ntpd on a NAT gateway seems to do nothing

[Patrick M. Hausen]

Hi, all!

On Tue, Jul 24, 2007 at 04:00:08PM +0100, Pete French wrote:

> Yes, I discovered the UDPness of it last night and went
> through the rules again. I am pretty sure they are correct (or
> at least I cannot see anything wrong). I would assume that ntpdate
> also uses UDP - and using that I can see all these servers ?

I would try and run 

# tcpdump -n -i <NAT interface> host <NTP server>

in a separate window and compare the output when running 
ntpdate vs. starting ntpd.

HTH,

Patrick M. Hausen
Leiter Netzwerke und Sicherheit
-- 
punkt.de GmbH * Vorholzstr. 25 * 76137 Karlsruhe
Tel. 0721 9109 0 * Fax 0721 9109 100
info at punkt.de       http://www.punkt.de
Gf: Jürgen Egeling      AG Mannheim 108285