unix - NTPD:使用不受限制的端口进行通信

Question

当使用命令 查询 ntp 服务器时ntpdate ，我可以用 -u 使源端口成为不受限制的端口(端口 1024 及以上)的参数。

使用旨在在后台运行的 ntpd，我似乎无法找到打开此选项的方法。所以源端口总是 123。它在我的防火墙配置中运行得很糟糕。

中是否有配置选项？ ntp.conf 让它使用随机源端口？

Answer 1

听起来这不可能……参见 ntp troubleshooting page :

If you're going to run ntpd, you need to fix your network/firewall/NAT so that ntpd can have full unrestricted access to UDP port 123 in both directions.

If this is not possible, you may need to run ntpd on the firewall itself, so that it can have full unrestricted access to UDP port 123 in both directions, and then have it serve time to your internal clients.

If that's not possible, your only other option may be to buy the necessary hardware to connect to one or more of your own computers and run your own Stratum 1 time server or buy a pre-packaged Stratum 1 time server.