From d2d083ac579477db4a09b8d71d55e883a488ddf1 Mon Sep 17 00:00:00 2001
From: Ginko <152240782+Giggum@users.noreply.github.com>
Date: Thu, 11 Apr 2024 11:29:14 -0400
Subject: Enhance config.boot.default NTP allow-clients for T5694 and T6123

Adds ipv4/ipv6 localhost, link-local and private address as allowed-clients to NTP service.
---
 .../includes.chroot/opt/vyatta/etc/config.boot.default         | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'data')

diff --git a/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default b/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default
index 7123ef54..c3ff6c79 100644
--- a/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default
+++ b/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default
@@ -19,6 +19,16 @@ system {
         }
     }
     ntp {
+        allow-client {
+            address 127.0.0.0/8
+            address 169.254.0.0/16
+            address 10.0.0.0/8
+            address 172.16.0.0/12
+            address 192.168.0.0/16
+            address ::1/128
+            address fe80::/10
+            address fc00::/7
+        }
         server "time1.vyos.net"
         server "time2.vyos.net"
         server "time3.vyos.net"
-- 
cgit v1.2.3