> > I would also like to bring ntp into my network, on the only line providing
> > Internet access to a small company I'm working with.
> NTP is a UDP-based service, so you can't plug-gw it. The usual
> procedure is to run an NTP daemon on the bastion host, and sync it to
> as many low-stratum servers as possible. Have the internal clients
> sync either directly to the bastion host or to internal higher-stratum
> servers.
How is it more secure to run an ntp daemon on the bastion host, and serve
the internal network from there, rather than from the stratum's on the
Internet?
I suppose I could only allow that port from bastion host to internal
network...
Thanks again,
Dave
Follow-Ups:
References:
|
|
