From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id gMuvE4XiC2UnVQEA9RJhRA:P1 (envelope-from ) for ; Thu, 21 Sep 2023 08:28:21 +0200 Received: from aspmx1.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id gMuvE4XiC2UnVQEA9RJhRA (envelope-from ) for ; Thu, 21 Sep 2023 08:28:21 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EE93841201 for ; Thu, 21 Sep 2023 08:28:20 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1695277701; a=rsa-sha256; cv=none; b=fbU0RvwoyIVlw4zOFpzx2LwOpoh8HXGMXDgHTTdC3q0rdKYnbSl9KZu22mN3q9RwGqEX4F mNaw8/YURiKZLU1tM5WY+7u89zy5AKdKP1FEHgRb9gdDGoUYJ6QOZ843kG5f18nWMfG7o9 GY1vNMehHlB9PSvb0KjvA8xmTktwdTxNCGpzkLwd04XIlC6/Pj7iyOoNeZ0kCEvQTCNX+U 1Nd/l5qPvfEzUuPiE73V1qpWO1/HXF8INfldxMH7olSEJEuPqYJYpYx5P1VRPXNSWRuPtk K5wvDevki6SSec65sRtGdMSWVk00lCHDX6zb+3QTxP9gkIKF7Ly9MEp6yXlQTA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1695277701; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=Eto6fFLBxeyVkdr6urnDI1s7r7kBjUZwwDwqPlsIx64=; b=WKIEMAMF3niDCZubz5wGnhZ6dM8/fFoNQsdjSNodoeuCJhNcJKtKyzRck6JMZD/bC+xk4N DzHiIu8Sl4RQWg4U7Y3/lqr6TqxU0fFqVXb7P7k60Rp2EPwsyXepz6AIUcthgZbbVqkn/O jc3ltG8rtCOu8Dd8UiblRAqSW9CiiDX6HSmCspECK5Tx4t12BU22bsPc0CmHz5A+DfscBD /LiilCN18BU4Cy5Uy12lXGQvvYHyBJzCBjpZHetLKAePJ6s6CKv6H4n5Oz91em4GADFHjJ 8NK74z44FqZTTGzngb8HZ1BHDn0LxCtARyilCBFoEV830gqw460KWVlJXpfVdA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=none Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qjDAT-0007oh-3i; Thu, 21 Sep 2023 02:28:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qjDAI-0007nP-C1 for bug-guix@gnu.org; Thu, 21 Sep 2023 02:27:54 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qjDAH-0001Xs-Fx for bug-guix@gnu.org; Thu, 21 Sep 2023 02:27:54 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qjDAQ-0004rE-I4; Thu, 21 Sep 2023 02:28:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#65056: https://issues.guix.gnu.org/ cannot be accessed through Tor Resent-From: Giovanni Biscuolo Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 21 Sep 2023 06:28:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 65056 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ricardo Wurmus Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , guix-sysadmin , 65056@debbugs.gnu.org Received: via spool by 65056-submit@debbugs.gnu.org id=B65056.169527767618660 (code B ref 65056); Thu, 21 Sep 2023 06:28:02 +0000 Received: (at 65056) by debbugs.gnu.org; 21 Sep 2023 06:27:56 +0000 Received: from localhost ([127.0.0.1]:60829 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qjDAK-0004qu-1o for submit@debbugs.gnu.org; Thu, 21 Sep 2023 02:27:56 -0400 Received: from ns13.heimat.it ([46.4.214.66]:53188) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qjDAE-0004qd-Tr for 65056@debbugs.gnu.org; Thu, 21 Sep 2023 02:27:54 -0400 Received: from localhost (ip6-localhost [127.0.0.1]) by ns13.heimat.it (Postfix) with ESMTP id 8B0C93009C1; Thu, 21 Sep 2023 06:27:35 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it Received: from ns13.heimat.it ([127.0.0.1]) by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n6Q39Mx8Dwr2; Thu, 21 Sep 2023 06:27:34 +0000 (UTC) Received: from bourrache.mug.xelera.it (unknown [93.56.171.217]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by ns13.heimat.it (Postfix) with ESMTPSA id F2FE73009C0; Thu, 21 Sep 2023 06:27:33 +0000 (UTC) Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14]) by bourrache.mug.xelera.it (Postfix) with SMTP id 32C1829F736B; Thu, 21 Sep 2023 08:27:33 +0200 (CEST) Received: (nullmailer pid 19998 invoked by uid 1000); Thu, 21 Sep 2023 06:27:32 -0000 From: Giovanni Biscuolo In-Reply-To: <87o7hw8nsx.fsf@elephly.net> Organization: Xelera.eu References: <10e9eb490471d421fa709eaa36bdec83@tobias.gr> <877cpzbxf4.fsf@gnu.org> <1504743B-0B78-4D42-AB22-F25CA2D0194D@tobias.gr> <87h6p256ty.fsf@elephly.net> <878r9g2z2o.fsf@gnu.org> <87msxr3jd4.fsf@elephly.net> <87led84fbz.fsf@gnu.org> <87v8cbzxum.fsf@elephly.net> <87r0mvizc6.fsf@gnu.org> <87pm2cbkgp.fsf@xelera.eu> <87o7hw8nsx.fsf@elephly.net> Date: Thu, 21 Sep 2023 08:27:32 +0200 Message-ID: <87jzskavmz.fsf@xelera.eu> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -5.96 X-Spam-Score: -5.96 X-Migadu-Queue-Id: EE93841201 X-Migadu-Scanner: mx2.migadu.com X-TUID: MXCx44ia5Gck --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hello, Ricardo Wurmus writes: [...] > IT had installed some DoS attack protection thing for the DMZ with > different thresholds based on past access patterns. Probably some of us is using access patterns the "thing" considers DoS :-) > Upon my request they have now disabled this completely for our IPs > corresponding to ci.guix.gnu.org and its sibling node. Thanks a lot! We should probably consider this (disable any firewall protection) as a requirement when one or more of our public facing hosts firewalling is not under our direct control. Now we only have berlin and bayfront as public facing hosts... but for example milan.guix-1 is connected by our build farm via its public IP (ehrm, time to set up wireguard for that, too). Anyway, AFAIU this "thing" in berlin network is no more an issue, we do not need a new bug report IMO. Thank you! [...] =2D-=20 Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJABAEBCgAqFiEERcxjuFJYydVfNLI5030Op87MORIFAmUL4lQMHGdAeGVsZXJh LmV1AAoJENN9DqfOzDkS0DkP/AqamkN8OOd/w+nJvXqjiTpdXwiGwpItxlglr3O6 kmC7cNOn6+VNdyDEkqFdJeElJRvFL/l1LBH+Q14UTa0/h3RLWeQCAwhe4oXvrcqg 0fgtNbDp5GxWbybXzZjPUB725jvXvPvv7l1XhaWP+9dVGKZ/ofaGEiYZlu9lE/A1 V7rChpPgdaFEnWSltKehRaMEpXZ8z66m4mF24YkjN4S0iANNOT8hLS2n6sSBZubW yYGOb1d1T09tgo/w87++dplVe6BAn4MeGh/fR/cRrOmlb6qDnMkAexPjuU1nXZwk SyK+J8X5vJN1VhxX6rTbd7XXBjiHAYFT2ENR3UcoEW27RipIInjKWNlmlQRXfJwt ILMWu+ek1t/kCRA57LfJ18jh31R5jMm44+iN6erBaC4BdY9Dn5x2zv/VpguqGNl8 AnOgFLCa3upUfxlo0NS2Ow8VNUxE9E7oCAh2fcyDy+Zp340hfKoBFNy7+IlM8sYv f/HgbPbqzqAafgB/LG8IRFqa2B9+/DbkJAZlExYiQXuv85HwqZMxcUWOvrt0m5Kb LeMd15wAvL9V6aJXU9srqO7LYaJu+pHdTuPfhXWct7eleHZ6d8Pl7KiCJv7NyZgC zB0NlhOdgHNtHe/wyOemrEUFylW11gZ3Et/V/Ni9LazcZmuQgEj6wPQ2ZvYZZut3 RUQ6 =f4w1 -----END PGP SIGNATURE----- --=-=-=--