Mike,
   You are correct! Hostname is not there! I guess, I was not too clear about 
my requirement! Sorry about that!

   What I was looking for was a way to specify a host ip address or a subnet ip 
address - which, I can specify in the com2sec directive!

-Arijit

----- Original Message ----
From: Mike Ayers <[EMAIL PROTECTED]>
To: arijit <[EMAIL PROTECTED]>; net-snmp net-snmp 
<[email protected]>
Sent: Friday, January 11, 2008 11:22:15 PM
Subject: RE: How to deny access from only some hosts usinf vacm



> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of arijit
> Sent: Friday, January 11, 2008 3:54 AM

>     # ADD THE FOLLOWING FOR EACH OF THE HOST + COMMUNITY 
> COMBO U WANNA BLOCK!
>     #                sec.name            source               
>                              community
> com2sec    not2allow<1>           <specified 
> host/subnet>/<mask>   <the specified doomed community>
> 
>     #                                                
> sec.model                             sec.name
> group             doomedGrp            v1                     
>                        not2allow<1>
> group             doomedGrp            v2c                    
>             not2allow<1>
> group             doomedGrp           usm                     
>           not2allow<1>

    Note the lack of a hostname in any of these lines.  You cannot
 block hosts with net-snmp, or any SNMP agent that does not have its own
 extension for such, which is fine, because host based access control is
 bad security.


    HTH,

Mike

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users





      
____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to