diff --git a/chrony.conf b/chrony.conf
index f383e45..5f2d482 100644
--- a/chrony.conf
+++ b/chrony.conf
@@ -18,9 +18,13 @@ rtcsync
 # if the adjustment is larger than 100 seconds.
 makestep 100 3
 
-# Allow client access from local network.
+# Allow NTP client access from local network.
 #allow 192.168/16
 
+# Listen for commands only on localhost.
+bindcmdaddress 127.0.0.1
+bindcmdaddress ::1
+
 # Serve time even if not synchronized to any NTP server.
 #local stratum 10