On Tue, 3 Mar 2009 10:53:48 -0500 (EST), der Mouse <[email protected]> wrote:
>The interesting thing is, the NTP test is tripping regularly. I find >it hard to believe I'm being used as a DDoS reflector to that extent, >meaning that there are apparently hosts out there that really do query >me on the order of every seven seconds. > >My questions for the list are, (1) does this match others' experience? >and (2) what's the list's opinion on whether this is a reasonable thing >to do on a pool server, and, if so, on my choice of trip point? I have seen quite a few such; the review process here looks for hosts with avgint < 60 and count > 10000 and stops responding to them. Some of them continue to bang away merrily at the same rate (stage two: null route), some query much less frequently, and others go away entirely. The worst one, which caused me to institue the review process, had a count of over 100,000 and an avgint of 4 when I first noticed. That said, the number of these has dropped from one or two per day last summer to less than one per week so far this year. _______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
