Ntp.conf file?

I have been notified by my internet-provider that I need to close an open NTP-service which allows my Mac to be used in potential DDOS attacks. They ask me to close down the NTP-service by editing/inserting two lines in the ntp.conf file. How do I locate the ntp.conf file and how do I edit the file?

Thanks for your reply, John.
My ISP is asking me to insert these two lines in the file:
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
And they are referring to this:
https://www.us-cert.gov/ncas/alerts/TA14-013A
http://thehackernews.com/2014/02/NTP-Distributed-Denial-of-Service-DDoS-attack.h tml
They are also asking me close/block port 123 with udp as protocol in my firewall.
Do you have any further comments?
I appreciate your feedback.

Similar Messages

Ntp.conf changes back every restart.

I start ntpd in the daemons section of rc.conf, and if i change the ntp.conf file and do "/etc/rc.d/ntpd restart" everything works well, the config file remains OK, but the next time I reboot (even if it is the next thing i do) the ntp.conf file change back.
I don't know why, but it seems that I am the only one that have that problem, beacouse I did not find anything like that in the forum, so I supose that it may be something that i did wrong.
Sorry about my poor english and thanks in advance.

I have had the problem in the past. I also used the suggestions inhttp://wiki.archlinux.org/index.php/NTP to no avail, so tired of dealing with the problem I created my own solution.
This is what I did and ** it works **
1. Create the ntp.conf file the way you like it.
2. Name it myntp.conf and store it in /etc/myntp.conf
3. Open /etc/rc.local and enter the following:
cp /etc/myntp.conf /etc/ntp.conf
4. Done.
Now when the network replaces your ntp.conf at boot your rc.local will "put it back".
Hope this helps.
R.

What to do with ntp.conf and ntp.conf.pacnew

Hi.
I don't know if simply replace it with the pacnew.
My current ntp.conf
# With the default settings below, ntpd will only synchronize your clock.
# For details, see:
# - the ntp.conf man page
# - http://support.ntp.org/bin/view/Support/GettingStarted
# - https://wiki.archlinux.org/index.php/Network_Time_Protocol_daemon
# Associate to public NTP pool servers; see http://www.pool.ntp.org/
server 0.pool.ntp.org iburst
server 1.pool.ntp.org iburst
server 2.pool.ntp.org iburst
# Only allow read-only access from localhost
restrict default noquery nopeer
restrict 127.0.0.1
restrict ::1
# Location of drift
driftfile /var/lib/ntp/ntp.drift
the ntp.conf.pacnew
# For additional information see:
# - the ntp.conf man page
# - http://support.ntp.org/bin/view/Support/GettingStarted
# - https://wiki.archlinux.org/index.php/Network_Time_Protocol_daemon
# Associate to public NTP pool servers; see http://www.pool.ntp.org/
server 0.arch.pool.ntp.org
server 1.arch.pool.ntp.org
server 2.arch.pool.ntp.org
server 3.arch.pool.ntp.org
# By default, the server allows:
# - all queries from the local host
# - only time queries from remote hosts, protected by rate limiting and kod
restrict default kod limited nomodify nopeer noquery notrap
restrict 127.0.0.1
restrict ::1
# Location of drift file
driftfile /var/lib/ntp/ntp.drift
Thanks.

jasonwryan wrote:It depends which pool servers you'd like to sync to. I set mine to ones in my region.
thanks.
I did not remember what I did. If I replace it with the pacnew, will I get problems?

Do we need to update snpsagent.conf File and Windows Environmental variable in ERPI 11.1.2.2

In ERPI 11.1.1.3 Admin guide its mentioned we need to update the below , do we need to do the same in 11.1.2.2 version also
Updating the snpsagent.conf File
ä To update the snpsagent.conf file:
1 Navigate to the folder where Oracle Data Integrator is installed.
For example, C:\OraHome_1\oracledi\tools\wrapper\conf.
2 Using a text editor, open the snpsagent.conf file.
3 Search for: wrapper.java.library.path.1.
4 On a new line, add the following text:
wrapper.java.library.path.2=../drivers
5 Close and save the file.
Updating the Windows Environment Variable
After you update the snpsagent.conf file, add the ODI drivers path information to the
Windows environment variable.
ä To update the Windows environment variable:
1 On the desktop, right-click My Computer, select Properties. Select the Advanced tab, and then click
Environment Variables.
2 In the System variables section, select the Path variable, and then click Edit.
3 At the end of the Variable value line, add a semi-colon (;), and then add the Oracle Data Integrator
driver path.
For example, C:\OraHome_1\oracledi\drivers.
4 Click OK three times.
5 Restart the Oracle Data Integrator Agent Service.
Thanks

You should not have to do this in ODI 11.1.1.6 for ERPi 11.1.2.2.

OTC ssl.conf file does not have ssl wallet file location details

Hi B2B Gurus,
While doing the HTTPS configuration in OTC we observed that some of lines were missing in ssl.conf file located at <Oracle_Home>\Apache\Apache\conf. The below mentioned lines are missing in OTC’s ssl.conf but present in OracleB2B’s ssl.conf
Even ssl wallet file location is also missing in OTC ssl.conf file as mentioned below.
Can u please let us know as why these lines are missing or should we manually add these lines when we do HTTPS on OTC ?
Listen 4444
<VirtualHost default:4444>
# General setup for the virtual host
DocumentRoot "E:\Oracle_b2b\cachehome\Apache\Apache\htdocs"
ServerName DSCP17506.TechMahindra.com
ServerAdmin [email protected]
ErrorLog "|E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/error_log 43200"
TransferLog "|E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/access_log 43200"
Port 443
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
# Server Wallet:
# The server wallet contains the server's certificate, private key
# and trusted certificates. Set SSLWallet at the wallet directory
# using the syntax: file:<path-to-wallet-directory>
SSLWallet file:E:\Oracle_b2b\cachehome\Apache\Apache\conf\ssl.wlt\default
# Certificate Revocation Lists (CRL):
# Set the CA revocation path where to find CA CRLs for client
# authentication or alternatively one huge file containing all
# of them (file must be PEM encoded)
# Note: Inside SSLCARevocationPath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCARevocationPath conf\ssl.crl
#SSLCARevocationFile conf\ssl.crl\ca-bundle.crl
# Client Authentication (Type):
# Client certificate verification type and depth. Types are
# none, optional and require
#SSLVerifyClient require
# Access Control:
# With SSLRequire you can do per-directory access control based
# on arbitrary complex boolean expressions containing server
# variable checks and other lookup directives. The syntax is a
# mixture between C and Perl. See the mod_ssl documentation
# for more details.
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ \
# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
#</Location>
# SSL Engine Options:
# Set various options for the SSL engine.
# o FakeBasicAuth:
# Translate the client X.509 into a Basic Authorisation. This means that
# the standard Auth/DBMAuth methods can be used for access control. The
# user name is the `one line' version of the client's X.509 certificate.
# Note that no password is obtained from the user. Every entry in the user
# file needs this password: `xxj31ZMTZzkVA'.
# o ExportCertData:
# This exports two additional environment variables: SSL_CLIENT_CERT and
# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
# server (always existing) and the client (only existing when client
# authentication is used). This can be used to import the certificates
# into CGI scripts.
# o StdEnvVars:
# This exports the standard SSL/TLS related `SSL_*' environment variables.
# Per default this exportation is switched off for performance reasons,
# because the extraction step is an expensive operation and is usually
# useless for serving static content. So one usually enables the
# exportation for CGI and SSI requests only.
# o CompatEnvVars:
# This exports obsolete environment variables for backward compatibility
# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
# to provide compatibility to existing CGI scripts.
# o StrictRequire:
# This denies access when "SSLRequireSSL" or "SSLRequire" applied even
# under a "Satisfy any" situation, i.e. when it applies access is denied
# and no other module can change it.
# o OptRenegotiate:
# This enables optimized SSL connection renegotiation handling when SSL
# directives are used in per-directory context.
#SSLOptions FakeBasicAuth ExportCertData CompatEnvVars StrictRequire
<Files ~ "\.(cgi|shtml)$">
SSLOptions +StdEnvVars
</Files>
<Directory "E:\Oracle_b2b\cachehome\Apache\Apache\cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
# Per-Server Logging:
# The home of a custom SSL log file. Use this when you want a
# compact non-error SSL logfile on a virtual host basis.
CustomLog E:\Oracle_b2b\cachehome\Apache\Apache\logs\ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Thanks for your help in Advance.
Regards,
Priyanka

Hi Ramesh,
We added the missing entries in ssl.conf file and tested it out. It is working fine. When we did slient install we are facing this error, we found that this is a bug in 10.1.2.3 AS patch (5983622) silent install. Raised an SR on this and Support is working to get this fixed.
Regards,
Priyanka

