[ntp:questions] Source port for NTP

Kiss Gábor kissg at niif.hu
Mon Oct 26 10:41:01 UTC 2015


>  servers. I assume that UDP packets are getting through the router due
>  to 'full cone NAT' as explained at
> https://isc.sans.edu/forums/diary/Part+2+Is+your+home+network+unwittingly+contributing+to+NTP+DDOS+attacks/18549/
> and the fact that NTP is always using port 123 as the source port when

I don't believe it. :-)
"tcpdump -n dst port 123 and \! src port 123"
shows something else.
Even if it is true what about SNTP clients?

Gabor


More information about the questions mailing list