[Xymon] Is Xymon Alive?

John Thurston john.thurston at alaska.gov
Tue Jun 8 21:17:06 CEST 2021


It is worth noting that out of the box:

A) the Xymon client <> server communication channel is unencrypted TCP
B) there is neither authentication or authorization of that channel
C) any client may send valid messages for any hostname
D) the Xymon server may send arbitrary code to the client for execution



--
Do things because you should, not just because you can.

John Thurston    907-465-8591
John.Thurston at alaska.gov
Department of Administration
State of Alaska

On 6/8/2021 9:54 AM, Bruce Ferrell wrote:
> The "worst", most technical thing I know about installing Xymon is 
> building from source (my preferred method), but just about any modern 
> Linux distro has binaries available.  The second "worst" thing is 
> editing text files to configure it.  There have been configuration tools 
> attempted, but to my knowledge, really gone nowhere.


More information about the Xymon mailing list