> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of arijit
> Sent: Friday, January 11, 2008 3:54 AM
> # ADD THE FOLLOWING FOR EACH OF THE HOST + COMMUNITY
> COMBO U WANNA BLOCK!
> # sec.name source
> community
> com2sec not2allow<1> <specified
> host/subnet>/<mask> <the specified doomed community>
>
> #
> sec.model sec.name
> group doomedGrp v1
> not2allow<1>
> group doomedGrp v2c
> not2allow<1>
> group doomedGrp usm
> not2allow<1>
Note the lack of a hostname in any of these lines. You cannot block
hosts with net-snmp, or any SNMP agent that does not have its own extension for
such, which is fine, because host based access control is bad security.
HTH,
Mike
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
