[pkg-ntp-maintainers] Bug#678955: /etc/ntp.conf: Add discard and limited commands to default configuration

[Roger Lynn]

Package: ntp
Version: 1:4.2.6.p2+dfsg-1+b1
Severity: normal
File: /etc/ntp.conf

Hi,

In addition to adding the "limited" option to the restrict command, I would
suggest adding a discard command to override the default minimum request
period of 2 seconds, which will block ntpdate clients older than 4.2.7p22.

I use:

discard average 6 minimum 1
restrict default kod notrap nomodify nopeer noquery limited

A discard average of 6 (64 seconds) is possibly too aggressive for a default
setting and this could be left at its default of 3 (8 seconds).

This is mentioned in http://lists.ntp.org/pipermail/pool/2012-June/005885.html

Thanks,

Roger


-- System Information:
Debian Release: 6.0.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable'), (150, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ntp depends on:
ii  adduser                3.112+nmu2        add and remove users and groups
ii  dpkg                   1.15.8.12         Debian package management system
ii  libc6                  2.11.3-4          Embedded GNU C Library: Shared lib
ii  libcap2                1:2.19-3          support for getting/setting POSIX.
ii  libedit2               2.11-20080614-2   BSD editline and history libraries
ii  libopts25              1:5.10-1.1        automated option processing librar
ii  libssl0.9.8            0.9.8o-4squeeze13 SSL shared libraries
ii  lsb-base               3.2-23.2squeeze1  Linux Standard Base 3.2 init scrip
ii  netbase                4.45              Basic TCP/IP networking system

Versions of packages ntp recommends:
ii  perl                   5.10.1-17squeeze3 Larry Wall's Practical Extraction 

Versions of packages ntp suggests:
pn  ntp-doc                       <none>     (no description available)

-- Configuration Files:
/etc/ntp.conf changed [not included]

-- no debconf information