From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hvM3m264Xz30LN for ; Tue, 29 Sep 2026 15:07:32 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hvM3h71Zwz2xHj for ; Tue, 29 Sep 2026 15:07:28 +0000 (UTC) Received: from smtp.smtpout.orange.fr (smtp-71.smtpout.orange.fr [80.12.242.71]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "*.smtpout.orange.fr", Issuer "DigiCert Global G2 TLS RSA SHA256 2020 CA1" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hvM3h00Qzzld for ; Tue, 29 Sep 2026 15:07:27 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=orange.fr header.s=t20230301 header.b=HhPSUj60; spf=pass (mail01.ipfire.org: domain of p27m@orange.fr designates 80.12.242.71 as permitted sender) smtp.mailfrom=p27m@orange.fr; dmarc=pass (policy=quarantine) header.from=orange.fr ARC-Seal: i=1; a=rsa-sha256; d=lists.ipfire.org; s=202003rsa; cv=none; t=1790694448; b=QTgPz0N7R+uZi3brUdNt9FK+w63yZbmfbgztgOzDJ7KrvrtwvwNeRdAYU66by8v0zGRLvZ ex5SlWrZNqemuZYeR46bq/xQGjA3YmoCQPFTreLGVBhvozL87Ss8mmjVHfS1nG/MpY9G3t GNMtm6yknXIi7D2qo4zhlJK3ULvWQTyQ2vXgLSZSEaNao7xg7+mtKzsQFLIpCK8PnuoXT7 2tL6ireGvylyQj5DETCObR8i+1fOaykHjqtfDC5ePHFvOMPA6vcUHdnEhfTVg6tPb5lCan pNdkzdNVzH0RFPiLUSywfSDWbYiJL2IEdrByK09G5zuA4bBx9T7FEJ1FbvuGFg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1790694448; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=DeRtDQGM+UJF0RlZeM6/Xv19DhI7Bh74wiSk73/7CVo=; b=GuwoFvz243eje9w35wJRmKixhISkIsFVr2RhshXuS54Ylj+qySMZiNeIt/j/8wg8FnAumd fbiHMVOrmx/qdrIftnHumcqAmY7fCM9EADwXQ+pZ3kieVofPWa42EklorsPkdEEkOtHLfw trH6AX9pXVVLvw4JIsQbtnn9DvdaA7R3ze1NZBLZ8JPRHR0Q7ptqJ+K1dMM78WQKEwmuSS dThbTyvXH2QBIpqxn7uAxnAclpC+ICD8oqZwq9tLoh3ZWlB27muMQdtoLfSqpQlX2xtrM9 i3t7rfCUIZIuVLtzllVptAbw7EKKOgOOKOhJJ+1lFouDUyNCxnEFAXBxWO0EIg== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=orange.fr header.s=t20230301 header.b=HhPSUj60; spf=pass (mail01.ipfire.org: domain of p27m@orange.fr designates 80.12.242.71 as permitted sender) smtp.mailfrom=p27m@orange.fr; dmarc=pass (policy=quarantine) header.from=orange.fr Received: from [192.168.20.32] ([176.146.212.228]) by smtp.orange.fr with ESMTPSA id BZQUxOGH20YAOBZQVxNeYb; Tue, 29 Sep 2026 17:07:27 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.fr; s=t20230301; t=1790694447; bh=DeRtDQGM+UJF0RlZeM6/Xv19DhI7Bh74wiSk73/7CVo=; h=Message-ID:Date:MIME-Version:Subject:To:From; b=HhPSUj60AiFNKPOk3tbttN6r2ogoPiXDtTJFxPQaGYkTi09ZVtbZb4/KifWI3J8h/ Ak6HQ4u4aGxMdL8y9Y7FswKLsXm2XAuezz0v8yg3blgUgBjkjdRRz98vt8sV5DihfF YD9qAfflEcERyPtBSMn+/r/qMxCRgy0/tmuWMhlXjD46HTTj927tCu2RgvDATu3LLY YP4pj4tBPP+bUJW6o/vfBtxoVtEQXzMnUct7zS5QD0W08PDvoAMv6m9E1FufNIQnIL on4RiSVVsIy6nmVO7vNikKehZb04p1/68Hi9c2p8MWU9x6clIq0a4NhytPHXFi842/ 1liF1L0rEOpoQ== X-ME-Helo: [192.168.20.32] X-ME-Auth: cDI3bUBvcmFuZ2UuZnI= X-ME-Date: Tue, 29 Sep 2026 17:07:27 +0200 X-ME-IP: 176.146.212.228 Message-ID: <706ad76b-d06e-4a85-975a-b53a2e39bf46@orange.fr> Date: Tue, 29 Sep 2026 17:07:26 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] urlfilter: Remove bundled Toulouse blacklist To: development@lists.ipfire.org References: <20260827091639.4064898-1-p27m@orange.fr> <217EBED3-D400-4695-A345-816C7DD47207@ipfire.org> <6C039B7E-2BAF-45B7-9C87-A7D008EF3443@ipfire.org> <807301F9-A750-46D9-B614-2D4B1E99CA7A@ipfire.org> Content-Language: fr, en-US From: p27m In-Reply-To: <807301F9-A750-46D9-B614-2D4B1E99CA7A@ipfire.