On Mon, 10 Jan 2000, Edward Moon wrote:

> Does anyone have a working set of IPCHAINS rules to allow ntpdate 
> client requests through an IPCHAINS firewall?

$IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 123 -j ACCEPT
$IPCHAINS -A input -p udp -s $REMOTENET -d $LOCALNET 123 -j ACCEPT

> I'm having difficulty setting up the rules for this protocol. No 
> matter what I try I get 'operation not permitted' messages in the log 
> file.

Make sure you don't have a restrict command in your /etc/ntp.conf that is
preventing this. The mask could be wrong, or you could have set the flags
"noserve" or "ignore" which would of course prevent time service.

-- 
Todd A. Jacobs
Network Systems Engineer


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to