Ask Bjørn Hansen kirjoitti:
On Nov 4, 2013, at 19:54, Justin <[email protected]> wrote:

I have two machines that participate in the ntp pool project, and I received an 
abuse email today. Basically, my server was DDOS someone else, ntp reflection 
attack.

Hi Justin,

Can you show a tcpdump of this?

Here's a sample: http://miuku.net/tmp/ntpddos.tcpdump

I'm already doing some rate limiting and filtering at the firewall level, but I guess I need to adjust those rules further.
_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool

Reply via email to