RFC 2789
Mail Monitoring MIB
RFC 2789 β¨ Mail Monitoring MIB
okay bestie, so this is the doc π It's a Standards Track spec from the Network Working Group (March 2000) by N. Freed of Innosoft and S. Kille of MessagingDirect Ltd. π
Status of this Memo
this is an Internet standards track protocol for the Internet community, and they're literally asking for discussion and suggestions for improvements π«Ά for the current standardization state and status, check the "Internet Official Protocol Standards" (STD 1) π and distribution of this memo is unlimited β¨
Copyright Notice
Copyright (C) The Internet Society (2000). All Rights Reserved. π
Introduction
so this memo defines a chunk of the Management Information Base (MIB) for network management protocols in the Internet community π§ specifically, it extends the basic Network Services Monitoring MIB from RFC 2788 [16] so you can monitor Message Transfer Agents (MTAs) π it can also monitor MTA components inside gateways, which is so useful π₯
Table of Contents
1 The SNMP Network Management Framework ....................... 2
2 Message Flow Model .......................................... 3
3 MTA Objects ................................................. 3
4 Definitions ................................................. 4
5 Changes made since RFC 2249 ................................. 29
6 Acknowledgements ............................................ 30
7 References .................................................. 30
8 Security Considerations ..................................... 31
9 Author and Chair Addresses .................................. 32
10 Full Copyright Statement .................................... 33
1. The SNMP Network Management Framework
okay so the SNMP Management Framework is currently made of five major pieces π¦
- the overall architecture, described in RFC 2571 [1] ποΈ
- the mechanisms for describing and naming objects and events for management. The first version of this Structure of Management Information (SMI) is SMIv1, described in STD 16, RFC 1155 [2], STD 16, RFC 1212 [3] and RFC 1215 [4]. The second version, SMIv2, is described in STD 58, RFC 2578 [5], STD 58, RFC 2579 [6] and STD 58, RFC 2580 [7] π
- the message protocols for moving management info around. The first version of the SNMP message protocol is SNMPv1, described in STD 15, RFC 1157 [8]. A second version, SNMPv2c, is not an Internet standards track protocol, and it's described in RFC 1901 [9] and RFC 1906 [10]. The third version is SNMPv3, described in RFC 1906 [10], RFC 2572 [11] and RFC 2574 [12] β¨
- the protocol operations for accessing management info. The first set of operations and their PDU formats is in STD 15, RFC 1157 [8]. A second set is described in RFC 1905 [13] π
- a set of fundamental applications in RFC 2573 [14], plus the view-based access control mechanism in RFC 2575 [15] π
managed objects are accessed through a virtual information store called the Management Information Base, or MIB ποΈ objects in the MIB are defined using the mechanisms in the SMI, so it's all connected, no cap π§©
this memo specifies a MIB module that's compliant with SMIv2 π a MIB for SMIv1 can be produced through the right translations. The translated MIB must be semantically equivalent, except where objects or events get omitted because no translation is possible (use of Counter64) π some machine-readable info in SMIv2 gets turned into textual descriptions in SMIv1 during translation, but losing that machine-readable info is not considered to change the semantics of the MIB. slay π
2. Message Flow Model
first things first, you need a general model of message flow inside an MTA before you can describe a MIB π§ generally speaking, message flow happens in four steps:
(1) Messages get received by the MTA from User Agents, Message Stores, other MTAs, and gateways π₯
(2) the "next hop" for each message gets determined. This is simply the destination the message is headed to, and it may or may not be the final destination π― a single message can have multiple "next hops" (because it has multiple recipients or a distribution list got expanded), and that can mean you have to duplicate messages π―
(3) if necessary, messages get converted into the format that's right for the next hop. Conversion operations can be successful or unsuccessful β¨
(4) messages get transmitted to the right destination, which could be a User Agent, Message Store, another MTA, or a gateway π
storage of messages in the MTA happens somewhere during this process, but it's important to note that storage can happen at different points, and possibly even multiple points π for example, some MTAs expand messages into multiple copies as they're received. In that case (1), (2), and (3) may all happen before storage π other MTAs store messages exactly as they're received and do all their expansions and conversions during retransmission processing, so only (1) happens before storage π° this leads to situations where a count of messages received might not equal a count of messages in store, or a count of messages stored might not equal a count of messages retransmitted, or both π
3. MTA Objects
if there are one or more MTAs on the host, you can use the following MIB to monitor them π₯οΈ any number of MTAs on a single host or group of hosts can be monitored, and each MTA is treated as its own network service with its own applTable entry in the Network Services Monitoring MIB π
the MIB in this document only covers the part specific to monitoring MTAs. The network service related part is covered in RFC 2788 [16] π
this MIB defines four tables, and they're honestly a whole lineup π
- the first holds per-MTA info that isn't specific to any particular part of the MTA π§
- the second breaks each MTA down into a collection of separate components called groups. Groups get described in detail in the comments embedded in the MIB below π§©
- the third gives you a way to correlate associations tracked by the network services MIB with specific groups inside different MTAs π
- the fourth gives you a way to track any errors the MTA runs into during operation π¨
the first two tables must be implemented to conform with this MIB, and the last two are optional π«Ά
4. Definitions
here's the actual MIB module, copied exactly as it's written (no touching the code, bestie π)
MTA-MIB DEFINITIONS ::= BEGIN
IMPORTS
OBJECT-TYPE, Counter32, Gauge32, MODULE-IDENTITY, mib-2
FROM SNMPv2-SMI
TimeInterval
FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP
FROM SNMPv2-CONF
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB
applIndex, URLString
FROM NETWORK-SERVICES-MIB;
mta MODULE-IDENTITY
LAST-UPDATED "200003030000Z"
ORGANIZATION "IETF Mail and Directory Management Working Group"
CONTACT-INFO
" Ned Freed
Postal: Innosoft International, Inc.
