Package: ntp Version: 1:4.2.6.p2+dfsg-1+b1 Severity: normal File: /etc/ntp.conf
Hi, In addition to adding the "limited" option to the restrict command, I would suggest adding a discard command to override the default minimum request period of 2 seconds, which will block ntpdate clients older than 4.2.7p22. I use: discard average 6 minimum 1 restrict default kod notrap nomodify nopeer noquery limited A discard average of 6 (64 seconds) is possibly too aggressive for a default setting and this could be left at its default of 3 (8 seconds). This is mentioned in http://lists.ntp.org/pipermail/pool/2012-June/005885.html Thanks, Roger -- System Information: Debian Release: 6.0.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable'), (150, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages ntp depends on: ii adduser 3.112+nmu2 add and remove users and groups ii dpkg 1.15.8.12 Debian package management system ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libcap2 1:2.19-3 support for getting/setting POSIX. ii libedit2 2.11-20080614-2 BSD editline and history libraries ii libopts25 1:5.10-1.1 automated option processing librar ii libssl0.9.8 0.9.8o-4squeeze13 SSL shared libraries ii lsb-base 3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip ii netbase 4.45 Basic TCP/IP networking system Versions of packages ntp recommends: ii perl 5.10.1-17squeeze3 Larry Wall's Practical Extraction Versions of packages ntp suggests: pn ntp-doc <none> (no description available) -- Configuration Files: /etc/ntp.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
