On Sun, Jan 11, 2015 at 09:58:12PM +0700, Roland Dobbins wrote: >> 2. Protect yourself by having your upstream police Police UDP to some >> baseline you are comfortable with. > > This will come back to haunt you, when the programmatically-generated > attack traffic 'crowds out' the legitimate traffic and everything > breaks. > > You can only really do this for ntp.
You can also consider adding CHARGEN and SSDP. Kind regards, Job
