Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Alexander Dalloz
Am 31.08.2011 01:58, schrieb Always Learning: I also notice our servers successfully contacting official time references centres which are not those sites trying to connect to us. I notice too the installed time software is listening on every available IP. I can not identity any options in

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:13 +0200, Alexander Dalloz wrote: ntpd shipping with CentOS 6 has an option -I iface; see man 8 ntpd. Edit /etc/sysconfig/ntpd accordingly. ntpd shipping with CentOS 5 does not have that and thus always binds to all available interfaces. That explains why I can not

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Lamar Owen
On Tuesday, August 30, 2011 08:15:28 PM brian wrote: ...to your rule list will allow the specified net address(es) to contact you on port 123. the above, of course, assumes your input port is eth0 (change that, if different on your system), and that the NTP server uses TCP protocol

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-30 Thread brian
On 08/30/2011 07:58 PM, Always Learning wrote: Curiously examining some of the blocked IP addresses in the daily Logwatch report, I notice strange sites attempting to connect to our servers on port 123 (the time port). I also notice our servers successfully contacting official time

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-30 Thread Always Learning
On Tue, 2011-08-30 at 20:15 -0400, brian wrote: On 08/30/2011 07:58 PM, Always Learning wrote: Curiously examining some of the blocked IP addresses in the daily Logwatch report, I notice strange sites attempting to connect to our servers on port 123 (the time port). I also notice

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-30 Thread James Hogarth
However I am curious to know why strange sites contact our servers on port 123 and why the installed Centos time software listens on every available IP address. For your first part either people probing you or have you checked to see if a previous admin had joined the ntp.org pool with your