ntp handling in 6.0

Lowell Gilbert freebsd-questions-local at be-well.ilk.org
Tue Nov 15 17:14:45 GMT 2005


Don't top-post, please.

"Dave" <dmehler26 at woh.rr.com> writes:

>     Thanks for your reply. My server box does indeed have ntpd running
> i confirmed it with ps -aux and it does have a pf firewall. The rules
> are:
> 
> # allow UDP requests to port 123 from firewall to exit ext_if_if
> # in order to contact internet ntp servers
> # (keep state on this connection)
> pass out quick on $ext_if inet proto { tcp, udp} from $ext_if to any port 123 keep state
> 
> # allow UDP requests to ports 67, 68, and 123 from # in order to perform dhcp and ntp queries on the firewall
> # ( Keep state on this connection)
> pass in quick on $int_if inet proto { tcp,udp } from $int_net to $int_if port { 67, 68, 123 } keep state

There's probably a syntax issue here; I don't use pf, so the fact that
I don't personally see a problem may not mean anthing.  You could try
debugging it by seeing whether the request packets actually get out of
the firewall, and whether responses come back.

> and ntpdc shows me a prompt.

But does it see any peers?


More information about the freebsd-questions mailing list