Workaround for NTP exploit

[mnt_schred]

We've got a Freenas instance 8.3.0 which we cannot upgrade without first backup data first. However, it has been compromised multiple times with an exploit. Is there any way we can implement a workaround?

 

[jgreco]

Unplug it from the Internet, since it is not designed to be exposed to the Internet.

Then kill ntpd.

Then use the remediation steps outlined in various places to reconfigure ntpd to "not do that." You may need to determine how FreeNAS generates the ntp.conf file.

Then plug your NAS into a firewall so that it doesn't see the packets that it should never have been exposed to.

Then start ntpd.

Happiness.

 

[cyberjock]

Without having a good firewall I don't even want to think about what other exploits you've been a victim of and don't even know it. It's just as jgreco said.. you should not be putting FreeNAS on the internet without a firewall. That's just asking to be pwned.