# Could someone help me to identify ipaddress for \*.pool.ntp.org

**URL:** <https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597>\
**Category:** GeoDNS Server\
**Created:** [February 19, 2020, 5:15pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597 "2020-02-19T17:15:22Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Madan](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@Madan](https://community.ntppool.org/u/Madan)\
**Post date:** [February 19, 2020, 5:15pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/1 "2020-02-19T17:15:22Z")

</div>

Hello All - I am raising a firewall request with my network team for \*.pool.ntp.org domain. They came back asking for ip details. Though I mentioned as dynamic ip, the team is requesting to provide a range. Could you please help me with the process to identify ip address for these servers.

Thanks in advance.

Best  
Madan

---

<div class="post-metadata">

**Author:** ![mlichvar](https://avatars.discourse-cdn.com/v4/letter/m/e79b87/32.png) [@mlichvar](https://community.ntppool.org/u/mlichvar)\
**Post date:** [February 19, 2020, 5:25pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/2 "2020-02-19T17:25:09Z")

</div>

The NTP servers from the pool are in `0.0.0.0/0`. I suspect your network team will not be happy with that.

---

<div class="post-metadata">

**Author:** ![elljay](https://avatars.discourse-cdn.com/v4/letter/e/5fc32e/32.png) [@elljay](https://community.ntppool.org/u/elljay)\
**Post date:** [February 19, 2020, 5:50pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/3 "2020-02-19T17:50:32Z")

</div>

Beat me to it, @mlichvar 😄

Hi @Madan, the pool uses volunteer servers from all round the world, so, while I’m sure @Ask could generate a snapshot of the IP addresses in the pool, the question isn’t really a valid one as the IPs could be (in theory) from anywhere in the world and they change as people volunteer new servers / servers go offline etc.

I’d suggest either port 123 needs to be opened or you look for a different solution.

These pages may help you decide whether the pool is for you: [https://www.ntppool.org/en/use.html](https://www.ntppool.org/en/use.html) [https://www.ntppool.org/tos.html](https://www.ntppool.org/tos.html)

---

<div class="post-metadata">

**Author:** ![Madan](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@Madan](https://community.ntppool.org/u/Madan)\
**Post date:** [February 19, 2020, 6:56pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/4 "2020-02-19T18:56:37Z")

</div>

Thanks @mlichvar, @elljay - I already shared the UDP port details to the team. They are just asking me to provide a range of ip address to open the port for NTP. is there a way we can get this by pinging the domain in cmd prompt. Please help me here.

---

<div class="post-metadata">

**Author:** ![elljay](https://avatars.discourse-cdn.com/v4/letter/e/5fc32e/32.png) [@elljay](https://community.ntppool.org/u/elljay)\
**Post date:** [February 19, 2020, 7:10pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/5 "2020-02-19T19:10:50Z")

</div>

> [@Madan](#):
>
> is there a way we can get this by pinging the domain in cmd prompt

Hi, no - it is not possible. The list of IP addresses changes all the time. You must either open port 123 to all IP addresses or not use the NTP pool.

---

<div class="post-metadata">

**Author:** ![apuls](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/apuls/32/1467_2.png) [@apuls](https://community.ntppool.org/u/apuls)\
**Post date:** [February 19, 2020, 8:00pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/6 "2020-02-19T20:00:34Z")

</div>

I think you can do one of the following:

- Use some of the [Straum 2 Serves](http://support.ntp.org/bin/view/Servers/StratumTwoTimeServers)
- Buy / Build one (or even more) NTP server to provide NTP to your local net
- Rent some VPS / Hardware Server with static IP and use only those

---

<div class="post-metadata">

**Author:** ![mnordhoff](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/mnordhoff/32/1470_2.png) [@mnordhoff](https://community.ntppool.org/u/mnordhoff)\
**Post date:** [February 19, 2020, 9:00pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/7 "2020-02-19T21:00:44Z")

</div>

> [@mlichvar](#):
>
> The NTP servers from the pool are in `0.0.0.0/0` .

And also `::/0`!

> [@apuls](#):
>
> - Use some of the [Straum 2 Serves](http://support.ntp.org/bin/view/Servers/StratumTwoTimeServers)

Servers on the stratum two list generally use static IPs and are in it for the long haul, but they will still occasionally be renumbered or shut down without warning.

---

<div class="post-metadata">

**Author:** ![littlejason99](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/littlejason99/32/242_2.png) [@littlejason99](https://community.ntppool.org/u/littlejason99)\
**Post date:** [February 19, 2020, 11:24pm UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/8 "2020-02-19T23:24:28Z")

</div>

If you need fixed IPs, then you might want to look into:

[https://publicntp.org/](https://publicntp.org/)  
or  
[https://www.cloudflare.com/time/](https://www.cloudflare.com/time/)  
or if you are in the USA:  
[https://tf.nist.gov/tf-cgi/servers.cgi](https://tf.nist.gov/tf-cgi/servers.cgi)

Also [time.apple.com](http://time.apple.com) servers seem static.

---

<div class="post-metadata">

**Author:** ![decibel](https://avatars.discourse-cdn.com/v4/letter/d/41988e/32.png) [@decibel](https://community.ntppool.org/u/decibel)\
**Post date:** [February 20, 2020, 3:22am UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/9 "2020-02-20T03:22:24Z")

</div>

What you need is more competent people on your network team.

---

<div class="post-metadata">

**Author:** ![lammert](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/lammert/32/82_2.png) [@lammert](https://community.ntppool.org/u/lammert)\
**Post date:** [February 21, 2020, 11:02am UTC](https://community.ntppool.org/t/could-someone-help-me-to-identify-ipaddress-for-pool-ntp-org/1597/10 "2020-02-21T11:02:24Z")

</div>

Hi Madan,

It seems that the network team is taking the wrong approach. By poking holes in the firewall, it looks that their goal is to allow all clients on the internal company network to connect with NTP servers on the Internet. This may cause surges of NTP requests from one or a handful of public IP addresses to pool members. Many pool members have restrictions built-in in the configuration about the number of packets that they allow from single IP addresses in a given time frame. The end result may be that your public company IP addresses are effectively blocked from a number of time sources.

It is far better if the network team would configure their router, or an edge server directly connected to the internet, to become an NTP time server. This time server can synchronize with the NTP pool or with a handful of fixed reliable time sources on the Internet. The clients on the internal computer network can in-turn connect with this company time server.

With this configuration, your network team does not need to poke holes in the firewall configuration for a number of IP addresses on the Internet. Therefore it is a safer solution. And we as pool members will less likely block your company’s time request packets due to packet rate violations.
