[Xymon] Xymon security concern raised

[Steve Holmes]

On Wed, Dec 5, 2012 at 4:40 PM, Henrik Størner <henrik at hswn.dk> wrote:

> On 05-12-2012 22:14, Steve Holmes wrote:
>
>>     In --status-senders, you should list
>>
>>     1) the Xymon server itself
>>     2) any hosts running network tests
>>
>>
>> Thanks Henrik...
>> But, but (he sputters) that causes the server to refuse messages from
>> the clients. Did I do it wrong?
>>
>> I used
>> --status-senders=127.0.0.1,$**BBSERVERIP,xxx.xx.xxx.xxx
>>
>> where the x's is another Xymon server IP that does network tests.
>>
>
> Looks right. Must admit I haven't used it much myself ...
>
> Could you post one of the log-messages rejecting the update (from
> xymond.log) and the hosts.cfg line for that host?
>
> Regards,
> Henrik
>
>
Ok, I think I see now what is going on. All of the hosts showing up as
being refused in the log are either not configured in or are configured
with a testip tag and using an ip that is different from the ip that it is
reporting from.

That makes sense, but would make it hard for me to use the feature.

Thanks for the stimulating discussion!

Steve

-- 
If they give you ruled paper, write the other way. -Juan Ramon Jimenez,
poet, Nobel Prize in literature (1881-1958)

I prayed for freedom for twenty years, but received no answer until I
prayed with my legs. -Frederick Douglass, Former slave, abolitionist,
editor, and orator (1817-1895)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20121206/77f6840d/attachment.html>