About half way through https://www.freebsd.org/doc/handbook/firewalls-ipfw.html it says: # Allow outbound NTP $cmd 00260 allow tcp from any to any 37 out via $pif setup keep-state But that doesn’t allow NTP. NTP uses UDP 123. TCP 37 is the obsolete TIME protocol. (Unless I am completely at a loss, of course.)
A commit references this bug: Author: wblock Date: Fri Oct 28 15:31:21 UTC 2016 New revision: 49600 URL: https://svnweb.freebsd.org/changeset/doc/49600 Log: NTP is UDP port 123. PR: 213365 Submitted by: Tim Moore <tmoore@iXsystems.com> Reported by: petri.riihikallio@metis.fi Sponsored by: iXsystems Differential Revision: https://reviews.freebsd.org/D8375 Changes: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
Committed, thanks!