DoS attack on port 69 / t*f*t*p

[rdoac]

I have noticed two of our servers (ubuntu 14.04 / Freepbx 13 / Incredible PBX) are suffering from this. Port 69 doesn't seem to be being blocked. I turned off t*f*t*p on those servers.

I would like to have the default firewall block port :69 except for sites explicitly allowed to access everything.

Sep 24 13:42:58 ttpbx in.tftpd[28201]: RRQ from ::ffff:37.48.104.197 filename 001565c422bd.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28202]: RRQ from ::ffff:37.48.104.197 filename 001565c422bb.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28204]: RRQ from ::ffff:37.48.104.197 filename 001565c422bc.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28210]: RRQ from ::ffff:37.48.104.197 filename 001565c422b4.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28198]: RRQ from ::ffff:37.48.104.197 filename 001565c422ba.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28208]: RRQ from ::ffff:37.48.104.197 filename 001565c422be.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28196]: RRQ from ::ffff:37.48.104.197 filename 001565c422a8.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28205]: RRQ from ::ffff:37.48.104.197 filename 001565c422bf.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28195]: RRQ from ::ffff:37.48.104.197 filename 001565c422a5.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28206]: RRQ from ::ffff:37.48.104.197 filename 001565c422b1.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28197]: RRQ from ::ffff:37.48.104.197 filename 001565c422a7.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28200]: RRQ from ::ffff:37.48.104.197 filename 001565c422a9.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28222]: RRQ from ::ffff:37.48.104.197 filename 001565c422ce.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28221]: RRQ from ::ffff:37.48.104.197 filename 001565c422b0.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28217]: RRQ from ::ffff:37.48.104.197 filename 001565c422b7.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28218]: RRQ from ::ffff:37.48.104.197 filename 001565c422cb.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28220]: RRQ from ::ffff:37.48.104.197 filename 001565c422b9.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28225]: RRQ from ::ffff:37.48.104.197 filename 001565c422ca.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28219]: RRQ from ::ffff:37.48.104.197 filename 001565c422b8.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28224]: RRQ from ::ffff:37.48.104.197 filename 001565c422cf.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28194]: RRQ from ::ffff:37.48.104.197 filename 001565c422a6.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28227]: RRQ from ::ffff:37.48.104.197 filename 001565c422c1.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28223]: RRQ from ::ffff:37.48.104.197 filename 001565c422cc.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28226]: RRQ from ::ffff:37.48.104.197 filename 001565c422cd.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28228]: RRQ from ::ffff:37.48.104.197 filename 001565c422c3.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28229]: RRQ from ::ffff:37.48.104.197 filename 001565c422c7.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28232]: RRQ from ::ffff:37.48.104.197 filename 001565c422c5.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28231]: RRQ from ::ffff:37.48.104.197 filename 001565c422c2.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28233]: RRQ from ::ffff:37.48.104.197 filename 001565c422c4.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28234]: RRQ from ::ffff:37.48.104.197 filename 001565c422c8.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28236]: RRQ from ::ffff:37.48.104.197 filename 001565c422c0.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28193]: RRQ from ::ffff:37.48.104.197 filename 001565c422a3.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28235]: RRQ from ::ffff:37.48.104.197 filename 001565c422c9.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28238]: RRQ from ::ffff:37.48.104.197 filename 001565c422db.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28230]: RRQ from ::ffff:37.48.104.197 filename 001565c422c6.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28237]: RRQ from ::ffff:37.48.104.197 filename 001565c422da.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28192]: RRQ from ::ffff:37.48.104.197 filename 001565c422a4.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28242]: RRQ from ::ffff:37.48.104.197 filename 001565c422de.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28243]: RRQ from ::ffff:37.48.104.197 filename 001565c422df.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28244]: RRQ from ::ffff:37.48.104.197 filename 001565c422d2.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28245]: RRQ from ::ffff:37.48.104.197 filename 001565c422d3.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28239]: RRQ from ::ffff:37.48.104.197 filename 001565c422dc.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28241]: RRQ from ::ffff:37.48.104.197 filename 001565c422d1.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28240]: RRQ from ::ffff:37.48.104.197 filename 001565c422dd.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28247]: RRQ from ::ffff:37.48.104.197 filename 001565c422d5.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28246]: RRQ from ::ffff:37.48.104.197 filename 001565c422d4.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28255]: RRQ from ::ffff:37.48.104.197 filename 001565c422ed.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28257]: RRQ from ::ffff:37.48.104.197 filename 001565c422ee.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28250]: RRQ from ::ffff:37.48.104.197 filename 001565c422d0.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28251]: RRQ from ::ffff:37.48.104.197 filename 001565c422d8.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28258]: RRQ from ::ffff:37.48.104.197 filename 001565c422ea.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28248]: RRQ from ::ffff:37.48.104.197 filename 001565c422d7.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28259]: RRQ from ::ffff:37.48.104.197 filename 001565c422e2.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28254]: RRQ from ::ffff:37.48.104.197 filename 001565c422d9.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28249]: RRQ from ::ffff:37.48.104.197 filename 001565c422d6.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28256]: RRQ from ::ffff:37.48.104.197 filename 001565c422eb.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28260]: RRQ from ::ffff:37.48.104.197 filename 001565c422e1.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28253]: RRQ from ::ffff:37.48.104.197 filename 001565c422ec.cfg
Sep 24 13:42:58 ttpbx in.tftpd[28262]: RRQ from ::ffff:37.48.104.197 filename 001565c422ef.cfg