From owner-freebsd-questions@FreeBSD.ORG Sun Jun 18 01:31:43 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7DF8F16A47B for ; Sun, 18 Jun 2006 01:31:43 +0000 (UTC) (envelope-from crtb@cape.com) Received: from smtp10.cape.com (smtp10.cape.com [204.107.252.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id 098C943D48 for ; Sun, 18 Jun 2006 01:31:42 +0000 (GMT) (envelope-from crtb@cape.com) Received: from tomato (dsl-10-100-102-24.cape.com [10.100.102.24] (may be forged)) by smtp10.cape.com (8.12.10/8.9.1) with ESMTP id k5I1UxF4020791; Sat, 17 Jun 2006 21:30:59 -0400 Date: Sat, 17 Jun 2006 21:30:55 -0400 (EDT) From: Charles Bacon X-X-Sender: crtb@tomato.local To: questions@freebsd.org Message-ID: <20060617211012.R54707@tomato.local> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Scanned: Cape.Com VirusScan, no known virus found Cc: Chuck Bacon Subject: Getting NTP (ntpd, ntpdate) to work X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Jun 2006 01:31:43 -0000 Since FreeBSD 4.5-Release, I have been unable to get NTP working on my two FreeBSD computers, one running 5.3Release and the other on 6.1Release. I have done nothing with the GENERIC kernel on either machine. I talk SSH between them, and have been running ntpd on both, each naming the other as well as two external servers. My network is a typical home net, using 192.168.1/28, served by a DSL router which does NAT for my external traffic. Internal comms. is through switches, plus one hub. Each computer (plus some others running Windows) has easy access out, and is invisible from the Internet exceptt for responses. Here's my ntp.conf, identical on my two computers: server ntp.cape.com server ntp.ourconcord.net driftfile /var/db/ntp.drift logfile /var/log/ntplog pidfile /var/run/ntpd.pid logconfig =all peer 192.168.1.3 peer 192.168.1.2 (much comments removed) With mediocre diagnostic skill, I have finally discovered tcpdump. It told me after much experiment, that the relevant port (NTP, 123) was unreachable. This sounds significant, but I can't find a list of the reachability of ports. I've looked at ng*, mac_* and pf* and finally bpf*, and only the last seems to exist in /dev. I had expected that GENERIC would impose only slight filtering somehow, and certainly not shut off NTP! I guess I need help. Thanks for any help you can give, and I accept any opprobrium for trying to be a sysadmin, even for my home boxen. Chuck Bacon -- crtb@cape.com ABHOR SECRECY -- DEFEND PRIVACY