[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Filter NTP traffic by packet size?
- Subject: Filter NTP traffic by packet size?
- From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks at vt.edu)
- Date: Wed, 26 Feb 2014 17:33:45 -0500
- In-reply-to: Your message of "Wed, 26 Feb 2014 11:44:55 -0600." <CADE4tYXj30DeXS2-Jr1m87JGTB=xTbYVZTje-RvtWoB903jcPA@mail.gmail.com>
- References: <CAPpGzHFQoqqB6SKP1c1nX=LX9=C7djhi5szwN1trxE8bVMNJDg@mail.gmail.com> <[email protected]> <[email protected]> <CABSP1OfetOSRO0wrOdCWtAkOhnk0DJ00F=rDYn9bw+kDNrh8sg@mail.gmail.com> <CAD6AjGTfkjPJWQQpqvaUbiuOikWG=LEnw1o0=gaOm4_eUBGwNA@mail.gmail.com> <CABSP1Of35gXMLN4qJ0KuhHL9=8QuLMCBoZvFTpfM3aGs2BkHEg@mail.gmail.com> <CAD6AjGS_-uKWeesQKHt=PE=ynvHvyCVsODxatu4haVcHYkBd+g@mail.gmail.com> <[email protected]> <[email protected]> <CAD6AjGTvnOzp0c171UdFStF6HQaeogGCu=-ReGWNLOo7vSpx8g@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]> <CAB8g2zyrKupk6uBjFj-7UcbDp0v8y1wh=FEjuqxOsTY4h1EiJw@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <CADE4tYXj30DeXS2-Jr1m87JGTB=xTbYVZTje-RvtWoB903jcPA@mail.gmail.com>
On Wed, 26 Feb 2014 11:44:55 -0600, Brandon Galbraith said:
> Blocking chargen at the edge doesn't seem to be outside of the realm of
> possibilities.
What systems are (a) still have chargen enabled and (b) common enough to make
it a viable DDoS vector? Just wondering if I need to go around and find
users of mine that need to be smacked around with a large trout....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 848 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20140226/447dcee9/attachment.bin>