Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Jan 2014 14:06:52 +0100
From:      =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To:        Cristiano Deana <cristiano.deana@gmail.com>
Cc:        freebsd-security@freebsd.org, Palle Girgensohn <girgen@freebsd.org>, Xin LI <d@delphij.net>
Subject:   Re: NTP security hole CVE-2013-5211?
Message-ID:  <86d2jud85v.fsf@nine.des.no>
In-Reply-To: <CAO82ECEsS-rKq7A-9w7VuxKpe_c_f=tvZQoRKgHEfi-yPdNeGQ@mail.gmail.com> (Cristiano Deana's message of "Mon, 13 Jan 2014 11:08:46 %2B0100")
References:  <B0F3AA0A-2D23-424B-8A79-817CD2EBB277@FreeBSD.org> <52CEAD69.6090000@grosbein.net> <81785015-5083-451C-AC0B-4333CE766618@FreeBSD.org> <52CF82C0.9040708@delphij.net> <CAO82ECEsS-rKq7A-9w7VuxKpe_c_f=tvZQoRKgHEfi-yPdNeGQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Cristiano Deana <cristiano.deana@gmail.com> writes:
> I tried several workaround with config and policy, and ended up you MUST
> have 4.2.7 to stop these kind of attacks.

Doesn't "restrict noquery" block monlist in 4.2.6?

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86d2jud85v.fsf>