Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 Feb 2005 14:20:36 +0100
From:      dick hoogendijk <dick@nagual.st>
To:        freebsd-questions@freebsd.org
Subject:   ipfilter and ntp sserver
Message-ID:  <20050213142036.09fb3b72.dick@nagual.st>

next in thread | raw e-mail | index | archive | help
I want my local ntp server up and running, so I put in /etc/rc.conf:
xntpd_enable="YES" but waht are the right rules for ipfilter? Someting
like:

# Allow out ntp traffic
pass out quick on rl0 proto tcp from any to any port = 123 flags S keep
state
pass out quick on rl0 proto udp from any to any port = 123 keep state

Or do I have to open some ports incoming as well?
[ I think I need a good book about ipfilter ;-) ]
I mentioned tcp/udp because I read in /etc/services that ntp uses both.
Does keep state mean that automagically all incoming traffic will be OK
(for ntp)

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11 ++ FreeBSD 5.3
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050213142036.09fb3b72.dick>