33 lines
977 B
Text
33 lines
977 B
Text
# NTP servers to sync to.
|
|
server 0.pool.ntp.org
|
|
server 1.pool.ntp.org
|
|
server 2.pool.ntp.org
|
|
server 3.pool.ntp.org
|
|
|
|
# Sync to local clock if no servers are available.
|
|
server 127.127.1.0
|
|
fudge 127.127.1.0 stratum 10
|
|
|
|
# By default, restrict access to the service.
|
|
restrict -4 default limited nomodify noquery nopeer notrap kod
|
|
restrict -6 default limited nomodify noquery nopeer notrap kod
|
|
|
|
# Allow localhost to query the service, but nothing else.
|
|
restrict -4 127.0.0.1 limited nomodify nopeer notrap kod
|
|
restrict -6 ::1 limited nomodify nopeer notrap kod
|
|
|
|
# Allow local networks to sync with us.
|
|
restrict 10.0.0.0 mask 255.0.0.0 limited nomodify notrap kod
|
|
|
|
# Where to store the drift calculation.
|
|
driftfile /var/db/ntpd/drift
|
|
|
|
# Stats should be written here.
|
|
statsdir /var/db/ntpd/stats
|
|
|
|
# PID file location.
|
|
pidfile /run/ntpd.pid
|
|
|
|
# Disable the ntpdc -c monlist command, which is insecure and can be used
|
|
# to cause a denial of service attack (CVE-2013-5211).
|
|
disable monitor
|