View Single Post
Old 21st August 2009
s2scott's Avatar
s2scott s2scott is offline
Package Pilot
 
Join Date: May 2008
Location: Toronto, Ontario Canada
Posts: 198
Default

My /etc/hostname.fxp1
Code:
inet 192.168.2.1 255.255.255.0 192.168.2.255 \
 media 100baseTX mediaopt full-duplex \
 group inside description "SoHo LAN"
inet alias 192.168.2.2 255.255.255.255 NONE
inet alias 192.168.2.3 255.255.255.255 NONE
Personal preference is that, .1 is the gateway, .2 is my DNS listener, and .3 is my NTP listener. Obviously, they can all run on on .1, but I like to silt them out and write pf.conf rules accordingly. Therefore, ...

My /etc/rc.conf.local
Code:
ntpd_flags="-s"
My /etc/ntpd.conf
Code:
# $OpenBSD: ntpd.conf,v 1.8 2007/07/13 09:05:52 henning Exp $
# sample ntpd configuration file, see ntpd.conf(5)
listen on 192.168.2.3  # my LAN
listen on 127.0.0.1
listen on 192.168.3.3  # my WiFi
listen on 192.168.7.3  # my VoIP and DMZ
#
server 0.ca.pool.ntp.org
server 1.ca.pool.ntp.org
server 2.ca.pool.ntp.org
server 3.ca.pool.ntp.org
# -
It sync's with outside time servers (<>..ca.pool.ntp.org) and then serves time to local clients that sync to the .3 addresses.

Your /etc/pf.conf must PASS OUT on INTERNET interface UDP-NTP with state and PASS IN on LAN interface UDP-NTP with state from itself. Please post your pf.conf.

/S
__________________
Never argue with an idiot. They will bring you down to their level and beat you with experience.

Last edited by s2scott; 21st August 2009 at 11:03 PM.
Reply With Quote