tripleo-heat-templates/releasenotes/notes/snmp_firewall-ab17f60ba1ec71d2.yaml
Emilien Macchi 43155ed146 Restrict SNMP to internal network
Add a parameter, SnmpdIpSubnet, which can be an IP/MASK that will be
used to secure with IPtables the source network authorized to reach
SNMP service on the host.
If SnmpdIpSubnet is left empty (default) the parameter will be set to
SnmpdNetwork.

Also change the IPtables id, 127 was used by Horizon, so let's switch
SNMP to 124. No impact on users.

Change-Id: I46fce28926cb5a881f7384948480266712ae75e3
Closes-Bug: #1749324
2018-02-19 02:24:28 +00:00

8 lines
205 B
YAML

---
security:
- |
Change the IPtables rule for SNMP service and open 161 udp port on
SnmpdIpSubnet parameter instead of 0.0.0.0/0.
If SnmpdIpSubnet is left empty, SnmpdNetwork will be used.