From owner-freebsd-stable@FreeBSD.ORG Tue Nov 23 14:48:46 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3823116A4CE for ; Tue, 23 Nov 2004 14:48:46 +0000 (GMT) Received: from supermail.ispro.net.tr (supermail.ispro.net.tr [217.21.68.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id A8EC643D49 for ; Tue, 23 Nov 2004 14:48:40 +0000 (GMT) (envelope-from yurtesen-dated-1102085299.e1ff62@ispro.net.tr) Received: (qmail 37939 invoked by uid 89); 23 Nov 2004 14:48:19 -0000 Received: from [84.248.223.210] (dsl-aur-wwd2.dial.inet.fi [84.248.223.210]) by supermail.ispro.net.tr (tmda-ofmipd) with ESMTP; Tue, 23 Nov 2004 16:48:11 +0200 (EET) Message-ID: <41A3DA3C.80703@ispro.net.tr> Date: Tue, 23 Nov 2004 16:47:56 -0800 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.1) Gecko/20040707 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Tom Hukins References: <41A3D0F5.1020406@ispro.net.tr> <20041123143148.GA60707@eborcom.com> In-Reply-To: <20041123143148.GA60707@eborcom.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Delivery-Agent: TMDA/1.0.2 (Bold Forbes) From: Evren Yurtesen X-Primary-Address: yurtesen@ispro.net.tr cc: freebsd-stable@freebsd.org Subject: Re: ntpd v4.2 problem X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2004 14:48:46 -0000 Tom Hukins wrote: > On Tue, Nov 23, 2004 at 04:08:21PM -0800, Evren Yurtesen wrote: > >>The handbook seem to give wrong information about ntp and the manual >>page of ntp.conf is ?old? maybe? >> >>The notrust option obviously changed between v4.1 and v4.2... >>http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ntp.html > > > Thanks for reporting this. I wrote this part of the Handbook and I'm > about to commit a change to reflect this that should show up on the > Web site in the next day or so. > > For more details, see: > http://ntp.isc.org/bin/view/Support/ConfRestrict > http://www.eecis.udel.edu/~mills/ntp/html/accopt.html > > Tom From NTP.CONF(5), notrust Treat these hosts normally in other respects, but never use them as synchronization sources. It seems to me that the manual pages are a little bit behind compared to info at http://www.eecis.udel.edu/~mills/ntp/html/accopt.html notrust Deny service unless the packet is cryptographically authenticated. Thanks for the reply. Evren