[8587] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SNMP probers

daemon@ATHENA.MIT.EDU (Neil J. McRae)
Fri Apr 11 08:37:38 1997

To: nanog@merit.edu
Date: Fri, 11 Apr 1997 13:28:14 +0100 (BST)
Cc: mmiller@cbis.com, nanog@merit.edu
In-Reply-To: <199704111057.LAA01861@diamond.xara.net> from "Lyndon Levesley" at Apr 11, 97 11:57:21 am
From: "Neil J. McRae" <neil@domino.org>

>  If the probes are using a substantial amount of CPU inside the 
> network, it may be cheaper (CPU-wise) to deny SNMP inbound on border 
> routers...Bye Bye problem, Hello access-list log to automate email 
> from ;)

Yup, thats exactly the right thing to do, my network drops all SNMP packets
at all transit and access points, mmm Ascend GRF :-)

Regards,
Neil.
-- 
Neil J. McRae - Alive and Kicking.                            D O M I N O
neil@DOMINO.ORG       NetBSD/sparc - 100% SpF (Solaris protection Factor)
 Free the daemon in your <A HREF="http://www.NetBSD.ORG/">Computer!</A>

home help back first fref pref prev next nref lref last post