[Ntp] Antw: [EXT] Re: RFC 8633 (NTP BCP), Appendix A: "restrict source ..."

[Ulrich Windl <[e-mail]>]

>>> Martin Burnicki <[e-mail]> schrieb am 06.07.2021 um
10:55 in
Nachricht <[e-mail]>:
> Hi Ulrich,
> 
> Ulrich Windl wrote:
>> Hi!
>> 
>> Reading RFC 8633, Appendix A, specifically A.2, I was confused a bit:
>> The last line says "restrict source..." (and the preceding lines had 
> "restrict default...").
>> The point is that "default" is a literal keyword, but "source" is not 
> (AFAIK).
> 
> Yes, "restrict source ..." it valid syntax, which has been introduced 
> int ntpd 4.2.8, if I remember correctly.

Sorry for that. I looked up "man ntpd.conf" for ntp-4.2.8p15-94.2.x86_64 of
SLES 12 and there "source" is not explained.


> 
> The HTML docs of the current ntpd distribution says (in access.html):
> 
> "restrict source" configures a template restriction automatically added 
> at runtime for each association, whether configured, ephemeral, or 
> preemptable, and removed when the association is demobilized.
> 
> If I remember correctly, this was introduced to fix a problem e.g. with 
> pool server entries. If you had a restrict line like
> 
> restrict default ... nopeer
> 
> then automatic associations e.g. due to the "pool" directive wasn't 
> possible.
> 
> restrict source ...
> 
> now adds the specified permissions to such associations that are created 
> automatically.

OK, but still an explaining sentence wouldn't have been that wrong ;-)

Regards,
Ulrich

> 
> 
> Martin
> -- 
> Martin Burnicki
> 
> Senior Software Engineer
> 
> MEINBERG Funkuhren GmbH & Co. KG
> Email: [e-mail] 
> Phone: [phone]
> Linkedin: https://www.linkedin.com/in/martinburnicki/ 
> 
> Lange Wand 9, 31812 Bad Pyrmont, Germany
> Amtsgericht Hannover 17HRA 100322
> Geschäftsführer/Managing Directors: Günter Meinberg, Werner Meinberg, 
> Andre Hartmann, Heiko Gerstung
> Websites: https://www.meinberg.de  https://www.meinbergglobal.com 
> Training: https://www.meinberg.academy