# From: "Timothy M. Lyons" <lyons@digitalvoodoo.org>
# To: <discuss@blu.org>
# Subject: Re: Major Clock Drift
# Date: Thu, 26 Aug 2004 20:08:49 -0400
# 
# The following is a fairly benign ntpd.conf config which will restrict all
# access then allow limited access from your timeservers.
# 
# Replace the timeservers below with whatever you Use (you can use IP or name).
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - #

# Prohibit general access to this service.
restrict default ignore

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1

# --- OUR TIMESERVERS -----
# or remove the default restrict line
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.

#FORMAT
# restrict mytrustedtimeserverip mask 255.255.255.255 nomodify notrap noquery
# server mytrustedtimeserverip

restrict 18.145.0.30 mask 255.255.255.255 nomodify notrap noquery
restrict 132.163.4.100 mask 255.255.255.255 nomodify notrap noquery
restrict 192.5.41.41 mask 255.255.255.255 nomodify notrap noquery
restrict 192.5.41.40 mask 255.255.255.255 nomodify notrap noquery

server 192.5.41.41
server 192.5.41.40
server 192.43.244.18
server 18.145.0.30

#
# Drift file.  Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
#
driftfile /var/lib/ntp/drift
broadcastdelay  0.008