> You might be better off running ntpd on the firewall and having > the inside hosts sync to it. That would be nice - except my problem is that the firewal is the only one on which ntp *doest* run! :-) Thanks for all the other suggestions - will take a look a them later today and see if I can track this down. -pete.