spamming thats using Andrew and cocoon
Hi folks, I keep getting an email with an attachment that claims to be from Andrew to Cocoon-dev. Anybody else getting this? If you find out the address of the bastard doing this is in my corner of the world, I'm willing to go thump some sense into it's head. Here are the details: Received: from [208.185.179.12] by mail (ArGoSoft Mail Server Plus for WinNT/2000, Version 1.8 (1.8.5.6)); Fri, 30 Apr 2004 10:45:57 -0400Received: (qmail 97567 invoked by uid 500); 30 Apr 2004 14:45:17 -Mailing-List: contact [EMAIL PROTECTED]; run by ezmlmPrecedence: bulklist-help: mailto:[EMAIL PROTECTED]list-unsubscribe: mailto:[EMAIL PROTECTED]list-post: mailto:[EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]Delivered-To: mailing list [EMAIL PROTECTED]Received: (qmail 97239 invoked from network); 30 Apr 2004 14:44:57 -Received: from unknown (HELO aspescola36.net) (200.180.29.90) by daedalus.apache.org with SMTP; 30 Apr 2004 14:44:57 -Date: Fri, 30 Apr 2004 11:44:38 -0300To: "Cocoon-dev" [EMAIL PROTECTED]From: "Andrew" [EMAIL PROTECTED]Subject: Re: Thank you!Message-ID: [EMAIL PROTECTED]MIME-Version: 1.0Content-Type: multipart/mixed; boundary="xzuretlesxsyhcdcdpsy"X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N --Roger
Re: spamming thats using Andrew and cocoon
Thanks. I'll try spamassassin and osx. - Original Message - From: Bertrand Delacretaz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, April 30, 2004 1:24 PM Subject: Re: spamming thats using Andrew and cocoon Le 30 avr. 04, à 17:01, Roger I Martin PhD a écrit : ...I keep getting an email with an attachment that claims to be from Andrew to Cocoon-dev. Anybody else getting this? If you find out the address of the bastard doing this is in my corner of the world, I'm willing to go thump some sense into it's head There are lots of spam flying around with fake from addresses @apache.org (among others) these days. And they're usually sent from various infected computers, so there's not much than can be done about it, except getting decent spam filters. I use spamassassin server-side, combined with osx mail client's spam filter, with good results. -Bertrand
Re: E-mail account disabling warning.
Is there any digital signer anyone recommends? What is the procedure? Can it be set automatic or is it something to remember and do everytime? -Thanks. - Original Message - From: Stefano Mazzocchi [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, March 03, 2004 4:24 PM Subject: Re: E-mail account disabling warning. Steven Noels wrote: On 03 Mar 2004, at 17:23, Brian Behlendorf wrote: On Wed, 3 Mar 2004, Sam Ruby wrote: Neither. This email contained: Return-Path: [EMAIL PROTECTED] From: [EMAIL PROTECTED] ... neither of which is subscribed to [EMAIL PROTECTED] From what I have read, ezmlm uses a separate SMTP 'SENDER' field, which isn't retained in the archive. My bets are that this field contained the value [EMAIL PROTECTED] No. Return-Path does capture the email address used by ezmlm to figure out if and when to send. As it turns out, [EMAIL PROTECTED] is able to post as he's in the allow database for that list. That's what I was afraid of, since I happened to know Andrew uses *both* addresses (or has been using them), at the very least in private mails sent to me. How can we defend ourselves from bots spamming the lists using subscribed or allowed addresses...? the only way is to require everybody to sign their email. But enforcing this would be a serious PITA. Or do we need to actively monitor/clean up stale entries in the allow list? this doesn't really reduce the problem. -- Stefano.
