NTP ACL on IOS-XE (4500-X) bugged?

Hi,
for obvious reasons the protection of NTP servers exposed to the Internet is currently getting some reinvestigation. On a fresh 4500-X running IOS-XE 03.04.03.SG (aka 151-2.SG3) I encountered that
access-list 12 permit x.y.z.123access-list 12 permit a.b.c.123
access-list 12 deny any
ntp access-group peer 12ntp server x.y.z.123
ntp server a.b.c.123
will not prevent certain control queries from getting answered by the switch. For instance, ntpq peer list queries (ntpq -p device-ip) from any source still get a reply, even though the deny any ACE counter (and only that) will increment. Legitimate control queries (from the configured sources) will work as well, but increment the appropriate permittive ACE counters. On other switches (non-XE, like 4900M), the exact same configuration works as expected and denies ntpq control queries. Now those queries (there are more than just peer list queries that bypass the ACL on XE, I haven't checked all of them) aren't as dangerous an amplification tool as monlist is, but there still is amplification - and even without amplification, there's at least an information leak, if not a capability for remote control.
Has anyone else encountered this issue? Is it present in XE generally, or specific to this platform? I don't have much hardware to test against currently
BTW, the ACL successfully blocks pure time queries, but in the context of NTP amp attacks, they are of least concern.
BTW^2, adding a pure deny-all ACL to the three other NTP ACL classes makes no difference - they increment counters, but answers still come back.
TIA,
Andre.

I have 6 devices where the ntp access-group is not working:
5 x ASR1002 - IOS-XE 03.07.03.S 15.2(4)S3
1 x 4500X-32 - IOS-XE 03.04.02.SG 15.1(2)SG2
I have a few older ASR1000's running 03.04.05.S IOS-XE 15.1(3)S5, that do not have the problem.
Open TAC case. No resolution yet.

Similar Messages

IOS 8.3 bluetooth bug...ugh!!!

So, Apple has done it again with iOS 8.3. I am an aircraft pilot. EVERYTHING I do is on my iPad. I just recently updated to iOS 8.3. Well, I went to take a flight yesterday, and my bluetooth GPS antenna would not connect. (yes, I have paper charts...but it's no fun trying to fly that way.) After 3 reboots, several forget device/connect to device...I got nowhere. Well, I didn't fly that day. However I managed to waste a lot of time going out to the airport, preflighting the airplane, and driving back home that day. I know this sounds like "new world problems". But aren't apple products supposed to "just work"?
Well, I got back home last night and found warnings posted all over every aviation webpage/blog/forum about this bug. It has been confirmed by several companies techies and they have ALL stated that this is an Apple error. Apple has also confirmed this.
sources...
https://seattleavionics.wordpress.com/2015/04/14/ios-8-3-problem-with-bluetooth- gps-and-ads-b-receivers/
http://bad-elf.com/blogs/bad-elf/18013536-alert-compatibility-issue-with-apple-i os-8-3-and-external-gps-receivers
I am now looking for solutions.... Some have downgraded their iPads back to 8.2. I really don't want to have to do this. But many people have blogged that the iOS 8.4 Beta does not fix the issue either. Thanks Apple....
I have all Apple products, and have been an ALL Apple consumer for the past 10 years. But this is unacceptable. Oh , by the way, all the pilots with Android devices are still flying without issue. I never thought I would EVER say this... But if this issue is not fixed VERY soon, I will be shopping for a new android device. I do NOT relish this thought, but every day with the iOS 8.3 bluetooth bug, is a day that I CAN'T FLY WITH GPS!!!!
I am sure other venues besides aviation are affected by this.... Any other solutions or rumors from the community are greatly appreciated.
Frustrated pilot.

Philly_Phan wrote:
firemediclex wrote:
...this is an Apple error. Apple has also confirmed this.
Where was that confirmation?
By the way, my BT is working just fine with 8.3
Last sentence of the second paragraph of this link...
https://seattleavionics.wordpress.com/2015/04/14/ios-8-3-problem-with-bluetooth- gps-and-ads-b-receivers/
"Apple has noted that they’re aware of the problem and have put a high priority on fixing it but have not announced a specific timeframe."

