[BlueOnyx:14261] Re: Another DDOS vulnerability: NTP Amplification Attacks

[Steven Howes]

On 14 Jan 2014, at 15:39, George F. Nemeyer <tigerwolf at tigerden.com> wrote:
> Please see the CERT advisory below which gives a more complete picture.
> Ways to check your servers are included, as well as suggested upgrade NTP
> version and ways to block attacks on non-upgradable systems are included.

Yet to find one that’s affected.. Having public facing NTP is ill-advised anyway - as usual as they are :(. All of ours (not BX boxes) are restricted to our /19 only. Pretty sound advice unless you plan on joining the NTP pool anyway.

Steve