[AusNOG] NTP Reflection coming in over Equinix IX

[Dobbins, Roland]

On Feb 13, 2014, at 9:22 PM, Dobbins, Roland <rdobbins at arbor.net> wrote:

> One way to do it is to permit all UDP/53-sourced traffic to the target

The part about UDP/53-sourced traffic is redundant with ACLs and/or flowspec for this application, sorry for the digression.  Just don't mess with the other UDP traffic, apart from non-initial fragments.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton