<html><head><title>Re: [rbak-nsp] Limiting SNMP to a single context</title>
</head>
<body>
<span style=" font-family:'consolas'; font-size: 9pt;">Hello<br>
<br>
We do filter traffic like:<br>
<br>
forward policy CARDFILTER<br>
ip access-group CARDFILTER filter<br>
class CLS-NORMAL<br>
class CLS-DROP<br>
drop<br>
<br>
<br>
<br>
port ethernet 1/1<br>
..<br>
forward policy CARDFILTER in<br>
...<br>
<br>
in context filter<br>
policy access-list CARDFILTER<br>
<br>
seq 500 permit udp any host 1.2.3.4 eq ntp class CLS-DROP<br>
<br>
seq 2102 permit ip host 1.1.1.1 host 2.3.4.5 class CLS-NORMAL <br>
seq 2103 permit ip any host 2.3.4.5 class CLS-DROP<br>
<br>
seq 5000 permit ip any any class CLS-NORMAL<br>
<br>
<br>
<br>
<br>
Filtering directly on traffic card is safest and prevents XCRP from overloads under DDoS.<br>
<br>
<br>
<br>
Rafal<br>
<br>
<br>
<br>
<br>
<br>
<br>
Monday, September 17, 2018, 12:39:57 PM, you wrote:<br>
<br>
</span><table style =" border-collapse: collapse;" cellSpacing = 2>
<tr>
<td width=3 bgcolor= #0000ff style="border: 1px solid black;"><br>
</td>
<td style="border: 1px solid black;"><span style=" font-family:'consolas'; font-size: 11pt;">Thanks. I must say this is very disappointing :)<br>
<br>
By the way - while debugging SNMP I noticed something disturbing:<br>
<br>
<span style=" font-family:'trebuchet ms'; font-size: 9pt;">Starting Nmap 7.60 ( </span></span><a style=" font-family:'trebuchet ms'; font-size: 9pt;" href="https://nmap.org">https://nmap.org</a><span style=" font-family:'trebuchet ms'; font-size: 9pt;"> ) at 2018-09-17 12:37 CEST<br>
<span style=" font-family:'consolas';">PORT STATE SERVICE<br>
<span style=" font-family:'trebuchet ms';">6565/tcp open unknown<br>
6566/tcp open sane-port<br>
6567/tcp open esp<br>
<br>
<span style=" font-family:'consolas'; font-size: 11pt;">these 3 ports are also open on ALL ip adresses on my SE in all contexts. Is this normal? Any way to disable it?<br>
<br>
--jw<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<span style=" font-size: 9pt;">niedz., 16 wrz 2018 o 21:04 Curtis Piehler <</span></span></span></span></span><a style=" font-family:'consolas'; font-size: 9pt;" href="mailto:cpiehler2@gmail.com">cpiehler2@gmail.com</a><span style=" font-family:'consolas'; font-size: 9pt;">> napisał(a):<br>
</span><table style =" border-collapse: collapse;" cellSpacing = 2>
<tr>
<td width=3 bgcolor= #3200ff style="border: 1px solid black;"><br>
</td>
<td style="border: 1px solid black;"><span style=" font-family:'consolas'; font-size: 9pt;">I've wondered/attempted this for years. We get flyingmonkeys trying to snmp our device(s).<br>
<br>
On Sun, Sep 16, 2018, 2:01 PM Jakub Wroniecki <</span><a style=" font-family:'consolas'; font-size: 9pt;" href="mailto:wroniasty@gmail.com">wroniasty@gmail.com</a><span style=" font-family:'consolas'; font-size: 9pt;">> wrote:<br>
</span><table style =" border-collapse: collapse;" cellSpacing = 2>
<tr>
<td width=3 bgcolor= #6400ff style="border: 1px solid black;"><br>
</td>
<td style="border: 1px solid black;"><span style=" font-family:'trebuchet ms'; font-size: 11pt;">Hi everyone, my first post here.<br>
<br>
I have a question regarding SNMP on SE600 (SEOS-12.1.1.12p11). I am trying to start the SNMP server but I can't find the option to make it available only in one specific context (local - we use it for management/radius).<br>
<br>
Simply doing:<br>
[local]R(config)#snmp server<br>
<br>
Opens it in all contexts on all IP addresses. Is there an easy way to disable it everywhere except in "local" ?<br>
<br>
--<br>
Jakub Wroniecki<br>
STANSAT<br>
<br>
<br>
<br>
<span style=" font-family:'consolas'; font-size: 9pt;">_______________________________________________<br>
redback-nsp mailing list<br>
</span></span><a style=" font-family:'consolas'; font-size: 9pt;" href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a style=" font-family:'consolas'; font-size: 9pt;" href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
<br>
<br>
<span style=" font-family:'calibri'; font-size: 9pt; color: #c0c0c0;"><i>--<br>
Best regards,<br>
Ozga Rafal </i></span><a style=" font-family:'calibri'; font-size: 9pt;" href="mailto:golem@mtm-info.pl">mailto:golem@mtm-info.pl</a></body></html>