Gary and Bob

Thank you your configuration file. I'll have to modify my old OI or upgrade to the latest.

standard NTP query program - Ver. 4.2.5p200

On Fri, Apr 25, 2014 at 11:15:31AM +0200, Jozsef Brogyanyi wrote:
I have trouble with 123 port. I wanted to set a NTP client not a server.
I received an e-mail my ISP with a complain. Someone use my server 123 port.
I'll bounce you the message I sent to this mailing list in February.
It explains how to avoid the NTP amplification exploit that your ISP
complained about.

My NTP settings is the next:

cp /etc/inet/ntp.client /etc/inet/ntp.conf
nano /etc/inet/ntp.conf

Insert these lines. May be the these are not good.

server 0.hu.pool.ntp.org iburst
server 1.hu.pool.ntp.org iburst
server 2.hu.pool.ntp.org iburst
server 3.hu.pool.ntp.org iburst
I don't know what `iburst' means, but `man ntpd' describes it
partially.  I don't use it.

svcadm enable ntp
svcs ntp
svcs -x ntp
ntpq -p
How can I solve this problem if I need the NTP client?
Here are the non-comment lines from my ntp.conf:

  $ egrep -v '^#|^$' /etc/inet/ntp.conf
  restrict default kod nomodify notrap nopeer noquery
  restrict 192.168.0.0 mask 255.255.255.0 nomodify notrap nopeer
  restrict 127.0.0.1
  restrict -6 ::1
  server 0.pool.ntp.org
  server 1.pool.ntp.org
  server 2.pool.ntp.org
  server 3.pool.ntp.org
  driftfile /var/ntp/ntp.drift
  statsdir /var/ntp/ntpstats/
  filegen peerstats file peerstats type day enable
  filegen loopstats file loopstats type day enable

You likely won't need the `192.168.0.0' line.  That's for my private
network.

It works:

  $ ntpq -p
       remote           refid      st t when poll reach   delay   offset  jitter
  ==============================================================================
  +time.netspectru 208.90.144.52    3 u  489  512  377   34.130    0.809   0.739
  *penguin.hopcoun 209.51.161.238   2 u  140  512  377   31.145    0.683   1.324
  -mongrel.ahem.ca 208.81.2.13      2 u  144  512  377   24.124   -9.238   4.130
  +mirror.mountain 200.98.196.212   2 u  508  512  377   31.867    1.559   2.638



_______________________________________________
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

Reply via email to