or maybe I should have been more patient.... :/
cheers
alessandra
On 09/03/2010 08:36 PM, Alessandra Forti wrote:
>
> Hi,
>
> I used these lines from the file squid.conf.frontierdefault
>
> acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
> acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
> acl snmppublic snmp_community public
> snmp_access allow snmppublic HOST_MONITOR
> snmp_access allow snmppublic HOST_MONITOR_NAME
> snmp_access deny all
> snmp_port 3401
>
> when it wasn't working I had
>
> acl SNMPHOSTS src 128.142.202.0/24 localhost
> snmp_access allow snmppublic SNMPHOSTS
>
> instead of
>
> acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
> acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
> snmp_access allow snmppublic HOST_MONITOR
> snmp_access allow snmppublic HOST_MONITOR_NAME
>
> I might be reading it wrong but the only difference seems to be the
> Fermilab subnet, because frontier.cern.ch and cmsdbsfrontier.cern.ch
> are the same host (128.142.202.212) and it belongs to subnet
> 128.142.202.0/24. srcdomain ACL does a just a reverse lookup respect
> to src.
>
> cheers
> alessandra
|