Re: How to deny access from only some hosts usinf vacm

arijit <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
Mike,
   You are correct! Hostname is not there! I guess, I was not too clear about my requirement! Sorry about that!

   What I was looking for was a way to specify a host ip address or a subnet ip address - which, I can specify in the com2sec directive!

-Arijit

----- Original Message ----
From: Mike Ayers <[email protected]>
To: arijit <[email protected]>; net-snmp net-snmp <[email protected]>
Sent: Friday, January 11, 2008 11:22:15 PM
Subject: RE: How to deny access from only some hosts usinf vacm



> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of arijit
> Sent: Friday, January 11, 2008 3:54 AM

>     # ADD THE FOLLOWING FOR EACH OF THE HOST + COMMUNITY 
> COMBO U WANNA BLOCK!
>     #                sec.name            source               
>                              community
> com2sec    not2allow<1>           <specified 
> host/subnet>/<mask>   <the specified doomed community>
> 
>     #                                                
> sec.model                             sec.name
> group             doomedGrp            v1                     
>                        not2allow<1>
> group             doomedGrp            v2c                    
>             not2allow<1>
> group             doomedGrp           usm                     
>           not2allow<1>

    Note the lack of a hostname in any of these lines.  You cannot
 block hosts with net-snmp, or any SNMP agent that does not have its own
 extension for such, which is fine, because host based access control is
 bad security.


    HTH,

Mike

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users





      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.