Re: [Proposal] add DTDs to Apache website
- Original Message - From: David Crossley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 16, 2004 2:50 AM Subject: Re: [Proposal] add DTDs to Apache website Roger I Martin PhD wrote: There are schema definitions at C:\apache\cocoon-2.1\src\blocks\databases\samples\xsp\esql.xsd for esql C:\apache\cocoon-2.1\src\documentation\xdocs\drafts\sitemap-2.1-draft.xsd for *.xmap Are these to be organised with the DTDs of this proposal? No, there are no such plans. This proposal is only attempting to deal with the set of document DTDs. Why would those XSDs need to be on a website? For the same purpose as DTDs? Or moved into Cocoon so they can be utilized by tools? I was thinking about visualization and editing assistants. The sitemap XSD is draft and did not receive ongoing community support. It was followed a RELAX NG effort which suffered the same fate. So they remain in draft state.. --David
Re: [Proposal] add DTDs to Apache website
There are schema definitions at C:\apache\cocoon-2.1\src\blocks\databases\samples\xsp\esql.xsd for esql C:\apache\cocoon-2.1\src\documentation\xdocs\drafts\sitemap-2.1-draft.xsd for *.xmap Are these to be organised with the DTDs of this proposal? - Original Message - From: Stefano Mazzocchi [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, January 15, 2004 10:01 AM Subject: Re: [Proposal] add DTDs to Apache website On 15 Jan 2004, at 05:05, David Crossley wrote: Joerg Heinicke wrote: David Crossley wrote: 3) The Forrest website is built using the stable version of Forrest (currently v0.5.1). So how will DTDs from the current CVS (v0.6-dev) get into the website CVS [3]? Manual copy? See 4). 4) If some committer changes the DTDs in CVS then they will be out-of-sync. Will committers remember to do the manual copy? See 3). I don't see this problem. On the one hand there are the older files like document 0.10 or 0.11 that won't be touched, on the other hand 0.12 (or is it already old too?) which is developed at the moment. You can't make incompatible changes for one version, otherwise you will break possibly thousands of documents out there. So only extensions are possible. Absolutely. I think that i got a bit mixed up with whatever i was trying to say in item 4. We need proper version control and we have a naming convention for that. Forrest has been careful not to introduce any incompatible changes. However, i think that we need to be more careful about adding even new optional stuff. Every change should be a totally new DTD version. In conclusion: the update cycle must not be once per minute, but maybe once per day or only week. Now what about having a cron job running on the website server that checks out recent DTD versions? Forcing manual work that's critical and without much effort automatically doable sounds not that good. Good idea. Nicola Ken suggested something similar. Ok, a little more .htaccess magic: # First, proxy the content straight out of ViewCVS ProxyPass/forrest/ http://cvs.apache.org/viewcvs.cgi/*checkout*/xml-forrest/src/core/ context/resources/schema/dtd/ ProxyPassReverse /forrest/ http://cvs.apache.org/viewcvs.cgi/*checkout*/xml-forrest/src/core/ context/resources/schema/dtd/ # Now, since ViewCVS is pretty slow, make sure you cache it CacheEnable mem /forrest/ # for a day CacheDefaultExpire 86400 MCacheSize 4096 MCacheMaxObjectCount 100 MCacheMinObjectSize 1 MCacheMaxObjectSize 2048 # and in case your client is a good web citizen, tell the proxies down the road # to avoid calling us since we guarantee the content is fresh for a day ExpiresActive On ExpiresDefault access plus 1 day -- Stefano, who has been waiting for some 18 months for somebody else to come up with the idea of having forrest pregenerating the .htaccess file to do some sort of poor-man multichannel or content negotiation, but has lost hope so it's time to inject notion in the system.
