[outages] enough of this ntp bs.

[Cb B]

On Mar 8, 2014 7:45 AM, "Bryan Socha" <bryan at serverstack.com> wrote:
>
> all week long I'm seeing ntp attacks on provider ips on my router.
Enough of this bs, it's time to stand up and block this BS....
>
>

+1

I suggest  you understand the baseline udp load of your network and do a
flat 5x the baseline policer. This will capture attacks for dns, ntp,
chargen and all the other sludge in udp.

Udp sucks. Baseline, police, done.

Also see http://openntpproject.org

CB _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages/attachments/20140308/69fdb64c/attachment.htm>