[Sunhelp] SNMP Security Problem

Dale Ghent sunhelp at sunhelp.org
Wed Nov 1 10:26:12 CST 2000


On Wed, 1 Nov 2000, Ben Ricker wrote:

| I am hardening a Sun Solaris 8 box and I am getting a security warning. 
| However, I am unsure what it means. How do I disable it? There are no inetd 
| servcies running except ftp, telnet, and ssh. I found the following reference 
| to port 161 (the open SNMP Agent port)
| 
| snmp            161/udp                         # Simple Net Mgmt Proto
| 
| Here is the security warning:
| 
| SNMP Agent responded as expected with community name: public
| SNMP Agent responded as expected with community name: admin

Grr. Why Sun enables snmpd startup by default, I dont know. With generic
communities, it really opens up alot of machines.

Disable it by running:

/etc/rc3.d/S76snmpdx stop
/etc/rc3.d/S77dmi stop
mv /etc/rc3.d/S76snmpdx /etc/rc3.d/s76snmpdx
mv /etc/rc3.d/S77dmi /etc/rc3.d/s77dmi

/dale




More information about the SunHELP mailing list