Re: patches for snmpv3 IP address selection
Damien Garcia via Net-snmp-users <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CAFqWOgvUpuvsgUT3oPXu7Uo6uFt4fQrh1YbEOd4HP8nGq9TKjA@mail.gmail.com> |
I provide a feed back concerning the feature "ip filtering" that I have tested on package "net-snmp-5.8.rc4": It seems to work correctly. For example if you want your snmp daemon to only reply address "192.168.1.100" just add the following line in the configuration. sourceFilterType whitelist sourceFilterAddress 192.168.1.100 Regards, Damien Garcia 2018-07-17 16:52 GMT+02:00 Damien Garcia <[email protected]>: > Very interesting, I will try the feature in a few days and I will provide > a feedback ... > Thanks a lot Robert ! > > 2018-07-17 14:34 GMT+02:00 Robert Story <[email protected]>: > >> On Fri, 13 Jul 2018 18:57:22 +0200 Damien wrote: >> DGVNSU> Looking at the mailing list, I have found lots of post >> DGVNSU> concerning "snmpv3 IP address selection". >> DGVNSU> In a post entitled "Support for Ciso ACLs", it seems that >> DGVNSU> some people have ever implemented patches allowing the >> DGVNSU> "snmpv3 IP address selection". see following link for >> DGVNSU> details: >> DGVNSU> https://sourceforge.net/p/net-snmp/mailman/message/16290798/ >> DGVNSU> >> DGVNSU> Does anyone have a reference of this kind of patches (even >> DGVNSU> if only available for an old version of the package or not >> DGVNSU> official) ? >> >> Actually, I was wrong when I told that no work had been done on >> this. It's not specific to version 3, but the upcoming 5.8 release >> does have support for source address filtering for packets. I'd >> forgotten about some patches submitted to the project which addded >> this functionality. >> >> sourceFilterType none|whitelist|blacklist >> specifies whether or not addresses added with >> sourceFilterAddress >> are whitelisted or blacklisted. The default is none, >> indicating >> that incoming packets will not be checked agains the filter >> list. >> >> sourceFilterAddress ADDRESS >> specifies an address to be added to the source address >> filter >> list. sourceFilterType configuration determines whether or >> not >> addresses are whitelisted or blacklisted. >> >> Robert >> > > ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users