Redhat:NTS config - Revision history

Michael: /* restrict */

2013-08-28T19:38:16Z

restrict

Michael: /* restrict server */

2013-08-28T19:33:13Z

restrict server

Michael: /* restrict client */

2013-08-28T19:32:46Z

restrict client

Michael: Created page with "== NTP Server Configuration == The ntp.conf file is also used to configure a Time server. === driftfile === The first directive is "driftfile". This defines the file us..."

2013-08-28T19:30:01Z

Created page with "== NTP Server Configuration == The ntp.conf file is also used to configure a Time server. === driftfile === The first directive is "driftfile". This defines the file us..."

New page

== NTP Server Configuration ==

The ntp.conf file is also used to configure a Time server.

=== driftfile ===

The first directive is "driftfile". This defines the file used to monitor errors in the local system clock.

=== restrict ===

The "restict" directive can help protect the NTP server. By default it works on ipv4, but the -6 flag works on ipv6 networks.

<syntaxhighlight>
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
</syntaxhighlight>

====restrict client ====

==== restrict server ====

← Older revision		Revision as of 19:38, 28 August 2013
Line 17:		Line 17:
	restrict -6 default kod nomodify notrap nopeer noquery		restrict -6 default kod nomodify notrap nopeer noquery
	</syntaxhighlight>		</syntaxhighlight>
		+
		+	{\| class="wikitable"
		+	\|+ restrictions
		+	\|-
		+	\|default \|\| refers to default connections from other systems
		+	\|-
		+	\| kod \|\| sends the "kiss of death" to systems that violate access restrictions. Only works with limited flag, otherwise it can be removed in a breach
		+	\|-
		+	\| nomodify \|\| denies attempts to change the server
		+	\|-
		+	\| notrap \|\| denies the control message trap server
		+	\|-
		+	\| nopeer \|\| stops access from other time servers
		+	\|-
		+	\| noquery \|\| ipgnores infomation and configuration requests
		+	\|-
		+	\|}
		+

← Older revision		Revision as of 19:33, 28 August 2013
Line 26:		Line 26:

	To allow other systems to syncronise with your server 'noquery' should be revolved.		To allow other systems to syncronise with your server 'noquery' should be revolved.
−
−	~~==== restrict server ====~~

← Older revision		Revision as of 19:32, 28 August 2013
Line 19:		Line 19:


−	~~====~~restrict ~~client ====~~	+	* restrict server
		+
		+	When all of these restrictions are combined they will not work for a Time Server.
		+
		+	Specifically a time server has to synchronize with peers. So obviously 'nopeers' should be removed.
		+
		+	To allow other systems to syncronise with your server 'noquery' should be revolved.

	==== restrict server ====		==== restrict server ====