Chrony plug-in ports

[eponymous]

Having been reading up on Chrony I find it a bit confusing that the default port for the plugin I.e the “port” directive for the chrony.conf is UDP/323. This is supposed to be UDP/123 by default as it’s the port for NTP requests. I understand it has been set like this to prevent a conflict with NTPd if run together.

According to the Chrony documentation, UDP/323 is used for the monitoring/command port which is a completely separate thing. (See section: “Command and monitoring access” -> cmdport)

I think it’s going to cause confusion in the long run and looking at some posts on this forum and elsewhere it already has…

For me personally I’m trying to allow NTP requests only across the network and am trying to see if the command port is locked down by default.