| Re: [chrony-users] NTS dropped packets |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
> Some major network operators are blocking or rate limiting NTP packets as a
> mitigation against the ntpd mode-6 amplification attacks. In some networks it
> specifically applies to longer NTP packets.
What makes this case interesting is that the length test seems backwards.
Long packets work. After the first 3 requests get dropped, the 4th request
has 3 extra dummy cookies in the packet. That seems to make it big enough to
get through.
--
These are my opinions. I hate spam.
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.