View Single Post
  #2 (permalink)  
Old July 20th, 2001
rrauck rrauck is offline
Novicius
 
Join Date: July 19th, 2001
Posts: 2
rrauck is flying high
Angry Lime Wire Problem

I now understand a bit more about my problem. One of the features of the Ping and Pong messages that are a key component of Gnutella software functionality is returning IP addresses of other on-line servents to peer computers. This conceptually fits into the scheme for maximum visibility of available servents but it is an open invitation to malicious sites to broadcast IP addresses of sites they want to harass. I see, from reading the technical papers on the Lime Wire site, that this problem is recognized and attempts are being made to deal with it. I see no evidence of a short term solution.

I believe, and I am not clear on this point, that information on IP addresses of available on-line servents is passed from user to user rather than fed only to the router and only viewable there. If this is true, there is no way for the router to directly filter IP address lists to remove nonmember's info and prevent harrasment. There would be no way to trace individual IP addresses to locate the site responsible for the abuse. Hackers must be licking their chops over this ready source of denial of service resources. We have a saying where I grew up that covers this situation: "The fox is in charge of the hen house".

The distributed character of the Gnutella model is its greatest strength and worst weakness. The servent software needs to track other servents with a tag in addition to the IP address (computer network name?) that is fixed so that a distributed filtering scheme could be applied to remove abused sites found on a list received from the Gateway router at log-on. I don't know if this is practical but it is the only solution I can see. If this Gnutella network ever grows to millions of machines, it will threaten the entire internet if changes are not made.

Last edited by rrauck; July 20th, 2001 at 04:38 AM.
Reply With Quote