]>
Commit | Line | Data |
---|---|---|
5ea6a4f0 ER |
1 | # For more information about this file, see the man pages |
2 | # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). | |
3 | ||
4 | # Permit time synchronization with our time source, but do not | |
5 | # permit the source to query or modify the service on this system. | |
7cbf232a | 6 | restrict default kod nomodify notrap nopeer noquery |
5ea6a4f0 | 7 | restrict -6 default kod nomodify notrap nopeer noquery |
7cbf232a | 8 | |
5ea6a4f0 ER |
9 | # Permit all access over the loopback interface. This could |
10 | # be tightened as well, but to do so would effect some of | |
11 | # the administrative functions. | |
7d4a7cf3 | 12 | restrict 127.0.0.1 |
5ea6a4f0 ER |
13 | restrict -6 ::1 |
14 | ||
15 | # Hosts on local network are less restricted. | |
16 | #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap | |
7d4a7cf3 | 17 | |
192efee3 SZ |
18 | # restrict default ignore |
19 | # restrict ntp.nasa.gov noquery noserve | |
20 | # restrict clock.isc.org noquery noserve | |
21 | # restrict 127.0.0.1 | |
22 | # restrict 127.127.1.0 | |
91f83bd9 | 23 | |
91f83bd9 JR |
24 | # Undisciplined Local Clock. This is a fake driver intended for backup |
25 | # and when no outside source of synchronized time is available. The | |
26 | # default stratum is usually 3, but in this case we elect to use stratum | |
27 | # 0. Since the server line does not have the prefer keyword, this driver | |
28 | # is never used for synchronization, unless no other other | |
29 | # synchronization source is available. In case the local host is | |
30 | # controlled by some external source, such as an external oscillator or | |
31 | # another protocol, the prefer keyword would cause the local host to | |
32 | # disregard all other synchronization sources, unless the kernel | |
33 | # modifications are in use and declare an unsynchronized condition. | |
143625c2 | 34 | |
7cbf232a SZ |
35 | server 127.127.1.0 # local clock |
36 | fudge 127.127.1.0 stratum 10 | |
143625c2 | 37 | |
91f83bd9 JR |
38 | # Drift file. Put this in a directory which the daemon can write to. |
39 | # No symbolic links allowed, either, since the daemon updates the file | |
40 | # by creating a temporary in the same directory and then rename()'ing | |
41 | # it to the file. | |
42 | # | |
c52fbdbb | 43 | driftfile /var/lib/ntp/drift |
91f83bd9 JR |
44 | multicastclient # listen on default 224.0.1.1 |
45 | broadcastdelay 0.008 | |
46 | ||
47 | # | |
48 | # Authentication delay. If you use, or plan to use someday, the | |
49 | # authentication facility you should make the programs in the auth_stuff | |
50 | # directory and figure out what this number should be on your machine. | |
51 | # | |
263e8815 | 52 | disable auth |
91f83bd9 JR |
53 | |
54 | # | |
55 | # Keys file. If you want to diddle your server at run time, make a | |
56 | # keys file (mode 600 for sure) and define the key number to be | |
57 | # used for making requests. | |
58 | # | |
04cdf15a JK |
59 | #keys /etc/ntp/keys |
60 | #trustedkey 65535 | |
61 | #requestkey 65535 | |
62 | #controlkey 65535 | |
2786e2b8 ER |
63 | |
64 | # some sane servers | |
65 | server 1.pool.ntp.org | |
66 | server 2.pool.ntp.org | |
67 | server 3.pool.ntp.org | |
68 | ||
69 | # some other sane servers | |
70 | #server 150.254.183.15 # vega | |
71 | #server 213.222.193.35 # certum | |
72 | #server 193.0.71.133 # icm | |
73 | #server 153.19.250.123 # task | |
74 | #server 198.123.30.132 # nasa |