Unable to syncronize NTP hour on network devices.

[LorneMalvo]

Hi,
I didn't notice, but for a long time ago my devices can't communicate with NTP servers.

I've checked OPNSense NTP service status and is working fine with multiple external NTP servers.

I've tried to config my OPNSense as main NTP Servers on my network device but again, can't communicate with NTP Server.

I've checked 123 traffic on Firewall live log but i can't see nothing. What I'm missing?

My Firewall does have NTP connection outside my net, but my network not. Clearly is firewall rules issue, how to address it with safe aproach in mind?

Thank you very much.

[pfry]

The firewall itself has an automatic outbound rule that (unless masked) allows it to communicate... on any port, actually. For inbound, you need an appropriate inbound pass rule that covers NTP.

To check logs, logging must be enabled for the rules you wish to observe. Logging for the automatic rules is located in "Firewall: Settings: Advanced" -> "Logging".

[LorneMalvo]

These are my autom. LAN rules:



These are my autom. WAN rules:



Is there anything suspicius?

Thanks.

[Patrick M. Hausen]

You need a manual LAN rule:

Source: LAN net
Destination LAN address or This Firewall
UDP/123
Allow

[LorneMalvo]

Hi Patrick.
Thank you very much for your answer.

I've tried the following rule in LAN, but isn't working:



What I'm doing wrong? I've checked live logs and I can see WAN NTP logs working, but nothing about LAN.. Enable Logging on rule is marked.

[Patrick M. Hausen]

I cannot see anything. If you posted a picture please attach to the forum post. I block so called image hosting sites.

[LorneMalvo]

Here you have.

[Patrick M. Hausen]

Change the source port to any/* for client devices. 123 is for ntpd to ntpd communication.