mån 2008-12-08 klockan 10:34 -0800 skrev Ausmus, Matt:
> First off , I'm posting this question here because it appears the SNMP mailing list is now defunct. If this is the wrong list to post this please let me know and I'll repost it in the correct one.
>
> First I'm running squid with snmp enabled on Centos 4.7. the version of squid is the most recent offered for 4.7: squid-2.5.STABLE14-4.el4. this is my entire snmp configuration (with names and variables changed to protect the innocent ;-))
> acl chapmansnmp snmp_community publ!c
> snmp_port 3401
> snmp_access deny chapmansnmp !chapman1
That's not right. Squid access rules has an implicity inverse of the
last rule, i.e. the above is implicit followed by
snmp_access allow all
And says allow anyone to query for SNMP, except that only chapman1 is
allowed to use the public snmp community. Any other community is ok for
anyone to use, just not public.
You probably want
snmp_access allow chapmansnmp chapman1
which gets implicitly followed by
snmp_access deny all
Regards
Henrik
