Xymon Mailing List Archive search

NTP

list Kevin
Sun, 12 Nov 2006 12:27:43 -0500
Message-Id: <user-a81ff0c7e816@xymon.invalid>

Gentlemen,
  As always, the feedback here is outstanding. I forgot that ntp uses 
UDP and I wrote a rule using TCP! When I changed it to UDP, it all 
started working.

Thanks

kevin


Henrik Stoerner wrote:
On Sun, Nov 12, 2006 at 10:50:01AM -0600, Dan Vande More wrote:
  
26628 in this case is the pid. ntp always has an destination port of 123 so
you can write your iptables rule with that.
    
Two other things to remember:

1) ntp uses UDP, not tcp. So your iptables rule should be something like
    iptables -A INPUT -p udp --destination-port 123 -s ip.of.hobbit.server -j ACCEPT

2) The ntp.conf on the host you want to check must be setup to allow
   queries by the Hobbit server.


Regards,
Henrik