I hope I am wrong here but the only place I have seen a decent example of an accurate and secure lo0 firewall filter was in the Juniper MX series book?
On Tue, Jan 14, 2014 at 9:44 AM, Paul S. <[email protected]> wrote: > On 1/14/2014 午前 07:14, Jared Mauch wrote: > >> On Jan 13, 2014, at 5:03 PM, Chuck Anderson <[email protected]> wrote: >> >> Shouldn't this be SOP anyway? >>> >> In the past many ISPs provided time to customers from the router >> hardware. The difference I’ve seen here is regarding the speed that >> devices will respond. The Juniper devices have a faster processor so will >> respond much faster than an “ISR” device from other vendors. The lack of >> ability to further tweak the ntp.conf is a bit frustrating. >> >> - Jared >> >> >> _______________________________________________ >> juniper-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > > I've never really seen any ISPs who actually use proper firewall filters > to allow NTP requests on the routers publicly; so it's 'somewhat' > manageable - still. > > Granted, Juniper should have ways to distinguish client behavior from > server behavior, still. > > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Regards, Mark L. Tees _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
