Ted, your posted ntp.conf has:

restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

If you're using ntpd 4.2.6 or later, you can consolidate that into a
single line omitting -4/-6.  In any case, please consider adding
"limited" to your default restrictions, so that clients are
rate-limited and your server is less useful for spoofed-source-address
reflection attacks.  Without "limited", the "kod" is useless -- it
controls only how ntpd responds to rate limit exceeded, but first you
have to have "limited" to enforce the rate limit.

Cheers,
Dave Hart
_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool

Reply via email to