Re: [ntpwg] [dhcwg] Re: Network Time Protocol (NTP) Options for DHCPv6

[Brian Utterback <[e-mail]>]

Danny Mayer wrote:
> Ted Lemon wrote:
>   
>
>>   The problem you're afraid will happen is
>> not going to happen.
>>     
>
> You're too late. It already has. We are already in the situation that we
> need to take defensive measures against existing errant NTP clients.
>
>   

No it hasn't. AFAIK, there has not been a case of multitudes of clients 
that received NTP server
IP addresses from DHCP spamming servers abusively for extended periods 
of time. My gut feel
is that Ted is correct and that this is not likely to be a problem.

However, the fact that we have had other situations develop into just 
such problems means
that examining the proposal for potential abuse scenarios is worthwhile. 
Before we start
looking for a compromise solution, perhaps we should look more closely 
at the problem.

For instance, I don't see the problem as being any worse than an 
ntp.conf file that has
the server given by an IP address. If you are going to restrict DHCP, 
perhaps we
should consider not allowing IP addresses in the ntp.conf file. If you 
think that
is absurd, then perhaps the DHCP restriction is absurd as well. Or 
perhaps not.

Brian Utterback

_______________________________________________
dhcwg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/dhcwg