RE: NTP Rule for DC doesn't work



Hi

Still searching for a solution to this one.

I can get the ISA to sync externally but I know that's not right - the DC
should be the authoritative time source but I can't get it to talk to an
external ntp server.

I need to get this working or my entire project will grind to a halt so any
advice would be much appreciated...

"blueboy1894" wrote:

> Hi
>
> I'm trying to get my win2003 dc to sync with an external time source. All
> the other servers are set to nt5ds (sync using domain hierarchy), as per
> default behaviour.
>
> The access rule in the firewall is as follows:
>
> To: (computer object with ip of external ntp)
> From: (computer object representing the dc)
> Protocol: NTP(UDP)
> All Users
>
> The dc resolves the address of the ntp server but can't connect. I've tried
> this all sorts of different ways including allowing 2-way comms between the
> two hosts.
>
> The isa 2004 logging screen reports outbound traffic on NTP(UDP) to the ntp
> server's ip and then a "Denied Connection" action, but without any rule name.
>
> The network is in a standard back-to-back DMZ with dual-homed ISA in front
> of the servers, and a WatchGuard firebox further out sitting between the
> Internet router and the ISA. The WG allows NTP.
>
> I've tried to solve this for 2 days and got nowhere! Any help much
> appreciated...
.



Relevant Pages

  • Re: Changing a Binary Value in the Registry? (Topic Tilt to NTP)
    ... > Are you running an NTP server on the Windows host (to which the Linux ... > around (the Windows host gets the sync from the NTP server on the Linux ...
    (microsoft.public.windowsxp.general)
  • NTP sync problems
    ... My name is Martin Tengklint and I have an NTP problem that I have ... The problem is that my NTP client E rejected its selected NTP server ... E. I think I have located the lack of sync to a too large "root ... ind assID status conf reach auth condition last_event cnt ...
    (comp.protocols.time.ntp)
  • Re: Time Sync Not Working
    ... I also used the IP address for the NTP server instead of the URL to eliminate and DNS issues and still get the same error message. ... One other interesting thing - I was talking to my brother who lives in another state and ask him to sync his time. ...
    (microsoft.public.windowsxp.general)
  • Confused while configuring Time Sync... NTP vs. SNTP..?
    ... I want to configure SBS2003 to sync with our ISPs NTP server ... and AD will then cause the workstations to sync to itself. ... as it mentions both NTP and SNTP; ...
    (microsoft.public.windows.server.sbs)
  • Re: Time Sync Not Working
    ... I also used the IP address for the NTP server instead of the URL to eliminate and DNS issues and still get the same error message. ... One other interesting thing - I was talking to my brother who lives in another state and ask him to sync his time. ...
    (microsoft.public.windowsxp.general)