Ntp service enhancement

hans-d

Current NTP is very basic, as is the generated config. In many cases this good. However, would like to see some enhancements re the restrict options.

Currently generated:
restrict default kod nomodify notrap nopeer
restrict -6 default kod nomodify notrap nopeer

Would like to see an option to update this to (adding noquery):

restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery

And allow for certain subnets (eg from selectable interfaces or alias) to have the old config, eg
restrict 192.168.1.0 mask 255.255.255.0 kod nomodify notrap nopeer

And for specified ips (alias) to have unrestricted access
restrict 192.168.1.15

jimp

There are some other NTP enhancement discussions going on in another thread, you may want to look at what they're doing:

https://forum.pfsense.org/index.php/topic,67189.0.html