diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4eb149f4..99ffac3f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ The **patch** part changes incrementally at each release.
 ### Changed
 
 ### Fixed
+* ntpd: Update the restrictions to follow wiki.evolix.org/HowtoNTP client config
 
 ### Security
 
diff --git a/ntpd/defaults/main.yml b/ntpd/defaults/main.yml
index 221a829c..88253844 100644
--- a/ntpd/defaults/main.yml
+++ b/ntpd/defaults/main.yml
@@ -2,7 +2,9 @@
 ntpd_servers:
 - 'ntp.evolix.net iburst'
 ntpd_acls:
-- '-4 default kod notrap nomodify nopeer noquery'
-- '-6 default kod notrap nomodify nopeer noquery'
+- '-4 default ignore'
+- '-6 default ignore'
+- 'source nomodify noquery notrap'         # Debian 9 and later
+- 'ntp.evolix.net nomodify noquery notrap' # Debian 8
 - '127.0.0.1'
 - '::1'