Attachment 171362 Details for Bug 210245 – Patch for base/head/etc/ntp.conf (revision 301726)

[patch] Patch for base/head/etc/ntp.conf (revision 301726)

ntp.conf.pool.patch (text/plain), 3.59 KB, created by Paul J Murphy on 2016-06-13 03:40:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Paul J Murphy

Created: 2016-06-13 03:40:43 UTC

Size: 3.59 KB

patch

obsolete

>Index: base/head/etc/ntp.conf
>===================================================================
>--- base/head/etc/ntp.conf	(revision 301726)
>+++ base/head/etc/ntp.conf	(working copy)
>@@ -11,18 +11,23 @@
> #
> 
> #
>-# The following three servers will give you a random set of three
>-# NTP servers geographically close to you.
>-# See http://www.pool.ntp.org/ for details. Note, the pool encourages
>+# The following configuration will give you an automatically maintained
>+# random set of between three and ten geographically close NTP servers.
>+# The set of servers will automatically update as availability of
>+# individual servers changes over time.
>+# See http://doc.ntp.org/current-stable/discover.html#pool and 
>+# http://www.pool.ntp.org/ for details.  Note, the pool encourages
> # users with a static IP and good upstream NTP servers to add a server
> # to the pool. See http://www.pool.ntp.org/join.html if you are interested.
> #
> # The option `iburst' is used for faster initial synchronization.
>+# The option `preempt' is used to automatically replace dead servers
>+# with a freshly selected server from the pool.
> #
>-server 0.freebsd.pool.ntp.org iburst
>-server 1.freebsd.pool.ntp.org iburst
>-server 2.freebsd.pool.ntp.org iburst
>-#server 3.freebsd.pool.ntp.org iburst
>+pool 0.freebsd.pool.ntp.org iburst preempt
>+pool 1.freebsd.pool.ntp.org iburst preempt
>+pool 2.freebsd.pool.ntp.org iburst preempt
>+pool 3.freebsd.pool.ntp.org iburst preempt
> 
> #
> # If you want to pick yourself which country's public NTP server
>@@ -30,11 +35,21 @@
> # the next ones and replace CC with the country's abbreviation.
> # Make sure that the hostnames resolve to a proper IP address!
> #
>-# server 0.CC.pool.ntp.org iburst
>-# server 1.CC.pool.ntp.org iburst
>-# server 2.CC.pool.ntp.org iburst
>+# pool 0.CC.pool.ntp.org iburst preempt
>+# pool 1.CC.pool.ntp.org iburst preempt
>+# pool 2.CC.pool.ntp.org iburst preempt
>+# pool 3.CC.pool.ntp.org iburst preempt
> 
> #
>+# For a very simple end user system and minimal resource and bandwidth
>+# usage, just a single `pool' configuration command is sufficient.
>+#
>+# pool pool.ntp.org iburst preempt
>+#
>+# pool CC.pool.ntp.org iburst preempt
>+#
>+
>+#
> # Security:
> #
> # By default, only allow time queries and block all other requests
>@@ -44,27 +59,24 @@
> # for more information.
> #
> restrict default limited kod nomodify notrap nopeer noquery
>-restrict -6 default limited kod nomodify notrap nopeer noquery
> #
>-# Alternatively, the following rules would block all unauthorized access.
>+# Alternatively, the following rule would block all unauthorized access.
> #
> #restrict default ignore
>-#restrict -6 default ignore
> #
>-# In this case, all remote NTP time servers also need to be explicitly
>-# allowed or they would not be able to exchange time information with
>-# this server.
>+# Remote NTP time servers also need to be allowed or they would not be
>+# able to exchange time information with this server.
>+# `source' automatically matches all active servers,
>+# if they are not matched by a more specific restrict command.
> #
>-# Please note that this example doesn't work for the servers in
>-# the pool.ntp.org domain since they return multiple A records.
>+# N.B. A default `nopeer' restriction prevents automatic selection
>+# of pool servers using the `pool' configuration command.
> #
>-#restrict 0.pool.ntp.org nomodify nopeer noquery notrap
>-#restrict 1.pool.ntp.org nomodify nopeer noquery notrap
>-#restrict 2.pool.ntp.org nomodify nopeer noquery notrap
>+restrict source nomodify noquery notrap
> #
> # The following settings allow unrestricted access from the localhost
> restrict 127.0.0.1
>-restrict -6 ::1
>+restrict ::1
> restrict 127.127.1.0
> 
> #

Actions: View | Diff

Attachments on bug 210245: 171362