Re: Acqusition of time

["Charles W. Swiger" <chuck () codefab com>]

On Wednesday, January 29, 2003, at 09:55  AM, Brian Monkman wrote:
[ ... ]
> Are there any situations where a firewall's acqusition of time
> could/should be from a network time source? Not necessarily a public
> source, it could be an "internal" time source.

It's a good idea to have the timestamps on logfiles consistant, so running 
ntpdate or some such upon system boot is a pretty good idea.  Running ntpd 
against internal NTP servers is a greater risk; so if your systems keep 
adequate time, don't; if your systems drift noticably, then NTP will 
probably be worth the tradeoff.

-Chuck

       Chuck Swiger | chuck () codefab com | All your packets are belong to 
us.
       
-------------+-------------------+-----------------------------------
       "The human race's favorite method for being in control of the facts
        is to ignore them."  -Celia Green

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards