The servers you are talking to appear to disagree with each other that you may not find an "intersection" so ntpd can decide to trust one of them. You are also not using iburst. It also appears you have not read the documentation on how to use 'restrict' statements: http://ntp.isc.org/bin/view/Support/AccessRestrictions H