RE : Who uses @packages.d.o mail?

2009-05-25 Thread Jonathan Lafontaine
spam getting worst than I thought!

as long as the white list do not grow up...

De : Stephen Gran [sg...@debian.org]
Date d'envoi : 22 mai 2009 17:30
À : dda
Objet : Who uses @packages.d.o mail?

Hello all,

So I've looked through a few weeks of mail logs to packages.debian.org,
and it looks like it collects some useful mail from automated scripts
on various debian.org machines (primarily ries), and about 1000 spams a
day from elsewhere.  I haven't done an exhaustive survey, but it seems
pretty clear so far that the domain does not get any significant amount
of legitimate mail from machines other than the debian.org hosts.

If this is actually the case, I'd like to close the domain down to only
accept mail from other debian.org machines.  If it's not, I'd like to work
with people who do use it to either make it possible to send their mail
from debian.org machines or from a short whitelist of machines elsewhere.
If this isn't possible, we'll of course continue to offer it as a public
service if it's needed.  It's just that if it doesn't need to be a
public facing mail domain, we all get a little less spam in our inbox,
and the service becomes easier to administer.

In the large scheme of things, of course, 1000 spams a day is pretty
minimal.  The amount of processing power that goes into turning away
the other 6 mails/day and then resending the 1000 spams that do get
through, though, does approach significance, and I'd like to make it
simple to admin and more friendly to the final recipients.

Cheers,
--
 -
|   ,''`.Stephen Gran |
|  : :' :sg...@debian.org |
|  `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
 -


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-25 Thread Antonio Radici

Hi,
I've always found package@packages.debian.org as the easiest way to 
contact the maintainer and anyone involved, for example if I'm working 
on a particular package I'll contact the co-maintainers using that 
mailing list.


It is also good because you don't need to request for a mailing list 
where you don't really need one (in my case it's just 5-6 mails a month).


Cheers
Antonio


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-24 Thread Marco d'Itri
On May 23, Steve M. Robbins st...@sumost.ca wrote:

 I'm open to other options, of course.  What is the recommended
 practice for this scenario?
Implement spam filtering?

-- 
ciao,
Marco


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-24 Thread Julian Gilbey
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 Hello all,
 
 So I've looked through a few weeks of mail logs to packages.debian.org,
 and it looks like it collects some useful mail from automated scripts
 on various debian.org machines (primarily ries), and about 1000 spams a
 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.

I occasionally do use this route, although I could email the package
maintainers directly.  Would it be possible to allow mail from
arbitrary hosts as long as it has some special header, say
X-Debian-Pkg: foo where foo matches the package being mailed?
However, I wouldn't personally have a problem with it being blocked
completely from non-Debian machines.

   Julian


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-24 Thread Andrew Pollock
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 Hello all,
 
 So I've looked through a few weeks of mail logs to packages.debian.org,
 and it looks like it collects some useful mail from automated scripts
 on various debian.org machines (primarily ries), and about 1000 spams a
 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.
 
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.
 If this isn't possible, we'll of course continue to offer it as a public
 service if it's needed.  It's just that if it doesn't need to be a
 public facing mail domain, we all get a little less spam in our inbox,
 and the service becomes easier to administer.
 
 In the large scheme of things, of course, 1000 spams a day is pretty
 minimal.  The amount of processing power that goes into turning away
 the other 6 mails/day and then resending the 1000 spams that do get
 through, though, does approach significance, and I'd like to make it
 simple to admin and more friendly to the final recipients.

How hard would it be to set up a self-service whitelisting interface? I've
used @packages.do.o addresses sporadically in the past to contact package
maintainers when I've been too lazy to look them up.

regards

Andrew


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-24 Thread Don Armstrong
On Sun, 24 May 2009, Marco d'Itri wrote:
 On May 23, Steve M. Robbins st...@sumost.ca wrote:
  I'm open to other options, of course.  What is the recommended
  practice for this scenario?

 Implement spam filtering?

I think adding the lists.debian.org and bugs.debian.org ruleset[1] to
packages.debian.org (possibly with some tweaks) will help resolve the
issue with spam flowing through packages.debian.org. [The only other
issue is that packages.debian.org's MX is on a restricted machine, so
we'd need wider access to the mail logs to track down false
positives.]


