Turns out running NTP in guests is a bad plan.
allowservices inbound tcp \
ssh
allowservices inbound tcp \
ssh
+## We have to provide NTP service. The guests sync to our clock.
+ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
+
m4_divert(-1)
###----- That's all, folks --------------------------------------------------
m4_divert(-1)
###----- That's all, folks --------------------------------------------------
## Other interesting things.
dnsresolver inbound
## Other interesting things.
dnsresolver inbound
-ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
m4_divert(-1)
###----- That's all, folks --------------------------------------------------
m4_divert(-1)
###----- That's all, folks --------------------------------------------------