On Tue, 5 Nov 2013 10:30:35 -0800
E Frank Ball III <[email protected]> wrote:

> Is allowing query a problem?  Does that allow amplification?

Yes, it is a potential problem.  Yes, it can enable amplification,
though that is not the only query type to worry about, it is perhaps
the most obvious.  I'd encourage operators to consider restricting mode
6/7 queries particularly and ideally if possible.

Someone else pointed to our configuration template already, but in
addition, this page also nicely helps determine the access control
restrictions that may be right for you:

  <http://support.ntp.org/bin/view/Support/AccessRestrictions>

The 'noquery' option in particular is the one you ought to consider
setting.

John
_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool

Reply via email to