After upgrade ios7 i cant use google translate why?ios 7 still have bug

i can't use google translate after upgrade ios7, why?? possible ios 7 still have bug error

i can't use google translate after upgrade ios7, why?? possible ios 7 still have bug error

Ios 6 have some bugs on ipod touch 4g like appstore search bug and accessibility which i cant go out from and crashes every where and imassages that the massge i send goes up and stick to the other messages plz help or do ios 6.1

Ios 6 have some bugs on ipod touch 4g like appstore search bug and accessibility which i cant go out from and crashes every where and imassages that the massge i send goes up and stick to the other messages plz help or do ios 6.1 can i change my a4 chip plz i swear when i pressed done to submite this safari crashed

Try to do a hard reboot (no data is lost) by holding down the home and power buttons at the same time untilyou see the Apple logo. Then, let go of both buttons. If that doesn't work, try restoring your iPod and do NOT restore from a backup. This will erase your data, but you can sync back everything except app data and settings from iTunes.

IOS 8 - Photos app bug - "stuttering" effect on Year view

Hi Folks,
On the iPhone6 Plus 128GB with iOS8.1.3 (with 15000 photos inside several years go), I notice that when using the Photos native app in the “Year view” (yearly mosaic view), if I scroll up or down slightly fast, the scrolling that you get has a little “stuttering” or “jerking” effect, so the UI is not perfectly smooth in this view inside Photos native app.
Have you noticed it in your own iPhone's with iOS8.1.3. and also having a huge size photo callery as I have (>10000 photos spread in several years)? (I think that is it very important, because if you have not a huge photo gallery, probably you will not see the “stuttering” or “jerking” effect that I am describing).
I think this is a bug which impacts iOS User eXperience, which needs to be fixed.
Thanks by your feedback!

Hi Guys!
Any experience to share with us, please?
Thanks!

HT1688 I updated my iPhone 5C to the iOS 7.0.1 "bug fixes" update and it has made my phone glitch constantly and has just made it a complete nightmare. How can I go back down to iOS 7?

basically yeah, I updated my software because it said that iOS 7.0.1 was out as a bug fixes update and now my phone constantly glitches the **** out, its super slow, and it pretty much created more bugs than it did fix them. So how can I go back to iOS 7? because 7.0.1 is an absolute nightmare.

Try updating to iOS 7.0.2.
Does your iPhone still have performance issues? Have you tried the basics?

ITunes 12.1.2 and iOS 8.3 artist bug

In my iTunes Library on my Mac (iTunes is updated to the newest version) it seems that everything is correct concerning the names of the artists, album artists, song titles, album titles and so on (on every album). I only have music purchased on the iTunes Store. But never the less on my iPhone some albums display wrong artist (song artist). I haven't tested this on every album, just a few.
One example is the album "John Wesley Harding" by Bob Dylan. All songs on this album is by Bob Dylan and he is therefore listed as both song artist and album artist on every song. However, when I play the album on my iPhone and iPad it says that the album artist is Bob Dylan but on every song it says that the song artist is Bob Dylan feat. Johnny Cash. This is weird since Johnny Cash is not featured on any of the songs on the album and everything is correctly labeled in iTunes on the Mac. I know I have one song on the "Essential Johnny Cash" album where one song, "Girl from the North Country", is labeled with Bob Dylan feat. Johnny Cash as song artist (but not album artist since this is Johnny Cash on this album). When I tried playing the "Essential Johnny Cash" album on my iPhone and iPad it says that every song has the song artist Johnny Cash with June Carter even though it (again) is correctly labeled on iTunes on my Mac.
This must be a bug since I haven't changed any data on these albums. And earlier they have shown the correct song artists on every song. Both albums have been on my Mac, iPhone and iPad since forever.
I tried to delete all music on my iPhone and iPad and sync again, but it didn't help. I'm really getting frustrated with Apple, iTunes and the Music app on the iPhone/iPad since there seems to always be some bugs. I remember the play count bug when iOS 8 first was released. Apple needs to put their efforts into improving their existing products and making them stable instead of using their time on dead end products like Apple Watch (but that's just my opinion).
Does anyone have a solution to my problem? I will of course report it to Apple via the support pages.

