On 5 August 2016 at 16:01, Gert Doering <[email protected]> wrote: > I'm not sure about *this* interface wedge bug, but if it's similar to the > original one, if your CoPP policer lets even 1% of the packets through, > you're still toast - just slower. With NTP, of course you have permit > rules in your CoPP config, so depending on which NTP servers you talk > to, nastygrams can still arrive...
Not all packets cause the wedge. If your CoPP allows NTP from your configured NTP servers, but not from others, you're fine. I.e. reasonable CoPP, allow what you must, drop rest. > (OTOH if you have a CoPP rule that says "drop all that might be harmful", > I'm all ears) -- ++ytti _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
