I hope I didn't miss an easy answer while reading the FAQ, list archive,
and other documents online. I have some systems which are separated from
their time servers by a NAT proxy. Those which are not separated seem to
work just fine but those beyond the proxy don't keep time correctly. For
example, on one of them I got this output:
# ntpq -p
remote refid st t when poll reach delay offset jitter
==============================================================================
server-1
172.16.2.5 2 u 52 64 377 2.022 -41630. 19.566
server-2
172.16.2.5 2 u 6 64 377 2.121 -41601. 19.996
# ntpq -c as
ind assID status conf reach auth condition last_event cnt
===========================================================
1 20192 9024 yes yes none reject reachable 2
2 20193 9024 yes yes none reject reachable 2
Those time servers aren't ideal but they are beyond my control and these
are the only two I have available. The local firewall won't let me use
servers on the Internet.