Re: bin/23705 (ntpd can not be restricted to certain interfaces)

[Frank Kardel <kardel%netbsd.org@localhost>]

The following reply was made to PR bin/23705; it has been noted by GNATS.

From: Frank Kardel <kardel%netbsd.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: bin/23705 (ntpd can not be restricted to certain interfaces)
Date: Sat, 21 Nov 2009 22:24:06 +0100

 dholland%NetBSD.org@localhost wrote:
 > Synopsis: ntpd can not be restricted to certain interfaces
 >
 > State-Changed-From-To: closed->open
 > State-Changed-By: dholland%NetBSD.org@localhost
 > State-Changed-When: Sun, 15 Nov 2009 03:16:49 +0000
 > State-Changed-Why:
 > Wonderful, it doesn't work.
 >
 >   
 Actually it does, possibly not in a way you are expecting. The binding 
 is still done, but packets arriving on interface not mentioned by -I get 
 dropped rightaway after being read.
 Code to ignore the interface completely will be in the next stable 
 release of ntpd (not quite there yet - but the RC cycle is running).
 
 See the startup messages to watch what happens. An -I pppoe0 on my 
 system leads to :
 
 2009-11-21T22:12:09.942174+01:00 pip ntpd 19599 - - Listening on 
 interface #0 wildcard, 0.0.0.0#123 Disabled
 2009-11-21T22:12:09.942253+01:00 pip ntpd 19599 - - Listening on 
 interface #1 wildcard, ::#123 Disabled
 2009-11-21T22:12:09.942353+01:00 pip ntpd 19599 - - Listening on 
 interface #2 msk0, a.b.c.d#123 Disabled
 2009-11-21T22:12:09.942427+01:00 pip ntpd 19599 - - Listening on 
 interface #3 msk0, fe80::...#123 Disabled
 2009-11-21T22:12:09.942499+01:00 pip ntpd 19599 - - Listening on 
 interface #4 msk1, fe80::...#123 Disabled
 2009-11-21T22:12:09.942571+01:00 pip ntpd 19599 - - Listening on 
 interface #5 lo0, 127.0.0.1#123 Enabled
 2009-11-21T22:12:09.942641+01:00 pip ntpd 19599 - - Listening on 
 interface #6 lo0, ::1#123 Enabled
 2009-11-21T22:12:09.942713+01:00 pip ntpd 19599 - - Listening on 
 interface #7 lo0, fe80::1#123 Enabled
 2009-11-21T22:12:09.942808+01:00 pip ntpd 19599 - - Listening on 
 interface #8 pppoe0, fe80::...#123 Enabled
 2009-11-21T22:12:09.942879+01:00 pip ntpd 19599 - - Listening on 
 interface #9 pppoe0, x.y.z.u#123 Enabled
 2009-11-21T22:12:09.942951+01:00 pip ntpd 19599 - - Listening on 
 interface #10 gif0, 2001:...#123 Disabled
 2009-11-21T22:12:09.943024+01:00 pip ntpd 19599 - - Listening on 
 interface #11 gif0, fe80::...#123 Disabled
 2009-11-21T22:12:09.943114+01:00 pip ntpd 19599 - - Listening on routing 
 socket on fd #32 for interface updates
 
 All addresses on interfaces which are marked 'Disabled' will drop any 
 packets received via these sockets.
 
 Frank