5 Replies Latest reply: Feb 12, 2014 10:32 AM by spenticoff RSS

Filers vulnerable to NTP Reflection Attack

spenticoff
Currently Being Moderated

http://www.symantec.com/connect/blogs/hackers-spend-christmas-break-launching-large-scale-ntp-reflection-attacks
https://isc.sans.edu/forums/diary/NTP+reflection+attack/17300

 

Our filers have been used in a large scale NTP reflection attack. I can not find any documentation on how to restrict or turn off monlist queries.  options.timed doesn't seem to handle that part of the config

Any one have ideas?

More Like This

  • Retrieving data ...