Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense Date & Time

    Scheduled Pinned Locked Moved Captive Portal
    55 Posts 9 Posters 44.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cleetus Antony @elvisimprsntr
      last edited by

      @elvisimprsntr
      Time in BIOS is correct and its in UTC format. Still I installed new battery in motherboard.
      But even after setting correct time zone in pfsense, time is 7 Hours ahead.

      E 1 Reply Last reply Reply Quote 0
      • E
        elvisimprsntr @Cleetus Antony
        last edited by

        @Cleetus-Antony

        1. GUI: stop NTP service
        2. CLI: ntpdate time.nist.gov
        3. GUI: restart NTP service
        C 3 Replies Last reply Reply Quote 0
        • C
          Cleetus Antony @elvisimprsntr
          last edited by

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • C
            Cleetus Antony @elvisimprsntr
            last edited by

            @elvisimprsntr

            Did the same. I got below msg on output.
            Still the time is wrong.. Now 4 Hours 30 min difference.

            14 Jun 19:03:04 ntpdate[63408]: the NTP socket is in use, exiting

            1 Reply Last reply Reply Quote 0
            • C
              Cleetus Antony @elvisimprsntr
              last edited by

              @elvisimprsntr
              14 Jun 19:14:57 ntpdate[69805]: no server suitable for synchronization found

              this is the result of second try

              1 Reply Last reply Reply Quote 0
              • C
                Cleetus Antony @elvisimprsntr
                last edited by

                @elvisimprsntr
                "DNS Resolver is stopped or Disabled" when we chk the tatus of DNS Resolver.
                In the DNS Resolver page, the Enable DNS Resolver tick mark is ON
                May be NTP server setting is not resolving ??????
                DNS Resolution behavior is set as Default.(First use local and fall back to remote)

                DNS forwarder is ON and working.

                GertjanG 1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan @Cleetus Antony
                  last edited by

                  @Cleetus-Antony said in Pfsense Date & Time:

                  DNS forwarder is ON and working.

                  Then the NTP client can resolve.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  C 2 Replies Last reply Reply Quote 0
                  • C
                    Cleetus Antony @Gertjan
                    last edited by

                    @Gertjan But no effect. Tried all the ways . Time is still 4 and half hour ahead.

                    1 Reply Last reply Reply Quote 0
                    • C
                      Cleetus Antony @Gertjan
                      last edited by

                      @Gertjan
                      14 Jun 19:14:57 ntpdate[69805]: no server suitable for synchronization found

                      This response means any issue with DNS ?

                      GertjanG 1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan @Cleetus Antony
                        last edited by

                        @Cleetus-Antony

                        Noop.
                        A (the pfSense) NTP client syncs with an NTP server, typically an IP (and in that case : no DNS needed ;) ), a host name or even a pool.
                        It tells you it wasn't able to do so.

                        Example :
                        I'm in France, so I used a local NTP server pool :

                        6e2fe29c-1c5e-4541-8535-11ca27baa4a0-image.png

                        Because you should never 'type in stuff without checking, I've checked this "2.fr.pool.ntp.org" :

                        [24.03-RELEASE][root@pfSense.bhf.tld]/root: dig @127.0.0.1 2.fr.pool.ntp.org +short
                        195.154.226.102
                        149.91.80.92
                        91.224.149.41
                        82.64.81.218
                        

                        This tells me 3 things :
                        The pool is a pool, there are several IPs.
                        The 'host name' resolves to IPs.
                        And, bonus : my DNS works.

                        My 'NTP' is happy of course :

                        7952f4c1-cfca-44de-8da2-a7297897a01d-image.png

                        Hummm : the status told me my check was wrong ....
                        Ok, again :

                        [24.03-RELEASE][root@pfSense.bhf.tld]/root: dig @127.0.0.1 2.fr.pool.ntp.org AAAA +short
                        2001:41d0:801:2000::acb
                        2001:41d0:304:200::6803
                        2603:1020:802:3::a8
                        2001:861:4080:81b1::3
                        

                        Also fine.

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        C 1 Reply Last reply Reply Quote 0
                        • C
                          Cleetus Antony @Gertjan
                          last edited by

                          @Gertjan said in Pfsense Date & Time:

                          dig @127.0.0.1 2.fr.pool.ntp.org +short

                          Thank u for the info.
                          My NTP is sad.

                          dd0a9615-488e-4df0-aa7f-469b0b58118a-image.png

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @Cleetus Antony
                            last edited by johnpoz

                            @Cleetus-Antony well your never going to sync if you can not resolve anything in the pool name your using.

