From owner-freebsd-stable@FreeBSD.ORG Tue Nov 23 14:25:53 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 82B1D16A4CE for ; Tue, 23 Nov 2004 14:25:53 +0000 (GMT) Received: from supermail.ispro.net.tr (supermail.ispro.net.tr [217.21.68.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9F25243D41 for ; Tue, 23 Nov 2004 14:25:50 +0000 (GMT) (envelope-from yurtesen-dated-1102083948.1e4081@ispro.net.tr) Received: (qmail 4963 invoked by uid 89); 23 Nov 2004 14:25:49 -0000 Received: from [84.248.223.210] (dsl-aur-wwd2.dial.inet.fi [84.248.223.210]) by supermail.ispro.net.tr (tmda-ofmipd) with ESMTP; Tue, 23 Nov 2004 16:25:44 +0200 (EET) Message-ID: <41A3D4F9.7090001@ispro.net.tr> Date: Tue, 23 Nov 2004 16:25:29 -0800 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.1) Gecko/20040707 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Yann Golanski , freebsd-stable@freebsd.org References: <41A3D0F5.1020406@ispro.net.tr> <20041123141250.GB51987@kierun.org> In-Reply-To: <20041123141250.GB51987@kierun.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Delivery-Agent: TMDA/1.0.2 (Bold Forbes) From: Evren Yurtesen X-Primary-Address: yurtesen@ispro.net.tr Subject: Re: ntpd v4.2 problem X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2004 14:25:53 -0000 Yann Golanski wrote: > Quoth Evren Yurtesen on Tue, Nov 23, 2004 at 16:08:21 -0800 > >>The handbook seem to give wrong information about ntp and the manual >>page of ntp.conf is ?old? maybe? >> >>The notrust option obviously changed between v4.1 and v4.2... >>http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ntp.html >> >>Can an ntpd guru have a look into that? > > > My set up is as follows and it works fine on 4.10 and 5.3... > > # cat /etc/ntp.conf > driftfile /var/db/ntp.drift > > server 0.pool.ntp.org > server 1.pool.ntp.org > server 2.pool.ntp.org > > # grep ntp /etc/rc.conf > ntpd_enable="YES" > ntpdate_flags="-b 0.pool.ntp.org" > > But make sure your clocks are in sink at the start by using date. > The problem in the manual is different. You do not have any access control in your server, your server is worldwide open to other people changing your runtime configuration etc. (as it seems from your conf file) From ntp handbook page! ---- If you only want to allow machines within your own network to synchronize their clocks with your server, but ensure they are not allowed to configure the server or used as peers to synchronize against, add restrict 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap ---- But if you use notrust in this line no clients are able to connect. I am not sure why. That is why I asked about an ntpd pro having a look. Thanks, Evren