diff options
| author | Christian Poessinger <christian@poessinger.com> | 2019-09-28 14:03:20 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2019-09-28 14:03:20 +0200 |
| commit | e541ffc4f34ced045b89bd039f391d1322ff5f00 (patch) | |
| tree | 83b329953d9b277238237aac9e5638a9f2ea149f /src/conf_mode/ntp.py | |
| parent | ce8cc3514acdc1f2c06bcd3ef7f3ef32561df9c8 (diff) | |
| parent | 6ac5271e93d06712f6e318d2f6b96280ae16f040 (diff) | |
| download | vyos-1x-e541ffc4f34ced045b89bd039f391d1322ff5f00.tar.gz vyos-1x-e541ffc4f34ced045b89bd039f391d1322ff5f00.zip | |
Merge branch 'current' of github.com:vyos/vyos-1x into equuleus
* 'current' of github.com:vyos/vyos-1x:
T1694: delete the now broken tests for NTP.
Jenkins: assume dependencies are available in DOcker container
OpenVPN: T1512: always enable compat-names option
Interface: T1695: Syntax error in interface-dummy.py - Missing colon
T1694 NTPd: Do not listen on all interfaces by default
openvpn: T1691: interface is not always created - take care when setting alias
openvpn: T1691: add artifical abort when waiting on interface
ipoe-server: T1690 - restart op-mode command for service ipoe-server
ipoe-server: T1692 - ipoe-server verify function error
pppoe-server: T1690 - restart op-mode commands for pppoe-server
T1685 Adding ethernet valueHelp for vif,vif-s,vif-c
wireguard: T1681 - code cleanup and maintenace.
Diffstat (limited to 'src/conf_mode/ntp.py')
| -rwxr-xr-x | src/conf_mode/ntp.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/ntp.py b/src/conf_mode/ntp.py index f706d502f..8f32e6e81 100755 --- a/src/conf_mode/ntp.py +++ b/src/conf_mode/ntp.py @@ -42,6 +42,8 @@ restrict default noquery nopeer notrap nomodify restrict 127.0.0.1 restrict -6 ::1 +# Do not listen on any interface address by default +interface ignore wildcard # # Configurable section # @@ -63,7 +65,6 @@ restrict {{ n.address }} mask {{ n.netmask }} nomodify notrap nopeer {% if listen_address -%} # NTP should listen on configured addresses only -interface ignore wildcard {% for a in listen_address -%} interface listen {{ a }} {% endfor -%} |