On Wed, Jan 04, 2017 at 11:19:37AM -0600, Dan Drown wrote: > Here's a few hours of data from Dec 22 of two popular NTP client > fingerprints, ntpd and ntpdate: > > https://dan.drown.org/ntp/client-types-ntpdate.png
Nice! I'd like to add an ntpdate-free graph to my page. The u32 match in iptables should be able to match ntpdate requests. Has anyone tried to write a rule for that? There doesn't seem to be a || operator, so I guess it will have to be at least three rules for IPv4 or six rules for both IPv4/6 if it should match also older versions of ntpdate that used poll 4 and before that version 3. -- Miroslav Lichvar _______________________________________________ pool mailing list [email protected] http://lists.ntp.org/listinfo/pool
