Good evening, all,
This is a (shortened) repost of a sincere request to anyone using
any of the sa-blacklist files. The URLs to those files have changed;
please update your URLs in any automated download scripts. if you're
using RulesDuJour, please get the latest version as Chris has already
updated the URLs in that.
On Sat, 17 Sep 2005, William Stearns wrote:
(Summary - the sa-blacklist content is moving to new machines. If
you're downloading any of the 15 versions of this list, you'll need to change
the hostname you use in your download; see "What you need to do" below for
instructions.)
[snip history]
==== What you need to do ====
I've already set up new hostnames (*) from which the sa-blacklist
files can be pulled. If you're getting any sa-blacklist files over http,
please change the hostname you use to "www.sa-blacklist.stearns.org". If you
are using rsync to pull content, please use "rsync.sa-blacklist.stearns.org".
If you're using ftp, please use "ftp.sa-blacklist.stearns.org". In other
words, the exact same content should be viewable at
http://www.sa-blacklist.stearns.org/sa-blacklist/
ftp://ftp.sa-blacklist.stearns.org/pub/wstearns/sa-blacklist/
rsync://rsync.sa-blacklist.stearns.org/wstearns/sa-blacklist/
(although this last one is commonly used by the rsync application and
won't work in a web browser.)
There's a real benefit to you in taking the time to make this
switchover. My server was getting pegged for multiple minutes at the top of
the hour, so you'll find your downloads are much faster. Because of the way
the files are distributed, the content on the mirrors should always be as
current as the ones on the main server.
At some point in the near future, I'll be limiting access to or
completely shutting down the old URLs, so it's to your advantage to switch
over sooner rather than later. *smile*
I'd sincerely appreciate it if you could check any automated download
scripts or cron jobs and point them to these new hostnames. Sorry for the
inconvenience, but because these URL's are only used for this content, you
won't need to make this change again.
As one last suggestion, you might want to consider using the
ws.surbl.org dns lookup service which performs the same checks as
sa-blacklist.current.uri.cf , but _much_ faster and with a _lot_ less memory.
More information about this dns-based service is available at
http://www.surbl.org/ .
* These aliases will transparently pick a random server out of the available
machines, spreading out the load. As more mirrors come online you'll be sent
to them automatically.
Cheers,
- Bill
---------------------------------------------------------------------------
"It's a drop in the bucket, but if you get enough drops you get
a bucket."
-- Morgan Freeman, on the gulf coast disaster relief effort.
--------------------------------------------------------------------------
William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, freedups, p0f,
rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org
--------------------------------------------------------------------------
