Michael Fedell <[email protected]> writes:

> Thank you very much Collin!

Happy to help. Someone with access to the blocklist should see this
thread soon.

> Unfortunately, we cannot use a mirror for this directly as it is brought
> into our build as a transitive dependency via Conan. The conan package
> *explicitly* sets the ftp.gnu.org source.

Ah, thanks for the info. I looked at the file briefly and assumed that
you maintained it. But it is just a recipe for the conan package
manager, which I was not familiar with (it seems to be used with CMake,
but I mostly contribute to GNU packages using autoconf + automake).

I see a recent commit to the automake recipe changed it to use mirrors
[1]. I'll see if I can suggest that somewhere for other GNU packages as
well. It seems like more parts of gnu.org are using blocklists to
prevent DDoS/spam like Savannah [2]. Switching the other packages to
mirrors would help prevent this problem from occurring to you and others
in the future.

Collin

[1] 
https://github.com/conan-io/conan-center-index/commit/4a14e4c7c8a9a76522f8cd120c35bed72ee8ead3
[2] 
https://www.fsf.org/bulletin/2025/spring/defending-savannah-from-ddos-attacks

Reply via email to