Elusive Windows Time Synchronisation

[Guest]

[Jarmo P]

We need it Soya.
It feels i am a fool again with my previous post.
I am not now sure if I needed a network rule before, but I don't think so.
So we need TIME soya and seems those 2 addresses ¨that come with windows are not working.
And i am mighty angry since I want to run in my limited user account normally and not to go and test test if my PC clock is updated. So mighty angry now ! And I am almost sure in my crazy mind that with every other fw installed on my pc time update would work. So figure out what is wrong with Comodo cause i really really did think this thing was sorted out?

[jasper2408]

Besides  the Windows Time service started and port 123 out allowed, you also have to allow ICMP IN and OUT to do a tracert on time.windows com. I just tried it and it traced the complete path just fine. I normally disable ICMP IN and OUT but I enabled the 2 rules and it worked fine.

jasper

[bluesjunior]

What does ICMP stand for Soya?.

[Pedro*]

Internet Control Message Protocol:
http://en.wikipedia.org/wiki/Internet_Control_Message_Protocol

 

It is chiefly used by networked computers' operating systems to send error messages—indicating, for instance, that a requested service is not available or that a host or router could not be reached.

ICMP differs in purpose from TCP and UDP in that it is usually not used directly by user network applications. One exception is the ping tool, which sends ICMP Echo Request messages (and receives Echo Response messages) to determine whether a host is reachable and how long packets take to get to and from that host.

List of permitted control messages (incomplete list)
0 - Echo Reply
1 - Reserved
2 - Reserved
3 - Destination Unreachable
4 - Source Quench
5 - Redirect Message
6 - Alternate Host Address
7 - Reserved
8 - Echo Request
9 - Router Advertisement
10 - Router Solicitation
11 - Time Exceeded
12 - Parameter Problem
13 - Timestamp
14 - Timestamp Reply
15 - Information Request
16 - Information Reply
17 - Address Mask Request
18 - Address Mask Reply
19 - Reserved for security
20-29 - Reserved for robustness experiment
30 - Traceroute
31 - Datagram Conversion Error
32 - Mobile Host Redirect
33 - IPv6 Where-Are-You
34 - IPv6 Here-I-Am
35 - Mobile Registration Request
36 - Mobile Registration Reply
38 - Domain Name Reply
39 - SKIP Algorithm Discovery Protocol
40 - Photuris, Security failures
41 - ICMP for experimental mobility protocols such as Seamoby [RFC4065]
42-255 - Reserved

[Soyabeaner]

What does ICMP stand for Soya?.

Pedro explained it all from the technical perspective.  It's another protocol.  In short, you shouldn't have to change the default Network Monitor rules for it unless you need to perform miscellaneous functions like the others do (e.g. traceroute, ping, for other reasons such as peer 2 peer sharing programs, etc.).

[bluesjunior]

Thanks for that guys.

[Pedro*]

I just pasted info
Wikipedia is always a good place to start!

[Soyabeaner]

Yes, but the effort involved was worthy of calling it your own explanation: searching, copying, pasting, posting.  Welcome to the moderator world!

[gibran]

I don't use this, but for curiosity, i tried it andyes, i get RPC server is not available
(what did i disable...lol)

A very active thread

I'm not sure but check the rpc service and the Event info log for w32time error and post a full error (id and description)

[ocky]

This is what Black Viper says about Windows Time Service:

Windows Time

Automatically sets your clock by contacting a server (Microsoft's server by default) on the internet. Great idea if your network connects to the internet 24/7. The Event Log fills up with "cannot find server" messages on a non-dedicated setup, though. After successful synchronizing, this service will not attempt to do it again for 7 days, meanwhile, taking up resources. You may also need Task Scheduler running. You may choose to set your clock manually on a dial up connection, but with a 24/7 broadband setup, this could keep you on time for work. Note: as mentioned, "time.windows.com" is the default server for synchronization. For those privacy conscious people that prefer to connect to a government site rather then MS, use "time.nist.gov."

Default XP Home: Automatic
Default XP Pro: Automatic
Safe Setting: Disabled

Log on as: Local System account

Dependencies:

What service Windows Time needs to function properly:

None
What other service require Windows Time to function properly:

None

Just for info.   

*******************************
BTW. This from my Event log before substituting the default time.windows.com with time-a.nist.gov

Event Type:   Error
Event Source:   W32Time
Event Category:   None
Event ID:   29
Date:      03/04/2007
Time:      07:10:56 PM
User:      N/A
Computer:   XXXXXXXXXXXX
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible.  No attempt to contact a source will be made for 9820 minutes. NtpClient has no source of accurate time.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

[Tags:]