Restrict ntp more strictly.

This should restrict ntp to devices from the networks we like it to serve. This resolves issue #21.