nanog mailing list archives

Re: Filter NTP traffic by packet size?


From: Valdis.Kletnieks () vt edu
Date: Wed, 26 Feb 2014 17:33:45 -0500

On Wed, 26 Feb 2014 11:44:55 -0600, Brandon Galbraith said:

Blocking chargen at the edge doesn't seem to be outside of the realm of
possibilities.

What systems are (a) still have chargen enabled and (b) common enough to make
it a viable DDoS vector?  Just wondering if I need to go around and find
users of mine that need to be smacked around with a large trout....

Attachment: _bin
Description:


Current thread: