Re: OpenNTPD and NTP reflection attacks

2014-01-15 Thread Theo de Raadt
>I have a question about OpenNTPD now that NTP reflection attacks are in >the news. OpenBSD produces and uses its own OpenNTPD, primarily written >by Henning and made portable by Darren Tucker. > >The following website: > > http://openntpproject.org/ > >is an important effort to minimize reflectio

Re: OpenNTPD and NTP reflection attacks

2014-01-15 Thread Matthew Dempsky
On Wed, Jan 15, 2014 at 11:36 AM, Nicolai wrote: > So, is it correct to say that OpenNTPD is immune from generating large > amplifications? (Recent articles on the subject mention 100x > amplification factors!) It looks like the recent CVEs are about ntp.org ntpd implementing some private extens

OpenNTPD and NTP reflection attacks

2014-01-15 Thread Nicolai
Hi everyone, I have a question about OpenNTPD now that NTP reflection attacks are in the news. OpenBSD produces and uses its own OpenNTPD, primarily written by Henning and made portable by Darren Tucker. The following website: http://openntpproject.org/ is an important effort to minimize refl