chronyd -q fails

Hello,

I have seen a number of cases where chronyd -q fails with "No suitable
source for synchronisation" while the chronyd daemon starts and
synchronizes without issue.  Is there something different about the -q
option that uses a different port or something different that causes
chronyd -q to fail while the chronyd daemon starts and works without issue.

It is not something that happens everywhere I go, so I assume that it has
something to do with firewall rules but I'd like to know what to look for
to make it work.

Thanks,