647 reputation
210
bio website douglasfcalvert.net
location Syracuse, NY
age 34
visits member for 2 years, 7 months
seen 21 hours ago

dfc


Apr
9
comment ntpd default rate limiting?
Everything looks good from what you posted. Maybe check_mk is braindead? Can you post the ntpq -crv when the problem arises again? PS your leapseconds file is stale.
Apr
9
comment ntpd default rate limiting?
Can you append ntpq -pcrv from a host and a controller node? You hav verified that there are no other FW rules in play? FYI all of your restrict server lines are redundant. They do not really do anything that is not included in the default restrict lines and make reading your config painful. peering is different than requesting time. If you really want different restrictions for your servers you can use restrict source once and it will cover all associations.
Apr
8
comment NTP with US Chicago time - issue
Your "local" ntp source has a delay of0.484? How do you define local? Same solar system?
Mar
26
comment Why does ntpd need to bind external interfaces to sync the local clock?
Please edit your post and add your full ntp.conf.
Mar
20
answered How to configure NTP has a TAI or GPS time reference?
Feb
14
comment DDOS using ntp server
The fact that you never mentioned noquery in your answer is the problem! So your problem with cloudflare has nothing to do with the accuracy o the information provided in the links I gave?
Feb
14
comment DDOS using ntp server
How can a public ntp server be used for a DDOS when noquery enabled? Please provide amplification factors when noquery is enabled. Why is it unfortunate that some ntp servers provide a public service? What does cloudflare's business model have to do with the accuracy of that information? If cloudflare is in the business of combatting DDOSs it seems like they would want to inflate the appearance of problems, not limit them.
Feb
14
comment DDOS using ntp server
@TeunVink Please see these posts from cloudflare for accurate information. This answer is very misleading if not outright incorrect: blog.cloudflare.com/… blog.cloudflare.com/…
Feb
14
comment DDOS using ntp server
@TeunVink This is the worst thing i have read in a discussion of ntp DDOS: "But unfortunately there are quite a number of NTP servers which are public by intent." The internet needs public ntp servers. This DDOS has nothing to do with serving time to the public. The problem is allowing monlist queries from untrusted hosts. An ntp server operator can enable noquery in order prevent being used as a traffic amplifier and still provide time services to the public.
Feb
6
comment Ubuntu 12.04 LTS ntp not working
what happens when you run ntpdate -d -v us.pool.ntp.org Your syslog paste is missing some info. You did not paste enough of it. It does not give any info about trying to connect to ntp.ubuntu.com
Feb
6
comment Why does NTP daemon keep listening on UDP6?
Always be wary of recommendations/suggestions when the person giving the recommendation confesses to never having used the product in question. If you need an alternative to ntp reference implementation try chrony. It is important to note that chrony and openntpd do not support a lot of the extended features of the reference implementation.
Jan
29
comment ntp.conf function and format for server keyword
It is trying to contact it because you told it to try. Given the choice between showing or not showing that information I think showing the infformation is the correct behavior. This way you know that it is configured to talk to the local machine but ntp is not letting it.
Jan
29
comment ntp.conf function and format for server keyword
the .INIT string just means "i have not even been able to connect to this host. still trying to initialize a connection"
Jan
28
comment ntp.conf function and format for server keyword
What happened when you tried this? For some reason I seem to recall that there is a builtin restrict statement that will make ntp ignore connecting back to itself. Also: Why are you not setting them up as peers o each other?
Jan
22
comment Audit files on a Debian box
The nice thing about cruft is that you can use it now. debsums and etckeeper will only identify things going forward. Protip for etckeeper: have all your machines push to different branches of the same repository. That way you can easilly reference how you have set up /etc/xyz.conf on other machines in the past.
Jan
21
answered Usefulness of a new stratum-1 NTP server
Jan
21
comment NTP can't synchronise or find a suitable server
can you close this question so people dont waste their time trying to answer open questions?
Jan
21
comment I have 0.0.0.0 refid, I assume ntp error
ntpq never outputs data in that format. post your ntp.conf and the actual output from ntpq
Jan
20
answered Audit files on a Debian box
Jan
20
comment How to recreate /etc/cron.daily/apt?
It will not help with this problem but to prevent future issues may I suggest etckeeper. All you would have to do is use git to revert the change: joeyh.name/code/etckeeper