From owner-freebsd-questions@FreeBSD.ORG  Wed Oct 18 10:56:06 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B271016A403
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Oct 2006 10:56:06 +0000 (UTC)
	(envelope-from xfb52@dial.pipex.com)
Received: from smtp-out2.blueyonder.co.uk (smtp-out2.blueyonder.co.uk
	[195.188.213.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1CB7243D49
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Oct 2006 10:56:05 +0000 (GMT)
	(envelope-from xfb52@dial.pipex.com)
Received: from [172.23.170.138] (helo=anti-virus01-09)
	by smtp-out2.blueyonder.co.uk with smtp (Exim 4.52)
	id 1Ga95g-0006CV-6Y; Wed, 18 Oct 2006 11:56:04 +0100
Received: from [82.41.32.39] (helo=[192.168.0.2])
	by asmtp-out5.blueyonder.co.uk with esmtp (Exim 4.52)
	id 1Ga95X-00017Y-Nx; Wed, 18 Oct 2006 11:55:55 +0100
Message-ID: <4536083B.6020805@dial.pipex.com>
Date: Wed, 18 Oct 2006 11:55:55 +0100
From: Alex Zbyslaw <xfb52@dial.pipex.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-GB; rv:1.7.13) Gecko/20060515
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <20061018000853.O49453@192.168.11.51>	<F5EF37C8-7955-4246-932E-833A537A4009@mac.com>
	<4535C0EB.8000700@infracaninophile.co.uk>
In-Reply-To: <4535C0EB.8000700@infracaninophile.co.uk>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: ntpd not adjusting the clock?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Oct 2006 10:56:06 -0000

Matthew Seaman wrote:

>That means that anyone can connect to your NTP daemon and poll it for time
>service or use ntpdc to muck around with your configuration.  It's better
>to use at minimum:
>
>    restrict default nopeer nomodify
>    restrict localhost
>  
>
You *can* block that kind of unwanted external access with a firewall, 
though it can get tricky with NAT in the equation.

--Alex