Enhance config.boot.default NTP allow-clients for T5694 and T6123

Adds ipv4/ipv6 localhost, link-local and private address as allowed-clients to NTP service.
vyos · Apr 11, 2024 · d2d083a · d2d083a
1 parent b04c480
commit d2d083a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default b/data/live-build-config/includes.chroot/opt/vyatta/etc/config.boot.default
@@ -19,6 +19,16 @@ system {
         }
     }
     ntp {
+        allow-client {
+            address 127.0.0.0/8
+            address 169.254.0.0/16
+            address 10.0.0.0/8
+            address 172.16.0.0/12
+            address 192.168.0.0/16
+            address ::1/128
+            address fe80::/10
+            address fc00::/7
+        }
         server "time1.vyos.net"
         server "time2.vyos.net"
         server "time3.vyos.net"