[Ntp] Antw: [EXT] NTP WG virtual interim -- Thursday, 17 September 2020, 1530 - 1700 UTC

[Ulrich Windl <[e-mail]>]

>>> Karen O'Donoghue <[e-mail]> schrieb am 28.08.2020 um 19:42 in
Nachricht <[e-mail]>:

...
> 4. Call for Adoption results/discussion on
draft‑mlichvar‑ntp‑alternative‑port
...

I wonder: If adopted, how would it be implemented most likely? When done at
network/transport level at some gateway:
If incoming traffic to TDB is redirected to port 123 _if_ it's not mode 6 or
mode 7, then the filtering could be done right on port 123. Likewise for
outgoung traffic.

Is this RFC basically for:

Inability of firewall firmware to do proper filtereing?
Inability of network administrators to apply the correct filters ("Don't
panic", but they still do)?

Seeing that firewalls try deep packet inspection, I wonder whether the RFC is
needed, specifically: How long will it take to have a significant effect? If
you assume port 123 is blacklisted on some sites, it may be effective when all
the NTP software had been updates, but when allowable ports are whitelisted,
then the lack of port 123 being allowed doesn't help for the alternate port...

Regards,
Ulrich