11 Jan
2015
11 Jan
'15
10:07 a.m.
On Sun, Jan 11, 2015 at 09:58:12PM +0700, Roland Dobbins wrote:
2. Protect yourself by having your upstream police Police UDP to some baseline you are comfortable with.
This will come back to haunt you, when the programmatically-generated attack traffic 'crowds out' the legitimate traffic and everything breaks.
You can only really do this for ntp.
You can also consider adding CHARGEN and SSDP. Kind regards, Job