Hi folks,
Just thought I should bring to the attention of the list a bit of a
problem that's been uncovered in NTP.

https://cert.litnet.lt/en/docs/ntp-distributed-reflection-dos-attacks
https://isc.sans.edu/diary/NTP+reflection+attack/17300

Unfortunately I'm not in a position right now to either test OpenWRT for
this or provide patche/s to update trunk, but I figure letting people
know earlier is better than not at all.

Best I can tell is trunk currently uses ntp-4.2.6p5, the recommendation
is to to add 'disable monitor' to the ntp configuration or use 4.2.7.

Regards,

Pete.
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to