Date: Tue, 18 Feb 2014 21:02:54 -0800 From: Michael Sierchio <kudzu@tenebras.com> To: "Ronald F. Guilmette" <rfg@tristatelogic.com> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: [SOLVED] Re: Semi-urgent: Disable NTP replies? Message-ID: <CAHu1Y706ACb8sx=cFb7CAYvzjenNnx5Erd2dXuArt-6tkA5ffg@mail.gmail.com> In-Reply-To: <3975.1392779391@server1.tristatelogic.com> References: <3975.1392779391@server1.tristatelogic.com>
next in thread | previous in thread | raw e-mail | index | archive | help
One of the problems with UDP, and why NTP amplification attacks are so attractive, is that it is trivial to spoof the source address - you can't really know, without some higher-level protocol, where the initial packet came from. - M
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHu1Y706ACb8sx=cFb7CAYvzjenNnx5Erd2dXuArt-6tkA5ffg>