Restrict ntp to 127.0.0.1 and also listen only on 127.0.0.1 and management ip