Securing SNMP (Linux / Windows)

SNMP is used for remote monitoring and configuration of dedicated servers.  If you have not changed the default community string of 'public' or 'private', your server may be abused to conduct DDOS attacks.  In addition, publicly accessible SNMP can leak information about your server.  We suggest using hard to guess community strings. 

On Windows machines, SNMP is run through the 'SNMP' service.  To change the community string:
  1. Open Control Panel -> Administrative Tools -> Services
  2. Find 'SNMP Service', right click it, and choose Properties
  3. On the Security tab, click the 'Add' button near 'Accepted community names'
  4. Enter a secure password for this (do not reuse any existing password)
  5. Make sure to remove any insecure passwords (default values such as 'public' or 'private' are commonly abused)
  6. Click OK
  7. Restart the SNMP service

On Linux machines, SNMP is commonly run through the net-snmp library:
  1. Open your snmpd.conf file (usually /etc/snmp/snmpd.conf)
  2. Find the line that looks like: 'com2sec notConfigUser  default       public' (the line will begin with com2sec and end with a password.  In this example, the password is 'public')
  3. Change the 'public' at the end of the line to a more secure password
  4. Restart the SNMP server with: 'service snmpd restart'
  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

Changing the Default SSH Port (Linux / CentOS)

SSH is one of the most commonly attacked services as it provides easy access to full control of a...

Changing the Default SSH Port (Linux / Ubuntu / Debian)

SSH is one of the most commonly attacked services as it provides easy access to full control of...

Disable Recursive DNS (Linux / Windows)

DNS is used to translate hostnames into IP addresses. When DNS servers are misconfigured, they...

Disabling SSDP (Linux / Windows)

SSDP is used by some consumer-level equipment for network discovery.  It does not have any real...

Enabling and basic configuration of the firewall settings (Linux / Ubuntu)

Enabling the firewall will help you protect your dedicated server from unwanted connections to...

Powered by WHMCompleteSolution