On Wed, Nov 27, 2013 at 4:29 PM, Cristiano Deana
<cristiano.de...@gmail.com> wrote:
> Hi,
> is it possible to include in base system of the upcoming 10.0 the new
> version of ntp (4.2.7 instead of 4.2.4)?
> There is a bug in older versions (< 4.2.7) who allows attacker use an ntp
> server to DDoS. This has been corrected in new version:
> https://cert.litnet.lt/en/docs/ntp-distributed-reflection-dos-attacks

Thanks for this URL, I've meet this problem on my FreeBSD 9.2 few
weeks ago (public NTP registered in the pool.ntp.org).

There is a thread on the ntp.org ML about this too:


freebsd-current@freebsd.org mailing list
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"

Reply via email to