nanog mailing list archives

Re: Open Letter to D-Link about their NTP vandalism


From: Tony Finch <dot () dotat at>
Date: Sat, 8 Apr 2006 00:30:01 +0100


On Fri, 7 Apr 2006, Richard A Steenbergen wrote:

Its just NTP, I can't imagine that it is *really* enough traffic to care
all that much.

According to Richard Clayton (who helped Poul-Henning track the problem
down) it's about 37pps continuously for each stratum-1 NTP server.
(Remember there are many other servers configured into the D-Link
firmware that are also being abused.)

http://www.lightbluetouchpaper.org/2006/04/07/when-firmware-attacks-ddos-by-d-link/

Tony.
-- 
f.a.n.finch  <dot () dotat at>  http://dotat.at/
BERWICK ON TWEED TO WHITBY: WEST OR SOUTHWEST 5 OR 6, PERHAPS INCREASING 7
LATER IN NORTH. RAIN AT FIRST. MAINLY GOOD. SLIGHT OR MODERATE.


Current thread: