From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hdrRY0xz0z36Vw for ; Mon, 07 Sep 2026 15:22:49 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hdrRT4cNVz2xVG for ; Mon, 07 Sep 2026 15:22:45 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hdrRJ3l8jz35Y; Mon, 07 Sep 2026 15:22:36 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1788794556; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=L8AUy0DcCNLKTUcbkRc6TA6RTqAImtHG0VUKG5jUeWo=; b=DDzg4a3Vbqd34jdbZJbn8I+oPeOdFp453d669RlwpvcypHg9Jpw+W6qGQo5vjO87e/W3qq ErgQbQMDp4D5dTAg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1788794556; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=L8AUy0DcCNLKTUcbkRc6TA6RTqAImtHG0VUKG5jUeWo=; b=X3o27AzKhZPJyF4iIxH6bhmT/x093nxtB8gYn/86mPu7Y6fBzbw0IBKr2YweQa2xRS4EZg VeJvF3h9K048vhO0qfkd8O28HBpWbD0UbAwQicy96gfLeZUOXi/+M6+37yBGr+guAgZGs1 GD6VTTyEbUMEmrpWaFk2Xb4FUxRIfQIh2abHcJTXWxTQMRwW9GLubbzGPNZbLTqze5/ixo 6y93GgZeqjV7BYwErQfzP0/M55qghrZTT47X42U0VdX8GE52LpZII0EgAa9VhMNzmRwzTv 3Nx8hA7uuHA8IEnWWv3/vw5r1HlWeEJqKxfYLARjPEaXLt0Wn91rcKU+h1H8/A== Content-Type: text/plain; charset=utf-8 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: Mime-Version: 1.0 Subject: Re: [PATCH] urlfilter: Remove bundled Toulouse blacklist From: Michael Tremer In-Reply-To: Date: Mon, 7 Sep 2026 16:22:35 +0100 Cc: development@lists.ipfire.org Content-Transfer-Encoding: quoted-printable Message-Id: <6C039B7E-2BAF-45B7-9C87-A7D008EF3443@ipfire.org> References: <20260827091639.4064898-1-p27m@orange.fr> <217EBED3-D400-4695-A345-816C7DD47207@ipfire.org> To: p27m Hello Phil, Yes, this makes sense so far. But what actually happens when squidGuard = is being started with nothing? I remember that this list has been = treated as a dummy. Did you test this case too? -Michael > On 29 Aug 2026, at 16:56, p27m wrote: >=20 > Hi Michael, >=20 > Thank you for your reply. >=20 > The problem described in the bug report is actually quite simple. >=20 > Currently, the blacklist included in the IPFire repository and = installed with IPFire dates from June 15, 2005, so it is now obsolete. > Since March 2026, the University of Toulouse has changed some = directories in its blacklist into symbolic links. > Therefore, when restoring a backup containing a blacklist downloaded = after this change, `tar` can fail because symbolic links cannot replace = existing directories. As a result, the backup restoration fails. >=20 > @adolf previously added a fix to `backup.pl` which removes the = existing contents of `/var/ipfire/urlfilter/blacklists/` before = extracting the backup. >=20 > However, I recently discovered that the problem could still occur when = restoring a backup from a backup ISO. >=20 > For this reason, I thought that the simplest solution, and the best = way to avoid similar problems in the future, would be to remove the = obsolete blacklist archive from the installation. >=20 > This patch does not prevent URLFilter from working without an = installed blacklist. It also ensures that the old blacklist shipped with = IPFire cannot interfere with restoring a newer blacklist from a backup. >=20 > I have tested the patch with upgrades, fresh ISO installations, and = restoration of backups containing both the Toulouse blacklist and the = IPFire DBL blacklist. >=20 > Best regards, >=20 > Philippe >=20 > Le 29/08/2026 =C3=A0 17:31, Michael Tremer a =C3=A9crit : >> Thank you very much for this patch. >>=20 >> I could not quite figure out what you want to achieve with this = change. Is this data being shipped causing some problems? The bug report = did not give me the information I was looking for either. >>=20 >> All the best, >> -Michael