I have been practicing on some network security and web apps deployment locally using DietPi.
This system will not be making any outbound connection at all, so I did:
ufw default deny outgoing
And things seem to work as expected, but then I realized one thing. Raspberry Pi needs NTP to sync its time. After a few days, I just realized that DietPiβs time was off by many hours. (Sometimes it got shut down and turn on sometimes later)
Because of this, I need to allow it to be able to connect to the NTP server so that it could get correct time.
So my question is which NTP servers does DietPi use? This is so I will allow it via ufw.
why not using dietpi-config and set custom NTP server or select an option available??
ββββββββββββββββββββββββββββββββββββββββββββββββββββ€ DietPi-Config βββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Please select an NTP mirror: β
β β
β "Gateway": Try to detect and use local router for time sync. Recommended, allows fastest sync and reduces load to β
β the *.pool.ntp.org servers. β
β β
β "Custom": Manually enter local or external NTP server address(es). β
β β
β "Default": Leave mirror choice to system. Usually falls back to local gateway (Stretch+ only) or β
β "debian.pool.ntp.org". β
β β
β Use "*.pool.ntp.org" mirrors, if your device is mobile or should act as local NTP server. Further information: β
β "http://www.pool.ntp.org/zone/@" β
β β
β Gateway : Use local router as NTP server (Recommended) β
β Custom : Manually enter NTP mirror β
β Default : Fallback to system defaults β
β ββ Continental NTP pools --------------------β β
β europe.pool.ntp.org : Europe β
β north-america.pool.ntp.org : North America β
β south-america.pool.ntp.org : South America β
β africa.pool.ntp.org : Africa β
β asia.pool.ntp.org : Asia β
β oceania.pool.ntp.org : Oceania β
β ββ Global NTP pools -------------------------β β
β debian.pool.ntp.org : Debian Global β
β pool.ntp.org : Global β
β β
β β
β <Select> <Cancel> β
β β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