NTP security hole CVE-2013-5211?

[RW]

On Thu, 20 Mar 2014 14:37:54 -0700
Ronald F. Guilmette wrote:

> I resolved each of those three host names to _all_ of its associated
> IPv4 addresses.  This yielded me the following list:
> 
> 50.116.38.157
> ...
> 


It's a pool, if you try it a few minutes later you will probably get a
different 16 addresses. Depending on what precisely you are trying to
do, you probably need a stateful rule for outgoing connections.