[ntp:questions] Re: NTP Stratum 16?

Dale Worley worley at dragon.ariadne.com
Fri Oct 3 03:52:11 UTC 2003


"Matt Taylor" <para at tampabay.rr.com> writes:
> I did try other servers and got the same results. I found the culprit. It
> seems that a combination of factors caused the failure. First, entries in my
> ntp.conf:
> 
> restrict default ignore
> restrict 127.0.0.1
> restrict 192.168.0.0 mask 255.255.0.0 notrust nomodify notrap
> restrict 174.16.0.0 mask 255.240.0.0 notrust nomodify notrap
> restrict 10.0.0.0 mask 255.0.0.0 notrust nomodify notrap
> 
> My understanding was that this applied toward clients and would restrict
> traffic to well-known, private subnets. Everyone trying to sync to me from
> the outside would get blocked by the default rule.

Yes, that is completely correct.  The trouble is that it applies to
*all* incoming packets, even those that are responses from your NTP's
requests to the servers you specify in ntp.conf.  You have to
un-restrict them, one way or another.

Dale



More information about the questions mailing list