On 11/21/2017 8:51 AM, Dave Jones wrote:
Based on my logs, it appears the 3.4.x sa-update's check the DNS TXT
record, compare that to it's last update, and don't pull anything if
it was the same. From the user agents in the web logs, it just looks
like very old 3.3.x sa-updates aren't behaving so they need the
mod_evasive. Then there are curls that are pounding away with the
vast majority (> 80%) of hits that also need mod_evasive/.htaccess.
Did some versions of sa-update ever use curl to do the fetching or are
these home-grown scripts trying to pull down for their own private
mirror?
sa-update can use LWP, curl or wget depending on what it finds installed.