opnsense/docs
1
0
Fork 0
mirror of https://github.com/opnsense/docs.git synced 2026-05-02 19:44:48 -05:00
Code Issues Packages Projects Releases Wiki Activity

ntp: warn about interface selection usage

Browse Source
This commit is contained in:
Stephan de Wit
2024-02-07 11:01:26 +01:00
parent eb2abcb411
commit f85849736d
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
source/manual/ntpd.rst
View File

@@ -16,8 +16,22 @@ In most cases the default setup is ready to use, below you will find some of the
=====================================================================================================================
.. Attention::
NTPd syncs the local clock to remote NTP servers and listens for incoming client queries using the selected interfaces.
The interface selection must therefore include a WAN type interface so that normal routing to the internet can take place.
Only selecting a LAN type interface will likely work due to outbound NAT rules, however, if CARP is configured, it is
possible that such NAT rules will translate to the address of the CARP VIP, causing asymmetric routing for secondary nodes.
Unless you are sure that you want to use a specific interface, it is recommended to keep the default of listening
on all interfaces and use the firewall rules to constrain access to the NTP service.
See `Listen interfaces <settingsmenu.html#listen-interfaces>`__ for more information.
==================================== ===============================================================================
Interface(s) Interfaces to bind to, when none is selected it listens to all
Interface(s) Interfaces to listen on. This interface selection is also used for outgoing
queries. when no interfaces are selected it listens on all interfaces with a
wildcard. Selecting all interfaces will explicitly listen on only the
interfaces/IPs specified. Interfaces without an IP address will not be shown.
Time servers Servers to use, comes with two toggles:
* Prefer