281    7522.0M       3231
>
>...we see that Cygwin FTP consumes nearly one third of the bandwith.

We emphasize mirror sites in the cygwin project too but...  well...
these are cygwin users.  The words "mirror" and "site" in the same sentence
is probably immensely confusing to many of them.

cgf

Re: assorted bugs in Inti setup

[Jason Molenda]

On Sat, Aug 19, 2000 at 04:10:15PM -0400, Havoc Pennington wrote:

> Right, I tried just 'ftp' instead of a web browser and discovered the
> 30-user limit (we probably have the bandwidth somewhere at Red Hat to
> just put up a $1000 machine that could handle a lot more users, don't
> we? - I guess it's stuck on lack of an admin like everything else).

I know nothing about the RH network facilities, but I can say that
the current sourceware+gcc T1 line is set up so that additional T1
lines can be bonded to it.  Increasing the bandwith this way would
cost real cash, though (I think it's to the tune of $1.5-2k/month).
And even if that was added, I don't know if it'd be worth increasing
te max number of simultaneous connections - the cygwin+gcc ftp
usage would just expand to eat up the additioal network bandwidth.
It'd probably be better to use it for interactive (web, mail, cvs)
to get through.  (unlike right now, where trying to read the list
archives over the web during the day can appear like the site is
off-line at times)

J

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 09:43:16PM -0400, Chris Faylor wrote:

> So how do we allow mirrors to access the directory, then?

You'd do something like this:

noretrieve relative /bin/ /etc/ /lib/ core /pub/cygwin/latest/
allow-retrieve relative class=mirrors /pub/cygwin/latest/

The 'noretrieve' means that no one is allowed to access that
directory.  The 'allow-retrieve' adds permission for the class of
'mirrors' - they can now access that directory.

As per the comment, you should drop a '.notar' file in pub/cygwin/latest
as well.

There is only one noretrieve command in the ftpaccess file.  There
may be multiple allow-retrieve options.  See the ftpaccess(5) man
page for more details about these directives.

J

Re: assorted bugs in Inti setup

[Jason Molenda]

On Tue, Aug 22, 2000 at 08:37:41PM -0400, Chris Faylor wrote:

> 
> It's a good idea, IMO.  How do we restrict access to the cygwin directory?
> 

/sourceware/ftp/etc/ftpaccess (under RCS control) includes this example:

  # Don't allow downloading of the following files/directories.
  noretrieve relative /bin/ /etc/ /lib/ core

  # Add <dir>/ to the noretrieve line above, then uncomment this line
  # to restrict access to a direcotry to just mirror sites.
  # /pub/gcc/releases/gcc-2.95.2/
  # It has been reported that folks can use the tar feature of the
  # ftp server to download restricted directories.  It is suggested
  # that a file called ".notar" in the restricted directory may
  # prevent this.
  #allow-retrieve relative class=mirrors /pub/gcc/releases/gcc-2.95.2/

People who try to retrieve anything under /pub/cygwin would get a
'Access denied' type of message -- you'll probably want to add
something like a /pub/README.cygwin explaining what is going on.

Jason

Re: assorted bugs in Inti setup

[Gerald Pfeifer]

On Sat, 19 Aug 2000, Jason Molenda wrote:
> And even if that was added, I don't know if it'd be worth increasing
> te max number of simultaneous connections - the cygwin+gcc ftp
> usage would just expand to eat up the additioal network bandwidth.

For GCC we already made significant changes to avoid direct references
to our FTP server (just pointing to mirrors instead), only the snapshot
mails still refer to the FTP server.

Looking at last week's stats...

  Project name   Total bytes HTTP bytes  HTTP files  FTP bytes  FTP files
  -------------- ----------- ---------- ----------- ---------- ----------
  /cygwin           28824.0M    3148.3M      239641   25675.7M      26871
  /gcc              14828.1M    2243.3M      209969   12584.9M       6681
  /gdb              11675.9M     201.6M        6829   11474.3M       2392
  /sourcenav         7714.6M     192.6M       22281    7522.0M       3231

...we see that Cygwin FTP consumes nearly one third of the bandwith.

Perhaps GDB also emphasizing mirror sites more strongly could help a bit.

Gerald
-- 
Gerald "Jerry" pfeifer@dbai.tuwien.ac.at http://www.dbai.tuwien.ac.at/~pfeifer/