Graham McIntire
b4f8b40b7f
- Remove PVC volume mount from k8s/deployment.yaml - Delete k8s/mib-pvc.yaml (no longer needed) - Update .gitignore to commit MIB files to git - Add mix import_mibs task to copy MIBs from LibreNMS - Add all MIB files from priv/mibs/ to git This fixes the multi-attach volume error in Kubernetes where new pods couldn't start because the RWO (ReadWriteOnce) PVC was attached to the old pod. MIBs are now part of the Docker image and can be used by all pods simultaneously.
327 lines
7.9 KiB
Text
327 lines
7.9 KiB
Text
UCD-IPFWACC-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
OBJECT-TYPE, MODULE-IDENTITY, IpAddress, Integer32, Counter32
|
|
FROM SNMPv2-SMI
|
|
DisplayString
|
|
FROM SNMPv2-TC
|
|
ucdExperimental
|
|
FROM UCD-SNMP-MIB;
|
|
|
|
ucdIpFwAccMIB MODULE-IDENTITY
|
|
LAST-UPDATED "9912160000Z"
|
|
ORGANIZATION "University of California, Davis"
|
|
CONTACT-INFO
|
|
"This mib is no longer being maintained by the University of
|
|
California and is now in life-support-mode and being
|
|
maintained by the net-snmp project. The best place to write
|
|
for public questions about the net-snmp-coders mailing list
|
|
at net-snmp-coders@lists.sourceforge.net.
|
|
|
|
postal: Wes Hardaker
|
|
P.O. Box 382
|
|
Davis CA 95617
|
|
|
|
email: net-snmp-coders@lists.sourceforge.net
|
|
"
|
|
DESCRIPTION
|
|
"This module defines MIB components for reading information
|
|
from the accounting rules IP Firewall. This would typically
|
|
let you read the rules and the counters. I did not include
|
|
some flags and fields that I considered irrelevant for the
|
|
accounting rules. Resetting the counters of the rules by SNMP
|
|
would be simple, but I don't consider it so useful. I gave no
|
|
consideration to implementing write access for allowing
|
|
modification of the accounting rules.
|
|
|
|
Cristian.Estan@net.utcluj.ro "
|
|
REVISION "9912160000Z"
|
|
DESCRIPTION
|
|
"SMIv2 version converted from an older MIB definition."
|
|
::= { ucdExperimental 1 }
|
|
|
|
ipFwAccTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF IpFwAccEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table with the accounting rules of the IP firewall"
|
|
::= { ucdIpFwAccMIB 1 }
|
|
|
|
ipFwAccEntry OBJECT-TYPE
|
|
SYNTAX IpFwAccEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An accounting rule of the IP firewall"
|
|
INDEX { ipFwAccIndex }
|
|
::= { ipFwAccTable 1 }
|
|
|
|
IpFwAccEntry ::= SEQUENCE {
|
|
ipFwAccIndex Integer32,
|
|
ipFwAccSrcAddr IpAddress,
|
|
ipFwAccSrcNetMask IpAddress,
|
|
ipFwAccDstAddr IpAddress,
|
|
ipFwAccDstNetMask IpAddress,
|
|
ipFwAccViaName DisplayString,
|
|
ipFwAccViaAddr IpAddress,
|
|
ipFwAccProto INTEGER,
|
|
ipFwAccBidir INTEGER,
|
|
ipFwAccDir INTEGER,
|
|
ipFwAccBytes Counter32,
|
|
ipFwAccPackets Counter32,
|
|
ipFwAccNrSrcPorts Integer32,
|
|
ipFwAccNrDstPorts Integer32,
|
|
ipFwAccSrcIsRange INTEGER,
|
|
ipFwAccDstIsRange INTEGER,
|
|
ipFwAccPort1 Integer32,
|
|
ipFwAccPort2 Integer32,
|
|
ipFwAccPort3 Integer32,
|
|
ipFwAccPort4 Integer32,
|
|
ipFwAccPort5 Integer32,
|
|
ipFwAccPort6 Integer32,
|
|
ipFwAccPort7 Integer32,
|
|
ipFwAccPort8 Integer32,
|
|
ipFwAccPort9 Integer32,
|
|
ipFwAccPort10 Integer32
|
|
}
|
|
|
|
ipFwAccIndex OBJECT-TYPE
|
|
SYNTAX Integer32 (0..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Reference index for each firewall rule."
