Handling snmp v3 user authentication manually to implement rate-limiting?
Janne Paalijarvi <[email protected]> Mon, 10 Mar 2025 21:00:49 +0200
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CA+-shPdwzDZsUhuP-53DtAxfyF-bNJ5+wsHQgcBkyi5OLtMHAw@mail.gmail.com> |
--===============7902357520106230103== Content-Type: multipart/alternative; boundary="000000000000dbf926063001976a" --000000000000dbf926063001976a Content-Type: text/plain; charset="UTF-8" Hello, Background: I have a C/C++ .so agent module for snmpd. It works correctly. However, now I am thinking about making it more resistant to brute-forcing. Lets say I want to block the user if they make 5 failed requests in a row (a naive example). I was thinking about capturing the request during auth stage, verifying the user credentials "manually" (then continuing the normal processing) and keeping track of failed requests per user. Is there any possibility using the Net-SNMP to achieve anything like this? All kinds of ideas are appreciated. Even those needing to extend the library/snmpd functionality. Regards, Janne Paalijarvi --000000000000dbf926063001976a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Hello,</div><div><br></div><div>Background: I have a = C/C++ .so agent module for snmpd. It works correctly.</div><div><br></div><= div>However, now I am thinking about making it more resistant to brute-forc= ing. Lets say I want to block the user if they make 5 failed requests in a = row (a naive example).</div><div><br></div><div>I was thinking about captur= ing the request during auth stage, verifying the user credentials "man= ually" (then continuing the normal processing) and keeping track of fa= iled requests per user.<br></div><div><br></div><div>Is there any possibili= ty using the Net-SNMP to achieve anything like this? All kinds of ideas are= appreciated. Even those needing to extend the library/snmpd functionality.= </div><div><br></div><div>Regards,</div><div>Janne Paalijarvi</div></div> --000000000000dbf926063001976a-- --===============7902357520106230103== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============7902357520106230103== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users --===============7902357520106230103==--