Browse Source

* ntpd: Update the restrictions to follow wiki.evolix.org/HowtoNTP client config

- Ensure the client won't respond to anybody but accept the timeserver 
answers
- Should work on both Jessie and Stretch
alert5-minifirewall-restart
Ludovic Poujol 2 years ago
parent
commit
af896fe1fc
  1. 1
      CHANGELOG.md
  2. 6
      ntpd/defaults/main.yml

1
CHANGELOG.md

@ -15,6 +15,7 @@ The **patch** part changes incrementally at each release.
### Changed
### Fixed
* ntpd: Update the restrictions to follow wiki.evolix.org/HowtoNTP client config
### Security

6
ntpd/defaults/main.yml

@ -2,7 +2,9 @@
ntpd_servers:
- 'ntp.evolix.net iburst'
ntpd_acls:
- '-4 default kod notrap nomodify nopeer noquery'
- '-6 default kod notrap nomodify nopeer noquery'
- '-4 default ignore'
- '-6 default ignore'
- 'source nomodify noquery notrap' # Debian 9 and later
- 'ntp.evolix.net nomodify noquery notrap' # Debian 8
- '127.0.0.1'
- '::1'
Loading…
Cancel
Save