I couldn't access NNTP from work anymore! I thought someone put the
kibosh on it upstream, and made them chase down a red herring for a few
hours (days?). Anyway, it was my stupid astaro box and it's "intrustion
This lovely snort rule:
alert tcp $EXTERNAL_NET 119 -> $HOME_NET any (msg:"A NNTP XHDR buffer
overflow attempt"; gid:3; classtype:attempted-user; metadata: engine
shared, soid 3|12636; sid:50012636
seems to think anything coming in from port 119 is the devil, all
because lookout express has a buffer overflow exploit.

Anyway, crisis averted. I can now successfuly waste the remainder of my
time at work.