LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-24-2008, 12:18 AM   #1
Quakeboy02
Senior Member
 
Registered: Nov 2006
Distribution: Debian Squeeze 2.6.32.9 SMP AMD64
Posts: 3,318

Rep: Reputation: 126Reputation: 126
NTP compromise?


I've been having some odd problems lately that I thought were related to networking. Essentially my access to the internet was freezing from time to time. I finally noticed that it was more or less on the few minutes before and after the half hour and that got me to wondering about ntp. I opened up the gnome time applet and there were a lot more ntp servers checked than I ever remember setting. I've cleared out all but 3 and the thing seems to have settled back into some level of normalcy.

My system: Debian, quad core AMD, wireless with WPA-PSK encryption to AT&T's wireless router. This is lower-middle class suburbia and I know everyone that has a router up that I can see. No holes in the firewall that I know of. This is not a commercial site. Just my access point.

So, have I been compromised through NTP or is this just some sort of meltdown/ NTP-timewar that was closing up my network every half hour?
 
Old 11-24-2008, 12:25 AM   #2
nigelc
Member
 
Registered: Oct 2004
Location: Sydney, Australia
Distribution: Mageia 6
Posts: 354
Blog Entries: 4

Rep: Reputation: 63
This sounds interesting what were the names of the servers?

cheers
 
Old 11-24-2008, 12:28 AM   #3
Quakeboy02
Senior Member
 
Registered: Nov 2006
Distribution: Debian Squeeze 2.6.32.9 SMP AMD64
Posts: 3,318

Original Poster
Rep: Reputation: 126Reputation: 126
Quote:
Originally Posted by nigelc View Post
This sounds interesting what were the names of the servers?

cheers
They're gone, but I would swear that some were Debian Timeservers, which seemed strange.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The GPL is not a compromise LXer Syndicated Linux News 0 09-29-2006 07:33 AM
access_log compromise ?? lawadm1 Linux - Security 8 12-17-2005 11:40 PM
phpBB Compromise chris_yumm Linux - Security 6 07-22-2005 12:54 AM
Security Compromise apache Linux - Security 16 08-07-2004 10:29 PM
NTP cannot work with timeserver, NTP-d can jerryvapps Linux - Networking 0 08-04-2004 02:04 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration