On Mon, 2003-10-13 at 11:04, Toad wrote:
> On Sun, Oct 12, 2003 at 01:38:02PM -0400, Edward J. Huff wrote:
> > 
> > Having our developers and beta testers refrain from connecting
> > to the live network is not going to remove the vulnerability
> > which has just been exposed.  Rather, we have to fix fred so
> > that it blacklists nodes which are behaving badly.  
> 
> 
> Eh? We need to fix fred so it doesn't route to bad nodes. That's all.
> And that's what routing is ALL ABOUT.
> 

Well, first of all, that is sort of what I meant.  "Blacklist nodes
which are behaving badly" can be understood to mean the same as
"don't route to bad nodes," except that it doesn't assume that
it is safe to accept connections and request from them.

After you fix routing to bad nodes, you need to see whether or not
a bunch of nodes running one of the builds like 6025 which seem 
to lead to 5028 malfunctioning will have that effect even when
you don't route to them.

Maybe it's not just who you route to.  Maybe you also need to
be careful about who you accept connections and queries from.

If the "stable" nodes were working correctly, they wouldn't
have gotten terrible performance when used together with
the unstable.  Maybe the bad performance came because
they routed to NGR nodes.  Maybe it came from NGR nodes
making lots of requests on them.  I don't know.

-- Ed Huff

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Devl mailing list
[EMAIL PROTECTED]
http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to