Press "Enter" to skip to content

Day: October 17, 2008

Bike Clothing and Otherwise

Published October 17, 2008

Pearl Izumi Gavia gloves and Canary Razor Convertable Bike Jacket, 2007 model.

Needing some warmer clothing for biking I stopped by REI today in hopes of finding something to keep me a bit warmer while riding. I ended up picking up a pair of Pearl Izumi Gavia Gloves to (hopefully) keep my hands warmer in colder temps, all the way through winter riding.

I also came across a bright yellow Canari Razor ’07 jacket at REI for $43.93. It is a size medium, but after trying it on I ended up purchasing it. I’m still not sure if it’s too small and should be returned for a large or not. It fits well over another layer and I can comfortably move my arms around, but it feels slightly snug in the shoulders if I wrap my arms around as if hugging myself. Maybe a slightly larger size would be better, just so it’s more free while riding and I can wear more layers beneath it, if needed. That said, I don’t want it too large otherwise it’ll just flap in the wind. I’ll decide tomorrow before leaving on a ride, I guess.

Kohl’s has the jeans I prefer (Levi 569) on sale for $29.99 a pair, and with both of my current pairs having growing holes in the knees I picked up two new pairs. I also grabbed three cheap ($5.40/ea) plain t-shirts to add to my growing collection of comfortable t-shirts without logos. Yes, I still prefer to wear t-shirts and jeans.

1 Comment

restrict default ignore

Published October 17, 2008

In setting up NTP on nuxx.net I ran into a bit of a problem: time wouldn’t sync. My configuration was fairly simple, following the information on support.ntp.org for using the pool of North American servers, blocking external access, but allowing ntpq (et al) to work from localhost:

server 0.north-america.pool.ntp.org
server 1.north-america.pool.ntp.org
server 2.north-america.pool.ntp.org
server 3.north-america.pool.ntp.org

driftfile /var/db/ntp.drift

restrict default ignore
restrict 127.0.0.1

However, it seemed that no matter what I tried (disabling the firewall, adding exceptions for TCP/UDP 123, changing order of the restrict statements, etc) the box wasn’t able to contact its peers:

c0nsumer@banstyle:~> ntpq -pn
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 217.160.254.116 .INIT.          16 u    -   64    0    0.000    0.000 4000.00
 209.132.176.4   .INIT.          16 u    -   64    0    0.000    0.000 4000.00
 209.40.97.141   .INIT.          16 u    -   64    0    0.000    0.000 4000.00
 216.14.98.234   .INIT.          16 u    -   64    0    0.000    0.000 4000.00

After some more digging I found that the restrict default ignore option, which is widely recommended to keep external folks from connecting to your ntpd, prevents synchronization from happening, even with the exception for localhost.

Having realized that, my ntp.conf is now just the basic config for the NA servers and the drift file, and it all works great:

server 0.north-america.pool.ntp.org
server 1.north-america.pool.ntp.org
server 2.north-america.pool.ntp.org
server 3.north-america.pool.ntp.org

driftfile /var/db/ntp.drift

Yep, it’s syncing just fine:

c0nsumer@banstyle:~> ntpq -pn
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*217.160.254.116 18.26.4.105      2 u  200  256   17   37.192    4.619   1.461
 209.132.176.4   66.187.233.4     2 u  201  256   17  101.819   21.118   9.529
 209.40.97.141   192.5.41.40      2 u  197  256   17   38.565  -31.122  21.081
 216.14.98.234   216.218.254.202  2 u  200  256   17   18.731    3.940   4.848

c0nsumer@banstyle:~> ntptrace
localhost: stratum 3, offset 0.004619, root distance 0.043540
server.donkeyfly.com: stratum 2, offset -0.000686, root distance 0.006361
bonehed.lcs.mit.edu: stratum 1, offset 0.000018, root distance 0.000000, refid 'CDMA'

Now I just let pf restrict access to NTP. That works just fine.

Leave a Comment