Re: [pfSense-discussion] pfSense / Time Service

2008-03-07 Thread David Rees
On Thu, Mar 6, 2008 at 7:27 AM, Ryan Neily [EMAIL PROTECTED] wrote:
  Anyhow, it's fixed now. You can go on complaining about something else...

Since you asked, please stop sending HTML emails to the list and use
plain text, it makes things so much more readable in most MUAs and in
the mail archives.

-Dave


Re: [pfSense-discussion] pfSense / Time Service

2008-03-07 Thread Jan Hoevers

[EMAIL PROTECTED] wrote on 6-3-2008 7:43:

A, now I see :-)
 
Thanks

/Claus/


hi Claus,

FYI, the NTP pool introduced a geolocation DNS system a few months ago,
mainly because of load distribution problems in the european pool zones.
This explains why you see nearby servers, even when using world wide
pool zones (including vendor zones like pfsense.pool.ntp.org).

[EMAIL PROTECTED] wrote on 6-3-2008 6:23:

What I see is that my pfSense talks to a number of different time
servers

OpenNTPd, which is used as time client on pfSense, has the ability to
extract more than one server from a DNS record.  The NTP pool DNS system
supplies up to five servers in a DNS record.


and many of those looks like ordinary ADSL subscribers which
scares me a little.

Maybe you object to time servers on an ADSL connection because of the
asymmetric latency of such a connection (which is not good for NTP
accuracy)?   Note that if you're on an ADSL connection yourself, that
effect is canceled out, partly restoring your accuracy.
Also note that OpenNTPd is not the time client with ultimate accuracy,
so it's probably not an issue.

If you need more accuracy than your pfSense box can give, you would need
to run ntpd on a dedicated box (and maybe even you would want to be a
pool member).

I know your questions were already answered, but maybe this clarifies a
bit more.

regards,
Jan Hoevers













Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Greg Hennessy

[EMAIL PROTECTED] wrote:

There are! But only the default 0.pfsense.pool.ntp.org server is
specified.

What I see is that my pfSense talks to a number of different time
servers and many of those looks like ordinary ADSL subscribers which
scares me a little.
  

That's the whole point

http://www.pool.ntp.org/


Common for all time servers seen is that they geographical are close to
where I live which made me believe that there was some kind of self
configuration going on - maybe based on the timezone entered ?
  

http://www.pool.ntp.org/use.html

will explain further.


Greg



I poked around in the command line looking for *ntp* files but that
didn't reveal anything.

Claus 


|-Original Message-
|From: Bill Marquette [mailto:[EMAIL PROTECTED] 
|Posted At: Thursday, March 06, 2008 1:55 AM

|Posted To: pfSense
|Conversation: [pfSense-discussion] pfSense / Time Service
|Subject: Re: [pfSense-discussion] pfSense / Time Service
|
|
|On Wed, Mar 5, 2008 at 5:00 PM, jason whitt 
|[EMAIL PROTECTED] wrote:
| i may be wrong here however i thought there was a default 
|time server sync

| setup in the config?
|
|There is.  Look in System-General.  Bottom of the page I believe.
|
|--Bill
|
  




Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Eugen Leitl
On Thu, Mar 06, 2008 at 01:32:11PM +, Paul M wrote:

 I too have asked him privately. I suspect he's using Lotus Notes or
 something equally horrible which cannot be configured sanely!

That's what God invented webmail for. 
 
 Can the list admin get the mail system changed to strip the recipient
 request headers out?

The correct course of action is to boot him off on first offense. 
 
-- 
Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE


Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB
 The correct course of action is to boot him off on first offense.

This makes seven on my count


Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Paul M
RB wrote:
 No, really - I asked you once in private, now I ask you again in

I too have asked him privately. I suspect he's using Lotus Notes or
something equally horrible which cannot be configured sanely!

Can the list admin get the mail system changed to strip the recipient
request headers out?

 public: please turn off your foolish Outlook receipts.  It is
 ridiculous that we have to wade through your mail client's automated
 spew that just tells us you received/read a given message. Most of us
 really don't care (or actively dislike it), and you clutter stuff up
 by not being a good list citizen.
 
 On 3/5/08, Ryan Neily [EMAIL PROTECTED] wrote:
 Return Receipt

 Your document: [pfSense-discussion] pfSense / Time Service




RE: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily
Return Receipt
   
   Your   RE: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 09:22:47 EST  
   




Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB
Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
since Ryan had to read the thread at least once more before fixing
things, but it was worth it to see this one come in.

On 3/6/08, Ryan Neily [EMAIL PROTECTED] wrote:

 Return Receipt

 Your document: RE: [pfSense-discussion] pfSense / Time Service

 was received by: [EMAIL PROTECTED]

 at: 03/06/2008 09:22:47 EST


Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily

Sorry guys.  I have unsubscribed.   Hopefully this will fix things..

Ryan Neily


|
| From:  |
|
  
--|
  |Eugen Leitl [EMAIL PROTECTED]  
   |
  
--|
|
| To:|
|
  
--|
  |discussion@pfsense.com   
 |
  
--|
|
| Date:  |
|
  
--|
  |03/06/2008 09:47 AM  
 |
  
--|
|
| Subject:   |
|
  
--|
  |Re: [pfSense-discussion] pfSense / Time Service  
 |
  
--|





On Thu, Mar 06, 2008 at 01:32:11PM +, Paul M wrote:

 I too have asked him privately. I suspect he's using Lotus Notes or
 something equally horrible which cannot be configured sanely!

That's what God invented webmail for.

 Can the list admin get the mail system changed to strip the recipient
 request headers out?

