Re: Filter NTP traffic by packet size?

["Dobbins, Roland" <rdobbins () arbor net>]

On Feb 21, 2014, at 9:55 AM, Dobbins, Roland <rdobbins () arbor net> wrote:

> Filtering out packets this size from UDP/anything to UDP/123 allows time-sync requests and responses to work, but 
> squelches both the level-6/-7 commands used to trigger amplification as well as amplified attack traffic.

That should read, filtering out packets **** NOT **** that size.

Lack of sleep, apologies.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton