NTP traffic firewall rules?

We have an NTP server on our network that accesses the following out side servers for NTP info.

server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org
server 3.pool.ntp.org

Is there a way to setup a firewall rule based off a DNS lookup of the server name? Those server IP addresses change based off of load. So I can’t just enter the IP address of the current server and put it in the firewall rule.

Thanks,
Chadd

what are you trying to achieve?

To allow communication to those time server clusters through our firewall while blocking all other NTP traffic. As mentioned the actual IP addresses of those NTP server clusters change based off of location and load.

You’d have to write a script to resolve them and then add to an address list.

Sent from my SCH-I545 using Tapatalk

That is the only option I had come up with also, I had hoped there was something easier that I didn’t know about.

Nope… Not that I can think of. Not a terribly hard script…

Sent from my SCH-I545 using Tapatalk