On Monday, 18 December 2023 07:33:54 ACDT James Knott wrote:

> I run my own NTP server, which can be reached with both IPv4 and IPv6. 

> However, when I check with Wireshark, I see NTP requests going not only

> to my server, but also to an IPv4 address on the Internet.  This happens

> with both my desktop system and ThinkPad, but they have different

> external addresses, in addition to my server.  I use the host name for

> the server address in NTP Configuration.

>

> Any idea where that other address comes from?

Are you running chrony or ntpd?

Check /etc/ntp.conf or /etc/chrony/chrony.conf. Also check in /etc/chrony/chrony.conf.d because files in there are automatically included in chronyd's list of sources by default.

If you're running systemd-timesyncd, then you'll have to check its default config files, and I've really no idea where they live. I disable/uninstall that and install chrony on all the machines I manage at work or at home.

Hope this helps.

--

==========================================================================================================

Rodney Baker

rodney.baker@outlook.com.au

==========================================================================================================