I got a complain from my server facilities where I have my L3+:

"A public NTP server on your network, running on IP address ---.---.255.3 and UDP port ---, participated in a very large-scale attack against a customer of ours, generating UDP responses to spoofed "monlist" requests that claimed to be from the attack target."

Anyone with ideas on how to prevent this to happen?