Orlando Andico wrote:
> On Sat, 26 May 2001, Miguel A.L. Paraz wrote:
> ..
> > I'll get back to everyone when I have something concrete; I'll see if I can
> > get a GPS clock up. If not, a highly accurate clock infrastructure. This
> > would be needed for ISP's to submit accurate abuse reports.
>
> Why bother? you don't need to have a Stratum-1 server. Personally, I sync
> from clock.isc.org using ntpdate (not even xntpd!). I've noticed that with
> the crystal clock inside a typical PC running Linux, the clock drifts
> about 5s in one day. So by running ntpdate via cron at 1-hour intervals,
> you can keep drift under 1 second which ought to be good enough for
> logging purposes.
>
it is worth mentioning too that running ntpd as daemon prior to version 4.0.99xx is
vulnerable to *remote root
exploit*.
its a good technique to run only one local time server sychronizing to your prefered
external time server and the rest
of local host running ntpdate inside cron daemon for every one hour or two.
credits goes to Przemyslaw Frasunek <[EMAIL PROTECTED]> detected this hole.
see your linux distro security advisory for more details and update it immediately.
fooler.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