Don Armstrong

1: svn://svn.debian.org/svn/pkg-listmaster/trunk/spamassassin_config 
-- 
If you find it impossible to believe that the universe didn't have a
creator, why don't you find it impossible that your creator didn't
have one either?
 -- Anonymous Coward http://slashdot.org/comments.pl?sid=167556cid=13970629

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Paul Slootman
On Fri 22 May 2009, Stephen Gran wrote:
 
 So I've looked through a few weeks of mail logs to packages.debian.org,
 and it looks like it collects some useful mail from automated scripts
 on various debian.org machines (primarily ries), and about 1000 spams a
 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.

I have received legitimate email from users of a package sent to
pack...@packages.debian.org. I thought that was also the main purpose of
those email addresses... They could have looked up the real maintainer
email, but the packages.debian.org thing makes it easier.

I think simply refusing mail with only an image attached would help
against the spam. Certainly all the spam I've received via
packages.debian.org the last couple of months was image spam, mail size
14-19kB.


Paul Slootman


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Artur R. Czechowski
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.
What about requiring a GPG signed email by key in developers or maintainers
keyring?

Regards
Artur


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Bill Allombert
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 Hello all,
 
 So I've looked through a few weeks of mail logs to packages.debian.org,
 and it looks like it collects some useful mail from automated scripts
 on various debian.org machines (primarily ries), and about 1000 spams a
 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.

I use packages.debian.org each time I reassign a bug to a package to make
sure the new maintainer is notified. I think this should be a best
practice.

I also use it to reach maintainers where a full bug report is not warranted.

So I disagree with closing down this service.

Cheers,
-- 
Bill. ballo...@debian.org

Imagine a large red swirl here. 


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-23 Thread Eugene V. Lyubimkin
Bill Allombert wrote:
 I use packages.debian.org each time I reassign a bug to a package to make
 sure the new maintainer is notified. I think this should be a best
 practice.
BTS automatically adds maintainers of package where bug went to To/CC of
reassign mail, doesn't it?

-- 
Eugene V. Lyubimkin aka JackYF, JID: jackyf.devel(maildog)gmail.com
C++/Perl developer, Debian Maintainer



signature.asc
Description: OpenPGP digital signature


Re: Who uses @packages.d.o mail?

2009-05-23 Thread Frans Pop
On Saturday 23 May 2009, Artur R. Czechowski wrote:
 What about requiring a GPG signed email by key in developers or
 maintainers keyring?

As others have already mentioned, the addresses are also intended as 
contact point for upstream developers and users, i.e. people who don't 
have such a key.

Requiring some magic header is a bad idea for the same reason.

Cheers,
FJP


signature.asc
Description: This is a digitally signed message part.


Re: Who uses @packages.d.o mail?

2009-05-23 Thread Michael Banck
On Sat, May 23, 2009 at 12:46:08PM +0300, Eugene V. Lyubimkin wrote:
 Bill Allombert wrote:
  I use packages.debian.org each time I reassign a bug to a package to make
  sure the new maintainer is notified. I think this should be a best
  practice.
 BTS automatically adds maintainers of package where bug went to To/CC of
 reassign mail, doesn't it?

Please note that Stephen Gran (only on -project I think) mentioned that
the proposal is off the table after people indicated it is indeed being
used.


Michael


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Bernd Zeimetz
Stephen Gran wrote:

 It sounds like the service should probably stay open.  I would have been
 happy to restrict something that is only a spam attractor, but if it's
 more than that, than I'm happy people find it a useful service.  If the
 teams who do use it think it can still be useful and be restricted,
 that's a discussion I still think is worth having, but I don't think we
 need to rush towards it.

It is a useful service, definitely. If I remember right a X-... header is
required for delivering vcs mails from external servers, this should block spam
very well there. Its not really possible to use such restrictions on the
mailtainer contact mail, though.

-- 
 Bernd Zeimetz   Debian GNU/Linux Developer
 GPG Fingerprint: 06C8 C9A2 EAAD E37E 5B2C BE93 067A AD04 C93B FF79


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Andreas Metzler
Eugene V. Lyubimkin jackyf.de...@gmail.com wrote:
 Bill Allombert wrote:
 I use packages.debian.org each time I reassign a bug to a package to make
 sure the new maintainer is notified. I think this should be a best
 practice.
 BTS automatically adds maintainers of package where bug went to To/CC of
 reassign mail, doesn't it?

They just receive the response from the BTS. However often
the mails sent *too* the bts look like this:


reassign 123456 example
thanks
[lengthy explanation why this is a bug in example]


and the response from the bts ends after the thanks, missing the
explanation.
cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Michael Banck
On Sat, May 23, 2009 at 12:58:32PM +0200, Andreas Metzler wrote:
 Eugene V. Lyubimkin jackyf.de...@gmail.com wrote:
  Bill Allombert wrote:
  I use packages.debian.org each time I reassign a bug to a package to make
  sure the new maintainer is notified. I think this should be a best
  practice.
  BTS automatically adds maintainers of package where bug went to To/CC of
  reassign mail, doesn't it?
 
 They just receive the response from the BTS. However often
 the mails sent *too* the bts look like this:
 
 
 reassign 123456 example
 thanks
 [lengthy explanation why this is a bug in example]
 
 
 and the response from the bts ends after the thanks, missing the
 explanation.

That's why it is recommended to add the explanation, in comments (#),
above the BTS control commands.


Michael


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Frank Lin PIAT
Stephen Gran wrote:
 This one time, at band camp, Jonathan Wiltshire said:
 The debian-l10n-english team, and perhaps others, use this domain to
 keep the maintainer in the loop during Smith English-language reviews
 and the subsequent translations.

 This one time, at band camp, Adeodato Simó said:
 I use it all the time when eg. reassigning a bug (reassign mails are
 supposed to be CC'ed to the destination maintainers), rather than go up
 and look who's listed as maintainer and uploader and CC them all.

 These are the sort of helpful answers that make it clear that people do
 at least sporadically use the service.  I didn't see anything useful in
 the week of logs I reviewed, but activity like that described above is
 probably reasonably 'spiky' and I'm not surprised I missed it.

Keep in mind that it's the advertized way to get in touch with package
maintainers at :

http://www.debian.org
 - Contacts
  - Reporting problems in Debian packages
   - If you simply want to communicate with the maintainer of a Debian
   package, [..] package name@p.d.o

Regards,

Franklin


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Frank Küster
Stephen Gran sg...@debian.org wrote:

 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.

 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  

What's the alternative way to send mail to the maintainer of a package?
I don't use that feature every day, but when I use it every couple of
months (more frequently at times where teTeX or TeXlive changes affected
lots of other packages) I'm happy that I needn't check the maintainer in
the control file.

@packages.qa.debian.org has two disadvantages: I need to look up the
source package name (which isn't hard), and I have to either remember,
or be told by a bounce (?), that a special header needs to be included,
and look up which in the developer's reference. 

Regards, Frank
-- 
Dr. Frank Küster
Debian Developer (TeXLive)
VCD Aschaffenburg-Miltenberg, ADFC Miltenberg
B90/Grüne KV Miltenberg


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-23 Thread Steve M. Robbins
I use b...@packages.debian.org to contact the maintainer of blah.  I
use this to alert maintainers of reverse build-deps when I do
something drastic to one of the libraries I maintain.

I'm open to other options, of course.  What is the recommended
practice for this scenario?

Thanks,
-Steve


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Raphael Geissert
Hello Stephen,

On Friday 22 May 2009 16:30:03 Stephen Gran wrote:
[...]
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.

@packages.d.o is known to be the easiest way to get in touch with a 
maintainer, and is often used when CC'ing maintainers of multiple packages.

Cheers,
-- 
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-22 Thread Robert Millan

Much appreciated.  Thanks.

On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 Hello all,
 
 So I've looked through a few weeks of mail logs to packages.debian.org,
 and it looks like it collects some useful mail from automated scripts
 on various debian.org machines (primarily ries), and about 1000 spams a
 day from elsewhere.  I haven't done an exhaustive survey, but it seems
 pretty clear so far that the domain does not get any significant amount
 of legitimate mail from machines other than the debian.org hosts.
 
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.
 If this isn't possible, we'll of course continue to offer it as a public
 service if it's needed.  It's just that if it doesn't need to be a
 public facing mail domain, we all get a little less spam in our inbox,
 and the service becomes easier to administer.
 
 In the large scheme of things, of course, 1000 spams a day is pretty
 minimal.  The amount of processing power that goes into turning away
 the other 6 mails/day and then resending the 1000 spams that do get
 through, though, does approach significance, and I'd like to make it
 simple to admin and more friendly to the final recipients.
 
