ntpd's monlist command can be used in reflection ddos attacks. to disable it:

in /etc/ntp.conf:

disable monitor


to test:

ntpdc -n -c monlist ntp.victoria.tc.ca
(should NOT return a list of IP addresses)