Odd situation with NTP and SmoothWall Corporate Firewall

Hi folks,
We've come across something odd when it comes to time (i.e., NTP) being provided by our Corporate Firewall server. It may affect you guys running School Guardian too.

The ISP we use has two NTP servers - tic and toc. We use tic, but the fact that they also provide toc is helpful.

The time server ("User defined single public or local server") in our Corporate Firewall server is set to tic. However, when I do a query of the time from our CF server using this NTP tool, it appeared to be coming from a totally different source, completely unrelated to tic.

We looked into this further and found that /usr/etc/ntpd.conf shows 'server.pool.ntp.org' as its time source. We manually changed it to 'tic' and clicked the Save button on the admin/time.cgi page.

Checking again using the NTP tool, we found that the time was now coming from tic. This indicates that what is set in the admin/time.cgi page doesn't actually affect the time settings. To double-check, we changed the "User defined single public or local server" in the GUI to toc and saved it. Using the NTP tool, we queried the CF server and found that the time is still coming from tic. /usr/etc/ntpd.conf still shows tic, but /settings/time/ntpd.conf shows toc.

To summarise, it looks like the /settings/time/ntpd.conf file is updated by the Corporate Firewall admin/time.cgi page. However, the file that affects where the CF server gets its time from is /usr/etc/ntpd.conf.

Just wondering if that is something that is specific to Corpoate Firewall, or whether you guys running School Guardian have noticed similar behaviour.

Cheers,
Daniel