[Xymon] connection refused when running "xymon drop"

Chris.Morris at rwe.com Chris.Morris at rwe.com
Mon Jan 7 12:55:38 CET 2013


Xymond man page :-

--admin-senders=IP[/MASK][,IP/MASK]
Controls which hosts may send administrative commands to xymond. These
commands are the "drop" and "rename" commands. Access to these should be
restricted, since they provide an un-authenticated means of completely
disabling monitoring of a host, and can be used to remove all traces of
e.g. a system compromise from the Xymon monitor. 
Note: If messages are sent through a proxy, the IP-address restrictions
are of little use, since the messages will appear to originate from the
proxy server address. It is therefore strongly recommended that you do
NOT include the address of a server running xymonproxy in the list of
allowed addresses. 

Command should be run as xymon user on xymon server. 

-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf
Of Ciprian Parfon
Sent: 07 January 2013 11:40
To: xymon at xymon.com
Subject: [Xymon] connection refused when running "xymon drop"

Hi

I've tried to drop "conn" check for two hosts and I'm getting
"connection refused" (saw it in xymond.log). I've tried from both the
server and client.

2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop
dev.domain.com conn
2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop
dev.domain.com conn

Any thoughts ?

-- 



**************************************************************************** 
The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). 

***************************************************************************** 




More information about the Xymon mailing list