31 lines
987 B
Text
31 lines
987 B
Text
# NTP servers to sync to.
|
|
server gw.afterdark.lan
|
|
|
|
# Sync to local clock if no servers are available.
|
|
server 127.127.1.0
|
|
fudge 127.127.1.0 stratum 10
|
|
|
|
# By default, restrict access to the service.
|
|
restrict -4 default limited nomodify noquery nopeer notrap kod
|
|
restrict -6 default limited nomodify noquery nopeer notrap kod
|
|
|
|
# Allow localhost to query the service, but nothing else.
|
|
restrict -4 127.0.0.1 limited nomodify nopeer notrap kod
|
|
restrict -6 ::1 limited nomodify nopeer notrap kod
|
|
|
|
# Allow local networks to sync with us.
|
|
# Edit the network address and mask below, and uncomment.
|
|
# restrict 192.168.1.0 mask 255.255.255.0 limited nomodify nopeer notrap kod
|
|
|
|
# Where to store the drift calculation.
|
|
driftfile /var/db/ntpd/drift
|
|
|
|
# Stats should be written here.
|
|
statsdir /var/db/ntpd/stats
|
|
|
|
# PID file location.
|
|
pidfile /run/ntpd.pid
|
|
|
|
# Disable the ntpdc -c monlist command, which is insecure and can be used
|
|
# to cause a denial of service attack (CVE-2013-5211).
|
|
disable monitor
|