freebsd stable - Feb 2004 - problems with ntpd configuration

Hi!

I have a problem to configure properly a ntpd server for local network. I
followed a handbook example, but maybe I didn't understand something well.
My
aim is to configure a ntpd server, allow to synchronize computers from local
network according to this server and hide mentioned ntpd server for all
computers out of local network.


My ntp server is:
>uname -a
FreeBSD hilbert.chtf.stuba.sk 4.9-STABLE FreeBSD 4.9-STABLE #0: Wed Feb 11 
18:23:18 CET 2004     root@hilbert.chtf.stuba.sk:/usr/obj/usr/src/sys/HILBERT  
i386
>

ntpd server is allowed in rc.conf with no additional flags:

xntpd_enable="YES"


Its IP is 147.175.67.128, network is class B: 147.175.0.0 with netmask 
255.255.0.0. My ntp.conf: 

server public.stratum2.server1
server public.stratum2.server2
server public.stratum2.server3
driftfile /var/db/ntp.drift
# default to ignore
restrict default ignore
# allow my net to configure, byt not act my setting (according to handbook):
restrict 147.175.0.0 mask 255.255.0.0 notrust nomodify notrap

Server synchronize itself well, but when I try query from 147.175.64.41, i 
obtain: 
> ntpdate -vq 147.175.67.128
23 Feb 07:54:52 ntpdate[6145]: ntpdate 4.1.0-a Fri Feb  6 09:54:31 CET 2004 (1)
server 147.175.67.128, stratum 16, offset 0.301619, delay 0.02689
23 Feb 07:54:52 ntpdate[6145]: no server suitable for synchronization
found
> 
ntpd is already running for several days, so it si synchronized and -- i think
-- ready to serve.

Can you help me with appropriate 'restrict' rule sets? No firewall is
running
here. 

Thanks, Jozef.

You might get better results to you ntp questions on the ntp news group:
comp.protocols.time.ntp
> I have a problem to configure properly a ntpd server for local network. I
> followed a handbook example, but maybe I didn't understand something
well. My
> aim is to configure a ntpd server, allow to synchronize computers from
local
> network according to this server and hide mentioned ntpd server for all
> computers out of local network.
Start by removing all the restrict lines, then if it works, you know that
you have the basic setup right.
> Its IP is 147.175.67.128, network is class B: 147.175.0.0 with netmask 
> 255.255.0.0. My ntp.conf: 
> 
> server public.stratum2.server1
> server public.stratum2.server2
> server public.stratum2.server3
> driftfile /var/db/ntp.drift
> # default to ignore
> restrict default ignore
> # allow my net to configure, byt not act my setting (according to
handbook):
> restrict 147.175.0.0 mask 255.255.0.0 notrust nomodify notrap
You should also add restrict lines, with less restriction than the default,
for the servers you use. Just adding a server line does not un-restrict it
automatically.
> Server synchronize itself well, but when I try query from 147.175.64.41, i 
> obtain: 
Are you really sure about this? Does a "ntpq -c rv" show the stratum
as
below 15?
> > ntpdate -vq 147.175.67.128
> 23 Feb 07:54:52 ntpdate[6145]: ntpdate 4.1.0-a Fri Feb  6 09:54:31 CET 2004
(1)
> server 147.175.67.128, stratum 16, offset 0.301619, delay 0.02689
> 23 Feb 07:54:52 ntpdate[6145]: no server suitable for synchronization found
This looks like your server is not synchronized. Stratum 16 means not
synced.

John
-- 
John Hay -- John.Hay@icomtek.csir.co.za / jhay@FreeBSD.org

Try http://twiki.ntp.org .

H