national.m4: Use public NTP servers.

diff --git a/national.m4 b/national.m4
index d58593ad84a51f40814af5451c8c72b3cc0bfcc1..d7d22b1650baec1fc39d8fb73a3d7082bf4cf755 100644 (file)
--- a/national.m4
+++ b/national.m4
@@ -33,6 +33,11 @@ allowservices inbound tcp \
 allowservices inbound udp \
        tripe
 
 allowservices inbound udp \
        tripe
 

+## We use public NTP servers.
+run ip46tables -A inbound -j ACCEPT \
+       -m state --state ESTABLISHED \
+       -p udp --source-port 123 --destination-port 123
+

 ## Other interesting things.
 dnsresolver inbound
 dnsserver inbound
 ## Other interesting things.
 dnsresolver inbound
 dnsserver inbound