Re: NTP Best Practices

[Saurabh Bathe <sbathe () gw int beginbyte org>]

Mohamed Farid wrote:
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of worldsmart02 () yahoo com
> Sent: Tuesday, May 22, 2007 2:59 PM
> To: security-basics () securityfocus com
> Subject: NTP Best Practices
>
> anyone has best practices for allowing NTP access to internal time
> server from a external firewall, what are the security vulnerabilities
> associated with this.
>   

Not really. If you need to synchronise time, you need  to allow that.
The general practice is to have about 3 NTP servers synchronizing with 
external time servers and the rest of internal servers use these to 
synchronize their time.

--Saurabh