ntpd and router with a *lot* of addresses

[Dmitry Morozovsky]

Dear colleagues,

Yesterday we'd found/stepped on a bit of trouble: on some of our FreeBSD-based 
routers (hundreds of vlans, etc):

Oct 20 22:12:46 <ntp.notice> gwn4 ntpd[86421]: ntpd 4.2.4p5-a (1)
Oct 20 22:12:46 <ntp.err> gwn4 ntpd[86422]: Too many sockets in use, FD_SETSIZE 1024 exceeded

Actually, machine has to listen on 123 on just 2-3 interfaces (two upstream 
vlans and lo0), but googling leads me just to -L option which is not described 
in the manual page nor seams to work (I did not look at the sources yet 
though).

Is there any way to restrict interfaces on which ntpd is listening (modulo 
jail, which has another/orthogonal set of restrictions)?

As usual -- thanks in advance! :)


-- 
Sincerely,
D.Marck                                     [DM5020, MCK-RIPE, DM3-RIPN]
[ FreeBSD committer:                                 marck at FreeBSD.org ]
------------------------------------------------------------------------
*** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck at rinet.ru ***
------------------------------------------------------------------------