X-Git-Url: http://git.onelab.eu/?p=nodeconfig.git;a=blobdiff_plain;f=PlanetLabConf%2Fntp.conf.php;fp=PlanetLabConf%2Fntp.conf.php;h=247ffe12b66dd53eff74d7d3e1d3de5b3c20e73c;hp=4945fb0c1f544300abeecdbad061d78d0bea6b0b;hb=1612c8dfe992fba0af1e8c283da36f7dfb2164f7;hpb=5560434f39e2477d07770ca18fe75b3cc20be654

diff --git a/PlanetLabConf/ntp.conf.php b/PlanetLabConf/ntp.conf.php
index 4945fb0..247ffe1 100755
--- a/PlanetLabConf/ntp.conf.php
+++ b/PlanetLabConf/ntp.conf.php
@@ -49,6 +49,13 @@ if (!empty($sites)) {
 print( "# node $hostname site $site_name $mylat $mylong $model\n");
 print( "driftfile /var/lib/ntp/ntp.drift\n" );
 print( "statsdir /var/log/ntpstats/\n" );
+print( "# Permit time synchronization with our time source, but do not\n");
+print( "# permit the source to query or modify the service on this system.\n");
+print( "restrict default kod nomodify notrap nopeer noquery\n");
+print( "restrict -6 default kod nomodify notrap nopeer noquery");
+print( "restrict 127.0.0.1");
+print( "restrict -6 ::1");
+
 if (is_numeric(array_search($model, $problem_models))) {
   print( "tinker stepout 0\n" );
 }