On 2026-02-03 10:31:52, Dimitris T. wrote:
> hey all,
>
> Στις 3/2/26 06:01, ο/η onefang έγραψε:
> > Have you also been seeing these AI bots scanning your deb.devuan.org
> > Devuan mirror for lots and lots of non Devuan packages?
>
> nope, blocking AI bots at webserver level/globally.

I'm doing that now. Seems to be working for my mirror.

> > Does your deb.devuan.org mirror have non Devuan things available at that
> > address? Please don't do that, I think it's causing these attacks.
> > Devuan mirrors should all be showing the exact same thing at
> > deb.devuan.org, that's what they are for.
>
>
> yes, our mirror in general also hosts a skarnet mirror, and is open for
> mirroring other smaller things too. but no, deb.devuan.org points only to
> devuan stuff, nothing else.
>
> btw, don't see how deb.devuan.org can host non-devuan things (?). don't
> mirror admins have a explicit path/rewrite rules for that?

I would hope so. One of us might not be doing the right thing though,
and I'm hoping we all go and look now, and there's an "Oops, my fault,
fixed it now, sorry." or something.

> and if for whatever reason they keep deb.devuan.org host locally for other
> things too, maybe those mirrors shouldn't be listed in RR ?

I'm tempted to add a test to apt-panopticon. Though I'd much rather
people just did things right than me having to figure out yet another way
things can go wrong and testing for it.