Re: NTP security hole CVE-2013-5211?

On 14.01.2014, at 14:06, Dag-Erling Sm=F8rgrav <[e-mail]> wrote:

> Cristiano Deana <[e-mail]> writes:
>> I tried several workaround with config and policy, and ended up you MUST
>> have 4.2.7 to stop these kind of attacks.
> =

> Doesn't "restrict noquery" block monlist in 4.2.6?

I think it should be possible to block it using:

disable monitor =


seems to work for me.

Best Regards,
Ferdinand Goldmann
-- =

>> Ferdinand Goldmann
>> Johannes Kepler University Linz - Information Management
>> Mail: [e-mail] Phone: [phone] Fax: [phone]
>> A lack of planning on your part doesn't constitute an emergency on my pa=
rt.

_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"