|
|
::= { ipFwAccEntry 1 }
|
|
|
|
ipFwAccSrcAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source address in the firewall rule."
|
|
::= { ipFwAccEntry 2 }
|
|
|
|
ipFwAccSrcNetMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The netmask of the source address in the firewall rule."
|
|
::= { ipFwAccEntry 3 }
|
|
|
|
ipFwAccDstAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination address in the firewall rule."
|
|
::= { ipFwAccEntry 4 }
|
|
|
|
ipFwAccDstNetMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The netmask of the destination address in the firewall rule."
|
|
::= { ipFwAccEntry 5 }
|
|
|
|
ipFwAccViaName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..64))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of the interface to which the rule applies. If no
|
|
interface is associated with the present rule, this should
|
|
contain a dash (-)."
|
|
::= { ipFwAccEntry 6 }
|
|
|
|
ipFwAccViaAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The address of the interface to which the rule applies.
|
|
Using this parameter makes sense when multiple addresses are
|
|
associated to the same physical interface. If not defined
|
|
for the current rule this should be set to 0."
|
|
::= { ipFwAccEntry 7 }
|
|
|
|
ipFwAccProto OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
other(1),
|
|
all(2),
|
|
tcp(3),
|
|
udp(4),
|
|
icmp(5)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The protocol(s) to which the rule applies."
|
|
::= { ipFwAccEntry 8 }
|
|
|
|
ipFwAccBidir OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unidirectional(1),
|
|
bidirectional(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Whether the rule works in both directions (i.e. with the
|
|
source and destination parts swapped) or not."
|
|
::= { ipFwAccEntry 9 }
|
|
|
|
ipFwAccDir OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
both(1),
|
|
in(2),
|
|
out(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Whether the rule applies to packets entering or exiting the
|
|
kernel."
|
|
::= { ipFwAccEntry 10 }
|
|
|
|
ipFwAccBytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of bytes that matched this rule since the last
|
|
reset of the counters."
|
|
::= { ipFwAccEntry 11 }
|
|
|
|
ipFwAccPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets that matched this rule since the last
|
|
reset of the counters."
|
|
::= { ipFwAccEntry 12 }
|
|
|
|
ipFwAccNrSrcPorts OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of ports that refer to the source address."
|
|
::= { ipFwAccEntry 13 }
|
|
|
|
ipFwAccNrDstPorts OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of ports that refer to the destination address."
|
|
::= { ipFwAccEntry 14 }
|
|
|
|
ipFwAccSrcIsRange OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
srchasrange(1),
|
|
srchasnorange(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Interpret the first two ports of the source part as
|
|
the upper and lower limit of an interval or not."
|
|
::= { ipFwAccEntry 15 }
|
|
|
|
ipFwAccDstIsRange OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
dsthasrange(1),
|
|
dsthasnorange(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Interpret the first two ports of the destination part as
|
|
the upper and lower limit of an interval or not."
|
|
::= { ipFwAccEntry 16 }
|
|
|
|
ipFwAccPort1 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 1."
|
|
::= { ipFwAccEntry 17 }
|
|
|
|
ipFwAccPort2 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 2."
|
|
::= { ipFwAccEntry 18 }
|
|
|
|
ipFwAccPort3 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 3."
|
|
::= { ipFwAccEntry 19 }
|
|
|
|
ipFwAccPort4 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 4."
|
|
::= { ipFwAccEntry 20 }
|
|
|
|
ipFwAccPort5 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 5."
|
|
::= { ipFwAccEntry 21 }
|
|
|
|
ipFwAccPort6 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 6."
|
|
::= { ipFwAccEntry 22 }
|
|
|
|
ipFwAccPort7 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 7."
|
|
::= { ipFwAccEntry 23 }
|
|
|
|
ipFwAccPort8 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 8."
|
|
::= { ipFwAccEntry 24 }
|
|
|
|
ipFwAccPort9 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 9."
|
|
::= { ipFwAccEntry 25 }
|
|
|
|
ipFwAccPort10 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Port number 10."
|
|
::= { ipFwAccEntry 26 }
|
|
|
|
END
|