Re: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't

From: "Herta Van den Eynde" <herta.vandeneynde@xxxxxxxxx>
Date: Fri, 18 May 2007 21:57:57 +0200

On 18/05/07, Young, Mike <Mike.Young@xxxxxxxxxxxxxx> wrote:

Hello,

I'm seeing an odd NTP problem on a couple of Redhat servers here. Basically the NTP client is on a firewalled DMZ, away from the NTP server. NTP updates via ntpq work fine on the local NTP server subnet, but it isn't working for hosts on the firewalled DMZ. We've checked ports on the firewall, and 123/UDP is open. In addition, we see packets incrementing when we use the "iostat" command in ntpdc, and don't see any dropped or ignored packets in iostat either.

Any ideas?

Thanks,
Mike.

The ntp server uses 123/UDP, the client use ports above 1023.
http://www.unix.org.ua/orelly/networking/firewall/ch08_13.htm suggests
setting up an ntp server on your DMZ.

Kind regards,

Herta

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Follow-Ups:
- RE: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
  - From: Young, Mike

References:
- Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
  - From: Young, Mike

Prev by Date: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
Next by Date: Re: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
Previous by thread: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
Next by thread: RE: Firewalled NTP on Redhat - ntpdate works, but ntpq doesn't
Index(es):
- Date
- Thread

Relevant Pages

RE: Where are the SPS 2003 resources?
... Kind regards, ... >Hi Mike, ... demo, maybe that's available
on the microsoft site also, ... > new to this I'm having a hard time seeing SPS
... (microsoft.public.sharepoint.portalserver)
Re: Antwort: Re: Antwort: Remote Admin of DMZ
... Subject: Antwort: Re: Antwort: Remote Admin of DMZ ... Kind regards,
... Jens Mickerts ... Does anyone else remote admin inside a DMZ and if so
how?? ... (Security-Basics)
Re: Errors 40960 & 40961 ...
... I've mentioned this previously - there is no DC in the DMZ. ... W2K3 Servers
in a workgroup. ... "Mike T." ... If the reverse zone for the private address
does ... (microsoft.public.windows.server.dns)
Re: Recalculation?
... Kind regards, ... Microsoft MVP - Excel ... |> Hi Mike,
... (microsoft.public.excel.misc)
RE: Welcome screen settings
... Best wishes and kind regards ... "Mike" wrote: ... > How can
I alter settings for the welcome screen, ... > These settings can be changed for user
accounts, ... (microsoft.public.windowsxp.help_and_support)