# /etc/ntpd.conf - fw.internal
servers pool.ntp.org
server time.cloudflare.com
sensor *

# Sanity check against HTTPS servers, so a forged NTP answer can't shift the clock
constraint from "9.9.9.9"
constraints from "www.google.com"

# Serve time to the internal networks
listen on 192.168.1.1
listen on 192.168.2.1
listen on 192.168.3.1
listen on 192.168.4.1
listen on 192.168.5.1
listen on 192.168.10.1
listen on 192.168.20.1
listen on 192.168.30.1