Internal NTP service can't resolve pool's FQDN when access restriction is enabled.
Thanks Vindicator!. http://www.linksysinfo.org/index.php?threads/tomato-raf-1-28-9013.63093/page-11#post-231777