SINGLESOCK - How much to strip away?

Hal Murray hmurray at megapathdsl.net
Sat Jun 2 19:39:39 UTC 2018


Gary said:
> You may say that can be duplicate in your firewall settings.  But maybe you
> want to run two ntpd ...

I assume firewalls are smart enough to allow different rules for different 
servers.

"firewall" is potentially ambiguous in this discussion.  It could refer to a 
package running on the local system or to a box at the interface between 
internal networks and the big-bad external internet.

My "different rules" comment was for a box.  If you are talking about 
software running on the local system you may need different rules for each 
system.


> Almost, but not quite, sufficient.  ntpd still needs a way to bind to some
> IP addresses and not others. 

If you can enumerate the IP Addresses that you want or the ones you don't 
want, then I think the restrict stuff will work.  The default entry handles 
the others.



-- 
These are my opinions.  I hate spam.





More information about the devel mailing list