freebsd-security Digest, Vol 478, Issue 3

[Dag-Erling Smørgrav]

Łukasz Bromirski <lukasz at bromirski.net> writes:
> /etc/ntp.conf should by default have secure posture and shouldn’t
> require any additional firewalling to remain so.

It does, and does not:

% grep \^restrict stable/9/etc/ntp.conf    
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1
restrict -6 ::1
restrict 127.127.1.0

DES
-- 
Dag-Erling Smørgrav - des at des.no