Issue in iPlanet loading obj.conf file in admin console module

Dear all,
I have done following chanegs in obj.conf file to block insecure http methods,but whenever I try to access admin module of iPlanet and restart, all manual changes done in obj.conf disappears.
Only one time it asked me with message that file has been modified manually do you want to load?
but this is not happening every time.I am using iplanet 9.
Please let me know if there is any issue with this or I am missing something.
to just brief, only after trying 20 times it asked me above mentioned message
---obj.conf file contents----
<Object name="WebCon1" ppath="*/WebCon/*">
*<Client method="(GET|POST)">*
AuthTrans fn="match-browser" browser="MSIE*" ssl-unclean-shutdown="true"*
*</Client>*
*<Client method="(HEAD|PUT|TRACE|TRACK|SEARCH|INDEX|OPTIONS|DELETE|MKDIR|SHOWMETHOD|UNLINK|CHECKIN|TEXTSEARCH|SPACEJUMP|CONNECT|PATCH|PROPFIND|PROPPATCH|MKCOL|COPY|MOVE|LOCK|UNLOCK|CHECKOUT|RMDIR|ACL|VERSION-CONTROL|REPORT|UNCHECKOUT|ORDERPATCH)">*
*AuthTrans fn="set-variable" remove-headers="transfer-encoding" set-headers="content-length: -1" error="405"*
*</Client>*
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/cedera/iPlanetServer/Installation/ns-icons" name="es-internal"
PathCheck fn="unix-uri-clean"
PathCheck fn="find-pathinfo"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|POST)" type="image/gif" fn="send-file"
Service method="(GET|POST)" type="image/jpeg" fn="send-file"
Service method="(GET|POST)" type="text/css" fn="send-file"
Service method="(GET|POST)" type="application/x-javascript" fn="send-file"
Service method="(GET|POST)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|POST)" type="magnus-internal/directory" fn="send-error" path="/WebCon/WebCon/restrict.htm"
Service method="(GET|POST)" fn="wl_proxy" WebLogicHost="10.10.61.224" WebLogicPort="444" HungServerRecoverSecs="600" Debug="ALL" DebugConfigInfo="TRUE" RequireSSLHostMatch="FALSE" WLLogFile="/home/cedera/iPlanetServer/Installation/https-webcon2/logs/Log_JSP.txt" PathTrim="/WebCon" PathPrepend="/WebConverter" SecureProxy="ON" URIContainsSpace="true" ErrorPage="/home/cedera/iPlanetServer/Installation/docs/WebCon/WebCon/serviceUnavailable.htm" MaxPostSize="-1" DefaultFileName="WebCon/login.jsp" ConnectTimeoutSecs="10" ConnectRetrySecs="2" WLDNSRefreshInterval="0" TrustedCAFile="/home/cedera/iPlanetServer/Installation/https-webcon2/config/trustedcafile.pem"
AddLog fn="flex-log" name="access"
</Object>
I have added contents marked in bold manually....
but it was not picking up it from frontend...then suddenly after 20 time, it picked up these changes in admin...
but now if I am trying to change in <client> tag , but it does not recognise any new changes done manually...it loads same obj.conf...whenever i restart instance from frontend...
Edited by: sweetvish on Nov 9, 2009 9:26 PM

After making manual changes in obj.conf, have you tried clicking the 'Apply' link in admin console and then choosing 'Load configuration Changes' option?

[Solved] Can't boot up due to error in a conf file

After trying to install kpd it seems that the /etc/kpd.conf file contains an error. After restarting the computer I see an error when it is booting up. Then on the login screen when I type my username for every key pressed 3 chars are show ie username => foo output => fffoooooo.
Coming from a ubuntu I figured I would just restart in simple/safe mode, but there doesn't seem to be one, or at least I don't have one on the boot screen.
I am lost to how ti fix the config file. Anyone have some advice?
Thanks for the help.
Last edited by iso (2009-02-08 16:53:25)

iso wrote:
After trying to install kpd it seems that the /etc/kpd.conf file contains an error. After restarting the computer I see an error when it is booting up. Then on the login screen when I type my username for every key pressed 3 chars are show ie username => foo output => fffoooooo.
Coming from a ubuntu I figured I would just restart in simple/safe mode, but there doesn't seem to be one, or at least I don't have one on the boot screen.
I am lost to how ti fix the config file. Anyone have some advice?
Thanks for the help.
If you still have the ubuntu live cd lying around, you could probably try that out.

