[ntp:questions] Re: NTP Stratum 16?
worley at dragon.ariadne.com
Fri Oct 3 03:52:11 UTC 2003
"Matt Taylor" <para at tampabay.rr.com> writes:
> I did try other servers and got the same results. I found the culprit. It
> seems that a combination of factors caused the failure. First, entries in my
> restrict default ignore
> restrict 127.0.0.1
> restrict 192.168.0.0 mask 255.255.0.0 notrust nomodify notrap
> restrict 188.8.131.52 mask 255.240.0.0 notrust nomodify notrap
> restrict 10.0.0.0 mask 255.0.0.0 notrust nomodify notrap
> My understanding was that this applied toward clients and would restrict
> traffic to well-known, private subnets. Everyone trying to sync to me from
> the outside would get blocked by the default rule.
Yes, that is completely correct. The trouble is that it applies to
*all* incoming packets, even those that are responses from your NTP's
requests to the servers you specify in ntp.conf. You have to
un-restrict them, one way or another.
More information about the questions