On 01/17/2014 10:46 AM, Clay Stewart wrote:
> I would assume using NTP servers that do not use Monlist.... which are??
>

Newer than v4.2.7.  Also, with a firewall, you can block the traffic 
coming INTO your network with (logic rules):

chain: forward for routers, input for servers

* permit established, related
* permit local machines (desired) dst udp/123 toward your server
* permit your server dst udp/123 to the outside world
* drop other udp/123

The exact rules will depend on whether you are using mikrotik, linux, 
cisco or whatever and whether you are configuring a router that passes 
traffic or the server where the ntp service is running.

-- 
Butch Evans
702-537-0979
Network Support and Engineering
http://store.wispgear.net/
http://www.butchevans.com/
_______________________________________________
Wireless mailing list
[email protected]
http://lists.wispa.org/mailman/listinfo/wireless

Reply via email to