Not able to find mod_oc4j.conf file for setting Load Balancing on ESB

Hi Guys,
I am trying to set load balancing on ESB ,I got one document from oracle site for setting the load balancing on ESB. According to that document we have to change mod_oc4j.conf file for setting the roundrobin:weighted,metric,random algorithms.
But I am not able to find mod_oc4j.conf file in my ORACLE_HOME directory.
Actual path is
ORACLE_HOME/Apache/Apache/conf/mod_oc4j.conf file
I have All folders up to conf but in conf folder there is no mod_oc4j.conf file.
I just want to know is there any installation problem or we have to create
mod_oc4j.conf file in that conf folder for seting the loadbalancing on ESB
kindly give me the exact solution on this .
Thanks in advance

Hi Chintan,
I have apache folder ,but there i have cong folder but in that I am not able to find mod_oc4j ,I know ESB it maintain load in transparent way but in my project we have heavy load on ESB we have to maintain this load in a proper way
Please give me the exact solution to set load balancing On ESB.
Thank you
Bollineni

Rewriterule in httpd.conf file of oracle application server 10g r1

Hi Team
we had hack in our report server which is load balanced oracle report server and to fix this we found a patch . that was to rewrite the url for report server . but problem is we have virtualhost configure in our httpd.conf file because of that rewriterule is not working is anybody good with httpd.conf file and help us with this.
contact of httpd.conf file
<VirtualHost *:79999>
    ServerName xx.com
    Port 80
    DocumentRoot "/OraHome_1/Apache/Apache/htdocs"
</VirtualHost>
new entry we have put in
RewriteLog /OraHome_1/Apache/Apache/logs/rewrite_din.log
RewriteLogLevel 9
RewriteEngine On
RewriteCond %{QUERY_STRING} (.*)destype=file(.*) [NC]
RewriteCond %{QUERY_STRING} (.*)desname=(.*) [NC]
RewriteCond %{QUERY_STRING} !(.*)desname=/rep_des/[A-Za-z0-9](.*) [NC]
RewriteRule (.*)reports(.*)$ /forbidden.htm [R] [NC]
but still these entries are not working . it still going to old web page not to forbidden.htm
can you please help us .

Hi,
Make sure the value of the NLS_LANG environment variable is compatible with the default locale setting of the operating system.
Check the below links :
http://docs.oracle.com/cd/B14099_19/core.1012/b14004/iasconfig.htm#BHCJHBBB
Postinstallation Tasks
Thanks,
Sharmela

Where is the ojsp.conf file located

The tutorial is kind of misleading. The jsp file is ready and the tutorial tell me to do the following steps
Before you can run the application you need to make sure that your HTTP server is configured appropriately. Perform the following steps:
1. Edit the ojsp.conf in notepad. This file is typically found in the <ORACLE_HOME>\Apache\jsp\conf directory. Add the following alias:
BUT I DO NOT FIND ANY ojsp.conf file at all. I searched for it too. How to go forward on this.
Secondly my apache server is up and running when I hit http://hostname:7777
now under which directory should i place the folder containing the jps on the server to run the application
Thanks in advance

Hi Mthompson,
Look at this on how to create the log file.
http://winrichman.blogspot.com/search/label/xdodebug
am sure, you did not create the email/smtp configuration, thats why you see this error.

Changing to 64 bit soon anyone know the important conf files to bakup?

hello (:
been running arch for nearly half a year now
just got my ram upgrades..
Was thinking of changing to arch 64 bit
Any one know what conf file to backup? ..can help me on this please ?(:
xorg.conf
pacman.conf
any more to back up ..?
um..oh ya .. is it possible to migrate a system architecture ? like changing 32 bit to 64 bit?

maybe /usr/share/{icons,themes} too
also, if you're running a desktop machine, you may consider installing a 64bit kernel on your 32bit arch [ http://bbs.archlinux.org/viewtopic.php?id=66660 ] so you can use skype, google gears, google earth, wine, firefox with enabled tracemonkey without tricks. no point for 64bit on the desktop ATM IMHO.

Apache conf file not working

I've seen instructions all over the internet about rewriting a .conf file to get Apache to see your user "Sites" folder in Mountain Lion. Mine refuses to work. The server still works at localhost, but localhost/~user will not, I get "Safari cannot connect to server localhost."
I'm really the only user that uses it, is there any problem with just changing to document root in the httpd.conf file to /Users/user/Sites?
Or, any ideas about the user.conf file? Permissions are correct, file is correct, apache restarted.

Interesting. I ran apachectl configtest, and it found a syntax error in my user.conf file, which I thought I deleted. All this time I've been working in /etc/apache2/users, as the online tutorials specify. The other .conf file, brought to my attention by the configtest, is in /private/etc/apache2/users.
The error: a space between allow,deny.
Fixed the error... all is well. Thanks for the configtest tip... I never knew about that one.

Xorg.conf file after install? Where?

