[AusNOG] Stopping unwanted random NTP traffic

[Roland Dobbins]

On April 15, 2014 11:09:16 AM GMT+07:00, Andrew Tschudi <andrewtschudi at gmail.com> wrote:

>We have been receiving unwanted inbound NTP traffic towards multiple
>different servers within our network.

Most likely, you're running misconfigured, abusable ntp servers which can be leveraged by attackers to launch ntp reflection/amplification DDoS attacks:

<https://www.brighttalk.com/webcast/9053/104933>

BGP communities are irrelevant,  in this context. 

You can check your address space for abusable ntp services at <http://www.openntpproject.org>.

---------------------------------------
Roland Dobbins <rdobbins at arbor.net>