                            If you try and resolve that fqdn, what do you get back?

                            23.09.1-RELEASE][admin@sg4860.home.arpa]/root: dig 0.in.pool.ntp.org
                            
                            ; <<>> DiG 9.18.16 <<>> 0.in.pool.ntp.org
                            ;; global options: +cmd
                            ;; Got answer:
                            ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21553
                            ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
                            
                            ;; OPT PSEUDOSECTION:
                            ; EDNS: version: 0, flags:; udp: 4096
                            ;; QUESTION SECTION:
                            ;0.in.pool.ntp.org.             IN      A
                            
                            ;; ANSWER SECTION:
                            0.in.pool.ntp.org.      3600    IN      A       157.245.102.2
                            0.in.pool.ntp.org.      3600    IN      A       162.159.200.123
                            0.in.pool.ntp.org.      3600    IN      A       162.159.200.1
                            0.in.pool.ntp.org.      3600    IN      A       95.216.192.15
                            
                            ;; Query time: 326 msec
                            ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
                            ;; WHEN: Fri Jun 14 07:54:50 CDT 2024
                            ;; MSG SIZE  rcvd: 110
                            

                            dns.jpg

                            Also you have 2 notifications I see up there the red bell with 2 next too it - those are normally things you should pay attention too, and quite often point out stuff that had an error, etc..

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            C 1 Reply Last reply Reply Quote 0
                            • C
                              Cleetus Antony @johnpoz
                              last edited by Cleetus Antony

                              @johnpoz
                              da8dda20-ac84-4e7f-bc8e-f5fa65ef733c-image.png

                              7bcf15cb-7bae-4ee7-bdeb-673d86c6c510-image.png

                              johnpozJ GertjanG 2 Replies Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @Cleetus Antony
                                last edited by johnpoz

                                @Cleetus-Antony ok well its resolving... So that is good.. Odd that ntp doesn't show that, I would think it would show the IPs it resolved and then if couldn't talk to them the reach would just be at zero, etc..

                                But yours is showing nothing, like it couldn't resolve what IPs are in the pool? Is that maybe a O vs a 0 (zero)?

                                You could try putting in say one of those IPs directly vs as a pool and see if it shows that IP.. And can it talk to it.. I would then sniff on your wan to validate its sending ntp, and maybe you just don't get an answer?

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan @Cleetus Antony
                                  last edited by

                                  @Cleetus-Antony

                                  620f5971-d19c-4f8f-91bc-13b15f0cca00-image.png

                                  Do you have a PC with a windows OS ? or any OS actually, as every device has a ntp client these days.
                                  Get any of the IP's, and give it to your ntp windows client :

                                  55f88f52-5a90-4d65-8d9a-4fab690c19dc-image.png

                                  and test it.

                                  Still doesn't work ?
                                  Start checking your upstream 'WAN' (ISP ?) connection. Some one might be filtering upstream.
                                  You don't have any pfSense floating firewall rules, right ?

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  C 2 Replies Last reply Reply Quote 0
                                  • C
                                    Cleetus Antony @Gertjan
                                    last edited by

                                    @Gertjan

                                    I have no additional rules set. All default ones.
                                    Before this ntp, I used pfsense default ntp settings. Stil the issue was same.

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      Cleetus Antony @Gertjan
                                      last edited by

                                      @Gertjan

                                      1999db06-69b7-4953-8670-8404a66c0fb2-image.png

                                      I put one of the ip into ntp. its not reaching.

                                      But from pfsense, its pinging.
                                      50af1605-8f8d-4312-9a4a-72c328b382bc-image.png

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • U
                                        Uglybrian
                                        last edited by

                                        The firewall can notify administrators of important events and errors by displaying an alert in the menu bar, indicated by the bell icon. Out of cuirosity what are your notifications?

                                        C 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @Cleetus Antony
                                          last edited by

                                          @Cleetus-Antony pinging is different than ntp.. While ping is good that you can actually get there.. Doesn't mean its answering ntp, or that it even sees your ntp query..

                                          First thing is to actually validate your ntp query is leaving your wan, and has been natted to your IP.. If you see the query go out - and get no answer.. Not something pfsense can have any control over.. You would then need to look up stream if something is blocking, etc...

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          C 1 Reply Last reply Reply Quote 0
                                          • C
                                            Cleetus Antony @Uglybrian
                                            last edited by

                                            @Uglybrian

                                            Notifications was not related NTP.
                                            It was abt some user settings.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.