http://northgrid-tech.blogspot.com/2010/09/how-to-enable-atlas-squid-monitoring.html
cheers
alessandra
On 09/03/2010 08:56 PM, Alessandra Forti wrote:
>
> or maybe I should have been more patient.... :/
>
> cheers
> alessandra
>
> On 09/03/2010 08:36 PM, Alessandra Forti wrote:
>>
>> Hi,
>>
>> I used these lines from the file squid.conf.frontierdefault
>>
>> acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
>> acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
>> acl snmppublic snmp_community public
>> snmp_access allow snmppublic HOST_MONITOR
>> snmp_access allow snmppublic HOST_MONITOR_NAME
>> snmp_access deny all
>> snmp_port 3401
>>
>> when it wasn't working I had
>>
>> acl SNMPHOSTS src 128.142.202.0/24 localhost
>> snmp_access allow snmppublic SNMPHOSTS
>>
>> instead of
>>
>> acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
>> acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
>> snmp_access allow snmppublic HOST_MONITOR
>> snmp_access allow snmppublic HOST_MONITOR_NAME
>>
>> I might be reading it wrong but the only difference seems to be the
>> Fermilab subnet, because frontier.cern.ch and cmsdbsfrontier.cern.ch
>> are the same host (128.142.202.212) and it belongs to subnet
>> 128.142.202.0/24. srcdomain ACL does a just a reverse lookup respect
>> to src.
>>
>> cheers
>> alessandra
|