1

if I don't write restrict in ntp.conf , so ntp restrict is Unlimited?

I wrote:

interface ignore wildcard
interface listen lo
interface listen lan0

man page http://doc.ntp.org/current-stable/accopt.html#restrict said:

A default entry (address 0.0.0.0, mask 0.0.0.0 for IPv4 and address :: mask :: for IPv6) is always the first entry in the list. restrict default, with no mask option, modifies both IPv4 and IPv6 default entries. r

if I don't write restrict, The setting is as follows:

restrict 0.0.0.0/0

restrict has address/mask, but doesn't flag. ok?

1 Answer 1

1

if I don't write restrict in ntp.conf , so ntp restrict is Unlimited?

Correct, the default is unrestricted. This allows the control protocol over these interfaces, which may not be desired. A common pattern is allowing time service to any client but modify messages only from localhost:

restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1 
restrict -6 ::1
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .