Posted: 05th May, 2005 By: MarkJ
NDO has been forced to change its NTP Time Server from public-access to private-access (available only to
NDO users). The change has been made after the ISP discovered that the new Sober virus was abusing it:
Time Servers are useful for and often used to synchronise your computers and servers clock with a global atomically accurate clock to ensure the time held on your computers is accurate. NDO have been providing a Public NTP Time Server service since 1998.
The reason for this applying this block now is because the latest Internet Virus: W32-Sober.N/Sober.O@mm/Sober.P (name varies depending on Anti-Virus vendor) is programmed to contact the NDO Time Server to check that Internet Access is available, and by the NDO Time Server responding with a valid time the virus activates. Therefore, NDO has had to block access to our Time Server to try to reduce the spread of this virus and also to reduce the enormous load that was being placed onto our Time Server - it was receiving approximately 8,000 time requests per second before the block was put into place. This virus is currently accounting for 77% of all viruses being intercepted on the Internet.
If you previously used on the NDO Time Server for accurately synchronising your computers clock, we apologise for any inconvience this block has caused for you, but hope you can understand the reasons why we have needed to put the block into place. You will however need to find an alternative time server to use at the moment while this virus is so wide-spread.
McAfee has a very detailed report on this new Sober variant available on its website at: http://vil.mcafeesecurity.com/vil/content/v_133409.htm
Please note, no other products or services (ADSL, hosting, servers, email, dialup etc) provided by NDO have been effected by this action and will continue to operate and be provided to all our users as normal. Anyone connected to the NDO Network still has access to our Time Server for synchronisation.