RE: IBMi NTP Interface

I think he was talking about the server on the IBM i. For example
NETSTAT *IFC shows:
10.10.1.5
10.10.1.6
10.10.1.7
On your local lpar. You may have multiples for different websites, Domino servers, H/A routing, etc
Now when he does a STRTCPSVR SERVER(*NTP) he wants to see it bind to 10.10.1.6 for some reason or another. So now when he does a NETSTAT *CNN he will see
Remote Remote Local
Address Port Port
* * ntp
And doing a 5 on it will show
Local host name . . . . . . . . . . . :
Local internet address . . . . . . : *
He'd rather this show 10.10.1.6 instead of *

There may be good reasons to bind to a specific address. Perhaps IBM uses an open source package for NTP, like they do for DNS. And they rarely update the "level" but just patch the known CVE's. This isn't good enough to pass audits. So if he can get it to bind to an IP address which is outside the realm of the network scanner then he's good.

I looked at
https://wiki.midrange.com/index.php/Change_IP_Address
for some other "bind specific" stuff but did not see NTP.


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Charles Wilt
Sent: Wednesday, March 6, 2019 7:17 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: IBMi NTP Interface

You can add a route to the NTP server's IP that's tied to an interface...

Charles

On Wed, Mar 6, 2019 at 5:03 PM Don Brown <DBrown@xxxxxxxxxx> wrote:

Quick question - can NTP Client be bound to a specific interface
rather then just using the first in the list ?

We have configured the NTP Client and we need it to use a specific
Interface/Address and I can't find anywhere to be able to configure
this ... yet.

Thanks

Don Brown


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com