ntp.conf revision 1.14.6.1
1# $NetBSD: ntp.conf,v 1.14.6.1 2014/08/19 23:45:50 tls Exp $ 2# 3# NetBSD default Network Time Protocol (NTP) configuration file for ntpd 4 5# This file is intended to be both a usable default, and a Quick-Start 6# Guide. The directives and options listed here are not at all complete. 7# A great deal of additional documentation, including links to FAQS and 8# other guides, may be found on the official NTP web site, in particular 9# 10# http://www.ntp.org/documentation.html 11# 12 13# Process ID file, so that the daemon can be signalled from scripts 14 15pidfile /var/run/ntpd.pid 16 17# The correction calculated by ntpd(8) for the local system clock's 18# drift is stored here. 19 20driftfile /var/db/ntp.drift 21 22# Suppress the syslog(3) message for each peer synchronization change. 23 24logconfig -syncstatus 25 26# Refuse to set the local clock if there are too few good peers or servers. 27# This may help minimize disruptions due to network congestion. Don't 28# do this if you configure only one server! 29 30tos minsane 2 31 32# Set the number of tries to register with mdns. 0 means never 33# 34mdnstries 0 35 36# New ntpd disables the ntpdc protocol by default, to re-enable uncomment 37# the following line 38# enable mode7 39 40# Access control restrictions. 41# See /usr/share/doc/html/ntp/accopt.html for syntax. 42# See <http://support.ntp.org/bin/view/Support/AccessRestrictions> for advice. 43# Last match wins. 44# 45# Some of the more common keywords are: 46# ignore Deny packets of all kinds. 47# kod Send "kiss-o'-death" packets if clients exceed rate 48# limits. 49# nomodify Deny attempts to modify the state of the server via 50# ntpq or ntpdc queries. 51# noquery Deny all ntpq and ntpdc queries. Does not affect time 52# synchronisation. 53# nopeer Prevent establishing new peer associations. 54# Does not affect peers configured using "peer" lines. 55# Does not affect client/server time synchronisation. 56# noserve Deny all time synchronisation. Does not affect ntpq or 57# ntpdc queries. 58# notrap Deny the trap subset of the ntpdc control message protocol. 59# notrust Deny packets that are not cryptographically authenticated. 60# 61# By default, allow client/server time exchange without prior 62# arrangement, but deny configuration changes, queries, and peer 63# associations that were not explicitly configured. 64# 65restrict default kod nopeer noquery 66 67# Fewer restrictions for the local subnet. 68# (Uncomment and adjust as appropriate.) 69# 70#restrict 192.0.2.0 mask 255.255.255.0 kod nomodify notrap nopeer 71#restrict 2001:db8:: mask ffff:ffff:: kod nomodify notrap nopeer 72 73# No restrictions for localhost. 74# 75restrict 127.0.0.1 76restrict ::1 77 78# Hereafter should be "server" or "peer" statements to configure other 79# hosts to exchange NTP packets with. 80# 81# See <http://support.ntp.org/bin/view/Support/DesigningYourNTPNetwork> 82# and <http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers> 83# for advice. 84# 85# Peers or servers should be selected in such a way that the network 86# path to them is short, uncongested, and symmetric (that is, the series 87# of links and routers used to get to the peer is the same one that 88# the peer uses to get back). The best place to start looking for NTP 89# peers for your system is within your own network, or at your Internet 90# Service Provider (ISP). 91# 92# Ideally, you should select at least three other systems to talk NTP 93# with, for an "what I tell you three times is true" effect. 94 95#peer an.ntp.peer.goes.here 96#server an.ntp.server.goes.here 97 98# The pool.ntp.org project coordinates public time servers provided by 99# volunteers. See <http://www.pool.ntp.org>. The *.netbsd.pool.ntp.org 100# servers are intended to be used by default on NetBSD hosts, but 101# servers that are closer to you are likely to be better. Consider 102# using servers specific to your country, a nearby country, or your 103# continent. 104# 105# The pool.ntp.org project needs more volunteers! The only criteria to 106# join are a nailed-up connection and a static IP address. For details, 107# see the web page: 108# 109# http://www.pool.ntp.org/join.html 110# 111 112server 0.netbsd.pool.ntp.org 113server 1.netbsd.pool.ntp.org 114server 2.netbsd.pool.ntp.org 115server 3.netbsd.pool.ntp.org 116