[Dshieldannounce] New Feature: Scheduled Timestamp

[Johannes B. Ullrich]

If you are using our fightback system (or reading the discussion
list), you probably got a notice about our "Time check" page.
This page exists for quite a while, but we are making a new push
to have everyone use it ocassionally to verify the client configuration.

Results so far indicate that 20-25% of our users report the wrong
timezone. This error is more common then badly configured system
clocks.

In addition, based on feedback from users, I added an option to the
user profile to trigger a time check (in particular if you are
monitoring dark ip space, in which case you can't hit our timecheck
page).

As a summary:

* If you are reporting from a personal firewall, or a firewall that
protects a "regular" network, please occasionally visit our time check
page at http://www.dshield.org/timestamp.php . Visiting this page will
send a 'marker packet' to your firewall that will be used to verify your
configuration once you submit the respective log.

* If you would like to automate this function, or if you are reporting
from dark IP space from which you can not reach the time stamp page,
login to your account and enter the to-be checked ip addresses in your
profile (IMPORTANT: only use this for static IP addresses)

If you check your setting before the end of today, you are still
eligible for the drawing of a free DShield t-shirt ;-)


(Please use the discussion lists for public replies. This list
is for announcements only)

-- 
----------------------------------------------------------------
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 639 5000                          jullrich at sans.org 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/dshieldannounce/attachments/20041011/ae2703b2/attachment.bin