X-Recipient: archive-cygwin@delorie.com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org EF83C3858288 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1711495756; bh=blgQDh1p60ZVj9K+3Kg7ypzzbbxGkHMe6qVWuztV0S0=; h=Subject:Date:References:Cc:In-Reply-To:To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From:Reply-To:From; b=kmTAEHU3RhQ94L76u9dGLb5sG+JV4OmmH94LK56EDC9AeJtKshYpwgt/kaHE+inLh Mcvx0Xrubh9VmthSEMvPNwkYgNvxkjCgD0o0pYKuB3JbDkVxP4lnVPLYsO2DYhLmYI EhEKTFnB7wHy4uz1RED3FvCEBkLNATmrFbHgXK/E= X-Original-To: cygwin@cygwin.com Delivered-To: cygwin@cygwin.com DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D8312385841A ARC-Filter: OpenARC Filter v1.0.0 sourceware.org D8312385841A ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1711495700; cv=none; b=ctakHPPpj2vF+jk8Ox/IuBhsicEynjnTJTMDIuIAgyH+8oOiWugwYolwuO3gANb5Hgrihf9ElQGUpflqk1dyJOdARpGzhxDh539Ra4/0XnkIfo4ZmiRrpkDqdcjIeMW/EUOhSRLZPGlDYhaDkWpI+Pkr2unuqhwgYb/m42MF9Ak= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1711495700; c=relaxed/simple; bh=j6J8zwH0IH1XCrI04CEe44B/mtSDGL1QfzelAfiEWwg=; h=DKIM-Signature:From:Mime-Version:Subject:Date:Message-Id:To; b=peWnOkrc0DBOORSqmuuirYTE6MNxSkhRzzVzW7AYGAS76Mf9c5gim78StXkoqZg8/eCgw+0G5Mv5AZbNvoDi4w/iGupZTv3LqZ4vQxrX/1vsrpxRC7DEN8n+VCAvuhX6eWbUPdpkgpT7ViKLPzYoXzoPQBeiyKP/3og7lYoGYrM= ARC-Authentication-Results: i=1; server2.sourceware.org Mime-Version: 1.0 (1.0) Subject: Re: Mirror announcement Date: Tue, 26 Mar 2024 14:13:18 -0400 Message-Id: <7475E6CC-779B-499D-AD51-A50FE2AA98CE@cicku.me> References: Cc: cygwin@cygwin.com In-Reply-To: To: Jon Turney X-Mailer: iPhone Mail (21D61) X-Proofpoint-ORIG-GUID: sefgMwmb4r5uuOTuwpQbEqrbiFFq1_4e X-Proofpoint-GUID: sefgMwmb4r5uuOTuwpQbEqrbiFFq1_4e X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-26_10,2024-03-21_02,2023-05-22_02 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=481 adultscore=0 bulkscore=0 malwarescore=0 phishscore=0 clxscore=1030 mlxscore=0 suspectscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2308100000 definitions=main-2403260169 X-Spam-Status: No, score=-0.8 required=5.0 tests=BAYES_00, DATE_IN_PAST_03_06, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_INFOUSMEBIZ, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.30 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Christopher Meng via Cygwin Reply-To: Christopher Meng Content-Type: text/plain; charset="utf-8" Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com Sender: "Cygwin" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 42QNTHG03173767 Hi, UA could be something unique similar to “Cygwin mirror/0.01” and I can whitelist then, but having “python-urlli will definitely trigger the WAF. While I can completely disable the check without issues, if you want to carry a specific UA feel free to do it and I will then white list based on UA. Let me know when you are ready. Sent from my iPhone > On Mar 26, 2024, at 1:40 PM, Jon Turney wrote: > > On 26/03/2024 14:10, Christopher Meng via Cygwin wrote: >> Hi, This mirror is actually behind CDN which is "global", so I'm not sure if you can handle such of mirror on your end for redirect. > > OK, I'll leave the location unspecified. > > I gave it a brief test with our setup program and things seem to work correctly (which shouldn't be surprising since it just uses the wininet > API to fetch files). > > However, it seem our mirror checking script seems to get told "403 Forbidden" when it tries to check if you are up to date. > > Can you tell me (privately, if you like) what User-Agent: it should present? Or suggest another mechanism to allow it access? > -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple