Attention all Meinbergers - update recommended

  • 1
  • Idea
  • Updated 1 year ago
A public service announcement for those who use Meinberg (or other time sync software that uses the NTP daemon) for synchronizing your PC clocks using NTP.


NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to being used in distributed denial-of-service (DDoS) attacks. 

Version ntp-4.2.8p10 is the latest and was released on 21 March 2017.

It addresses 6 medium and 5 low-severity security issues, 4 informational security topics, 15 bugfixes, and contains other improvements over 4.2.8p9.

If you are using Meinberg, you can download the update from this website:
https://www.meinbergglobal.com/english/sw/ntp.htm

If you are not using the Meinberg NTP server monitor app, I recommend it.
https://www.meinbergglobal.com/english/sw/ntp-server-monitor.htm
Photo of Tim - W4TME

Tim - W4TME, Customer Experience Manager

  • 9129 Posts
  • 3453 Reply Likes

Posted 1 year ago

  • 1
Photo of Andrew Russell

Andrew Russell

  • 257 Posts
  • 33 Reply Likes
Tim,
I don't know if its related but recently my time sync programs stopped working.
The windows fire wall was now blocking port 123 I assume after an update.
I then learned that the NTP servers block high frequency requests because of DOS attacks.
Andrew
Photo of Ria - N2RJ

Ria - N2RJ, Elmer

  • 2252 Posts
  • 874 Reply Likes
This is why the pool exists. Use the NTP pool which distributes the requests among several servers.

http://www.pool.ntp.org/en/
Photo of Kevin N9JKP

Kevin N9JKP

  • 37 Posts
  • 13 Reply Likes
Thanks Tim!.  I do like to keep all my software up to date in this world of malicious software.

It may be coincidental but after I upgraded this software I had a DAX issue which I resolved by uninstalling and then re-installing SSDR.
Photo of Ned K1NJ

Ned K1NJ

  • 301 Posts
  • 75 Reply Likes
    Did upgrade here with no issues.  I checked it with nistime over the last few days.  AOK.

Ned,  K1NJ
Photo of Bob G   W1GLV

Bob G W1GLV

  • 646 Posts
  • 107 Reply Likes
Thanks Tim, works great.