[35112] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Warning: Cisco RW community backdoor.

daemon@ATHENA.MIT.EDU (Jonathan Disher)
Tue Feb 27 01:00:56 2001

Date: Mon, 26 Feb 2001 22:00:17 -0800 (PST)
From: Jonathan Disher <jdisher@ipix.com>
To: nanog@merit.edu
In-Reply-To: <3A9B1ECF.B66BB58F@depaul.edu>
Message-ID: <Pine.GSO.4.21.0102262151590.27055-100000@fs1>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu


On Mon, 26 Feb 2001, John Kristoff wrote:

> 
> I tried this one of our routers and it worked.  I put in the snmp filter
> to stop it, which it did.  Then I took the filter off and it still
> didn't work.  Odd.

I tested it on both of my GSR's and got responses.  Put the filters in, it
stopped.

Then I took the changes out of my backup router, and like you, didnt get a
response.  However, after rebooting the router, I do get a response again.

12008 GSR's running 12.0(9)S.  No ATM interfaces (just 3 GigE cards ea).

And yes, the only tree I could touch was system.  Nothing else, read or
write.

-j

-- 
-Jonathan Disher
-Sr. Systems and Network Engineer, Web Operations
-Internet Pictures Corporation, Palo Alto, CA
-[v] (650) 388-0497 | [p] (877) 446-9311 | [e] jdisher@eng.ipix.com



home help back first fref pref prev next nref lref last post