ntp server workaround behind firewall