I know this is probably the worst question to ask but I couldn't find anything in the search for it. I just installed Arch (using a .7 CD) with an FTP install and naturally it chose the xorg7 version. His XServer starts alright but I noticed we both can't seem to find the xorg.conf file... usually it's in the /etc/X11/ folder (I think that's where it is on mine at home.)
The mouse, screen and almost everything works but for the life of me I can't find this configuration file. Does it use defaults if one doesn't exist or perhaps it's somewhere I'm not looking? Any advice would be appreciated as it isn't using the nvidia glx drivers but the basic nv.
Thanks in advance.
(Forgot to mention I'm used to using the X.org 6 version on my home PC and just trying to figure this out before I upgrade to 7.)

mac57 wrote:Alternately, you can just copy an old xorg.conf from another distro you have been using, place it in /etc/X11/xorg.conf and edit appropriately. This is what I did, and it worked like a champ.
You'll want to be carefull about that with xorg7. The path locations will change then. It may be better to generate a new one and copy in the difference in options.

Xorg.conf file idea..

i had an idea: would it be possible to make a large database of xorg.conf files for certain laptops? i found a list of "howto linux" on different models of lappys...
for example, i have a sony vaio pcg-tr3a, and i'm struggling to get my xorg file to work right, so i would head on over to the data base and search for my computer model...
would this work?
sv

<soapbox>
ok. so i guess this idea would not work.. now i am seeing but how bout if laptop users just wrote a wiki entry for there laptop? like... hardware specific stuff...
for example: i figured out that i have an intel wireless card and i needed a closed source intel2200-fw or something to get it to work. i went to the wireless networking wiki, but how bout it if i could have found a wiki on my model lappy (fat chance maybe...?)
that said : "ok, for this lappy you need 915resolution hack, intel firmware driver for your wirless, and i810driver for your graphics, also you may want to add this to your xorg.conf to get trackpad scrolling to work" and then also "and btw, to get Fn keys working go here"
so it would be small tutorials helpful to few people with same laptops and it would be extremly confinient... and for someone just getting into linux... a quick guide to get everything set up right step by step would be helpful.. granted, arch does not hold your hand... and i think it shouild be that way... we learn a lot trying different things and reading wikis over and over again...
</soapbox>
ok, thats all
sv

Error in the isqlplus.conf file?

Is there anyone else out there that gets this message? Each time I try to run my HTTP server to access iSQL*Plus, I get:
"Syntax error on line 92 of c:/oracle/ora92/sqlplus/admin/isqlplus.conf: FastCgiServer: redefinition of a previously defined FastCGI server "c:/oracle/ora92/bin/isqlplus"
Does anyone know how I can adjust this config file, or otherwise fix this problem?
Other than that, the Enterprise edition is up and running, including the SQL Plus app.
Any advice is greatly appreciated.
Thanks!
Eric

Hi Alison,
Thanks for the response! Unfortunately, I tried both of these, and neither seems to apply:
http://otn.oracle.com/support/tech/sql_plus/htdocs/runtime.html#isql_duplicate_entriesAt first, I thought this would be the problem, since I installed twice, but there was only one oracle_apache.conf file in the directory...
http://otn.oracle.com/support/tech/sql_plus/htdocs/runtime.html#isql_mutex_errorThis one actually talks about a different config file. I'm getting errors on my isqlplus.conf file. It's saying that there's an error b/c of "FastCGIServer: Redefinition of a previously defined Fast CGI Server" Here's what the config file looks like on that (in relevant part):
# Maps all virtual paths beginning with "/isqlplus*" to the iSQL*Plus
# FastCGI application
<IfModule mod_alias.c>
ScriptAliasMatch ^/isqlplus(.*) C:\oracle\ora92\bin\isqlplus
ScriptAliasMatch ^/isqlplusdba(.*) C:\oracle\ora92\bin\isqlplus
<Directory "C:\oracle\ora92\bin">
AllowOverride None
Options FollowSymLinks
Order deny,allow
Allow from all
</Directory>
</IfModule>
The other reference to the FastCGI server is here: <<#
# Setup the iSQL*Plus FastCGI application.
<IfModule mod_fastcgi.c>
FastCgiServer C:\oracle\ora92\bin\isqlplus -port 8228 -initial-env iSQLPlusNumberOfThreads=20 -initial-env iSQLPlusTimeOutInterval=30 -initial-env iSQLPlusLogLevel=off -initial-env iSQLPlusAllowUserEntMap=none -idle-timeout 3600
</IfModule>
Not sure about where else this FastCGI Server might be called, but it looks like one of the definitions is typographically different from the other. Could this be the issue?
Eric

Ntp.conf file?

Similar Messages

Maybe you are looking for