On Tue, 2008-12-09 at 19:51 +0000, Scott Lawrence wrote: > My first cut at fixing this was to try pinging each server and only > setting the time if at least one answered the ping. This helped > somewhat, but didn't quite do the trick, since if you happen to get an > NTP server that answers 'ping' but not NTP requests (can happen - the > pool information from DNS can be out of date) then you're stuck again.
I once wrote a program that sent an NTP query to an arbitrary UDP port and waited for an answer. I've still got the code, but it suffers from bit rot. But I would think that is the most effective attack, sending an NTP query to the address and seeing if you get an NTP response. Dale _______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
