[169147] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: OpenNTPProject.org

daemon@ATHENA.MIT.EDU (Mark Tinka)
Sun Feb 16 23:00:24 2014

From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Mon, 17 Feb 2014 05:59:43 +0200
In-Reply-To: <5301760E.20009@gameservers.com>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

--nextPart12117619.6CMhi9kxtE
Content-Type: Text/Plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

On Monday, February 17, 2014 04:38:06 AM Brian Rak wrote:

> There is no excuse to still be running a NTP server with
> monlist enabled.  Fix your configuration, and you don't
> need IPTables rules.

Juniper's Junos implementation (which is based on FreeBSD)=20
hasn't been patched

Using firewall filters is the only way to mitigate the=20
vulnerability.

=46or those with Juniper access:

http://kb.juniper.net/InfoCenter/index?page=3Dcontent&id=3DJSA10613&actp=3D=
SUBSCRIPTION

It's not clear when the software patch will be made=20
available.

As it were, ScreenOS and JUNOSe are not affected, as they=20
don't support the MONLIST feature.

Mark.

--nextPart12117619.6CMhi9kxtE
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)

iQIcBAABAgAGBQJTAYkvAAoJEGcZuYTeKm+Gjw8QAME098dFraCYieM7XGC2IkIy
/0yqMIOdEfejciPjlTPPjJLoxVi5/Xtwq2JT8CsfmSAPMIUDX6QOmU7SKnej/qSp
Gp3ALrJYhdjTutMQdZPt+9+gIHSg9cnlYVYeCflLYWoh6PlBYlmg4Q5+046zhEiX
RSEat2Kfz+Yt9WYWMdrvav0vuJHIeWj6vG1MUVTNrM4jpbNbAR6StzpY8gxktmR6
ZiV5bgI1Qd+Z3w8V7TwRmBCz6lIzjOltgoDYHhY/PhBOtVM6yeVxT5Iskb4u5ZIe
H7RJL4B69DQf5QtRBBPWLTBcLy9b/Ujvb0hOeF3w+9vC7M46Jc7LXzxS8bBC/yhP
UC+gsXfyu2kTR5MYaHsv9Umz6Lu+Dqb6hSxzCmstmhCB6lfHiYfZ2YnmDKZwceli
QE4mfqiBshZ330bLLK22FUi5oWJi62w3MhB17wJVr50CMK8QcoqZdfFiJvC2kOCa
TeFAAIFnT7a+rEOGbEpnDkBlHPuwmCUMnpqTMki6vJc06YZVtuX9c106ESYOt/fq
Aqjr/mIJXgQg82iTyyx1A6fCZIShyVP13LN0ti8W15suZ47PQhwR6YaxRY2vOt3Q
T9pRFwH1HgBI+KscWsrfPwqLgpz74RP/LnzBLwsId9ABKFhh/l5GPXAYX0YIP7wG
Ddetv90o6srTAg4B5kJj
=7vAe
-----END PGP SIGNATURE-----

--nextPart12117619.6CMhi9kxtE--


home help back first fref pref prev next nref lref last post