Xymon Mailing List Archive search

Blocking unwanted agents reporting

5 messages in this thread

list Eli · Thu, 19 Feb 2015 08:51:02 -0700 ·
Hello,

Is there a way I can block agents reporting to xymon server. I have 1000 hosts reports to our sever some of them I don't want them them to report but the agents on all machine and hard to track the owner to disable the agent. So I am thinking if there us way can block you can do as exhost for alert.

Thanks
Eli
list Torsten Richter · Thu, 19 Feb 2015 17:10:03 +0100 ·
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Eli,

take a look at the manpage of xymond.
There are several command line options for this binary which control who
can send status messages, maintenance commands or admin commands to the
server.
In your case you might want to add something like
	--status-senders=IP/MASK
to tasks.cfg into the [xymond] block to allow status updates only from
IP/MASK.

HTH
Torsten

On 19.02.2015 16:57, Eli via Xymon wrote:
- -- 
+---------------------------------------------------------+
| E-mail  : user-c862b499d9fa@xymon.invalid			  |
|							  |
| Homepage: http://www.richter-it.net/			  |
+---------------------------------------------------------+
Download my public key from:
http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)

iEYEARECAAYFAlTmCtsACgkQ7DlmxomQk6xWEgCePYNSNc3IPASBFcJqvZaXD5yn
3yMAoLNWKvC7ps7gINSvpVwLR06HQKHp
=jH6r
-----END PGP SIGNATURE-----
list Vernon Everett · Fri, 20 Feb 2015 06:45:28 +0800 ·
iptables?

On 19 February 2015 at 23:57, Eli via Xymon <xymon at xymon.com> wrote:
---------- Forwarded message ----------
From: Eli <user-eeb3a3c6c848@xymon.invalid>
To: xymon at xymon.com
Cc:
Date: Thu, 19 Feb 2015 08:51:02 -0700
Subject: Blocking unwanted agents reporting
quoted from Eli
Hello,

Is there a way I can block agents reporting to xymon server. I have 1000
hosts reports to our sever some of them I don't want them them to report
but the agents on all machine and hard to track the owner to disable the
agent. So I am thinking if there us way can block you can do as exhost for
alert.

Thanks
Eli

-- 

"Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton
list Eli · Thu, 19 Feb 2015 15:45:45 -0700 ·
Thanks much  that helpful. I wish I  can block by host name. :)
quoted from Torsten Richter


Torsten Richter <user-c862b499d9fa@xymon.invalid> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Eli,

take a look at the manpage of xymond.
There are several command line options for this binary which control who
can send status messages, maintenance commands or admin commands to the
server.
In your case you might want to add something like
--status-senders=IP/MASK
to tasks.cfg into the [xymond] block to allow status updates only from
IP/MASK.

HTH
Torsten

On 19.02.2015 16:57, Eli via Xymon wrote:
- -- 
+---------------------------------------------------------+
| E-mail  : user-c862b499d9fa@xymon.invalid			  |
|							  |
| Homepage: http://www.richter-it.net/			  |
+---------------------------------------------------------+
Download my public key from:
http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)

iEYEARECAAYFAlTmCtsACgkQ7DlmxomQk6xWEgCePYNSNc3IPASBFcJqvZaXD5yn
3yMAoLNWKvC7ps7gINSvpVwLR06HQKHp
=jH6r
-----END PGP SIGNATURE-----
list Jeremy Laidman · Fri, 20 Feb 2015 14:01:09 +1100 ·
It's worth noting that --status-senders limits what IP addresses can send
updates on behalf of other IP addresses.  It does not stop hosts from
sending updates from their own IP address, even if not listed in
--status-senders.  So I could just set --status-senders=127.0.0.1 and it
should not stop me getting updates from any devices.
quoted from Eli


On 20 February 2015 at 09:45, Eli via Xymon <xymon at xymon.com> wrote:
---------- Forwarded message ----------
From: Eli <user-eeb3a3c6c848@xymon.invalid>
To: Torsten Richter <user-c862b499d9fa@xymon.invalid>
Cc: xymon at xymon.com
Date: Thu, 19 Feb 2015 15:45:45 -0700
Subject: Re: [Xymon] Blocking unwanted agents reporting
Thanks much  that helpful. I wish I  can block by host name. :)


Torsten Richter <user-c862b499d9fa@xymon.invalid> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Eli,

take a look at the manpage of xymond.
There are several command line options for this binary which control who
can send status messages, maintenance commands or admin commands to the
server.
In your case you might want to add something like
--status-senders=IP/MASK
to tasks.cfg into the [xymond] block to allow status updates only from
IP/MASK.

HTH
Torsten

On 19.02.2015 16:57, Eli via Xymon wrote:
- --
+---------------------------------------------------------+
| E-mail  : user-c862b499d9fa@xymon.invalid   |
|   |
| Homepage: http://www.richter-it.net/   |
+---------------------------------------------------------+
Download my public key from:
http://gpg-keyserver.de/pks/lookup?search=0x899093AC&op=get
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)

iEYEARECAAYFAlTmCtsACgkQ7DlmxomQk6xWEgCePYNSNc3IPASBFcJqvZaXD5yn
3yMAoLNWKvC7ps7gINSvpVwLR06HQKHp
=jH6r
-----END PGP SIGNATURE-----