From 3d396586ee953c708465e00b6fef5d1f520d587c Mon Sep 17 00:00:00 2001 From: Marcel Gisselmann Date: Fri, 27 Sep 2019 13:10:35 +0200 Subject: T1694 NTPd: Do not listen on all interfaces by default (cherry picked from commit 258c24ab9be8aa4ced8bfa1c19f134ec8bbfb1a0) --- src/conf_mode/ntp.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/conf_mode/ntp.py b/src/conf_mode/ntp.py index 68a046939..65bd388bf 100755 --- a/src/conf_mode/ntp.py +++ b/src/conf_mode/ntp.py @@ -41,7 +41,8 @@ restrict default noquery nopeer notrap nomodify restrict 127.0.0.1 restrict -6 ::1 - +# Do not listen on any interface address by default +interface ignore wildcard # # Configurable section # @@ -64,7 +65,6 @@ restrict {{ n.address }} mask {{ n.netmask }} nomodify notrap nopeer {% if listen_address -%} # NTP should listen on configured addresses only -interface ignore wildcard {% for a in listen_address -%} interface listen {{ a }} {% endfor -%} -- cgit v1.2.3