2

I have recently started with OPNSense and have limited outgoing traffic to HTTP/s, SSH ports. When analyzing my blocked traffic i found sporadic outgoing NTP-Requests from my local Linux machine.

I am not very familiar with NTP.
I am now wondering a few things.

  1. The source port is always different. Is this normal behavior/ caused by the firewall block?

    192.168.1.101:52936
192.168.1.101:54299
192.168.1.101:45992
...

  2. I actually don't have NTP installed. So i don't quite understand why i even have NTP traffic?

BillGatesPriv
  • 23

1 Answers1

1

Many Linux distros ship with an NTP client enabled by default. Check your system for chrony or systemd-timesyncd. The latter is the default on most systemd-enabled distributions.

Paul Gear
  • 4,686