Re: [CentOS] NTP server problem behind firewall

2012-09-04 Thread Artifex Maximus
On Tue, Sep 4, 2012 at 10:36 AM, Giles Coochey wrote: > On 04/09/2012 07:31, Artifex Maximus wrote: >> >> >> The first time (16:39:13.653674) client cannot sync to the server but >> second time (16:39:43.145984) that was successful even if there is a >> 'bad udp cksum'. BTW, is it normal? Tcpdump

Re: [CentOS] NTP server problem behind firewall

2012-09-04 Thread Giles Coochey
On 04/09/2012 07:31, Artifex Maximus wrote: The first time (16:39:13.653674) client cannot sync to the server but second time (16:39:43.145984) that was successful even if there is a 'bad udp cksum'. BTW, is it normal? Tcpdump says there was traffic and sync happened later so rule is OK I think.

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Artifex Maximus
On Mon, Sep 3, 2012 at 4:32 PM, Giles Coochey wrote: > On 03/09/2012 15:18, Artifex Maximus wrote: >> >> On Mon, Sep 3, 2012 at 11:15 AM, Leonard den Ottolander >> wrote: >>> >>> On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: Any idea what is wrong? >>> >>> The iptables rules

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Leonard den Ottolander
On Mon, 2012-09-03 at 14:18 +, Artifex Maximus wrote: > My server is able to synchronize with GPSNTP so rules > are fine for that (because my output chain is ACCEPT per default). And related traffic is allowed too, yes, I overlooked that. Are you sure your windows clients have addresses in th

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Giles Coochey
On 03/09/2012 15:18, Artifex Maximus wrote: On Mon, Sep 3, 2012 at 11:15 AM, Leonard den Ottolander wrote: On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: Any idea what is wrong? The iptables rules you specify only allow clients from your local network access to your "proxy" ntp ser

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Artifex Maximus
On Mon, Sep 3, 2012 at 11:15 AM, Leonard den Ottolander wrote: > On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: >> Any idea what is wrong? > > The iptables rules you specify only allow clients from your local > network access to your "proxy" ntp server. However, you do not specify > any

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Giles Coochey
On 03/09/2012 13:00, Philippe Naudin wrote: Le lun. 03 sept. 2012 13:15:41 CEST, Leonard den Ottolander a écrit: On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: Any idea what is wrong? The iptables rules you specify only allow clients from your local network access to your "proxy" n

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Philippe Naudin
Le lun. 03 sept. 2012 13:15:41 CEST, Leonard den Ottolander a écrit: > On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: > > Any idea what is wrong? > > The iptables rules you specify only allow clients from your local > network access to your "proxy" ntp server. However, you do not speci

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Leonard den Ottolander
On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: > Any idea what is wrong? The iptables rules you specify only allow clients from your local network access to your "proxy" ntp server. However, you do not specify any rules for eth1 to allow that ntp server to synchronise with the remote se

Re: [CentOS] NTP server problem behind firewall

2012-09-03 Thread Markus Falb
On 2.9.2012 18:22, Artifex Maximus wrote: > On Sun, Sep 2, 2012 at 2:33 PM, Markus Falb > wrote: >> On 2.9.2012 09:46, Artifex Maximus wrote: >>> Hello! >>> >>> I would like to setup an NTP server for my Windows network using >>> CentOS 6.3 with firewall turned on. ... >>> The script for making f

Re: [CentOS] NTP server problem behind firewall

2012-09-02 Thread Artifex Maximus
On Sun, Sep 2, 2012 at 2:33 PM, Markus Falb wrote: > On 2.9.2012 09:46, Artifex Maximus wrote: >> Hello! >> >> I would like to setup an NTP server for my Windows network using >> CentOS 6.3 with firewall turned on. As I learned the NTP protocol uses >> port 123 UDP. I have two NIC cards. One for i

Re: [CentOS] NTP server problem behind firewall

2012-09-02 Thread Markus Falb
On 2.9.2012 09:46, Artifex Maximus wrote: > Hello! > > I would like to setup an NTP server for my Windows network using > CentOS 6.3 with firewall turned on. As I learned the NTP protocol uses > port 123 UDP. I have two NIC cards. One for internal network and one > for access internet. Both cards

Re: [CentOS] NTP server problem behind firewall

2012-09-02 Thread Artifex Maximus
On Sun, Sep 2, 2012 at 8:37 AM, Earl Ramirez wrote: > On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: >> Hello! >> >> I would like to setup an NTP server for my Windows network using >> CentOS 6.3 with firewall turned on. As I learned the NTP protocol uses >> port 123 UDP. I have two NIC

Re: [CentOS] NTP server problem behind firewall

2012-09-02 Thread Earl Ramirez
On Sun, 2012-09-02 at 07:46 +, Artifex Maximus wrote: > Hello! > > I would like to setup an NTP server for my Windows network using > CentOS 6.3 with firewall turned on. As I learned the NTP protocol uses > port 123 UDP. I have two NIC cards. One for internal network and one > for access inter

[CentOS] NTP server problem behind firewall

2012-09-02 Thread Artifex Maximus
Hello! I would like to setup an NTP server for my Windows network using CentOS 6.3 with firewall turned on. As I learned the NTP protocol uses port 123 UDP. I have two NIC cards. One for internal network and one for access internet. Both cards in private address range. The problem is when I am usi