At the moment lots of servers suffers from denial of service attacks targeting NTP protocol on port 123 by issuing
MONLIST requests to victims computers. Victims computers answer with large list of last NTP clients. Thus consuming a lot of network bandwidth. It is possible to restrict
MONLIST response by adding these lines to
restrict -4 default nomodify nopeer noquery notrap restrict -6 default nomodify nopeer noquery notrap restrict source nomodify noquery notrap restrict 127.0.0.1 restrict ::1 restrict 192.168.0.0 255.255.255.0
This is good on installed NTP version 220.127.116.11 (4.2.5p200). I found that on newer versions - starting from 4.2.6
MONLIST is replaced by safer
I'm trying to update NTP on Solaris 11 machine by issuing command
pkg update ntp, but it seems that on Oracle repository only version 4.2.5 is available.
I found newer version 4.2.8p6 at http://www.ntp.org/downloads.html. So my question is - how to install this new NTP version on Solaris 11? It is not a Solaris package.