Re: ssh cvs access from Windows
Hi Timothy, Have you resolved this yet? I could push some snapshots of the WinCVS and PuTTY configurations(for a sourceforge project) to you if it helps. One of the things that made WinCVS and PuTTY work together for me was saving the PuTTY configuration as a Session and use the session name as the host address in the WinCVS preference so that plink can use it. --Roger - Original Message - From: David Crossley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 15, 2003 9:08 PM Subject: Re: ssh cvs access from Windows Torsten Curdt wrote: also see http://nagoya.apache.org/wiki/apachewiki.cgi?SshCVSaccess Yep, and don't forget the Committers FAQ which links to all of the resources mentioned so far, and more. Scattered, isn't it. http://www.apache.org/dev/committers.html which links to http://wiki.apache.org/incubator/PoliciesAndProcedures --David
Re: ssh cvs access from Windows
Hi Joerg, I don't know why for sure. My WinCVS version is 1.3.13.1 Beta 13 (Build 1) and PuTTY version is 0.53b. Could it be because I never set the CVS_RSH environment variable? In WinCVS Preferences[Settings] the paths to RSA private key file directory and plink are set absolute. --Roger - Original Message - From: Joerg Heinicke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 16, 2003 12:11 PM Subject: Re: ssh cvs access from Windows On 16.12.2003 17:58, Roger I Martin PhD wrote: Hi Timothy, Have you resolved this yet? I could push some snapshots of the WinCVS and PuTTY configurations(for a sourceforge project) to you if it helps. One of the things that made WinCVS and PuTTY work together for me was saving the PuTTY configuration as a Session and use the session name as the host address in the WinCVS preference so that plink can use it. I do not need to do this, for me it works as is. Maybe version dependent? Joerg
Re: ssh cvs access from Windows
Yep. Most of anything I know comes from http://sourceforge.net/docman/display_doc.php?docid=768group_id=1 and http://sourceforge.net/docman/display_doc.php?docid=761group_id=1 But a wicki page would be good. Let me know how you want to proceed. One of the pros and cons between dialog based and command line based cvs clients is writing a good doc where dialog boxes are used. Do we want snapshots of them? Also do we want to describe WinCVS, Eclipse and NetBeans (any other?) approaches? --Roger - Original Message - From: Timothy Larson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 16, 2003 1:31 PM Subject: Re: ssh cvs access from Windows --- Roger I Martin PhD [EMAIL PROTECTED] wrote: Hi Timothy, Have you resolved this yet? I could push some snapshots of the WinCVS and PuTTY configurations(for a sourceforge project) to you if it helps. One of the things that made WinCVS and PuTTY work together for me was saving the PuTTY configuration as a Session and use the session name as the host address in the WinCVS preference so that plink can use it. Thanks for checking. I did resolve it (the same way you mention above): http://marc.theaimsgroup.com/?l=xml-cocoon-devm=107151966617686w=2 BTW, my Windows configuration uses: Putty version 0.53b WinCVS version 1.2.0 Perhapse we should collect the fragments of knowledge from all the various sources into one coherent wiki page? --Tim Larson __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/
Re: OXF rebuttal
Hi Erik, I don't see any In the works or Upcoming on the Cocoon column of the comparison. As far as what Cocoon recommends, does not clearly encourage, sheesh, I've got the Cocoon source code; I can do anything I want. Where Cocoon documentation is minimal; remember I've got the source code. Cocoon doesn't discourage me from doing anything. quote cocoon supports proprietary actions and XSP /quote Say what? quote cocoon supports proprietary actions and XSP /quote How are you planning to convince an intelligent audience that JSP is superior to XSP when XSP extends the concept of JSP from just html to all xml documents? quote The Cocoon sitemap was initially designed to handle linear pipelines according to a generation / transformation / serialization pattern suited for Web publishing. This initial limitation has been lifted and Cocoon now supports operating independently from a Servlet container. /quote Can be rewritten rewrite Yes /rewrite How the first version was designed is immaterial even to the biased comparison your making with Cocoon version 2.1. Your examples are painfully slow, tiny and unattractive at your site. What's choking it? Validation? The xslt2 one doesn't work. Most of them are based on sourceforge and other .org code bases where I can go and get better examples and plug them into other publishing frameworks. Your mailing list is smaller than tiny; more like puny. You average about 38k of gzipped characters/month while Cocoon averages 831k of gzipped characters/month just for their users list. Many users are on the dev list too. These simple statistics belie your biased comparison. You should put it at the top that you can't compare to open source because your not and that you only support JSP and aren't anywhere close to implementing XSP support(hint: you can get the source code from Cocoon to get a start:-). I'm part of Cocoon's quality assurance and robustness team(world-wide users who can peek into the source code) while you probably have just a handfull in an internal department. When Cocoon hits an exception, I can go right to the line of code and fix it myself instead of waiting for the professional help to do it. This stuff is not rocket science. I cannot believe that things perform as well as the left side of your comparison would have me believe. Why don't you note where your documentation is barely existent? At least with Cocoon there is the source code. On your web site your documents appear to be fulfilling the requirement of existence for getting to market rather than being full of real-world application meat. I recommend you remove this pseudo-comparison/marketing page because it does not sell -- what are you trying to sell? Your going to have a hell-of-a-time upkeeping this page. There are so