On Tuesday, August 30, 2011 08:15:28 PM brian wrote: > ...to your rule list will allow the specified net address(es) to contact you on port 123. the above, of course, assumes your > input port is eth0 (change that, if different on your system), and that the NTP server uses TCP protocol (change that to UDP, > otherwise). should be enough to get you started on the right track, anyway. NTP uses UDP. Also, NTP uses addresses in the 127/8 space locally for configuration purposes; see the NTP man pages and the main ntp.org website for thorough documentation on all the options and what those other addresses in 127/8 do. This is one of those cases where you read the full upstream documentation set before you change anything; kindof like attempting an automatic transmission rebuild project where the instructions say clearly 'read entire procedure before performing any work' and the instructions mean that very literally.