Re: How to deny access from only some hosts usinf vacm

Mike,
You are correct! Hostname is not there! I guess, I was not too clear about my requirement! Sorry about that!

What I was looking for was a way to specify a host ip address or a subnet ip address - which, I can specify in the com2sec directive!

-Arijit

----- Original Message ----
From: Mike Ayers <mike_ayers@tvworks.com>
To: arijit <parijip@yahoo.com>; net-snmp net-snmp <net-snmp-users@lists.sourceforge.net>
Sent: Friday, January 11, 2008 11:22:15 PM
Subject: RE: How to deny access from only some hosts usinf vacm



> From: net-snmp-users-bounces@lists.sourceforge.net
> [mailto:net-snmp-users-bounces@lists.sourceforge.net] On
> Behalf Of arijit
> Sent: Friday, January 11, 2008 3:54 AM

> # ADD THE FOLLOWING FOR EACH OF THE HOST + COMMUNITY
> COMBO U WANNA BLOCK!
> # sec.name source
> community
> com2sec not2allow<1> <specified
> host/subnet>/<mask> <the specified doomed community>
>
> #
> sec.model sec.name
> group doomedGrp v1
> not2allow<1>
> group doomedGrp v2c
> not2allow<1>
> group doomedGrp usm
> not2allow<1>

Note the lack of a hostname in any of these lines. You cannot
block hosts with net-snmp, or any SNMP agent that does not have its own
extension for such, which is fine, because host based access control is
bad security.


HTH,

Mike

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216...et/marketplace
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users





__________________________________________________ __________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i...Dypao8Wcj9tAcJ


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216...et/marketplace
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users