Re: [pfSense-discussion] pfSense / Time Service

2008-03-07 Thread Jan Hoevers 

[EMAIL PROTECTED] wrote on 6-3-2008 7:43:

A, now I see :-)
 
Thanks

/Claus/


hi Claus,

FYI, the NTP pool introduced a geolocation DNS system a few months ago,
mainly because of load distribution problems in the european pool zones.
This explains why you see nearby servers, even when using world wide
pool zones (including vendor zones like pfsense.pool.ntp.org).

[EMAIL PROTECTED] wrote on 6-3-2008 6:23:

What I see is that my pfSense talks to a number of different time
servers

OpenNTPd, which is used as time client on pfSense, has the ability to
extract more than one server from a DNS record.  The NTP pool DNS system
supplies up to five servers in a DNS record.


and many of those looks like ordinary ADSL subscribers which
scares me a little.

Maybe you object to time servers on an ADSL connection because of the
asymmetric latency of such a connection (which is not good for NTP
accuracy)?   Note that if you're on an ADSL connection yourself, that
effect is canceled out, partly restoring your accuracy.
Also note that OpenNTPd is not the time client with ultimate accuracy,
so it's probably not an issue.

If you need more accuracy than your pfSense box can give, you would need
to run ntpd on a dedicated box (and maybe even you would want to be a
pool member).

I know your questions were already answered, but maybe this clarifies a
bit more.

regards,
Jan Hoevers

Re: [pfSense-discussion] pfSense / Time Service

2008-03-07 Thread David Rees 
On Thu, Mar 6, 2008 at 7:27 AM, Ryan Neily <[EMAIL PROTECTED]> wrote:
>  Anyhow, it's fixed now. You can go on complaining about something else...

Since you asked, please stop sending HTML emails to the list and use
plain text, it makes things so much more readable in most MUAs and in
the mail archives.

-Dave

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB 
> The real problem is that the %^$%^#$& mail program I am using does not allow 
> you to turn of return receipts.
Corporate standards for the win!  I feel for you, as your situation is
very similar to what initially drove me to use my own address versus a
corporate one.

>  Anyhow, it's fixed now.You can go on complaining about something else...
But that's not how the intarweb works, we've always got to have
something to complain about!

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily 





The real problem is that the %^$%^#$& mail program I am using does not
allow you to turn of return receipts.

Anyhow, it's fixed now.You can go on complaining about something
else...

Ryan Neily


|>
| From:  |
|>
  
>--|
  |Eugen Leitl <[EMAIL PROTECTED]>  
   |
  
>--|
|>
| To:|
|>
  
>--|
  |discussion@pfsense.com   
 |
  
>--|
|>
| Date:  |
|>
  
>--|
  |03/06/2008 10:07 AM  
 |
  
>--|
|>
| Subject:   |
|>
  
>------------------|
  |Re: [pfSense-discussion] pfSense / Time Service  
 |
  
>--|





On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
> RB wrote:
> > Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
> > since Ryan had to read the thread at least once more before fixing
> > things, but it was worth it to see this one come in.
>
> has he fixed things?

Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
with full headers.

If anyone on this list would start doing it, maybe his admins
would wise up, and LART him.

>
> >
> > On 3/6/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
> >> Return Receipt
> >>
> >> Your document: RE: [pfSense-discussion] pfSense / Time Service
> >>
> >> was received by: [EMAIL PROTECTED]
> >>
> >> at: 03/06/2008 09:22:47 EST
--
Eugen* Leitl http://leitl.org";>leitl http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
<><>

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Paul M 
Eugen Leitl wrote:
> On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
>> RB wrote:
>>> Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
>>> since Ryan had to read the thread at least once more before fixing
>>> things, but it was worth it to see this one come in.
>> has he fixed things?
> 
> Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
> with full headers. 
> 
> If anyone on this list would start doing it, maybe his admins
> would wise up, and LART him.

shame SLTP never made it to a proper RFC
http://buffy.sighup.org.uk/hfiles/aeds.html

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Eugen Leitl 
On Thu, Mar 06, 2008 at 02:53:19PM +, Paul M wrote:
> RB wrote:
> > Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
> > since Ryan had to read the thread at least once more before fixing
> > things, but it was worth it to see this one come in.
> 
> has he fixed things?

Just forward his spam to [EMAIL PROTECTED] and [EMAIL PROTECTED]
with full headers. 

If anyone on this list would start doing it, maybe his admins
would wise up, and LART him.

