[Xymon] [EXT] Re: Is Xymon Alive?

[Alan Ford]

I am yet to investigate this…  using stunnel
System Monitoring with Xymon/Administration Guide - Wikibooks, open books for an open world<https://en.wikibooks.org/wiki/System_Monitoring_with_Xymon/Administration_Guide#Hobbit(bb)/XyMon_port_1984_encryption_Using_Stunnel>

Alan Ford


From: Xymon <xymon-bounces at xymon.com> On Behalf Of Ralph M
Sent: Wednesday, 9 June 2021 5:29 AM
To: John Thurston <john.thurston at alaska.gov>
Cc: xymon at xymon.com
Subject: [EXT] Re: [Xymon] Is Xymon Alive?

I've been hoping for a fix for point A, encrypted communications, for some time.  At one time it was going to be rolled into the next release.

Ralph Mitchell


On Tue, Jun 8, 2021 at 3:17 PM John Thurston <john.thurston at alaska.gov<mailto:john.thurston at alaska.gov>> wrote:
It is worth noting that out of the box:

A) the Xymon client <> server communication channel is unencrypted TCP
B) there is neither authentication or authorization of that channel
C) any client may send valid messages for any hostname
D) the Xymon server may send arbitrary code to the client for execution



--
Do things because you should, not just because you can.

John Thurston    907-465-8591
John.Thurston at alaska.gov<mailto:John.Thurston at alaska.gov>
Department of Administration
State of Alaska

On 6/8/2021 9:54 AM, Bruce Ferrell wrote:
> The "worst", most technical thing I know about installing Xymon is
> building from source (my preferred method), but just about any modern
> Linux distro has binaries available.  The second "worst" thing is
> editing text files to configure it.  There have been configuration tools
> attempted, but to my knowledge, really gone nowhere.
_______________________________________________
Xymon mailing list
Xymon at xymon.com<mailto:Xymon at xymon.com>
http://lists.xymon.com/mailman/listinfo/xymon

Note: This email, including any attachments, has been sent by AWP Australia Pty Ltd (ABN 52 097 227 177) trading as Allianz Global Assistance and is intended solely for the addressee. It is confidential, may contain personal information and may be subject to legal professional privilege. If you have received this by mistake, confidentiality and any legal privilege are not waived or lost and we ask that you contact the sender and delete and destroy this and any other copies. In relation to any lawful use you may make of the contents of this email, you must ensure that you comply with the Privacy Act (C'th) 1988 and you should note that the contents may be subject to copyright and therefore may not be reproduced, communicated or adapted without the express consent of the owner of the copyright. Allianz Global Assistance will not be liable in connection with any data corruption, delay, computer virus or unauthorised access, interception, or amendment to the contents of this email. If you no longer want to receive messages from us, please contact us at Allianz Global Assistance, PO Box 162 Toowong, Qld, 4066, ph +61 7 3305 7000.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20210608/38608dfa/attachment.htm>