On Sun, Jul 06, 2003 at 06:58:53PM -0400, Stef Caunter wrote: > Here's how I use ntpdate to set to the National Research Council timeserver > in Ottawa, Canada. > > 28 2 * * * /usr/sbin/ntpdate -u -s time.nrc.ca > > in cron, (using udp request). DNS is round robin balanced between two hosts, > see below. > > In /etc/ipf.conf: > > pass out quick on ex0 proto udp from your.ip.goes.here to 132.246.168.164 > port = 123 > pass out quick on ex0 proto udp from your.ip.goes.here to 132.246.168.148 > port = 123 > pass in quick on ex0 proto udp from 132.246.168.164 to your.ip.goes.here > port > 1023 > pass in quick on ex0 proto udp from 132.246.168.148 to 24.215.16.38 port > > 1023
A suggestion for a better way of doing this is to install a proper NTP Daemon that syncronises constantly and have the following rules: pass out quick on ex0 proto udp from your.ip to NTP.Server1 port = 123 keep state pass out quick on ex0 proto udp from your.ip to NTP.Server2 port = 123 keep state Paul
