Forcing All Devices to Use pfSense for NTP (Correction NOT NNTP)

[jimp]

May seem nitpicky but do you actually mean NTP (Network Time Protocol)?

NNTP is a much different protocol (Network News Transfer Protocol, Usenet news groups).

If NTP is what you're after, then KOM's solution is the closest you'll get.

[dennypage]

You're dating yourself. :)

@jimp:

NNTP is a much different protocol (Network News Transfer Protocol, Usenet news groups).

[jahonix]

You think so?
The latest RFC update concerning NNTP is from 2006. https://tools.ietf.org/html/rfc3977

We still don't know if OP meant NNTP or (S)NTP.

[dennypage]

Yep, just in time for the formal declaration of Usenet's death. :)

@jahonix:

The latest RFC update concerning NNTP is from 2006.

[KOM]

Yep, just in time for the formal declaration of Usenet's death. :)

And yet here I am, 10 years later, still sending money to Giganews on a monthly basis.  You can still find lots of obscure, cool stuff via Usenet that isn't on torrent.

[guardian]

@jimp:

May seem nitpicky but do you actually mean NTP (Network Time Protocol)?

NNTP is a much different protocol (Network News Transfer Protocol, Usenet news groups).

If NTP is what you're after, then KOM's solution is the closest you'll get.

Thanks for catching that… I actually do know that... just some sloppy typing..... Maybe I should start another thread?  Also forget to set the notify me check, so I didn't notice it.

[brandur]

The answer you got from @KOM is the same way I handle NTP redirects(and DNS for that matter).
Works just fine in my environment ;)

[guardian]

@brandur:

The answer you got from @KOM is the same way I handle NTP redirects(and DNS for that matter).
Works just fine in my environment ;)

Thanks… Just wondering does NTP validate the source in any way, or does simply routing traffic to the internal server that I want to handle it get the job done?

[guardian]

@KOM:

Try this.  It's DNS-specific but the concepts should still apply.

https://doc.pfsense.org/index.php/Redirecting_all_DNS_Requests_to_pfSense

Thanks… I gave this a try, and... since I want to do the same thing with DNS, so I tried to do exactly what it said in the directions, and all DNS is blocked by the default deny - so for some reason this rule isn't getting triggered. Or am I missing something (or did I find a bug)?

[MoonKnight]

@guardian:

@KOM:

Try this.  It's DNS-specific but the concepts should still apply.

https://doc.pfsense.org/index.php/Redirecting_all_DNS_Requests_to_pfSense

Thanks… I gave this a try, and... since I want to do the same thing with DNS, so I tried to do exactly what it said in the directions, and all DNS is blocked by the default deny - so for some reason this rule isn't getting triggered. Or am I missing something (or did I find a bug)?

Hi,
I also using the redirect all DNS request to OpenDNS servers for my LAN_2 users
This is my firewall rule for my LAN_2 users.  By this I prevent them for using another DNS, Only OpenDNS in this case.