>>>>> "George" == George Lambert writes: George> Check and set the time by syncing to NTP Servers - not user supplied times George> if the network George> is available. to see if they have set times > those set by NTP Server George> http://tf.nist.gov/tf-cgi/servers.cgi George> The global address *time.nist.gov* is resolved to all of the server George> addresses below in a round-robin sequence to equalize the load across all George> of the servers. Good idea, but you need DNS to find that server, and you need time to do DNSSEC. If the time is set years into the future, then DNSSEC may also fail, as the signatures would be too old. Accepting that might be a problem. If the time can be set like this by an operator, then there is a problem, and an operator will have to deal with it. It's best to stick to what we can do automatically. -- Michael Richardson -at the cottage-