On 12/28/05, Elijah Savage <[EMAIL PROTECTED]> wrote: > Today I am seeing a ton of these request from two specific ip addresses > that is being blocked by my firewall but I am not sure if it is some new > virus or vulnerability. I know there is no reason for me to being > recieving this traffic. I know this is NTP and possibly someone > configured their ntp client incorrectly but I am recieving a ton of > traffic for this just to be ntp poles.
Check you state table to see which internal machine is generating the traffic and figure out what's wrong with it. (assuming you're NAT'ing for an internal machine). -ME -- http://erdelynet.com/ Support OpenBSD! http://www.openbsd.org/orders.html
