316 reputation
111
bio website douglasfcalvert.net
location Syracuse, NY
age 34
visits member for 2 years, 10 months
seen Jul 26 at 2:54

dfc


Jun
4
comment Properly configuring symmetric active NTP?
You really need to paste more information in order to get an answer. Please post the contents of ntp.conf and ntpq -p from each machine
May
21
awarded  Nice Question
May
17
comment Force less to display a file as text
What is LHS? It is new to me.
May
5
answered A question about wlan0 / eth0 and wireshark
Apr
15
comment How to securely manage etckeeper from gitolite?
I apologize for asking but you said you were not very adept at sysadmin work: How are you anticipating using etckeeper? Is this different from your current usage? Are you planning on pushing changes to live /etc/'s from a remote machine? (similar to the way some people deploy code with git?)
Apr
12
revised FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
added 214 characters in body
Apr
11
answered FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
With all due respect I have to say that "not secure by default" is BS. 4.2.6p5 can be configured securely or insecurely. You can use the noquery restriction or disable monitor. Vulnerable to traffic spoofing is nonsensical. Plain DNS (not curve/dnssec) is also vulnerable to traffic spoofing. ICMP is vulnerable to traffic spoofing.
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
I do not understand what is wrong with using the reference implementation and a proper configuration?
Mar
26
comment Why is ntpd listening on most of 192.168.1.X/192.168.2.X
Did you paste the full output of ifconfig -a ? How is ntp listening on tun0 and tun1 if you do not have those devices configured?
Mar
26
comment Strip specific option from a response in dhclient
Did you file a bug report? I was really surprised that supersede did not work when I tried it. it seems like supersede "" should behave like a reject statement.
Mar
20
comment How to shutdown Linux at a specific datetime from terminal?
This is the linux/unix answer. It is unfortunate that the "install this gtk application" was chosen.
Mar
17
answered Strip specific option from a response in dhclient
Mar
12
comment timed out, nothing received
You updated your /etc/ntp.conf to what is shown above and resstarted ntp and you got the timed out message? what is the output of netstat -laun ?
Mar
12
awarded  Editor
Mar
12
revised timed out, nothing received
added 698 characters in body
Mar
10
answered timed out, nothing received
Mar
10
comment timed out, nothing received
@slm The command ntpq -p ntp1.inrim.it does not do what you think it does. that command asks the server for a list of its configured peers/timesources. It does not ask the remote server for the time. You can have a "perfectly functioning" public time server that serves time to clients but does not respond to remote peer requests. It is also known as noquery in the restric line.
Mar
10
comment timed out, nothing received
@Gilles add this to the experience pile: askubuntu.com/questions/429306/…
Mar
10
comment timed out, nothing received
@BojanVidanovic It does not make any sense that it works with ntpdate and not with ntp. When it works with ntpdate you should make note of the IP address that returned ann answer and try putting that into ntp.conf. The DNS response for pool.ntp.org address will vary depending on how many servers the pool monitor thingks are currently healthy in addition to some pseudo randomization in the dns daemon.