[AusNOG] Stopping unwanted random NTP traffic

[Mark Tees]

+1 For Micron21. Service works as advertised and their staff have been very helpful in every aspect. Bonus points for getting access to the attack monitoring platform and flow data interface.

On 15 Apr 2014, at 4:00 pm, John Wooler <john.wooler at exigent.com.au> wrote:

> Hi Andrew
>  
> My personal recommendation and professional recommendation would honestly be Micron21 (based in Melbourne). 
>  
> Over the past month or 2 we have been using them for DDoS protection on our network in Melbourne, Brisbane & Sydney over the Megaport VCX service and by far these guys have hit the nail on the coffin when it comes to this sort of network protection.  We’ve actually seen a number of DDoS attacks coming in on NTP ourselves, DNS attacks, random attacks on port 80 etc and these guys mitigate any type of attack when it comes to this type of stuff.
>  
> There’s a few good points to list
> -          All traffic stays here in Australia so no re-routing traffic to America or elsewhere around the globe….  This helps with not having to add latency for your end clients to experience & complain about.
> -          Once an attack starts, they’re quick on the ball to detect it and alert you of the attack + monitor it as well.
> -          They have the capacity to handle large attacks.
> -          They own the equipment and have in-house certified engineers who know what they’re doing and always willing to help out in anyway.
>  
> We’re using them and we’re going to continue using them for a very long time to come (probably forever to be real honest) and I couldn’t recommend them enough.
>  
> Check out their DDoS site as well.
> http://www.micron21.com/ddos-protection.php
>  
>  
> Kindest Regards,
> 
> John Wooler 
> Exigent Enterprise
>  
> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Andrew Tschudi
> Sent: Tuesday, 15 April 2014 2:09 PM
> To: ausnog at ausnog.net
> Subject: [AusNOG] Stopping unwanted random NTP traffic
>  
> We have been receiving unwanted inbound NTP traffic towards multiple different servers within our network. This has been creating days of pain and after liaising with our upstream provider it turns out that they have no BGP communities. Had they had BGP Communities, this would then allow me to block the traffic from reaching my routers, which are continuously being flooded. I figure, it’s now time for me to attempt to source some external help.
>  
> Can anyone on provide any recommendations for sourcing professional services that would be trusted in advising the best way to protect and secure our network?
>  
> Andrew
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog