[89825] in North American Network Operators' Group
Re: Open Letter to D-Link about their NTP vandalism
daemon@ATHENA.MIT.EDU (Tony Finch)
Fri Apr 7 19:30:52 2006
Date: Sat, 8 Apr 2006 00:30:01 +0100
From: Tony Finch <dot@dotat.at>
To: Richard A Steenbergen <ras@e-gerbil.net>
Cc: nanog@merit.edu
In-Reply-To: <20060407224918.GM45591@overlord.e-gerbil.net>
Errors-To: owner-nanog@merit.edu
On Fri, 7 Apr 2006, Richard A Steenbergen wrote:
>
> Its just NTP, I can't imagine that it is *really* enough traffic to care
> all that much.
According to Richard Clayton (who helped Poul-Henning track the problem
down) it's about 37pps continuously for each stratum-1 NTP server.
(Remember there are many other servers configured into the D-Link
firmware that are also being abused.)
http://www.lightbluetouchpaper.org/2006/04/07/when-firmware-attacks-ddos-by-d-link/
Tony.
--
f.a.n.finch <dot@dotat.at> http://dotat.at/
BERWICK ON TWEED TO WHITBY: WEST OR SOUTHWEST 5 OR 6, PERHAPS INCREASING 7
LATER IN NORTH. RAIN AT FIRST. MAINLY GOOD. SLIGHT OR MODERATE.
