From bd2a757b852a339fb22492598f39841825e6b12c Mon Sep 17 00:00:00 2001 From: Hunter Haugen Date: Wed, 28 Nov 2012 11:40:01 -0500 Subject: Add restrict parameter NTP servers should not restrict themselves to 127.0.0.1, and this commit adds a `restrict` parameter to enable/disable this configuration block in the relevent templates. --- templates/ntp.conf.el.erb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'templates/ntp.conf.el.erb') diff --git a/templates/ntp.conf.el.erb b/templates/ntp.conf.el.erb index fe8a9a5..80b358b 100644 --- a/templates/ntp.conf.el.erb +++ b/templates/ntp.conf.el.erb @@ -4,6 +4,7 @@ tinker panic 0 <% end -%> +<% if @restrict -%> # Permit time synchronization with our time source, but do not # permit the source to query or modify the service on this system. restrict default kod nomodify notrap nopeer noquery @@ -18,6 +19,7 @@ restrict -6 ::1 # Hosts on local network are less restricted. #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap +<% end -%> # Use public servers from the pool.ntp.org project. # Please consider joining the pool (http://www.pool.ntp.org/join.html). -- cgit v1.2.3