many new things happening with Cocoon that you need to extend your list and proclaim that OXF implementation is No and Cocoon is In the works. You appear to be a small time blogger picking on a well-read blogger in his/her comment sections just to increase your hits and get noticed. That is why it won't sell. On the other hand people who get to your site some other way will find out about Cocoon thru this pseudo-comparison and zap you lost a customer(For convenience you could provide a link). The last thing you ever want people coming to your web-site to know is the word Cocoon. Your picking a tough market (IT developers). We're a stingy bunch:-) I don't even begin to look at something that requires me to fill out marketing forms just to learn about it. Wrong customer. What you want is customers with lots of money who know nothing about software ; just want something done. This is what the open source crowd has realized and hence open source. Some things are beyond one company to achieve in one life time. -- Roger - Original Message - From: Erik Bruchez [EMAIL PROTECTED] To: Gianugo Rabellino [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, September 18, 2003 2:59 PM Subject: Re: OXF rebuttal Dear Gianugo, We appreciate your comments about our OXF / Cocoon comparison matrix. We have posted an update to reflect most of them: http://www.orbeon.com/oxf/cocoon A few additional comments below: 1. Professional Support 1. We clearly did not mean that Cocoon does not have free support. 2. The main idea we wanted to convey is that the day-to-day developers of OXF are also the people who provide professional support for OXF. It looks like we were unfair to Cocoon by not mentioning that professional support is also available for Cocoon. The matrix has been updated to reflect this better. 2. XML Validation and XPointer support In OXF, these are feature of the pipeline language itself. The validation feature is not about validation at parsing time (which is clearly supported by XML parsers) but about being able to validate each input and output of each component in a SAX
Re: [Proposal] Simple production build directions
Thanks Cocoon developers for thinking thru and working this out. It is much appreciated. -- Roger - Original Message - From: Timothy Larson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, August 28, 2003 11:06 AM Subject: Re: [Proposal] Simple production build directions --- Geoff Howard [EMAIL PROTECTED] wrote: It will be easy to add a new build target production-seed (or something to that effect) which would set those values and perform other steps as needed. This would change the instructions to 1) edit blocks properties 2) ./build.sh production-seed. Would that be better in your mind, or is a sample properties better? I can see positives with both solutions. I lean toward a example properties file, because that introduces the customization system that Cocoon uses. I updated to proposed text to refer to the production.build.properties as an example file: To make a production build without the documentation, samples, scratchpad, or deprecated code simply copy the example production.build.properties file to local.build.properties before going on to step 3. See below if you are rebuilding or wish to further customize the build. The key is not how to accomplish it (because the pieces are already in place in the build to do either), but _what_ to accomplish. The example production build does not have to be perfect for everybody, just reasonable and relatively secure. We already have the customization instructions for making it perfect. Also, are there other config issues can be agreed on for this target/recommended setting? Logging level? Allow/Deny uploads? The default log level is already INFO, which is a reasonable default. A default setting of Deny uploads is the most secure. Perhaps we should add these two settings to the example production build properties file, since they are among the most likely to be customized: # Configuration #config.enable-uploads=true # Webapp Build Properties build.webapp.loglevel=INFO --Tim Larson __ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com
Re: cvs commit: cocoon-2.1/src/blocks/html/lib .cvsignore jtidy-04aug2000r7-dev.jar
Hi Carsten, Just a thought about something I've run into. When a third party makes a block or webapp that depends on the same lib but a different version, can the jar indexing capability of jdk1.4 jar utility be employed to resolve the issues? It involves placing and maintaining a correct Class-Path: ... in the jar's manifest and then running jar -i *.jar. http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/jar.html#i Also does anyone know if the indexing really does or would affect the speed of bringing up a wepapp and say Tomcat? Roger - Original Message - From: Carsten Ziegeler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 26, 2003 8:10 AM Subject: RE: cvs commit: cocoon-2.1/src/blocks/html/lib .cvsignore jtidy-04aug2000r7-dev.jar Vadim Gritsenko wrote: I noticed that jtidy has been moved out of html block and into lib/optional. What will happen if I to remove jtidy from the lib/optional? Will this break the build? Yepp, you can see it in the gump.xml dependency description. But that means that we are busting build even more instead of fixing it? Vadim, this is a point a stressed several times in the last months, but noone was really interested. Yes, we have a problem with libs, e.g. we have the same lib (velocity) at different places! We are not busting the build. Currently, if two blocks require the same lib, it has to be in lib/optional. When the blocks directory structure was built, someone moved the libs into the blocks directories making it impossible to use the same jar in several projects. Now, each time a second block needs the jar we have to move it :( As I pointed out several times, this can be solved with an updated build system where we have all jars in lib/optional. These jars are not copied automatically to WEB-INF/lib. They are only copied if a included block depends on them. Carsten
Re: 'Production' build for Cocoon?
