Now what.
Here's the Overview and Description sections of the notice:
Quote:
Overview
A Network Time Protocol (NTP) Amplification attack is an emerging form of Distributed Denial of Service (DDoS) that relies on the use of publically accessible NTP servers to overwhelm a victim system with UDP traffic.
Description
The NTP service supports a monitoring service that allows administrators to query the server for traffic counts of connected clients. This information is provided via the “monlist” command. The basic attack technique consists of an attacker sending a "get monlist" request to a vulnerable NTP server, with the source address spoofed to be the victim’s address.
|
The notice is at
https://www.us-cert.gov/ncas/alerts/TA14-013A.
It's worth a read and, possibly, action.
Hope this helps some.
