[168663] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: TWC (AS11351) blocking all NTP?

daemon@ATHENA.MIT.EDU (Geraint Jones)
Sun Feb 2 22:50:04 2014

Date: Mon, 03 Feb 2014 16:49:37 +1300
From: Geraint Jones <geraint@koding.com>
To: Cb B <cb.list6@gmail.com>,
	Larry Sheldon <LarrySheldon@cox.net>
In-Reply-To: <CAD6AjGRVCw4M7bj+M1RNZ80vwPmyfTOw8POPRqiLvL6MXZCLGg@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On 3/02/14 4:45 pm, "Cb B" <cb.list6@gmail.com> wrote:


>On Feb 2, 2014 7:41 PM, "Larry Sheldon" <LarrySheldon@cox.net> wrote:
>>
>> On 2/2/2014 9:17 PM, ryangard@gmail.com wrote:
>>>
>>> I'd hate to think that NetOps would be so heavy handed in blocking
>>> all of UDP, as this would essentially halt quite a bit of audio/video
>>> traffic. That being said, there's still quite the need for protocol
>>> improvement when making use of UDP, but blocking UDP as a whole is
>>> definitely not a resolution, and simply creating a wall that not only
>>> keeps the abusive traffic out, but keeps legitimate traffic from
>>> flowing freely as it should.
>>
>>
>> "We had to burn down the village to save it."
>>
>>
>
>Close. More like a hurricane is landing in NYC so we are forcing an
>evacuation.
>
>But. Your network, your call.
>
>CB

We block all outbound UDP for our ~200,000 Users for this very reason
(with the exception of some whitelisted NTP and DNS servers). So far we
have had 0 complaints, and 0 UDP floods sourced from us

--
Geraint Jones

Director of Systems & Infrastructure
Koding AS62805
(We are hiring)
https://koding.com
geraint@koding.com
Phone (415) 653-0083



>
>> --
>> Requiescas in pace o email           Two identifying characteristics
>>                                         of System Administrators:
>> Ex turpi causa non oritur actio      Infallibility, and the ability to
>>                                         learn from their mistakes.
>>                                           (Adapted from Stephen Pinker)
>>




home help back first fref pref prev next nref lref last post