> 
> > 
> > On 3/6/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
> >> Return Receipt
> >>
> >> Your document: RE: [pfSense-discussion] pfSense / Time Service
> >>
> >> was received by: [EMAIL PROTECTED]
> >>
> >> at: 03/06/2008 09:22:47 EST
-- 
Eugen* Leitl http://leitl.org";>leitl http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily 

Sorry guys.  I have unsubscribed.   Hopefully this will fix things..

Ryan Neily


|>
| From:  |
|>
  
>--|
  |Eugen Leitl <[EMAIL PROTECTED]>  
   |
  
>--|
|>
| To:|
|>
  
>--|
  |discussion@pfsense.com   
 |
  
>--|
|>
| Date:  |
|>
  
>--|
  |03/06/2008 09:47 AM  
 |
  
>--|
|>
| Subject:   |
|>
  
>------------------|
  |Re: [pfSense-discussion] pfSense / Time Service  
 |
  
>--|





On Thu, Mar 06, 2008 at 01:32:11PM +, Paul M wrote:

> I too have asked him privately. I suspect he's using Lotus Notes or
> something equally horrible which cannot be configured sanely!

That's what God invented webmail for.

> Can the list admin get the mail system changed to strip the recipient
> request headers out?

The correct course of action is to boot him off on first offense.

--
Eugen* Leitl http://leitl.org";>leitl http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
<><>

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily 
Return Receipt
   
   Your   Re: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 09:59:47 EST

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Paul M 
RB wrote:
> Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
> since Ryan had to read the thread at least once more before fixing
> things, but it was worth it to see this one come in.

has he fixed things?

> 
> On 3/6/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
>> Return Receipt
>>
>> Your document: RE: [pfSense-discussion] pfSense / Time Service
>>
>> was received by: [EMAIL PROTECTED]
>>
>> at: 03/06/2008 09:22:47 EST

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB 
Bwa ha ha!  Delicious, delicious irony!  I knew it was inevitable
since Ryan had to read the thread at least once more before fixing
things, but it was worth it to see this one come in.

On 3/6/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
>
> Return Receipt
>
> Your document: RE: [pfSense-discussion] pfSense / Time Service
>
> was received by: [EMAIL PROTECTED]
>
> at: 03/06/2008 09:22:47 EST

RE: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Ryan Neily 
Return Receipt
   
   Your   RE: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 09:22:47 EST

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB 
> The correct course of action is to boot him off on first offense.

This makes seven on my count

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Eugen Leitl 
On Thu, Mar 06, 2008 at 01:32:11PM +, Paul M wrote:

> I too have asked him privately. I suspect he's using Lotus Notes or
> something equally horrible which cannot be configured sanely!

That's what God invented webmail for. 
 
> Can the list admin get the mail system changed to strip the recipient
> request headers out?

The correct course of action is to boot him off on first offense. 
 
-- 
Eugen* Leitl http://leitl.org";>leitl http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Paul M 
RB wrote:
> No, really - I asked you once in private, now I ask you again in

I too have asked him privately. I suspect he's using Lotus Notes or
something equally horrible which cannot be configured sanely!

Can the list admin get the mail system changed to strip the recipient
request headers out?

> public: please turn off your foolish Outlook receipts.  It is
> ridiculous that we have to wade through your mail client's automated
> spew that just tells us you received/read a given message. Most of us
> really don't care (or actively dislike it), and you clutter stuff up
> by not being a good list citizen.
> 
> On 3/5/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
>> Return Receipt
>>
>> Your document: [pfSense-discussion] pfSense / Time Service
>>

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread RB 
No, really - I asked you once in private, now I ask you again in
public: please turn off your foolish Outlook receipts.  It is
ridiculous that we have to wade through your mail client's automated
spew that just tells us you received/read a given message. Most of us
really don't care (or actively dislike it), and you clutter stuff up
by not being a good list citizen.

On 3/5/08, Ryan Neily <[EMAIL PROTECTED]> wrote:
>
> Return Receipt
>
> Your document: [pfSense-discussion] pfSense / Time Service
>
> was received by: [EMAIL PROTECTED]
>
> at: 03/06/2008 01:00:01 EST

Re: [pfSense-discussion] pfSense / Time Service

2008-03-06 Thread Greg Hennessy 

[EMAIL PROTECTED] wrote:

There are! But only the default 0.pfsense.pool.ntp.org server is
specified.

What I see is that my pfSense talks to a number of different time
servers and many of those looks like ordinary ADSL subscribers which
scares me a little.
  

That's the whole point

http://www.pool.ntp.org/


Common for all time servers seen is that they geographical are close to
where I live which made me believe that there was some kind of self
configuration going on - maybe based on the timezone entered ?
  

http://www.pool.ntp.org/use.html

will explain further.


