Comment by accountofme

why not just point pool.ntp.org to your router ip on the dns server?

then you need not open them up to anything :)