Added support for setting network addresses from where clients can query time.

ntpd/manifests/init.pp

@@ -5,6 +5,10 @@
 #   $ntp_server:
 #       Array of NTP servers.
 #
+#   $ntp_client_networks:
+#       Array of networks that are allowed to query this server in format
+#       [ "192.168.1.0/255.255.255.0", "192.168.2.0/255.255.255.0", ].
+#
 class ntpd {
 
     if !$ntp_server {

ntpd/templates/ntp.conf.erb

@@ -26,3 +26,10 @@ server <%= server %>
 server 127.127.1.0
 fudge  127.127.1.0 stratum 10
 <% end -%>
+<% if ntp_client_networks -%>
+
+# Restrictions for clients using us as source.
+<%     ntp_client_networks.each do |net| -%>
+restrict <%= net.split("/")[0] %> mask <%= net.split("/")[1] %> nomodify notrap
+<%     end -%>
+<% end -%>