NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to use in a distributed denial-of-service (DDoS) attack. Please also take this opportunity to defeat denial-of-service attacks by implementing ingress and Egress filtering through BCP38.
The final two security bugs reported by Google's Security Team have been fixed as of ntp-4.2.8p1.
A new set of mode 6 vulnerabilities has been discovered and, while these vulnerabilities can be reduced by making sure you have
restrict default … noqueryin your
ntp.conffile, the best and most complete way to avoid these vulnerabilities is to install and deploy
ntp-4.2.8p1which was released on 04 February 2015.
Please see the NTP Security Notice for vulnerability and mitigation details.Are you using Autokey in production? If so, please contact Harlan - he's got some questions for you.
Registration opens on March 16, 2015, 7 p.m. UTC. Applythe 2013 Google Summer Of Code effort, under the Network Time Foundation (GSoC Organization ID "networktime"). Here's the timeline for GSoC 2013. The following projects were accepted:
.texitags, and we want to eventually support
.pod, and perhaps some others. If properly designed, once we support
.manwe'll have enough done that we can implement our documentation, and adding the other target formats should be much easier. -- HarlanStenn - 20 Mar 2009 Last year i worked on this project and this project is not as simple as it seems. AutoGen is made in such way that it needs a major changes to to add the functionality,as writing some code in
perlinstead of used
sedscript. The manual pages generated by AutoGen are not so flexible. -- RahulKumar - 21 Mar 2009 Hi Rahul, You are absolutely correct, and you and I learned a lot about the very many ways that this project is made up of many pieces. This project seems simple, but the implementation stages need to be documented and planned, and we need to choose carefully what steps need to be implemented, and the different ways they could be implemented, in order to get a "usable core" out of it. This project is one that will eventually take a fair amount of work to get fully completed. -- HarlanStenn - 21 Mar 2009 Thanks Rahul and Harlan for the views. According to these information , first thing we don't want to reinvent the wheel . Out come won't be a good user friendly package if it differs from existing design since users has to change or learn. To achieve this we should have clear understanding of existing code base to integrate new feature. so this should be new plug-in for existing package and it should make it more worth wile with out making it hazard to users. am i correct? -- KapilaBogahapitiya - 21 Mar 2009 I have a brownie point available to the first person to identify the timekeeping error on the timeline for GSoC2009 page. :) Thanks for your interest in the NTP Forum's Google Summer of Code 2009. -- DaveHart - 23 Mar 2009 Is it that "March 9: ~12 noon PST / 19:00 UTC" mentions a "PST" time instead of a "PDT" time even though daylight savings time in the U.S. started on March 8 this year? -- BreckBeatie - 23 Mar 2009 Yes, in fact I had it wrong when I asked the question. I did not realize they got the date of transition wrong (good eye), what I caught was the consistent offset from UTC across (apparently) the transition. Good job. -- DaveHart - 24 Mar 2009 Hello, I am an interested candidate for GSoC . I was going through the list of ideas, and came across the problem of updating NTPQ, as one of the ideas. Can you please provide more information on this? All I can gather is that it is related to IPv6 packets and their display. So, I assume the time synch messages sent as IP packets, and the problem is to display the 128-bit source and destination IPv6 addresses? Also, where does the authentication information come from? Thanks, Smita -- SmitaVijayakumar - 30 Mar 2009 Hi Everyone, My name is Anthony, and I've proposed a hardware/firmware/software project.. I would like to get the NTP community helping me and involved with the development of a high-throughput (Gig-E linerate), low jitter (only 8ns max) stratum-1 NTP server. This is similar to a project described here: http://www2.nict.go.jp/w/w114/tsp/publication/PDF/f-poster1-ptb-bipm.pdf , however my implementation doesn't require a host PC and is designed to be low-cost and low-power. I've already verified some firmware (timestamping and ARP+NTP datapath) on a prototyping board, and have fabricated an initial prototype PCB. So the project would consist of porting existing work to opensource languages and tools, fixing problems in the first prototype, and implementing a management interface so changes don't require re-synthesis of firmware. I would very much like to hear of any questions or comments.. Thanks, Anthony -- AnthonyBlake - 02 Apr 2009 The NTP Forum was successful in getting several proposals needed by the NTP Project accepted by the 2008 Google Summer Of Code project. Here are links to the projects. If you have any ideas for projects for next year, please let us know!