connection refused when running "xymon drop"
Hi
I've tried to drop "conn" check for two hosts and I'm getting "connection refused" (saw it in xymond.log). I've tried from both the server and client.
2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop dev.domain.com conn 2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop dev.domain.com conn
Any thoughts ?
--
Xymond man page :-
--admin-senders=IP[/MASK][,IP/MASK] Controls which hosts may send administrative commands to xymond. These commands are the "drop" and "rename" commands. Access to these should be restricted, since they provide an un-authenticated means of completely disabling monitoring of a host, and can be used to remove all traces of e.g. a system compromise from the Xymon monitor. Note: If messages are sent through a proxy, the IP-address restrictions are of little use, since the messages will appear to originate from the proxy server address. It is therefore strongly recommended that you do NOT include the address of a server running xymonproxy in the list of allowed addresses.
Command should be run as xymon user on xymon server.
-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Ciprian Parfon Sent: 07 January 2013 11:40 To: xymon at xymon.com Subject: [Xymon] connection refused when running "xymon drop"
Hi
I've tried to drop "conn" check for two hosts and I'm getting "connection refused" (saw it in xymond.log). I've tried from both the server and client.
2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop dev.domain.com conn 2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop dev.domain.com conn
Any thoughts ?
--
The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any).
Thanks Chris.
That worked. :)
Cheers!
On 01/07/2013 01:55 PM, Chris.Morris at rwe.com wrote:
Xymond man page :-
--admin-senders=IP[/MASK][,IP/MASK] Controls which hosts may send administrative commands to xymond. These commands are the "drop" and "rename" commands. Access to these should be restricted, since they provide an un-authenticated means of completely disabling monitoring of a host, and can be used to remove all traces of e.g. a system compromise from the Xymon monitor. Note: If messages are sent through a proxy, the IP-address restrictions are of little use, since the messages will appear to originate from the proxy server address. It is therefore strongly recommended that you do NOT include the address of a server running xymonproxy in the list of allowed addresses.
Command should be run as xymon user on xymon server.
-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Ciprian Parfon Sent: 07 January 2013 11:40 To: xymon at xymon.com Subject: [Xymon] connection refused when running "xymon drop"
Hi
I've tried to drop "conn" check for two hosts and I'm getting "connection refused" (saw it in xymond.log). I've tried from both the server and client.
2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop dev.domain.com conn 2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop dev.domain.com conn
Any thoughts ?
-- Ciprian Parfon System & Network Engineer +40 721879113 ciprian.parfon at gmail.com
Check your tasks.cfg file. You can only send the drop from ip addresses in the --admin-senders of the xymond command.
-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Ciprian Parfon Sent: Monday, January 07, 2013 5:40 AM To: xymon at xymon.com Subject: [Xymon] connection refused when running "xymon drop"
Hi
I've tried to drop "conn" check for two hosts and I'm getting "connection refused" (saw it in xymond.log). I've tried from both the server and client.
2013-01-07 12:35:13 Refused message from xx.xx.xx.xx: drop dev.domain.com conn 2013-01-07 12:37:20 Refused message from xx.xx.xx.xx: drop dev.domain.com conn
Any thoughts ?
--
participants (3)
-
Chris.Morris@rwe.com
-
ciprian.parfon@gmail.com
-
Paul.Root@CenturyLink.com