On 5 August 2016 at 18:49, Phil Mayers <[email protected]> wrote: >> Unless the IP address of your NTP servers are known to an attacker, >> in that case the packet can simply be spoofed. > > > If you're not doing uRPF and ingress filtering of your own netblocks, you've > got bigger problems IMO
Fully agreed, it's implied prerequisite when ever you're doing filtering. -- ++ytti _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
