Re: CVS commit: src/etc

[Alan Barrett <apb%netbsd.org@localhost>]

On Mon, 06 Jan 2014, Erik Fair wrote:
> Unless I misunderstand NTP configuration semantics, your 
> additional "restrict" statements for the NTP pool names 
> will do the wrong thing, in that each reference to a given 
> netbsd.pool.ntp.org name returns multiple IP addresses, in 
> apparently random order, i.e. an attempt to guarantee no two 
> queries return the same data.
>
> Ergo, those restrict statements will most probably not end up 
> with the same IP address as their preceding "server" statements, 
> as was presumably your intent.

Yes, you are correct.  What should we do?

If you have "restrict default nopeer noquery" (the uncommented 
line in my commit), then time service will still work, but the 
configured servers will be denied query permission.

If you use "restrict default ignore", then time service does not 
work.

--apb (Alan Barrett)