Bugzilla Bug 17492

Hello,

I just emerged ntp and found that the included config template is a bit
"minimalistic" as it does not include any access restrictions or hints to
configure them at all.

So please find attached a suggestion for an updated ntpd.conf template.

Thanks.
Daniel

PS: By the way...trivial but also check the einfo output of the ebuild - or is
this meant to stress "RTFM"? ;-)

--- Quote ---
[...]
 * Please run etc-update and then read all the comments
 * all the comments in /etc/ntp.conf and
[...]
--- /Quote ---


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Created an attachment (id=9374) [details]
Suggestion for an updated ntp.conf template.

Diff:
*** /usr/share/ntp/ntp.conf	Fri Mar 14 11:43:12 2003
--- ntp.conf	Fri Mar 14 11:42:30 2003
***************
*** 19,21 ****
--- 19,53 ----
  # you should not need to modify the following paths
  logfile		/var/log/ntpd.log
  driftfile	/var/lib/misc/ntp.drift
+
+
+ # Warning: Using default NTP settings will leave your NTP
+ #	     server accessible to all hosts on the Internet.
+
+ #
+ # If you want to deny all machines from accessing
+ # your NTP server, uncomment:
+ #
+ #restrict default ignore
+
+
+ # To only deny other machines from changing the
+ # configuration but allow localhost uncomment:
+ #
+ #restrict default notrust nomodify
+ #restrict 127.0.0.1
+
+
+ # To allow machines within your network to synchronize
+ # their clocks with your server, but ensure they are
+ # not allowed to configure the server or used as peers
+ # to synchronize against, uncomment this line.
+ #
+ #restrict 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap
+
+
+ # To only deny other machines from changing the
+ # configuration but allow localhost uncomment:
+ #
+ #restrict default notrust nomodify
+ #restrict 127.0.0.1

thanks daniel, will look into this

Another but rather trivial suggestion that just came to my mind, would be to
consider 
adding an example for setting a "prefer" statement to the server part of the 
configuration when using multiple servers, similar to: 

  #server ntplocal.example.com prefer 
  #server timeserver.example.org 

Thanks. :-) 

changed in portage, thanks Daniel

the extra einfo is a 'rtfm' msg simply because people were not doing so and
were 
filing bugs/complaining on mailing lists + forums 

i added the einfo so as to quiet them ;)