[ntp:questions] systems won't synchronize no matter what

Florin Andrei florin at andrei.myip.org
Wed Oct 27 21:57:50 UTC 2010


On 10/27/2010 11:46 AM, Steve Kostecke wrote:
> On 2010-10-27, Hal Murray wrote:
>
>>>> restrict default ignore
>>>
>>> Your default restriction line is telling ntpd to ignore all NTP
>>> packets. This includes your remote time servers. The only NTP packets
>>> which are being allowed in/out are for 127.0.0.1 and 192.168.3.0/24.
>>> This is why these three systems won't sync.
>>
>> How hard would it be to add some code to check to see if the IP
>> Address from a server line will get rejected by the restrict
>> statements and log a warning message?
>
> There is already a (better) solution in ntp-dev. Please see
> http://bugs.ntp.org/show_bug.cgi?id=1568#c1

Yeah, anything along the general lines of the proposals above would be 
great. Would have saved me a lot of trouble.

I cleaned up ntp.conf and now the NTP clients are syncing up when using 
the conf file below. Thanks everyone.

############################################
server 10.10.16.65 iburst
server 10.10.16.64 iburst

# excepting the servers from more drastic restrictions
restrict 10.10.16.64 noquery
restrict 10.10.16.65 noquery

# allow local queries
restrict 127.0.0.0 mask 255.0.0.0

# now close the door
restrict default ignore

driftfile /var/lib/ntp/drift
############################################

-- 
Florin Andrei
http://florin.myip.org/



More information about the questions mailing list