> None of them should need port 123 if packets are > selectively port forwarded.
Why do we want/need port forwarding? The idea is to move everything else to a different port so the only traffic on port 123 is requests for the server. If the client side opens a socket for each server, that gets a default random local port. The replies will come back to that port/socket rather than port 123. I don't have a good plan for mode6/ntpq traffic. If we put the data into shared memory, we can write a version of ntpq that looks there. Maybe it's time for SNMP. (as much as I hate that sort of stuff) -- These are my opinions. I hate spam. _______________________________________________ devel mailing list devel@ntpsec.org https://lists.ntpsec.org/mailman/listinfo/devel