What kind of firewall? Have you enable dest. port 123 and accounted for the return packets? (Mine have both src and dest of 123 with ntpdate on debian stable.) Do you get an ICMP destination unreachable back, or is the packet just dropped? Are you running ntpd / ntpdate / tardis or other? I can't remember if Massey is stratum 2 or 3 - if your box is claiming to be e.g. stratum 1, then it won't accept the time from Massey. cheers, Jamie On 13/06/06, John wrote:

Ok-

It appears that allowing outbound UDP to port 123 doesn't cut it past the firewall.

Does anyone have any ideas please?

...

...

Is NTP still available on ntp.massey.ac.nz and ntp.public.otago.ac.nz ?

They work for me, here's the ones I use including contact emails.

server ntp.massey.ac.nz # ntp(a)massey.ac.nz server ntp.public.otago.ac.nz # ntp(a)otago.ac.nz server tk1.ihug.co.nz # ntp(a)staff.ihug.co.nz server tk2.ihug.co.nz # ntp(a)staff.ihug.co.nz

jfp.

-- Jamie Riden / jamesr(a)europe.com / jamie.riden(a)computer.org NZ Honeynet project - http://www.nz-honeynet.org/