Attention all Meinbergers - update recommended

Tim - W4TME

A public service announcement for those who use Meinberg (or other time sync software that uses the NTP daemon) for synchronizing your PC clocks using NTP.


NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to being used in distributed denial-of-service (DDoS) attacks. 

Version ntp-4.2.8p10 is the latest and was released on 21 March 2017.

It addresses 6 medium and 5 low-severity security issues, 4 informational security topics, 15 bugfixes, and contains other improvements over 4.2.8p9.

If you are using Meinberg, you can download the update from this website:
https://www.meinbergglobal.com/english/sw/ntp.htm

If you are not using the Meinberg NTP server monitor app, I recommend it.
https://www.meinbergglobal.com/english/sw/ntp-server-monitor.htm

Andrew VK5CV

Tim,
I don't know if its related but recently my time sync programs stopped working.
The windows fire wall was now blocking port 123 I assume after an update.
I then learned that the NTP servers block high frequency requests because of DOS attacks.
Andrew

Kevin N9JKP

Thanks Tim!.  I do like to keep all my software up to date in this world of malicious software.

It may be coincidental but after I upgraded this software I had a DAX issue which I resolved by uninstalling and then re-installing SSDR.

Ned K1NJ

    Did upgrade here with no issues.  I checked it with nistime over the last few days.  AOK.

Ned,  K1NJ

Ria

This is why the pool exists. Use the NTP pool which distributes the requests among several servers.

http://www.pool.ntp.org/en/

Bob G W1GLV

Thanks Tim, works great.