Paul Howarth said: > > restrict 192.168.2.0 mask 255.255.255.0 nomodify notrap In my case, 192.168.1.0, but it is working fine, thank you. > Clients on that network will then be able to sync to your ntp server, > provided your firewall has port 123 (ntp) open. Did that part first ... :-) Jonathan