Many thanks!  As Thomas mentioned, with the exception of changing the
servers, this is the default configuration for Ubuntu 10.04 as well. 
I'll file a bug report with Debian.

On 06/23/2012 11:36 PM, Dave Hart wrote:
> Ted, your posted ntp.conf has:
>
> restrict -4 default kod notrap nomodify nopeer noquery
> restrict -6 default kod notrap nomodify nopeer noquery
>
> If you're using ntpd 4.2.6 or later, you can consolidate that into a
> single line omitting -4/-6.  In any case, please consider adding
> "limited" to your default restrictions, so that clients are
> rate-limited and your server is less useful for spoofed-source-address
> reflection attacks.  Without "limited", the "kod" is useless -- it
> controls only how ntpd responds to rate limit exceeded, but first you
> have to have "limited" to enforce the rate limit.
>
> Cheers,
> Dave Hart


_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool

Reply via email to