Re: ntp + pf

[Dan Harnett <danh@nfol.com>]

On Mon, 29 Apr 2002 20:16:59 +0200
fransoa holop <fred@francis.unitra.sk> wrote:

> my /etc/pf.conf is a la FAQ, now i was wondering
> (and i have null experience with firewalls yet)
> does ntp need its port 123 tcp/udp to be open?
> or does the keep state thingy take care of that
> (line 11-12)?

That is enough if you only want to be an NTP client (you won't be
serving NTP requests to hosts on the external interface).

> ntp doesn't complain (loudly), and i am a little
> bit confused.  i started wondering because the last
> log is from 26. apr. and only after the reboot process:

You can use ntpq to check on its status.