dr|z3d
ok, giving up on railroad for now. too much time wasted.
dr|z3d
ok, seeing repeated invalid messages coming from the same router. router bug or hostile attack, no idea.
dr|z3d
I've given up on getting railroad running for now, eyedeekay. it refuses to start. CRIT […lroad-linux] …oadClientAppsJob: Error starting up the client class net.i2p.app.CorrectedShellService
dr|z3d
> any idea about router sending corrupt messages repeatedly, zzz? I'm erring on the side of caution and blocklisting for now.
zzz
would need more info to offer advice
dr|z3d
ok, let me see if I've still got logs
dr|z3d
repeated ....MessageReceiver: Message invalid: log entries with an attached DUMP.. you want to look at a few of those?
dr|z3d
(only from one router)
zzz
what protocol layer is the corruption at?
dr|z3d
looks like UDP / I2NP
dr|z3d
> net.i2p.data.i2np.I2NPMessageException: I2NP length in TGM: 1782 but remaining bytes: 580
dr|z3d
> net.i2p.data.i2np.I2NPMessageException: I2NP length in TGM: 1894 but remaining bytes: 692
dr|z3d
re ip restriction, do I need to swapout all the refs to 'length == 2' to 'length == 1' to bring the limit down to 1 router per range?
zzz
re: TGM error, never seen that before, no ideas
dr|z3d
I can provide some logs if you want to take a look. got about 5 redacted entries here.
zzz
not for now
dr|z3d
ok
zzz
re: ip restriction, the code always restricts to one router per range
zzz
the setting is whether the range is /8 or /16 or /24
dr|z3d
ok, so what have you tweaked? you're now limiting to /8 ?
dr|z3d
do I just change MaskedIPSet ipSet = ipRestriction > 0 ? new MaskedIPSet(16) : null; to (8) to limit to /8 ?
zzz
diff --git a/router/java/src/net/i2p/router/TunnelPoolSettings.java b/router/java/src/net/i2p/router/TunnelPoolSettings.java
zzz
index c33e791af..03bdc74a0 100644
zzz
--- a/router/java/src/net/i2p/router/TunnelPoolSettings.java
zzz
+++ b/router/java/src/net/i2p/router/TunnelPoolSettings.java
zzz
@@ -81,7 +81,8 @@ public class TunnelPoolSettings {
zzz
//private static final int DEFAULT_OB_EXPL_LENGTH_VARIANCE = isSlow ? 0 : 1;
zzz
public static final boolean DEFAULT_ALLOW_ZERO_HOP = false;
zzz
- public static final int DEFAULT_IP_RESTRICTION = 2; // class B (/16)
zzz
+/////////////// TEST
zzz
+ public static final int DEFAULT_IP_RESTRICTION = 1; // class B (/16)
zzz
private static final int MIN_PRIORITY = -25;
zzz
private static final int MAX_PRIORITY = 25;
zzz
private static final int EXPLORATORY_PRIORITY = 30;
dr|z3d
ah, right, missed that, thanks.
dr|z3d
so the // comment should be class A (/8) there, if you decide that's what you want to ship as default.