Ntp service enhancement



  • Current NTP  is very basic, as is the generated config. In many cases this good. However, would like to see some enhancements re the restrict options.

    Currently generated:
    restrict default kod nomodify notrap nopeer
    restrict -6 default kod nomodify notrap nopeer

    Would like to see an option to update this to (adding noquery):

    restrict default kod nomodify notrap nopeer noquery
    restrict -6 default kod nomodify notrap nopeer noquery

    And allow for certain subnets (eg from selectable interfaces or alias) to have the old config, eg
    restrict 192.168.1.0 mask 255.255.255.0 kod nomodify notrap nopeer

    And for specified ips (alias) to have unrestricted access
    restrict 192.168.1.15


  • Rebel Alliance Developer Netgate

    There are some other NTP enhancement discussions going on in another thread, you may want to look at what they're doing:

    https://forum.pfsense.org/index.php/topic,67189.0.html


Log in to reply