Unless I misunderstand NTP configuration semantics, your additional "restrict" statements for the NTP pool names will do the wrong thing, in that each reference to a given netbsd.pool.ntp.org name returns multiple IP addresses, in apparently random order, i.e. an attempt to guarantee no two queries return the same data.
Ergo, those restrict statements will most probably not end up with the same IP address as their preceding "server" statements, as was presumably your intent. Erik <f...@netbsd.org>