[j-nsp] Juniper UDP Amplification Attack - UDP port 111 ?

Olivier Benghozi olivier.benghozi at wifirst.fr
Sat Mar 17 00:27:44 EDT 2018


So it most probably comes with "upgraded Junos with FreeBSD 10", that is 15.1+ on MX with intel CPUs.

There's something fun described on PR1167786 about similar behaviour: "Due to Junos Release 15.1 enabling process rpcbind in FreeBSD by default, port 646 might be grabbed by rpcbind on startup, which causes LDP sessions failing to come up."

My understanding: "we left everything by default"...

> Le 16 mars 2018 à 20:33, Aaron Gould <aaron1 at gvtc.com> a écrit :
> 
> I see udp/tcp listening on 111 on MX960, but not on MX104 nor on ACX5048...



More information about the juniper-nsp mailing list