One of my customers has had a visit by a security consultant.
The report indicates that the following should be addressed:
1) NTP monlist command should be deactivated
2) Diffie-Hellman MODP size should be set to a number higher than 2048

Anybody who can comment on these issues and preferably come up with "How-To" or directions?

PS.: Upgrading is not an option at this moment.

Thank you
- Martin