Re: [OpenWrt-Users] Opening port 123 to LAN

Justin Vallon Mon, 05 Aug 2013 15:06:05 -0700

Typically, LAN ports are open. Some things to check:

1) is ntp running? "ps | grep ntp"
2) does netstat show anybody listening on the LAN ip? "netstat -a | grep ntp"
3) on the remote host (ntp client), try "ntpdate -d $LANIP"
4) what client are you using and what error are you getting?
5) quick check of the firewall: "iptables -L zone_lan" should end in a rule "zone_lan_ACCEPT" (not REJECT).
5b) You should not need to accept lan/udp/123 since lan is accept by default

On 8/5/13 8:46 AM, James Allsopp wrote:

Hi,
I'm trying to open port 123 by editting /etc/config/firewall, but I can't get it to work. I've installed ntp, but when I run netstat from another machine it doesn't come up.

config 'rule'
        option 'src' 'lan'
        option 'proto' 'udp'
        option 'dest_port' '123'
        option 'target' 'ACCEPT'

Any ideas? I thought all ports were supposed to be open to lan. My ntp.conf is fairly basic.

# use a random selection of 4 public stratum 2 servers
# see http://twiki.ntp.org/bin/view/Servers/NTPPoolServers

#restrict default nomodify notrap noquery
#restrict default noquery

#restrict 127.0.0.1

driftfile /var/lib/ntp/ntp.drift

server 0.openwrt.pool.ntp.org iburst
server 1.openwrt.pool.ntp.org iburst
server 2.openwrt.pool.ntp.org iburst
server 3.openwrt.pool.ntp.org iburst

# GPS(NMEA)+PPS
#server 127.127.20.0 minpoll 4 prefer
#fudge 127.127.20.0 flag3 1 flag2 0

# SMA PPS
#server 127.127.28.0 minpoll 4 prefer
#fudge 127.127.28.0 refid PPS flag3 1

#server 192.168.1.253

Thanks,
James
_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

-- 
-Justin
[email protected]

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

Re: [OpenWrt-Users] Opening port 123 to LAN

Reply via email to