Re: SNMP Informs sent from snmpd do not work if firewall is enabled on the machine

Dattaram Porob <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
"iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT" is
already present in the firewall configuration but still it does not
work :(

Any other suggestions?

-Datta.

On Mon, Jun 6, 2011 at 2:28 PM, Dave Shield <[email protected]> wrote:
> On 2 June 2011 04:58, Dattaram Porob <[email protected]> wrote:
>> In case of a v2 inform, the Inform message is sent by the agent
>> (net-snmp 5.6.1) and received by the receiver but the ACK sent by the
>> receiver does not reach the agent since it is blocked by the firewall.
>
>> In case of a v3 Inform, before sending the actual Inform message, the
>> agent tries to discover the engineId of the receiver. The response to
>> the discover is not received by the agent and so it is not be able to
>> send out the Inform message itself.
>
> Both of those feel like a problem with the firewall configuration.
> It ought to accept the response to an outgoing request.
>
>
>> Is there any way to get around this problem; any configuration in
>> net-snmp or for that matter any configuration in iptables ?
>
> A rule such as
>
>   iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>
> should allow this to work as expected.
>
> Dave
>

------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger.
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Discover what all the cheering's about.
Get your free trial download today. 
http://p.sf.net/sfu/quest-dev2dev2 
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.