The correct course of action is to boot him off on first offense.

--
Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
inline: graycol.gifinline: ecblank.gif

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Eugen Leitl
On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
 RB wrote:
  Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
  since Ryan had to read the thread at least once more before fixing
  things, but it was worth it to see this one come in.
 
 has he fixed things?

Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
with full headers. 

If anyone on this list would start doing it, maybe his admins
would wise up, and LART him.

 
  
  On 3/6/08, Ryan Neily [EMAIL PROTECTED] wrote:
  Return Receipt
 
  Your document: RE: [pfSense-discussion] pfSense / Time Service
 
  was received by: [EMAIL PROTECTED]
 
  at: 03/06/2008 09:22:47 EST
-- 
Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE


Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily
Return Receipt
   
   Your   Re: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 09:59:47 EST  
   




Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Paul M
Eugen Leitl wrote:
 On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
 RB wrote:
 Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
 since Ryan had to read the thread at least once more before fixing
 things, but it was worth it to see this one come in.
 has he fixed things?
 
 Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
 with full headers. 
 
 If anyone on this list would start doing it, maybe his admins
 would wise up, and LART him.

shame SLTP never made it to a proper RFC
http://buffy.sighup.org.uk/hfiles/aeds.html



Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily





The real problem is that the %^$%^#$ mail program I am using does not
allow you to turn of return receipts.

Anyhow, it's fixed now.You can go on complaining about something
else...

Ryan Neily


|
| From:  |
|
  
--|
  |Eugen Leitl [EMAIL PROTECTED]  
   |
  
--|
|
| To:|
|
  
--|
  |discussion@pfsense.com   
 |
  
--|
|
| Date:  |
|
  
--|
  |03/06/2008 10:07 AM  
 |
  
--|
|
| Subject:   |
|
  
--|
  |Re: [pfSense-discussion] pfSense / Time Service  
 |
  
--|





On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
 RB wrote:
  Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
  since Ryan had to read the thread at least once more before fixing
  things, but it was worth it to see this one come in.

 has he fixed things?

Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
with full headers.

If anyone on this list would start doing it, maybe his admins
would wise up, and LART him.


 
  On 3/6/08, Ryan Neily [EMAIL PROTECTED] wrote:
  Return Receipt
 
  Your document: RE: [pfSense-discussion] pfSense / Time Service
 
  was received by: [EMAIL PROTECTED]
 
  at: 03/06/2008 09:22:47 EST
--
Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
inline: graycol.gifinline: ecblank.gif

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB
 The real problem is that the %^$%^#$ mail program I am using does not allow 
 you to turn of return receipts.
Corporate standards for the win!  I feel for you, as your situation is
very similar to what initially drove me to use my own address versus a
corporate one.

  Anyhow, it's fixed now.You can go on complaining about something else...
But that's not how the intarweb works, we've always got to have
something to complain about!


Re: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread jason whitt
i may be wrong here however i thought there was a default time server sync
setup in the config?
On Wed, Mar 5, 2008 at 3:38 PM, [EMAIL PROTECTED] [EMAIL PROTECTED]
wrote:

  Hi

 I noticed that pfSense makes frequent connections to time servers (udp123)
 but eventhough I didn't configure anything here it manages to talk to ISP's
 in my neigborhood.

 Is there anyone who can introduce me to how this works or point me to some
 documentation...?

 Thanks
 *Claus*

 PGP *http://pgp.mit.edu:11371/pks/lookup?search=0xBE727C09op=getexact=on
 * http://pgp.mit.edu:11371/pks/lookup?search=0xBE727C09op=getexact=on



Re: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Bill Marquette
On Wed, Mar 5, 2008 at 5:00 PM, jason whitt [EMAIL PROTECTED] wrote:
 i may be wrong here however i thought there was a default time server sync
 setup in the config?

There is.  Look in System-General.  Bottom of the page I believe.

--Bill


RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread [EMAIL PROTECTED]
There are! But only the default 0.pfsense.pool.ntp.org server is
specified.

What I see is that my pfSense talks to a number of different time
servers and many of those looks like ordinary ADSL subscribers which
scares me a little.
Common for all time servers seen is that they geographical are close to
where I live which made me believe that there was some kind of self
configuration going on - maybe based on the timezone entered ?

I poked around in the command line looking for *ntp* files but that
didn't reveal anything.

Claus 

|-Original Message-
|From: Bill Marquette [mailto:[EMAIL PROTECTED] 
|Posted At: Thursday, March 06, 2008 1:55 AM
|Posted To: pfSense
|Conversation: [pfSense-discussion] pfSense / Time Service
|Subject: Re: [pfSense-discussion] pfSense / Time Service
|
|
|On Wed, Mar 5, 2008 at 5:00 PM, jason whitt 
|[EMAIL PROTECTED] wrote:
| i may be wrong here however i thought there was a default 
|time server sync
| setup in the config?
|
|There is.  Look in System-General.  Bottom of the page I believe.
|
|--Bill
|


RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Ryan Neily
Return Receipt
   
   Your   RE: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 00:59:52 EST  
   




RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread [EMAIL PROTECTED]
A, now I see :-)
 
Thanks
Claus




From: Jason Hensler [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, March 06, 2008 6:46 AM
Posted To: pfSense
Conversation: [pfSense-discussion] pfSense / Time Service
Subject: Re: [pfSense-discussion] pfSense / Time Service


Hey, You probably are seeing a few ADSL subscribers.
0.pfsense.pool.ntp.org is a distributed cluster (a pool of servers), not
just one server. Check out http://www.pool.ntp.org/ for more info.

Cheers, Jason Hensler