Re: [ntp:questions] Restrict statements and the pool directive

2014-12-22 Thread Rob
David Woolley david@ex.djwhome.demon.invalid wrote: On 21/12/14 20:10, Rob wrote: What I got from the documentation is that without nopeer a server could setup a peer association. I don't like that. No. Without nopeer, a *client* can't set up a peer session. If you are using a system as a

Re: [ntp:questions] Number of Stratum 1 Stratum 2 Peers

2014-12-22 Thread Martin Burnicki
Phil W Lee wrote: I believe it is important to allow negative leap seconds again, in order to allow a dignified recovery from erroneous positive leap seconds. I don't think fake negative leap seconds can (and should) be used to undo the effect of an erroneously applied positive leap second.

Re: [ntp:questions] Soekris net4501 help....

2014-12-22 Thread David Taylor
I fixed the problem - it seems that the physicaldiskwrite program is more successful than Win32DiskImager at writing the image to a CF card, so I now have the m0n0wall program running showing that the box works, at least. Now does anyone have a working NTP server image I might be able to

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread David Woolley
On 22/12/14 04:02, Paul wrote: And yet people apply critical monthly patches from Microsoft and Oracle all the time without running them through dev and q/a. Not on business critical servers. They may well apply them to general purpose desk top machines, but even then, if they don't have

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Rob
Martin Burnicki martin.burni...@meinberg.de wrote: Rob schrieb: David Woolley david@ex.djwhome.demon.invalid wrote: On 21/12/14 10:48, Rob wrote: People say disable crypto but there is no clear direction in the docs on how to do that. There is no crypto off or disable crypto config

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Martin Burnicki
Rob schrieb: David Woolley david@ex.djwhome.demon.invalid wrote: On 21/12/14 10:48, Rob wrote: People say disable crypto but there is no clear direction in the docs on how to do that. There is no crypto off or disable crypto config directive at first glance. So how is this done? I would

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Paul
On Mon, Dec 22, 2014 at 5:27 AM, David Woolley david@ex.djwhome.demon.invalid wrote: On 22/12/14 04:02, Paul wrote: And yet people apply critical monthly patches from Microsoft and Oracle all the time without running them through dev and q/a. Not on business critical servers. Normally

Re: [ntp:questions] Jesus Christ! - even internet time-sync(NTP) is vulnerable to exploitation?

2014-12-22 Thread Virus Guy
Harlan Stenn wrote: Under what conditions would someone who is NOT operating an NTP server expect to see external IP's hit his router on port 123? And given that such events are happening, how would you explain that these external IP's have rDNS data that maps them to

Re: [ntp:questions] Restrict statements and the pool directive

2014-12-22 Thread Paul
On Mon, Dec 22, 2014 at 4:14 AM, Rob nom...@example.com wrote: David Woolley david@ex.djwhome.demon.invalid wrote: On 21/12/14 20:10, Rob wrote: What I got from the documentation is that without nopeer a server could setup a peer association. I don't like that. No. Without nopeer, a

Re: [ntp:questions] NTP 4.2.8 for Windows

2014-12-22 Thread Martin Burnicki
A new GUI installer with ntp-4.2.8 for Windows is now available at our NTP download page: http://www.meinbergglobal.com/english/sw/ntp.htm#ntp_stable Martin Martin Burnicki wrote: Folks, ntp 4.2.8 has been released and includes a few security fixes. Unfortunatly these fixes which have been

[ntp:questions] GUI installer with ntp-4.2.8 for Windows now available

2014-12-22 Thread Martin Burnicki
Folks, a new GUI installer with ntp-4.2.8 for Windows is now available at Meinberg's NTP download page: http://www.meinbergglobal.com/english/sw/ntp.htm#ntp_stable This also includes the current version v1.0.1j of the openSSL DLL, which also fixes some openSSL vulnerabilities. Martin

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Martin Burnicki
Rob wrote: Martin Burnicki martin.burni...@meinberg.de wrote: And of course, the information flow was really bad here, so that it is very hard to figure out which systems are affected. Indeed. Only after 3 days there was a statement on the pool mailing list that the problem only affected

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Rob
Martin Burnicki martin.burni...@meinberg.de wrote: I don't want DHCP to modify my NTP settings, or to restart ntpd. (of course the neat thing about the above solution is that it is not required to restart ntpd. in Debian, for example, ntpd is restarted when a DHCP lease with changed ntp

Re: [ntp:questions] Soekris net4501 help....

2014-12-22 Thread Majdi S. Abbas
On Mon, Dec 22, 2014 at 10:24:25AM +, David Taylor wrote: I fixed the problem - it seems that the physicaldiskwrite program is more successful than Win32DiskImager at writing the image to a CF card, so I now have the m0n0wall program running showing that the box works, at least.

[ntp:questions] ntpq -c sysstats (replacing 'ntpdc -c sysstats') ?

2014-12-22 Thread irwin . tillman
After upgrading to 4.2.8, I'm trying to migrate my use of 'ntpdc -c sysstats' to ntpq. The 4.2.8 source seems to indicate that something like 'ntpq -c sysstats' might be the answer, but ntpq says that the 'sysstats' command is unknown. Any other ideas?

Re: [ntp:questions] ntpq -c sysstats (replacing 'ntpdc -c sysstats') ?

2014-12-22 Thread Mike Cook
Works for me. At least in Win7 Le 22 déc. 2014 à 22:35, irwin.till...@gmail.com a écrit : After upgrading to 4.2.8, I'm trying to migrate my use of 'ntpdc -c sysstats' to ntpq. The 4.2.8 source seems to indicate that something like 'ntpq -c sysstats' might be the answer, but ntpq

Re: [ntp:questions] ntpq -c sysstats (replacing 'ntpdc -c sysstats') ?

2014-12-22 Thread irwin . tillman
Never mind. Brain freeze. ___ questions mailing list questions@lists.ntp.org http://lists.ntp.org/listinfo/questions

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread Harlan Stenn
Martin Burnicki writes: Rob wrote: Martin Burnicki martin.burni...@meinberg.de wrote: And of course, the information flow was really bad here, so that it is very hard to figure out which systems are affected. Indeed. Only after 3 days there was a statement on the pool mailing list

Re: [ntp:questions] What to do for clients less than 4.2.8?

2014-12-22 Thread William Unruh
On 2014-12-23, Harlan Stenn st...@ntp.org wrote: Martin Burnicki writes: Rob wrote: Martin Burnicki martin.burni...@meinberg.de wrote: And of course, the information flow was really bad here, so that it is very hard to figure out which systems are affected. Indeed. Only after 3 days