]>
Commit | Line | Data |
---|---|---|
5ea6a4f0 ER |
1 | # For more information about this file, see the man pages |
2 | # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). | |
3 | ||
4 | # Permit time synchronization with our time source, but do not | |
5 | # permit the source to query or modify the service on this system. | |
8ee97dcb | 6 | restrict default kod limited nomodify notrap nopeer noquery |
7 | restrict -6 default kod limited nomodify notrap nopeer noquery | |
7cbf232a | 8 | |
5ea6a4f0 ER |
9 | # Permit all access over the loopback interface. This could |
10 | # be tightened as well, but to do so would effect some of | |
11 | # the administrative functions. | |
7d4a7cf3 | 12 | restrict 127.0.0.1 |
5ea6a4f0 ER |
13 | restrict -6 ::1 |
14 | ||
15 | # Hosts on local network are less restricted. | |
16 | #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap | |
7d4a7cf3 | 17 | |
192efee3 | 18 | # restrict default ignore |
8ee97dcb | 19 | # restrict ntp.example.com noquery noserve |
20 | # restrict ntp.example.net noquery noserve | |
192efee3 SZ |
21 | # restrict 127.0.0.1 |
22 | # restrict 127.127.1.0 | |
91f83bd9 | 23 | |
91f83bd9 JR |
24 | # Undisciplined Local Clock. This is a fake driver intended for backup |
25 | # and when no outside source of synchronized time is available. The | |
26 | # default stratum is usually 3, but in this case we elect to use stratum | |
27 | # 0. Since the server line does not have the prefer keyword, this driver | |
28 | # is never used for synchronization, unless no other other | |
29 | # synchronization source is available. In case the local host is | |
30 | # controlled by some external source, such as an external oscillator or | |
31 | # another protocol, the prefer keyword would cause the local host to | |
32 | # disregard all other synchronization sources, unless the kernel | |
33 | # modifications are in use and declare an unsynchronized condition. | |
143625c2 | 34 | |
7cbf232a SZ |
35 | server 127.127.1.0 # local clock |
36 | fudge 127.127.1.0 stratum 10 | |
143625c2 | 37 | |
91f83bd9 JR |
38 | # Drift file. Put this in a directory which the daemon can write to. |
39 | # No symbolic links allowed, either, since the daemon updates the file | |
40 | # by creating a temporary in the same directory and then rename()'ing | |
41 | # it to the file. | |
42 | # | |
c52fbdbb | 43 | driftfile /var/lib/ntp/drift |
33d4d5b8 ER |
44 | |
45 | # This command loads the NIST leapseconds file and initializes the leapsecond | |
46 | # values for the next leapsecond time, expiration time and TAI offset. The file | |
47 | # can be obtained directly from NIST national time servers using ftp as the | |
48 | # ASCII file pub/leap-seconds. | |
49 | leapfile /etc/ntp/ntp.leapseconds | |
50 | ||
5e46ff5d | 51 | # multicastclient 224.0.1.1 # listen on default 224.0.1.1 |
91f83bd9 JR |
52 | broadcastdelay 0.008 |
53 | ||
54 | # | |
55 | # Authentication delay. If you use, or plan to use someday, the | |
56 | # authentication facility you should make the programs in the auth_stuff | |
57 | # directory and figure out what this number should be on your machine. | |
58 | # | |
263e8815 | 59 | disable auth |
91f83bd9 JR |
60 | |
61 | # | |
62 | # Keys file. If you want to diddle your server at run time, make a | |
63 | # keys file (mode 600 for sure) and define the key number to be | |
64 | # used for making requests. | |
65 | # | |
04cdf15a JK |
66 | #keys /etc/ntp/keys |
67 | #trustedkey 65535 | |
68 | #requestkey 65535 | |
69 | #controlkey 65535 | |
2786e2b8 | 70 | |
8ee97dcb | 71 | # NTP pool project. See: http://www.pool.ntp.org/ |
72 | pool pool.ntp.org |