Bug 77926 - cannot connect to snmpd (libwrap)
cannot connect to snmpd (libwrap)
Product: Red Hat Linux
Classification: Retired
Component: net-snmp (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Phil Knirsch
Depends On:
  Show dependency treegraph
Reported: 2002-11-15 09:27 EST by Jan "Yenya" Kasprzak
Modified: 2015-03-04 20:11 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2003-02-05 12:13:37 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Jan "Yenya" Kasprzak 2002-11-15 09:27:43 EST
Description of Problem:
snmpd does not accept requests with libwrap.

Version-Release number of selected component (if applicable):

How Reproducible:

Steps to Reproduce:
1. Put "ALL:" to /etc/hosts.allow and "ALL: ALL@ALL" to /etc/hosts.deny
2. Start snmpd with the default config
3. Run snmpwalk -v1 -c public system

Actual Results:
Timeout with "Connection from udp: REFUSED" message in

Expected Results:
The contents of the system SNMP subtree (at least the system.sysContact.0
and system.sysLocation.0 variables).

Additional Information:
The problem is that the agent/snmp_agent.c:netsnmp_agent_check_packet()
function passes the "udp:<sourceport>" string to the TCP wrapper's
host_ctl(3) function instead of the plain "". When I change
the format string "udp:%s:%d" at line 71 of libsnmp/snmpUDPDomain.c to
plain "%s", I am able to connect to my SNMP agent. It is not, however,
a clean fix, and the similar one should be applied to all
snmplib/snmp*Domain.c files, or the netsnmp_agent_check_packet() routine
should be changed.
Comment 1 Jan "Yenya" Kasprzak 2002-11-18 04:35:16 EST
It appears to be fixed in net-snmp-5.0.6, so I think it you may have
to issue the updated packages for 5.0.6.
Comment 2 Phil Knirsch 2003-02-05 12:13:37 EST
Yep, fixed in latest rawhide builds, just checked.

Read ya, Phil

Note You need to log in before you can comment on or make changes to this bug.