Hi list,

I have a problem with the User-Rules.

I am working with a Linux Nessus Server 3.2.0 [build A890] and a Linux
NessusClient 3.2.
The Users are logging onto the server using certificates generated by the
Nessus-Server.

I want to prevent scanning the whole network by some users.

So I edited the file /opt/nessus/etc/nessus/nessusd.rules and added this
line:

default reject

I have also set the rules for every user while I was adding them to the
server.
As example the /opt/nessus/var/nessus/users/bob/auth/rules file:

accept 192.168.1.20
default deny

According to the man-page of nessus-adduser I should be able to scan
192.168.1.20, but nothing else.
But I can scan every host in the network.

What is wrong with my configuration?
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to