I am having some problems getting my ntp server to accept ntpdate
requests.
I have several clients behind a gateway/router that need to have their
time updated. I am using NAT to translate their source addresses to just
one address. This is causing some of the clients to make attempts at
communicating with my ntp server via a non-standard port (something other
than 123) as their source port.
Basically, I see that the connection is in fact being made from the
client's side (with a --sport = 46 and a --dport = 123) but my ntp server
is evidently dropping the packets.
I have tried using this as my restrict rule:
restrict a.b.c.d notrust nomodify notrap non-ntpport
this:
restrict a.b.c.d notrust nomodify notrap non-ntpport ntpport
and this:
restrict a.b.c.d notrust nomodify notrap ntpport
with no luck whatsoever...
How can I get my ntp server to allow such non-standard communication?
Regards,
Wendell Smith
|