RICCARDO wrote:
I want to use ntpd as a daemon on client to synchronize to my NTP server of company lan.
That's how it is normally used (except for choice of server).
Can I avoid ntpd service doesn't listen to port 123 on this client ?
ntpd needs to receive the replies from the server. It cannot do so unless it listens on port 123. The code is not structured in terms of using a socket for one server. The same socket serves for both responses and requests, in both directions.
I'd like using only this service for synchronizing to ntp server, but no listen port !
If you have problems with a security consultant with an open port checker, you will just have to educate them. Otherwise the default configuration is reasonably secure but you can use restrict statements and (outside of ntpd) firewall rules to further restrict it.
_______________________________________________ questions mailing list questions@lists.ntp.org http://lists.ntp.org/listinfo/questions
