[ntp:questions] Restrict vs DNS lookup

David Woolley david at ex.djwhome.demon.invalid
Sun Jun 6 07:42:05 UTC 2010


Hal Murray wrote:

> 
> Description here:
>   http://www.eecis.udel.edu/~mills/ntp/html/accopt.html
> 
> Would somebody who uses restrict please check to see if this
> does what you want.
> 

I'm not convinced that the people who try to use restrict on pool 
servers really know what they want!  I think they are trying to blindly 
apply a "when in doubt block" policy, without really thinking about the 
fact that they are opening themselves up to random, untrusted, servers 
by using the pool in the first place, and that they are already 
protected from unsolicited associations.

Unfortunately, it is often not them that is enforcing the policy (and 
therefore not them that could evaluate the appropriateness of restrict 
server.




More information about the questions mailing list