# Owner of a server

**URL:** <https://community.ntppool.org/t/owner-of-a-server/2493>\
**Category:** Server operators\
**Created:** [July 28, 2022, 7:11am UTC](https://community.ntppool.org/t/owner-of-a-server/2493 "2022-07-28T07:11:20Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 7:11am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/1 "2022-07-28T07:11:20Z")

</div>

Hello,

I am the network administrator of Royal Observatory of Belgium. We have 2 stratum1 and 2 stratum 2 servers. They are registered as ‘no pool’ in [ntp.org](http://ntp.org).  
BUT, they seems to be added on ntppool by somebody and 1 is used by “[pool.ntp.org](http://pool.ntp.org)”. And this is a big problem for us because our network is not designed for such number of requests (the problem is the firewall)  
Question : How to remove this servers form the pools ? (I don’t know who added these servers and I am not the owner on ntppoll ). I can obviously prove that I am the one responsible  
And prevent anyone from doing so in the future.

Thank you for your answers  
Regards,  
Henri

---

<div class="post-metadata">

**Author:** ![NTPman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/ntpman/32/450_2.png) [@NTPman](https://community.ntppool.org/u/NTPman)\
**Post date:** [July 28, 2022, 8:07am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/2 "2022-07-28T08:07:02Z")

</div>

Dear @henri.martin welcome to the community!

Unfortunately, there is no verification process in place to add a server into the pool. So anybody can add any IP address (including yours) to the pool. (The pool will just automatically trim off those IP addresses that do not have running NTP service.)  
Multiple possible verification options were discussed extensively at: [https://community.ntppool.org/t/verification-step-to-add-a-server/](https://community.ntppool.org/t/verification-step-to-add-a-server/)

---

<div class="post-metadata">

**Author:** ![elljay](https://avatars.discourse-cdn.com/v4/letter/e/5fc32e/32.png) [@elljay](https://community.ntppool.org/u/elljay)\
**Post date:** [July 28, 2022, 8:11am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/3 "2022-07-28T08:11:45Z")

</div>

Hi Henri, the “official” answer is to log a call via the form on [pool.ntp.org: the internet cluster of ntp servers](https://manage.ntppool.org/manage)

…but if you message me (I’m a volunteer admin on the pool) the IP addresses on here I can move them to a “locked” list that means they cannot be added back into the pool in future without admin intervention.

(One of the jobs on @ask’s To Do list is to add some process for authentication of new servers before they are added to the pool)

---

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 8:19am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/4 "2022-07-28T08:19:59Z")

</div>

Hello,  
I have send 2 messages to @ask … I have also try to manage this servers, but it is impossible to find who added the servers …  
The IP to lock are:  
193.190.230.37 (ntp2.oma.be)  
193.190.230.65 (ntp1.oma.be)  
193.190.230.66 (ntp3.oma.be)

Many Thanks

Henri

---

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 8:25am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/5 "2022-07-28T08:25:18Z")

</div>

Thank you for the answer.  
A lot of ‘solutions’ are difficult to implement on hardware ntp servers like our stratum 1 server.  
I can allow/ block IP on the firewall, but it is not a good solution to limit request …

Henri

---

<div class="post-metadata">

**Author:** ![NTPman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/ntpman/32/450_2.png) [@NTPman](https://community.ntppool.org/u/NTPman)\
**Post date:** [July 28, 2022, 8:36am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/6 "2022-07-28T08:36:42Z")

</div>

> [@henri.martin](#):
>
> I can allow/ block IP on the firewall, but it is not a good solution to limit request …

That is right, it is not a good solution to limit requests. However, blocking predefined IP addresses on the firewall to query the hardware NTP server may enable verification to deny adding a server to the pool.

---

<div class="post-metadata">

**Author:** ![elljay](https://avatars.discourse-cdn.com/v4/letter/e/5fc32e/32.png) [@elljay](https://community.ntppool.org/u/elljay)\
**Post date:** [July 28, 2022, 8:47am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/7 "2022-07-28T08:47:09Z")

</div>

Hi, I’ve set the netspeed for 193.190.230.37 to zero as a temporary measure. The other two were already in the inactive pool. The person who added 193.190.230.37 has added a number of other servers that don’t look to be their’s so I’ve flagged to @ask.

---

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 9:08am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/8 "2022-07-28T09:08:00Z")

</div>

The result is spectacular on the number of ntp requests and on the firewall load !  
 ![mrtg](https://us1.discourse-cdn.com/flex016/uploads/ntppool/original/1X/b90445dfe7e5992693cdf14fa6a1e2b9dd0329c7.png)

Many Thanks  
Henri

---

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 9:10am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/9 "2022-07-28T09:10:06Z")

</div>

I had not thought of this solution. If you know the IP address of the verification servers…  
Henri

---

<div class="post-metadata">

**Author:** ![NTPman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/ntpman/32/450_2.png) [@NTPman](https://community.ntppool.org/u/NTPman)\
**Post date:** [July 28, 2022, 9:13am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/10 "2022-07-28T09:13:38Z")

</div>

Yes, blocking the monitoring IP address effectively drops the score under 10 in less than an hour and that leads to drastic decrease of the NTP traffic too.

---

<div class="post-metadata">

**Author:** ![henri.martin](https://avatars.discourse-cdn.com/v4/letter/h/e36b37/32.png) [@henri.martin](https://community.ntppool.org/u/henri.martin)\
**Post date:** [July 28, 2022, 9:20am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/11 "2022-07-28T09:20:34Z")

</div>

> [@NTPman](#):
>
> blocking the monitoring IP address effectively

Is there a list of monitoring IP addresses?

---

<div class="post-metadata">

**Author:** ![elljay](https://avatars.discourse-cdn.com/v4/letter/e/5fc32e/32.png) [@elljay](https://community.ntppool.org/u/elljay)\
**Post date:** [July 28, 2022, 11:08am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/12 "2022-07-28T11:08:01Z")

</div>

There [was](https://dev.ntppool.org/monitoring/network-debugging/)… but I think it’s out of date. If you run the traceroute command it originates from 139.178.70.121, so it might be that… 🤷‍♂️

---

<div class="post-metadata">

**Author:** ![stevesommars](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/stevesommars/32/2075_2.png) [@stevesommars](https://community.ntppool.org/u/stevesommars)\
**Post date:** [July 28, 2022, 6:51pm UTC](https://community.ntppool.org/t/owner-of-a-server/2493/13 "2022-07-28T18:51:44Z")

</div>

NTP Pool monitoring server is currently [monsjc1.ntppool.net](http://monsjc1.ntppool.net) (139.178.70.122).

When the new monitoring system is enabled there may be dozens of monitoring IP clients.

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/system/32/1_2.png) [@system](https://community.ntppool.org/u/system)\
**Post date:** [September 1, 2022, 6:23am UTC](https://community.ntppool.org/t/owner-of-a-server/2493/14 "2022-09-01T06:23:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
