Your message dated Sun, 30 Jul 2006 11:44:13 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#286799: should use request's destination IP as reply's
source IP
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: ntp-simple
Version: 1:4.2.0a-11
Severity: normal
Hi,
ntpd violates the robustness principle by being conservative in what
it accepts, but progressive in what it sends.
Given the following network:
| 10.1.2.3
--------------------------- ---------------------
| ntp-server running ntpd | | host running ntpd |
--------------------------- ---------------------
| 172.16.4.5 | 172.16.4.6
| |
-------------------------------------------------
When the ntpd on 172.16.4.6 sends its request to 10.1.2.3, the server
answers using 172.16.4.5 as source address for the answer, which
172.16.4.6 promptly discards. Additionally, if a stateful packet
filter were between server and host, the packet filter would have
discarded the answer as well.
This can be worked around by having the ntpd host name resolve always
to the "nearest" interface of the server, but that would need a
complex split DNS setup or DNS views which might not be available due
to crippled DNS software being in use.
In my opinion, ntp should try to use the request's destination IP as
the reply's source IP.
Greetings
Marc
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-vashy
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)
Versions of packages ntp-simple depends on:
ii libc6 2.3.2.ds1-19 GNU C Library: Shared libraries an
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii ntp-server 1:4.2.0a-11 Network Time Protocol: common serv
-- debconf information excluded
--- End Message ---
--- Begin Message ---
According to <https://ntp.isc.org/bugs/show_bug.cgi?id=148> (and various
similar bugs), this should be fixed in the latest version. Please
check that it works for you.
--- End Message ---
