An ntpmon proof-of-concept exists

[Hal Murray]

> # By default, exchange time with everybody, but don't allow configuration.
> restrict -4 default notrap nomodify nopeer noquery
> restrict -6 default notrap nomodify nopeer noquery

> restrict 127.0.0.1
> restrict ::1

>From docs/includes/access-commands.txt
  +noquery+;;
    Deny {ntpqman} queries. Time service is not affected.

Are you running ntpq on that system or poking from another box?
Are you using localhost or its host name?


-- 
These are my opinions.  I hate spam.