From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id hkDoBN/PI2A4KwAA0tVLHw (envelope-from ) for ; Wed, 10 Feb 2021 12:21:51 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id gMUoAN/PI2AIQAAA1q6Kng (envelope-from ) for ; Wed, 10 Feb 2021 12:21:51 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 51C929403D5 for ; Wed, 10 Feb 2021 12:21:49 +0000 (UTC) Received: from localhost ([::1]:53894 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1l9oVA-0008H2-1W for larch@yhetil.org; Wed, 10 Feb 2021 07:21:48 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:40170) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1l9oUz-0008Gh-Re for guix-devel@gnu.org; Wed, 10 Feb 2021 07:21:37 -0500 Received: from sender4-of-o51.zoho.com ([136.143.188.51]:21104) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1l9oUr-0007JT-Bo; Wed, 10 Feb 2021 07:21:37 -0500 ARC-Seal: i=1; a=rsa-sha256; t=1612959683; cv=none; d=zohomail.com; s=zohoarc; b=GGSl83IYLRGjd5bmfqifyqjO/M9PHL2MZF/b91ESZK5+NB7S6mjkCI0b4kaWz7N9OqESizo7rcPNgccDtdVqpPnxVLyG3gFH2o87SaN5JRqGMnkQnA9g6nc6DTyX8JfjmAzB5jFIWnEuXGxq+urjkz0t3c8QwkzRxN3l8G8GjnI= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1612959683; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To; bh=Oqfhsskzusdh4wK1f20OvGmxm9I0LmPe3u+q0HVsh/o=; b=dj3ARxzuW04SzJ/0QlfjBLEJFxKVpA+HOKjfB5N/6jcQdZZ1FTKq5aDqJHKgQOREZe1jimmxYVrGPYI2nf/HxYBl4Nfcil69viH2fy7ARDpDougQn0yRQm82DE+z/9TGbi5gpIWQeG2+bBwEDK6Nn+YC8jVy8IzCbAll0hsUIRU= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1612959683; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; bh=Oqfhsskzusdh4wK1f20OvGmxm9I0LmPe3u+q0HVsh/o=; b=VoSs0qXbd9AuIkSiQ86NAz2IsyaOxfsR4fesTMxe8BLuqWtumSar71I5pwgj2KH8 YHOIAou7f6Bwnw5K5ZlGlORCqReZc7P3tI3fFleb2cYq+xbG78IJ0uNFAzbYrxaI/dU DLZwqm1H1qIARomn9zRQanm++coSLdWUC2DEIIEo= Received: from localhost (p54ad4cb4.dip0.t-ipconnect.de [84.173.76.180]) by mx.zohomail.com with SMTPS id 1612959680325686.7033370775561; Wed, 10 Feb 2021 04:21:20 -0800 (PST) References: <87y2gd8k2v.fsf@gnu.org> <878s8dnpg4.fsf@gnu.org> <87im7gjgwz.fsf@gnu.org> <87r1lorjd6.fsf@elephly.net> <87wnvg2q5k.fsf@gnu.org> User-agent: mu4e 1.4.14; emacs 27.1 From: Ricardo Wurmus To: Mathieu Othacehe Subject: Re: Staging branch [substitute availability] In-reply-to: <87wnvg2q5k.fsf@gnu.org> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Wed, 10 Feb 2021 13:21:16 +0100 Message-ID: <87o8gsqfk3.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-ZohoMailClient: External Received-SPF: pass client-ip=136.143.188.51; envelope-from=rekado@elephly.net; helo=sender4-of-o51.zoho.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: 0.64 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=elephly.net header.s=zoho header.b=VoSs0qXb; arc=reject ("signature check failed: fail, {[1] = sig:zohomail.com:reject}"); dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 51C929403D5 X-Spam-Score: 0.64 X-Migadu-Scanner: scn1.migadu.com X-TUID: I4NAlLili7LC Mathieu Othacehe writes: >> Yes, this should be okay. Does this mean that we can get rid of all the >> other ports that we previously requested? > > Yes, the SSH tunnels and the associated open ports shouldn't be useful > anymore, as we'll be able to route all the build nodes traffic through > the VPN. Excellent! >> If you=E2=80=99re sure that it should be UDP port 51820 for incoming con= nections >> (and outgoing as well?) then I=E2=80=99ll submit the request. > > Yes, UDP 51820 for incoming and outgoing connections would be fine. The network team asks me to test it now. Could you please give it a try? --=20 Ricardo