Greg



I poked around in the command line looking for *ntp* files but that
didn't reveal anything.

Claus 


|-Original Message-
|From: Bill Marquette [mailto:[EMAIL PROTECTED] 
|Posted At: Thursday, March 06, 2008 1:55 AM

|Posted To: pfSense
|Conversation: [pfSense-discussion] pfSense / Time Service
|Subject: Re: [pfSense-discussion] pfSense / Time Service
|
|
|On Wed, Mar 5, 2008 at 5:00 PM, jason whitt 
|<[EMAIL PROTECTED]> wrote:
|> i may be wrong here however i thought there was a default 
|time server sync

|> setup in the config?
|
|There is.  Look in System->General.  Bottom of the page I believe.
|
|--Bill
|

RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread [EMAIL PROTECTED] 
A, now I see :-)
 
Thanks
Claus




From: Jason Hensler [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, March 06, 2008 6:46 AM
Posted To: pfSense
Conversation: [pfSense-discussion] pfSense / Time Service
Subject: Re: [pfSense-discussion] pfSense / Time Service


Hey, You probably are seeing a few ADSL subscribers.
0.pfsense.pool.ntp.org is a distributed cluster (a pool of servers), not
just one server. Check out http://www.pool.ntp.org/ for more info.

Cheers, Jason Hensler

[pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Ryan Neily 
Return Receipt
   
   Your   [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 01:00:01 EST

RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Ryan Neily 
Return Receipt
   
   Your   RE: [pfSense-discussion] pfSense / Time Service  
   document:   
   
   was[EMAIL PROTECTED]
   received
   by: 
   
   at:03/06/2008 00:59:52 EST

Re: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Jason Hensler 
Hey, You probably are seeing a few ADSL subscribers.
0.pfsense.pool.ntp.orgis a distributed cluster (a pool of servers),
not just one server. Check out
http://www.pool.ntp.org/ for more info.

Cheers, Jason Hensler

RE: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread [EMAIL PROTECTED] 
There are! But only the default 0.pfsense.pool.ntp.org server is
specified.

What I see is that my pfSense talks to a number of different time
servers and many of those looks like ordinary ADSL subscribers which
scares me a little.
Common for all time servers seen is that they geographical are close to
where I live which made me believe that there was some kind of self
configuration going on - maybe based on the timezone entered ?

I poked around in the command line looking for *ntp* files but that
didn't reveal anything.

Claus 

|-Original Message-
|From: Bill Marquette [mailto:[EMAIL PROTECTED] 
|Posted At: Thursday, March 06, 2008 1:55 AM
|Posted To: pfSense
|Conversation: [pfSense-discussion] pfSense / Time Service
|Subject: Re: [pfSense-discussion] pfSense / Time Service
|
|
|On Wed, Mar 5, 2008 at 5:00 PM, jason whitt 
|<[EMAIL PROTECTED]> wrote:
|> i may be wrong here however i thought there was a default 
|time server sync
|> setup in the config?
|
|There is.  Look in System->General.  Bottom of the page I believe.
|
|--Bill
|

Re: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread Bill Marquette 
On Wed, Mar 5, 2008 at 5:00 PM, jason whitt <[EMAIL PROTECTED]> wrote:
> i may be wrong here however i thought there was a default time server sync
> setup in the config?

There is.  Look in System->General.  Bottom of the page I believe.

--Bill

Re: [pfSense-discussion] pfSense / Time Service

2008-03-05 Thread jason whitt 
i may be wrong here however i thought there was a default time server sync
setup in the config?
On Wed, Mar 5, 2008 at 3:38 PM, [EMAIL PROTECTED] <[EMAIL PROTECTED]>
wrote:

>  Hi
>
> I noticed that pfSense makes frequent connections to time servers (udp123)
> but eventhough I didn't configure anything here it manages to talk to ISP's
> in my neigborhood.
>
> Is there anyone who can introduce me to how this works or point me to some
> documentation...?
>
> Thanks
> *Claus*
>
> PGP *http://pgp.mit.edu:11371/pks/lookup?search=0xBE727C09&op=get&exact=on
> * 
>

[pfSense-discussion] pfSense / Time Service

2008-03-05 Thread [EMAIL PROTECTED] 
Hi 

I noticed that pfSense makes frequent connections to time servers
(udp123) but eventhough I didn't configure anything here it manages to
talk to ISP's in my neigborhood.
Is there anyone who can introduce me to how this works or point me to
some documentation...?

Thanks
Claus

PGP
http://pgp.mit.edu:11371/pks/lookup?search=0xBE727C09&op=get&exact=on