 Cheers,
 -- 
  -
 |   ,''`.Stephen Gran |
 |  : :' :sg...@debian.org |
 |  `. `'Debian user, admin, and developer |
 |`- http://www.debian.org |
  -



-- 
Robert Millan

  The DRM opt-in fallacy: Your data belongs to us. We will decide when (and
  how) you may access your data; but nobody's threatening your freedom: we
  still allow you to remove your data and not access it at all.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-22 Thread Gerfried Fuchs
* Stephen Gran sg...@debian.org [2009-05-22 23:30:03 CEST]:
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.

 Not everyone has access to an debian.org machine, and
@packages.debian.org is the address used in debconf po files for
reporting messageID bugs to. A canonical easy way to reach the
maintainer(s) of a package without digging around in various fields
though is appreciated, and this is the one.

 So long,
Rhonda


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-22 Thread Neil Williams
On Fri, 22 May 2009 22:30:03 +0100
Stephen Gran sg...@debian.org wrote:

 Hello all,
 
 So I've looked through a few weeks of mail logs to
 packages.debian.org, and it looks like it collects some useful mail
 from automated scripts on various debian.org machines (primarily
 ries), and about 1000 spams a day from elsewhere.  I haven't done an
 exhaustive survey, but it seems pretty clear so far that the domain
 does not get any significant amount of legitimate mail from machines
 other than the debian.org hosts.

It does save creating a specific alioth mailing list for a group of
maintainers and uploaders.

It's started being used for svn-buildpack...@p.d.o

It's only a convenience thing for discussions that aren't actually
related to existing bug reports.

 If this is actually the case, I'd like to close the domain down to
 only accept mail from other debian.org machines.  If it's not, I'd
 like to work with people who do use it to either make it possible to
 send their mail from debian.org machines or from a short whitelist of
 machines elsewhere. If this isn't possible, we'll of course continue
 to offer it as a public service if it's needed.  It's just that if it
 doesn't need to be a public facing mail domain, we all get a little
 less spam in our inbox, and the service becomes easier to administer.

Maybe a list of packages that do use it and an address to email for
those who want to start using it at a later date?

-- 


Neil Williams
=
http://www.data-freedom.org/
http://www.linux.codehelp.co.uk/
http://e-mail.is-not-s.ms/



pgpaCrIvNHkC0.pgp
Description: PGP signature


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Jonathan Wiltshire
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
 If this is actually the case, I'd like to close the domain down to only
 accept mail from other debian.org machines.  If it's not, I'd like to work
 with people who do use it to either make it possible to send their mail
 from debian.org machines or from a short whitelist of machines elsewhere.

The debian-l10n-english team, and perhaps others, use this domain to
keep the maintainer in the loop during Smith English-language reviews
and the subsequent translations. These mails almost certainly won't come 
from debian.org hosts (and not being a DD, mine couldn't do anyway).

-- 
Jonathan Wiltshire

PGP/GPG: 0xDB800B52 / 4216 F01F DCA9 21AC F3D3  A903 CA6B EA3E DB80 0B52


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Adeodato Simó
 I haven't done an exhaustive survey, but it seems pretty clear so far
 that the domain does not get any significant amount of legitimate mail
 from machines other than the debian.org hosts.

As I understand it, pkg@packages.d.o is the standard way of contacting
the maintainers of a package in an easy and efficient way.

I use it all the time when eg. reassigning a bug (reassign mails are
supposed to be CC'ed to the destination maintainers), rather than go up
and look who's listed as maintainer and uploader and CC them all.

Plus, fortunately, packages.d.o has been sending a copy to the PTS for
some time now, so even interested people who are not listed as
maintainer/uploader will be able to read them.

Personally, I think we should keep it open. If it becomes unsustainable,
we could require a whitelist header for mail sent from non debian.org
machines, like the PTS does. But if we do that, we could ditch it
altogether and just use the PTS (for me, one of the main advantages of
packages.d.o is not having to include the whitelist header). Does
somebody know if the PTS is mailing the maintainers already?

Cheers,

-- 
- Are you sure we're good?
- Always.
-- Rory and Lorelai


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-22 Thread Frans Pop
On Friday 22 May 2009, Stephen Gran wrote:
 So I've looked through a few weeks of mail logs to packages.debian.org,

I always use it to CC the maintainer(s) of a package I reassign a bug to, 
or if I want to CC a package maintainer on some discussion.

For me it's the most natural address to use, much more natural than 
package@p.qa.d.o.

Cheers,
FJP


signature.asc
Description: This is a digitally signed message part.