Hi Antonio, At the moment I'm checking out Lenya by CVS so I can understand it's impact on the use of Cocoon and webapp design. Then I'll get back to you on what Cocoon's INSTALL.txt needs added. Right now INSTALL.txt needs some things cut out of it: snip Let me guess: you don't like to read verbose docs, right? Great, this file is for you. /snip snip your mileage may vary depending on your shell, but you know how to setup environments, right? /snip snip That's it! Now, you have two choices: a) close this file and try to hack something out by yourself b) keep reading Go ahead and choose option a), but don't complain if you can't figure out how to use the cocoon build system for your needs. Still here? good. You won't regret it. /snip snip All right, that's it for now. Happy hacking with Cocoon. /snip Would you rather a CVS patch that removes these? Typos and English troubles are not a problem. A good editor can solve those quickly. It's coyness, obnoxious playing with people new to Cocoon in the first documents they read that lowers first impressions. The overview on http://cocoon.apache.org/ gives a good first impression. Where is the person who wrote it? br, Roger BTW, it is fine for email between developers to have typos, English problems and self expression :-) One thing I do note is many take snips out of other people's email to express themselves about said snippet and lose the context like a bunch of quibbling Biblical scholars:-) Perhaps someday instead of using email lists we can use a Content Management System where we can link to reference a particular piece of writing we're wanting to discuss. - Original Message - From: Antonio Gallardo [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, August 23, 2003 12:32 PM Subject: Re: 'Production' build for Cocoon? Hi Roger: Can you write the intro as you suggested? Please don't take this question in the bad sense. I think all of us can help to make a better Cocoon. We are a community with a common interest called Cocoon framework. I meet Cocoon a year ago (I still consider my self a newbie in Cocoon). From my point of view, there has been an amazing improvement in the Cocoon documentation: Currently, we have 3 printed books released in less than a year, a nice (still growing) wiki site with many info and helps docs to read and at the end but not the last important a better official cocoon documentation. A year ago there was nothing like that, just some docs in the official cocoon site and a handfull articles somewhere in the vast Internet. It is really amazing how long the project growed in the last year. I saw that. Well, as usual, nothing is perfect and because of that we are still working to improve Cocoon framework every day. I encourage you to join us an helps in this wonderful project. From my own experience in the project I learned that: Critics are always welcomed, because helps to improve the framework. But solutions are better welcomed. By solutions I mean a patch that address a particular problem someone see. Remember that this is a multi cultural community that try to use a unique language (english). The skill of written english that members use is very diferent. From totally beginners to people with great skill to write english. This is a fact. Take my own example: To write this mail I need more than 30 mins. I need to review what I wrote to make sure if my message carries what I mean and I know still there are many errors and sometimes after my own review my message is not carried in the lines. But is is not because I am a stupid, this is because simply my mother language is not english. For there reasons, I think we need people with better skill of written english to help us to write and improve the docs. And if this is your case I encourage you to helps us to write your requested INSTALL.txt :) As usual, when there is nothing, the first draft or the first block of the construction is hard to put, after that when we have something then improve it is easier! Please try to write the first draft. :) At the end I want to write a phrase from a song from Pink Floyd: Together we stand, divided we fall :) Best Regards, Antonio Gallardo P.S: I dont want to fight with nobody here and I am not trying to attack nobody. Please take my message in the most good sense. Really we need to work together :)
cvsclient logicsheet
Hi, Started working on a cvsclient logicsheet as a cocoon blockbut am wondering if there is already such development or if anybody can opine if it's worth it or not. -Roger
