[Xymon] connection refused when running "xymon drop"

Ciprian Parfon ciprian.parfon at gmail.com
Mon Jan 7 13:02:24 CET 2013


Thanks Chris.

That worked. :)

Cheers!

On 01/07/2013 01:55 PM, Chris.Morris at rwe.com wrote:
> Xymond man page :-
>
> --admin-senders=IP[/MASK][,IP/MASK]
> Controls which hosts may send administrative commands to xymond. These
> commands are the "drop" and "rename" commands. Access to these should be
> restricted, since they provide an un-authenticated means of completely
> disabling monitoring of a host, and can be used to remove all traces of
> e.g. a system compromise from the Xymon monitor.
> Note: If messages are sent through a proxy, the IP-address restrictions
> are of little use, since the messages will appear to originate from the
> proxy server address. It is therefore strongly recommended that you do
> NOT include the address of a server running xymonproxy in the list of
> allowed addresses.
>
> Command should be run as xymon user on xymon server.
>
> -----Original Message-----
> From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf
> Of Ciprian Parfon
> Sent: 07 January 2013 11:40
> To: xymon at xymon.com
> Subject: [Xymon] connection refused when running "xymon drop"
>
> Hi
>
> I've tried to drop "conn" check for two hosts and I'm getting
> "connection refused" (saw it in xymond.log). I've tried from both the
> server and client.
>
> 2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop
> dev.domain.com conn
> 2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop
> dev.domain.com conn
>
> Any thoughts ?
>


-- 
Ciprian Parfon
System & Network Engineer
+40 721879113
ciprian.parfon at gmail.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4477 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20130107/863e6e80/attachment.bin>


More information about the Xymon mailing list