ntp issues

Hello Everyone,

Here's my issue:

Inside the Green interface NTP time requests to 0.us.pool.ntp.org are 
taking a long time, then timing out, on the Orange interface they update 
instantly and works.

Here's the details:

Last week I put a new Battery in a UPS that ipcop was connected to, so I 
shut everything down, then replaced the battery and everything came back 
online, except our time clock that uses fingerprint ID scanning for 
employee punches was off by 28 minutes (slow) from the current time.  
The punch clock is set to sync to 0.us.pool.ntp.org for Time updates 
upon each reboot.

It should have been syncing the whole time, but apparently it either 
stopped syncing or it appeared as if it was working, but never was.  
This is a unit provided by a third party vendor that I have limited 
configuration abilities on.  I can set the IP address to be static or 
DHCP, and I can set the IP, gateway, dns, and ntp server settings

When I try to manually update the Internet time from inside the LAN on 
the green interface from a Windows 7 Pro PC, from Date and Time > 
Internet Time Tab, I use the same server, I click update now, wait about 
10 seconds then I get:

"An error occurred while windows was synchronizing with 
0.us.pool.ntp.org.  This operation returned because the timeout period 
expired.  The clock wsa most recently syncronized at <current date> at 
<current time>"

I set up a duplicate ipcop firewall and put it on the main firwall's 
Orange (DMZ) interface, and with the windows 7 Pro PC, I repeat the 
steps to sync the time and within 1-2 seconds it comes back syncing the 
time.

When I plug the time clock into the green interface on the duplicate 
firewall it also instantly gets the right time.

On the green interface I can successfully ping and resolve IP addresses 
to 0.us.pool.ntp.org,

On the firewall I have tried opening up external access to NTP, I've 
tried port forwarding to different hosts, I've tried disabling the proxy 
and update accelerator, I've tried having the time server turned on, 
turned on and redirecting, turned off, I've set DHCP to use the Internal 
NTP server, external NTP servers, but nothing seems to help get NTP 
traffic into the green interface.

When I use tcpdump on the lan-1 interface of ipcop I do see some traffic 
appearing to flow through and get NTP updates:

10:04:06.774746 IP 10.5.1.200.1024 > 69.195.159.158.ntp: NTPv4, Client, 
length 48
10:04:06.799935 IP 69.195.159.158.ntp > 10.5.1.200.1024: NTPv4, Server, 
length 48

Hosts inside the lan that appear to be getting updates are HP switches, 
iphones, linux servers, and printers, no windows hosts and the time 
clock are not working.

The non-working ipcop for NTP is running 2.1.9

The OLD PC I set up to try this out on is running 2.1.6 (it's stuck not 
able to update past that right now for some reason)

The windows PC's and the time clock are trying to use 0.us.pool.ntp.org 
and failing

The Switches that are working are using static entries of 69.195.159.158:

10:04:06.774746 IP 10.5.1.200.1024 > 69.195.159.158.ntp: NTPv4, Client, 
length 48
10:04:06.799935 IP 69.195.159.158.ntp > 10.5.1.200.1024: NTPv4, Server, 
length 48

Other hosts on the network that are working are using a variety of DNS 
based time servers such as:

srcf-ntp.stanford.edu

ec2-13-55-50-68.ap-souteast-2.compute.amazonaws.com

I also have a Brother MFC Printer trying to use the ipcop as a tiem 
server using NTPv3 and failing:

10:14:01.234493 IP BR-MFC-8480DN.inside.five-star-plastics.com.33016 > 
ipcop.inside.five-star-plastics.com.ntp: NTPv3, Client, length 48
10:14:31.240297 IP BR-MFC-8480DN.inside.five-star-plastics.com.33016 > 
ipcop.inside.five-star-plastics.com.ntp: NTPv3, Client, length 48

It might be a bad DNS entry issue but I'm not sure, and I'm not sure 
where to clear it out or where to look?  Any suggestions on the cause or 
what to do to resolve this?


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user