Well, in case you missed the NTP threads/bugs from about 2 months ago, the default configuration (assuming users have full access to outside NTP servers) should have 3 entries for 'pool.ntp.org' (IIRC, check in bugzilla), since they have round-robin DNS, so ntpd should get 3 different servers:
the problem is that you cannot use dns names for restrictions in ntpd.conf, so we would have to putt all ip addresses for pool.ntp.org in there.
L.
--
Luca Berra -- [EMAIL PROTECTED]
Communication Media & Services S.r.l.
/"\
\ / ASCII RIBBON CAMPAIGN
X AGAINST HTML MAIL
/ \