]>
Commit | Line | Data |
---|---|---|
5ea6a4f0 ER |
1 | # For more information about this file, see the man pages |
2 | # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). | |
3 | ||
4 | # Permit time synchronization with our time source, but do not | |
5 | # permit the source to query or modify the service on this system. | |
8ee97dcb | 6 | restrict default kod limited nomodify notrap nopeer noquery |
7 | restrict -6 default kod limited nomodify notrap nopeer noquery | |
7cbf232a | 8 | |
5ea6a4f0 ER |
9 | # Permit all access over the loopback interface. This could |
10 | # be tightened as well, but to do so would effect some of | |
11 | # the administrative functions. | |
7d4a7cf3 | 12 | restrict 127.0.0.1 |
5ea6a4f0 ER |
13 | restrict -6 ::1 |
14 | ||
15 | # Hosts on local network are less restricted. | |
16 | #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap | |
7d4a7cf3 | 17 | |
192efee3 | 18 | # restrict default ignore |
8ee97dcb | 19 | # restrict ntp.example.com noquery noserve |
20 | # restrict ntp.example.net noquery noserve | |
192efee3 SZ |
21 | # restrict 127.0.0.1 |
22 | # restrict 127.127.1.0 | |
91f83bd9 | 23 | |
91f83bd9 JR |
24 | # Undisciplined Local Clock. This is a fake driver intended for backup |
25 | # and when no outside source of synchronized time is available. The | |
26 | # default stratum is usually 3, but in this case we elect to use stratum | |
27 | # 0. Since the server line does not have the prefer keyword, this driver | |
28 | # is never used for synchronization, unless no other other | |
29 | # synchronization source is available. In case the local host is | |
30 | # controlled by some external source, such as an external oscillator or | |
31 | # another protocol, the prefer keyword would cause the local host to | |
32 | # disregard all other synchronization sources, unless the kernel | |
33 | # modifications are in use and declare an unsynchronized condition. | |
143625c2 | 34 | |
7cbf232a SZ |
35 | server 127.127.1.0 # local clock |
36 | fudge 127.127.1.0 stratum 10 | |
143625c2 | 37 | |
91f83bd9 JR |
38 | # Drift file. Put this in a directory which the daemon can write to. |
39 | # No symbolic links allowed, either, since the daemon updates the file | |
40 | # by creating a temporary in the same directory and then rename()'ing | |
41 | # it to the file. | |
42 | # | |
c52fbdbb | 43 | driftfile /var/lib/ntp/drift |
5e46ff5d | 44 | # multicastclient 224.0.1.1 # listen on default 224.0.1.1 |
91f83bd9 JR |
45 | broadcastdelay 0.008 |
46 | ||
47 | # | |
48 | # Authentication delay. If you use, or plan to use someday, the | |
49 | # authentication facility you should make the programs in the auth_stuff | |
50 | # directory and figure out what this number should be on your machine. | |
51 | # | |
263e8815 | 52 | disable auth |
91f83bd9 JR |
53 | |
54 | # | |
55 | # Keys file. If you want to diddle your server at run time, make a | |
56 | # keys file (mode 600 for sure) and define the key number to be | |
57 | # used for making requests. | |
58 | # | |
04cdf15a JK |
59 | #keys /etc/ntp/keys |
60 | #trustedkey 65535 | |
61 | #requestkey 65535 | |
62 | #controlkey 65535 | |
2786e2b8 | 63 | |
8ee97dcb | 64 | # NTP pool project. See: http://www.pool.ntp.org/ |
65 | pool pool.ntp.org |