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Action: no action X-Spamd-Result: default: False [-6.10 / 11.00]; BAYES_HAM(-3.00)[100.00%]; NEURAL_HAM(-3.00)[-1.000]; HFILTER_HELO_IP_A(1.00)[smtp.smtpout.orange.fr]; DMARC_POLICY_ALLOW(-0.50)[orange.fr,quarantine]; ONCE_RECEIVED(0.20)[]; RWL_MAILSPIKE_VERYGOOD(-0.20)[80.12.242.71:from]; R_SPF_ALLOW(-0.20)[+ip4:80.12.242.0/25]; R_DKIM_ALLOW(-0.10)[orange.fr:s=t20230301]; MX_GOOD(-0.10)[smtp-in.orange.fr]; R_DKIM_ALIGNED(-0.10)[strict]; MIME_GOOD(-0.10)[text/plain]; DKIM_TRACE(0.00)[orange.fr:+]; FREEMAIL_ENVFROM(0.00)[orange.fr]; RCPT_COUNT_ONE(0.00)[1]; FREEMAIL_FROM(0.00)[orange.fr]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[80.12.242.71:from]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; RECEIVED_SPAMHAUS_PBL(0.00)[176.146.212.228:received]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; IP_REPUTATION_SPAM(0.00)[asn: 3215(0.00), country: FR(0.00), ip: 80.12.242.71(0.00)]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:3215, ipnet:80.12.240.0/20, country:FR]; RCVD_VIA_SMTP_AUTH(0.00)[]; DKIM_REPUTATION(0.00)[0]; RCVD_COUNT_ONE(0.00)[1]; DWL_DNSWL_NONE(0.00)[orange.fr:dkim] X-Rspamd-Queue-Id: 4hvM3h00Qzzld X-Rspamd-Server: mail01.haj.ipfire.org Hi Michael, Yes, I think this is a good functional solution, although it would require a different implementation. However, it does not address the original problem that led me to propose this patch: the failure of a backup restore on fresh install when the backup contains a recent Toulouse blacklist. In fact, the IPFire DBL list also contains the following directories: - ads - porn - violence These are symlinks in the current Toulouse `blacklists.tar.gz`: - ads -> publicite - porn -> adult - violence -> agressif Therefore, if IPFire DBL is installed by default in new IPFire system, restoring a backup containing a recent Toulouse blacklist could still result in exactly the same directory/symlink conflict during the untar restoration. Regards, -- Philippe Le 29/09/2026 à 15:19, Michael Tremer a écrit : > Hello, > > I generally do agree with dropping the old data. It is more than obsolete, but that leaves us with some new problems: > > * No data is available immediately. Users would have to go down to the section of the page where they can select a list, enable the updates and trigger a manual update. Only then they will be able to start the URL Filter. This is a very convoluted process to enable a feature that should be very easy to configure. > > * If we shipped IPFire DBL by default, that would be a very sensible solution actually. But then there is a danger that people will enable the categories they want, enable URL Filter, but never enable the automatic updates. If we enable the automatic updates ourselves, we would run into the problem that a lot of IPFire instances all over the world would be updating their blacklists although they are never being used which will simply waste disk space and bandwidth. > > So I think we need a change which is to ship IPFire DBL for new installations, enable the auto-updates by default, but then only make them actually work if URL filter is enabled at the top. That will solve the problem in the latter case. > > Does that sound good to you, too? > > -Michael