NTP address and mask facility

The address and mask configuration facility adds various restrictions or erects barriers between your host and other time servers. A typical statement in the configuration file looks as follows:

restrict IP_address mask IP_address_mask flag1 flag2 . . .

Each statement adds an entry to an internal list maintained by xntpd. Each entry in this list contains the list entry address (the IP address following restrict), the address mask, and the flags. Below is a list of all of the flags and their meanings:

ignore

Indicates that all packets from hosts matching this entry will be ignored.

noquery

Indicates that your host will not respond to mode 6 and 7 packets sent from hosts with a matching address.

nomodify

Indicates that your host will not allow itself to be reconfigured by hosts with a matching address.

notrap

Indicates that your host will not allow hosts with a matching address to register as a trap receiver.

lowpriotrap

Indicates that your host will give hosts with a matching address a low priority for the use of traps.

noserve

Indicates that your host will not give the time to hosts with a matching address.

nopeer

Indicates that your host will not attempt to get time from any host with a matching address.

notrust

Indicates that hosts matching this entry, while treated normally in other respects, should not be trusted for synchronization.

   (source_address & address_mask) == (list_entry_address & address_mask)

   restrict default flag1 flag2 . . .

Suppose that you are running xntpd on a host with IP address 132.147.246.16. You would like to ensure that runtime reconfiguration requests can be made only from the local host. Further, you would like the host to synchronize with only one of a pair of offsite servers or, failing that, a time source on the class B network whose address is 132.147. The following entries in the configuration file would implement this policy:

   # By default, do not trust and do not allow modifications
   restrict default notrust nomodify
   

   # These hosts are trusted for time, but no modifications allowed
   restrict 132.147.0.0 mask 255.255.0.0 nomodify
   restrict 128.115.14.97 nomodify
   restrict 16.1.0.22 nomodify
   

   # These local addresses are unrestricted
   restrict 132.147.246.16
   restrict 127.0.0.1

The first entry is the default entry, which all hosts match and hence which provides the default set of flags. The next three entries indicate that matching hosts have only the nomodify flag set and hence are trusted for time. If the mask is not specified in the restrict statement, it defaults to 255.255.255.255. Note that the address 132.147.246.16 matches three entries in the table, the default entry (mask 0.0.0.0), the entry for net 132.147 (mask 255.255.0.0), and the entry for the host itself (mask 255.255.255.255). As expected, the flags for the host are derived from the last entry, as that mask has the most bits set.

Each restrict statement applies to packets from all hosts, including those that are configured elsewhere in the configuration file. Hence, if you specify a default set of restrictions that you do not wish to apply to the hosts you are synchronizing with, you must override the default restrictions for those hosts with additional restrict statements.

Home Notes   Home   MCSE   MCSE + Security   CCNA   CCNP   Schedule   Register   Frequently Asked Questions   Course Fees   Contact US   Boot Camp Location   Compare us to our competitors   Testimonials   Sitemap

Testimonials

Join MCSE Boot Camp & CCNA Boot Camp Back to Back Certification Today. links  270    290    291  293    294  298  299  Security  640-801  routing 811  821   831  Resources MCSE + CCNA  Training  Card pay  Papal  MCSE Notes  CCNA Notes    index main  root link  resources home    Ref1 Ref2

Vibrant offers MCSE certification training boot camp for $5400 all inclusive, instructor led at California and Baltimore.

Vibrant Bootcamp Participants come from All Around the World. Vibrant has trained students from more than 15 countries like USA, UK, (Scotland, Ireland, Wales), Switzerland, Germany, Australia, Canada, France, Holland, Japan, Belgium, Bahrain, New Zealand, Tanzania, Turkey, Kenya and more.