OMG I think I just solved my own problem.
I did not have my external disk plugged in which contains my Referenced Aperture image library. I plugged in the disk and the iPhone sync proceeded with no errors.

I downloaded ios 8 and was bug reporting and it crashes when I log in

I downloaded ios 8.0 on my iPod touch 5 and when I log in to the bug reporter it crashes

Gustavoizzo wrote:
I downloaded ios 8.0 on my iPod touch 5 and when I log in to the bug reporter it crashes
If you're not a developer, aren't you glad that you beat the system?

IOS 5.0.1 bug - PDFs not syncing to iBooks

I just managed to update my 3rd gen iPod Touch to iOS 5.0.1 after going through major issues throughout the updating process. Basically, it just hung up during installation and gave an error saying the update failed. I tried again, it asked me to restore the iPod to its factory settings for some reason (which meant I lost all my data) and then it finally installed the update. Anyway, I managed to restore all the data from an earlier backup thankfully.
Everything seems to be working now except for iBooks! In iTunes, it shows my PDFs under Books. On the iPod, there are no PDFs shown in iBooks. And I tried to sync the files again, but they just don't seem to.
Oh, and iBooks was working absolutely fine before this update!
So after this experience, I am NOT updating my iPad...atleast not until Apple releases a bug-free version of iOS!

Yes they are in the same location as before.
But anyway, I just managed to get the PDFs back on iBooks. As they were still showing up in iTunes on the ipod device, that meant they were there but not showing up in iBooks. So, I deselected all the files and re-synced to delete all the pdf data on the ipod. Then re-synced again to put all the same files back. And now it works!
So, for some reason the iBooks backup doesn't work with the new iOS update. And apparently the solution is to erase the old data and re-sync again!
Thanks for your help anyway.

IOS 5.1 Calendar bug - URLs no longer launch Safari

After upgrading my iPhone 4 over the air to IOS 5.1, tapping on URLs within Calendar meeting invitations (within the Notes field) no longer launch into Safari. I now must hold my finger on the URL, select "Copy", open Safari separately, then paste the URL into the address bar. The "Open" option does nothing as well.
This bug exists in both the the native Apple Calendar app as well as 3rd party calendar apps, and only started once I upgraded to 5.1.
Yes, I have restarted my device multiple times and the problem presists.
Is this bug seen by others? Or is it unique to me for some reason?

I have the same problem.

IOS 5 needs a bug fix stat

I updated my iPhone 4 to iOS 5 immediately the battery went bananas. I was excited about Siri and a better camera so I purchased the iPhone 4S, but I have to say I am dissapointed, I am seriously considering going back to iOS 4. When can we expect a bug fix for iOS 5??????
Is anyone else having problems with Siri unable to connect to the network, Siri can connect to the network maybe 2 times at most per day, most of the time she is unable to connect what is the deal?
And last but not least, my iPhone 4S overheats to the point where I am scared, it gets burning hot and its not in use. I find myself using my phone less and less... I am beginning to question what kind of quality control was done on the 4S before it was rolled out. not happy at all

Thanks I have searched the battery threads and have done all of those things so far. I just tried the home button and sleep/wake button reset. I will see if that helps. I am also going to do a complete down to 0 battery drain and recharge tonight and tomorrow if not I will go to the Apple Store.
Thanks for your help