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Frans Pop
On Friday 22 May 2009, Neil Williams wrote:
 Maybe a list of packages that do use it and an address to email for
 those who want to start using it at a later date?

That would defeat its purpose. It is not about which maintainers use it, 
but about who uses it to contact maintainers.

Cheers,
FJP


signature.asc
Description: This is a digitally signed message part.


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Marco d'Itri
On May 22, Raphael Geissert atom...@gmail.com wrote:

 @packages.d.o is known to be the easiest way to get in touch with a 
 maintainer, and is often used when CC'ing maintainers of multiple packages.
Then it needs to be fixed, soon, because it the last few weeks I started
receiving a huge quantity of trivially rejectable pills spam from it.

-- 
ciao,
Marco


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Stephen Gran
This one time, at band camp, Jonathan Wiltshire said:
 The debian-l10n-english team, and perhaps others, use this domain to
 keep the maintainer in the loop during Smith English-language reviews
 and the subsequent translations.

This one time, at band camp, Adeodato Simó said:
 I use it all the time when eg. reassigning a bug (reassign mails are
 supposed to be CC'ed to the destination maintainers), rather than go up
 and look who's listed as maintainer and uploader and CC them all.

These are the sort of helpful answers that make it clear that people do
at least sporadically use the service.  I didn't see anything useful in
the week of logs I reviewed, but activity like that described above is
probably reasonably 'spiky' and I'm not surprised I missed it.

It sounds like the service should probably stay open.  I would have been
happy to restrict something that is only a spam attractor, but if it's
more than that, than I'm happy people find it a useful service.  If the
teams who do use it think it can still be useful and be restricted,
that's a discussion I still think is worth having, but I don't think we
need to rush towards it.

Cheers,
-- 
 -
|   ,''`.Stephen Gran |
|  : :' :sg...@debian.org |
|  `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
 -


signature.asc
Description: Digital signature


Re: Who uses @packages.d.o mail?

2009-05-22 Thread Lionel Elie Mamane
On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:

 So I've looked through a few weeks of mail logs to
 packages.debian.org, (...) it seems pretty clear so far that the
 domain does not get any significant amount of legitimate mail from
 machines other than the debian.org hosts.

I always give it to upstreams as a contact address for any issue
around the package. In that way, even if I'm not the maintainer
anymore, it will reach the right person.

-- 
Lionel


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Who uses @packages.d.o mail?

2009-05-22 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

On Fri, May 22, 2009 at 10:30:03PM +0100, Stephen Gran wrote:
So I've looked through a few weeks of mail logs to packages.debian.org, 
and it looks like it collects some useful mail from automated scripts 
on various debian.org machines (primarily ries), and about 1000 spams a 
day from elsewhere.  I haven't done an exhaustive survey, but it seems 
pretty clear so far that the domain does not get any significant amount 
of legitimate mail from machines other than the debian.org hosts.

If this is actually the case, I'd like to close the domain down to only 
accept mail from other debian.org machines.  If it's not, I'd like to 
work with people who do use it to either make it possible to send their 
mail from debian.org machines or from a short whitelist of machines 
elsewhere. If this isn't possible, we'll of course continue to offer it 
as a public service if it's needed.  It's just that if it doesn't need 
to be a public facing mail domain, we all get a little less spam in our 
inbox, and the service becomes easier to administer.

In the large scheme of things, of course, 1000 spams a day is pretty 
minimal.  The amount of processing power that goes into turning away 
the other 6 mails/day and then resending the 1000 spams that do get 
through, though, does approach significance, and I'd like to make it 
simple to admin and more friendly to the final recipients.


Whenever users contact me privately regarding a package, I encourage 
them to instead target the package email address, so that fellow 
maintainers of team-maintained packages receive them as well.

I am not against dropping/limiting the package email addresses, just 
saying that in addition to the concrete amount of mail it might also be 
relevant to take into account the expectation of such account existing, 
even if used less frequently.  And the convenience of telling users to 
simply _email_ the package, instead of explaining them how to _find_ the 
email address from packaging metadata.


Kind regards,

  - Jonas


P.S.

I am subscribed to d-project but not d-devel, so please cc me if 
replying to d-devel but not to d-project.

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEAREDAAYFAkoXMdYACgkQn7DbMsAkQLjR7ACeNUJjfnGjvGv3EeTPZT7ODCWN
UXwAoJpOGv7d2+QDi9VZMyHrsQciWHnT
=sjDR
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org