ntpd's monlist command can be used in reflection ddos attacks. to disable it: in /etc/ntp.conf: disable monitor to test: ntpdc -n -c monlist ntp.victoria.tc.ca (should NOT return a list of IP addresses)