Many thanks to Richard Jackson, Arno Hahma, and Hugh Conner (in chronological
reply order).
1. The comment in the default /etc/snmpd.conf, to the effect that
"If a community name appears more than once, the first match will be chosen"
is confusing; one can, in fact, have multiple lines for the same community
name and different IP addresses, and they'll be cumulative.
2. Richard Jackson points out that the default mode (0755) for /etc/snmpd.conf
doesn't make sense, and that 0600 or 0400 would be much better.
3. Arno Hahma suggests using tcp_wrappers; however, this would require
starting the daemon from inetd or the like. Superficially, this seems
feasible to me, but I haven't researched the ramifications (and I won't,
because of point 1.)
Received on Mon Jan 29 2001 - 15:24:53 NZDT