16 Nov
2007
16 Nov
'07
11:29 a.m.
Hi,
my 3 servers in my personal serverfarm are all listed in the ch.pool.ntp.org zone. As I think there are also other SwiNOG people running ntpd's for that project. For about 36 hours my firewall log is growing and growing, looks like a distributed attack from a botnet. Has anyone the same problem?
Any idea what could be done? I mean - it's not really disturbing yet, but strange.
Here the log analysis from one of the machines: http://aphrodite.uid0.ch/fwanalog/today.html
Thank you for your comments...
Regards,
--
.''`. Mario Iseli mario@debian.org
: :' : Debian GNU/Linux developer
`. `'`
`- Debian - when you have better things to do than fixing a system