On Mar 8, 2014 7:45 AM, "Bryan Socha" <[email protected]> wrote:
>
> all week long I'm seeing ntp attacks on provider ips on my router.
Enough of this bs, it's time to stand up and block this BS....
>
>

+1

I suggest  you understand the baseline udp load of your network and do a
flat 5x the baseline policer. This will capture attacks for dns, ntp,
chargen and all the other sludge in udp.

Udp sucks. Baseline, police, done.

Also see http://openntpproject.org

CB _______________________________________________
> Outages mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/outages
>
_______________________________________________
Outages mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/outages

Reply via email to