SNMP closed state in CentOS

Posted by anksoWX on Server Fault See other posts from Server Fault or by anksoWX
Published on 2012-11-23T10:17:11Z Indexed on 2012/11/23 11:02 UTC
Read the original article Hit count: 227

Filed under:
|
|
|

I'm having a problem here, I've added to my IPtables rules this:

-A INPUT -p tcp -m state --state NEW -m tcp --dport 161 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 161 -j ACCEPT

but when I scan with nmap or any other tool it says this:

Not shown: 998 filtered ports
PORT    STATE  SERVICE
22/tcp  open   ssh
161/tcp closed snmp

also when I am doing:

netstat -apn | grep snmpd
tcp        0      0 127.0.0.1:199               0.0.0.0:*                   LISTEN      3669/snmpd<br>
udp        0      0 0.0.0.0:161                 0.0.0.0:*                               3669/snmpd<br>
unix  2      [ ]         DGRAM                    226186 3669/snmpd

Also:

service iptables status

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:161
5    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:161
6    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
7    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Any idea what's going on? There is no UDP in closed/open state. what do I have to do?

© Server Fault or respective owner

Related posts about centos

Related posts about iptables