[ntp:questions] Restrict vs DNS lookup

Hal Murray hal-usenet at ip-64-139-1-69.sjc.megapath.net
Mon Jun 7 08:32:09 UTC 2010

In article <hufjh0$aue$1 at news.eternal-september.org>,
 David Woolley <david at ex.djwhome.demon.invalid> writes:
>Hal Murray wrote:
>> Description here:
>>   http://www.eecis.udel.edu/~mills/ntp/html/accopt.html
>> Would somebody who uses restrict please check to see if this
>> does what you want.
>I'm not convinced that the people who try to use restrict on pool 
>servers really know what they want!  I think they are trying to blindly 
>apply a "when in doubt block" policy, without really thinking about the 
>fact that they are opening themselves up to random, untrusted, servers 
>by using the pool in the first place, and that they are already 
>protected from unsolicited associations.

Could we fix that by improving the documentation?

>Unfortunately, it is often not them that is enforcing the policy (and 
>therefore not them that could evaluate the appropriateness of restrict 

I assume anybody serious about needing good time will pick
servers they trust and use autokey.  (and/or setup their
own refclocks)

These are my opinions, not necessarily my employer's.  I hate spam.

More information about the questions mailing list