> On Tue, Aug 04, 2015 at 08:06:03PM +0700, Pongthep Kulkrisada wrote: >> I found that ntpdc doesn't work, while ntpq works pretty fine. > > This is the effect of a newer ntp version and updated /etc/ntp.conf. > After some security issues, ntpdc support has been turned off by default.
And if you want ntpdc to continue to work, but work safely, so that the "monlist" command can't be used remotely to abuse your NTP server as a DDoS reflector/amplifier, you can add these lines to ntp.conf: # New ntpd disables the ntpdc protocol by default, to re-enable uncomment # the following line enable mode7 # noquery only affects ntpq / ntpdc -- time service unaffected restrict default kod noquery nomodify # But allow local host to query etc. restrict 127.0.0.1 restrict ::1 Regards, - Håvard
