evolix/evocheck
evolix
/
evocheck
21
2
Fork 2
Code Issues 48 Pull Requests 5 Releases 37 Wiki Activity

IS_NTP_CONFIG #33

New Issue
Open
opened 2018-12-20 10:56:43 +01:00 by benpro · 1 comment
benpro commented 2018-12-20 10:56:43 +01:00
Contributor
Copy Link

Check if NTP configuration is not an old one.
The check should be for Stretch+, here the difference needed:

diff --git a/ntp.conf b/ntp.conf
index a698eca..496c863 100644
--- a/ntp.conf
+++ b/ntp.conf
@@ -18,7 +18,7 @@ filegen clockstats file clockstats type day enable
 # pool: <http://www.pool.ntp.org/join.html>

 #server pool.ntp.org
-server ntp.evolix.net
+server ntp.evolix.net iburst

 # Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
 # details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
@@ -31,7 +31,7 @@ server ntp.evolix.net
 #restrict -4 default kod notrap nomodify nopeer noquery
 #restrict -6 default kod notrap nomodify nopeer noquery

+restrict -4 default kod notrap nomodify nopeer noquery
+restrict -6 default kod notrap nomodify nopeer noquery
 restrict 127.0.0.1
 restrict ::1
-restrict -4 default ignore
-restrict -6 default ignore
Check if NTP configuration is not an old one. The check should be for Stretch+, here the difference needed: ```diff diff --git a/ntp.conf b/ntp.conf index a698eca..496c863 100644 --- a/ntp.conf +++ b/ntp.conf @@ -18,7 +18,7 @@ filegen clockstats file clockstats type day enable # pool: <http://www.pool.ntp.org/join.html> #server pool.ntp.org -server ntp.evolix.net +server ntp.evolix.net iburst # Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for # details. The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions> @@ -31,7 +31,7 @@ server ntp.evolix.net #restrict -4 default kod notrap nomodify nopeer noquery #restrict -6 default kod notrap nomodify nopeer noquery +restrict -4 default kod notrap nomodify nopeer noquery +restrict -6 default kod notrap nomodify nopeer noquery restrict 127.0.0.1 restrict ::1 -restrict -4 default ignore -restrict -6 default ignore ```
benpro added the
enhancement
 label 2018-12-20 10:56:55 +01:00
lpoujol commented 2019-02-14 11:44:00 +01:00
Owner
Copy Link

This is Strech and upper

diff --git a/ntp.conf b/ntp.conf
index a698eca..496c863 100644
--- a/ntp.conf
+++ b/ntp.conf
@@ -18,7 +18,7 @@ filegen clockstats file clockstats type day enable
 # pool: <http://www.pool.ntp.org/join.html>

 #server pool.ntp.org
-server ntp.evolix.net
+server ntp.evolix.net iburst

 # Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
 # details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
@@ -31,7 +31,7 @@ server ntp.evolix.net
 #restrict -4 default kod notrap nomodify nopeer noquery
 #restrict -6 default kod notrap nomodify nopeer noquery

 restrict 127.0.0.1
 restrict ::1
+restrict source nomodify noquery notrap
 restrict -4 default ignore
 restrict -6 default ignore

On jessie, a workaround is to have "restrict ntp.evolix.net nomodify noquery notrap" instead of the "restrict source" of Stretch

This is Strech and upper ```diff diff --git a/ntp.conf b/ntp.conf index a698eca..496c863 100644 --- a/ntp.conf +++ b/ntp.conf @@ -18,7 +18,7 @@ filegen clockstats file clockstats type day enable # pool: <http://www.pool.ntp.org/join.html> #server pool.ntp.org -server ntp.evolix.net +server ntp.evolix.net iburst # Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for # details. The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions> @@ -31,7 +31,7 @@ server ntp.evolix.net #restrict -4 default kod notrap nomodify nopeer noquery #restrict -6 default kod notrap nomodify nopeer noquery restrict 127.0.0.1 restrict ::1 +restrict source nomodify noquery notrap restrict -4 default ignore restrict -6 default ignore ``` On jessie, a workaround is to have "restrict ntp.evolix.net nomodify noquery notrap" instead of the "restrict source" of Stretch
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
master
148
evoversions
autoif-bullseye
check_all_files_in_backup_dir
IS_NETWORKING_SERVICE
sources.list-support-option
IS_SYSTEMDUSERUNIT
minifirewall_systemd
check_compressed_mongodump
bullseye
IS_LXC_CONTAINER_RESOLV_CONF
is_mysql_upgrade
buster-support
no-check-valid-until
release-19.06
fix-mysqlnrpe
apachesymlink-verbose
debian
VERBOSE-ALERT5MINIFW
11-Check-for-sysadmins-home-size
linux/24.01
linux/23.11.1
linux/23.11
linux/23.10
linux/23.07
openbsd/23.06
linyx/23.04.01
linux/23.04
linux/23.03.01
linux/23.03
linux/23.02
openbsd/23.02
linux/23.0.2
openbsd/22.12
linux/22.12
openbsd/22.11
linux/22.11
openbsd22.10
linux/22.09
linux/22.08.1
linux/22.08
22.08
22.06.2
22.06.1
22.06
22.03
22.03.1
21.10.4
21.10.1
21.09
20.12
20.04.4
20.04.3
20.04.2
20.04.1
20.02.1
19.11.1
v19.11
19.10
19.09
v19.06
v19.04
debian/0.13.1-1
v0.13.1
debian/0.13-1
v0.13
debian/0.12-1
v0.12
debian/0.11-1
v0.11
Labels
Clear labels   
bug

Something is not working

  
bullseye

   
discussion

This need to be discussed

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
suggestion

Suggest to add/change something

  
wontfix

This won't be fixed

No Label
bug
bullseye
discussion
duplicate
enhancement
help wanted
invalid
question
suggestion
wontfix
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: evolix/evocheck#33
No description provided.
Delete Branch "%!s(<nil>)"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?