IOS 5 Bluetooth Keyboard Bug

I have the Boxwave Keyboard Buddy Case and when I am in the Messages app, it seems to think the virtual keyboard is there, but really isn't.......I can't see the vKB....its just a blank space...this happens up to 5.1.1, but didn't happen before iOS 5.....if I start to scroll the mesages the all appear, but the little scroll bar on the right starts above where the vKB should be....this doesn't happen all the time....and it you scroll the missing keyboard away it goes back to normal and they start at the bottom. not top...but comes back after a while....normally when the spot to type is selected and it rotates to portrait, then back to landscape....and I send a message, the message I just sent goes to the top pushing all other messages out of view....thanks for your help...hope apple fixes it someday....not a big bug though...
Picture attached below:

Hi Brian,
I have the exact same problem.
No bluetooth detection at all, between my iPad, my iPhone 3GS, my iPhone 4S, and all other bluetooth devices !!!!
Apple do something quickly to fix that please, any other people can confirm this major bug ??
Renaud

IOS 5 Contacts Call Bug

I am using my iPhone 4 with IOS 5 in Mozambique. All my contacts are stored using each of my friend's/client's country code (I have got people from the US, Brazil, Italy...). Anyone who calls me and is in Mozambqiue (therefore using country code +258) and that I have his number within my contact list, his name does not appear on the screen when he is calling me.
If that same person sends me a SMS, his name appears on the message screen. No problem. The bug exists when he tries to call me.
If a person within my contacts list calls me or sends me sms from abroad (a country other than Mozambique) than his name will appear both on the call information and on the sms screen. So, it seems ok when people are calling from abroad.
I did not have this bug with IOS 4 and I was using it on the same network and on the same iPhone as I am using now the IOS 5.
Is Apple working on fixing this error? I do not have this issue with my Blackberry.
Other than this error to be very annoying, I cannot understand how Apple did not detect it immediately when performing tests on IOS 5...
Hope to hear from you soon.

FYI, Apple doesn't read these posts. You can give them your feedback & suggestions here:
http://www.apple.com/feedback/iphone.html.

IOS 5 Copy/Paste Bug

Since updating to IOS 5 (both on iPhone 4 and iPad 2), I can no longer copy content from some web pages. This almost always happens when displaying .htm pages. IOS will allow ou to select the content and will go through the motions of copying it, but when you go to paste the information anywhere none of the data copied is pasted.

Somewhat similar issue with my ipad2 after upgrade to ios5.I cannot copy/paste the URL address in landscape position with home button on the right. If I rotate the ipad to portrait positions (either side) and landscape with home buttion on the left, it works fine. And when it is working, like I can copy, then after awhile the safari browser website will crashed. The keyboard will comes up and down, up and down..... the search engine will slide in and out, in and out........... the bookmark wll slide in and out.... and immpossible to control the page ..... it will not response when i tap on any part and just have to switch off to stop. Anybody knows what is happening? got a bug? Any fix? Please help...........

IOS 5 Reminders App Bug

I would like to report a bug with the Reminders app on iOS 5.1. I had this issue on iOS 5.0 and 5.0.1, but thought it should be fixed by now.
Here are the steps I take and what happens:
I create a new reminder, let's say "Pick up stuff from locker" on a certain day at 3 PM, and set it to remind me every day until I do it.
It reminds me every day at the right time, with no problems.
I finally get the reminder done, and pick up stuff from my locker. I then open the Reminders app.
I check the checkbox next to "Pick up stuff from locker", and wait a few seconds.
The reminder stays on the Reminders page. I swipe to the right to reveal the Completed page, and I see "Pick up stuff from locker" there.
I swipe back to the Reminders page, and STILL, the reminder "Pick up stuff from locker" is there, and this time it's unchecked.
I repeat steps (4) to (6) with no end in sight. At this point, I have duplicates of "Pick up stuff from locker" in the Completed page, but the reminder still will not disappear from the Reminders page. It's not until I actually have to manually delete all the duplcates AND the original reminder from the Reminders page do I see things go back to normal.
I think this is a serious bug, and I would like to see it finally fixed in the near future.

FYI, Apple doesn't read these posts. You can give them your feedback & suggestions here:
http://www.apple.com/feedback/iphone.html.

NTP ACL on IOS-XE (4500-X) bugged?

Similar Messages

Maybe you are looking for