1050 Lakes Drive
West Covina, CA 91790
US
Tel: +1 626 919 3600
Fax: +1 626 919 3614
E-Mail: ned.freed@innosoft.com"
DESCRIPTION
"The MIB module describing Message Transfer Agents (MTAs)"
REVISION "200003030000Z"
DESCRIPTION
"This revision, published in RFC 2789, changes a number of
DisplayStrings to SnmpAdminStrings. Note that this change
is not strictly supported by SMIv2. However, the alternative
of deprecating the old objects and defining new objects
would have a more adverse impact on backward compatibility
and interoperability, given the particular semantics of
these objects. The defining reference for distinguished
names has also been updated from RFC 1779 to RFC 2253."
REVISION "199905120000Z"
DESCRIPTION
"This revision fixes a number of technical problems found in
previous versions: The conformance groups for different
versions of this MIB have been corrected, the recommendation
that an empty string be returned if the last operation was
successful has been removed from
mtaGroupInboundRejectionReason and
mtaGroupOutboundConnectFailureReason as it conflicts
with the stated purpose of these variables, and the
required mtaStatusCode entry has been added to
MtaGroupErrorEntry. It should be noted that this last
change in no way affects the bits on the wire."
REVISION "199708170000Z"
DESCRIPTION
"This revision, published in RFC 2249, adds the
mtaGroupDescription and mtaGroupURL fields, conversion
operation counters, a group hierarchy description mechanism,
counters for specific errors, oldest message IDs, per-MTA
and per-group loop counters, and a new table for tracking
any errors an MTA encounters."
REVISION "199311280000Z"
DESCRIPTION
"The original version of this MIB was published in RFC 1566"
::= {mib-2 28}
mtaTable OBJECT-TYPE
SYNTAX SEQUENCE OF MtaEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table holding information specific to an MTA."
::= {mta 1}
mtaEntry OBJECT-TYPE
SYNTAX MtaEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entry associated with each MTA."
INDEX {applIndex}
::= {mtaTable 1}
MtaEntry ::= SEQUENCE {
mtaReceivedMessages
Counter32,
mtaStoredMessages
Gauge32,
mtaTransmittedMessages
Counter32,
mtaReceivedVolume
Counter32,
mtaStoredVolume
Gauge32,
mtaTransmittedVolume
Counter32,
mtaReceivedRecipients
Counter32,
mtaStoredRecipients
Gauge32,
mtaTransmittedRecipients
Counter32,
mtaSuccessfulConvertedMessages
Counter32,
mtaFailedConvertedMessages
Counter32,
mtaLoopsDetected
Counter32
}
mtaReceivedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages received since MTA initialization.
This includes messages transmitted to this MTA from other
MTAs as well as messages that have been submitted to the
MTA directly by end-users or applications."
::= {mtaEntry 1}
mtaStoredMessages OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of messages currently stored in the MTA.
This includes messages that are awaiting transmission to
some other MTA or are waiting for delivery to an end-user
or application."
::= {mtaEntry 2}
Okay bestie, the MIB is about to get really detailed π¦β¨ Here are the counters for the mtaTable, plus the setup for the group table π
mtaTransmittedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages transmitted since MTA initialization.
This includes messages that were transmitted to some other
MTA or are waiting for delivery to an end-user or
application."
::= {mtaEntry 3}
mtaReceivedVolume OBJECT-TYPE
SYNTAX Counter32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages received since MTA
initialization, measured in kilo-octets. This volume should
include all transferred data that is logically above the mail
transport protocol level. For example, an SMTP-based MTA
should use the number of kilo-octets in the message header
and body, while an X.400-based MTA should use the number of
kilo-octets of P2 data. This includes messages transmitted
to this MTA from other MTAs as well as messages that have
been submitted to the MTA directly by end-users or
applications."
::= {mtaEntry 4}
mtaStoredVolume OBJECT-TYPE
SYNTAX Gauge32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages currently stored in the MTA,
measured in kilo-octets. This volume should include all
stored data that is logically above the mail transport
protocol level. For example, an SMTP-based MTA should
use the number of kilo-octets in the message header and
body, while an X.400-based MTA would use the number of
kilo-octets of P2 data. This includes messages that are
awaiting transmission to some other MTA or are waiting
for delivery to an end-user or application."
::= {mtaEntry 5}
mtaTransmittedVolume OBJECT-TYPE
SYNTAX Counter32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages transmitted since MTA
initialization, measured in kilo-octets. This volume should
include all transferred data that is logically above the mail
transport protocol level. For example, an SMTP-based MTA
should use the number of kilo-octets in the message header
and body, while an X.400-based MTA should use the number of
kilo-octets of P2 data. This includes messages that were
transmitted to some other MTA or are waiting for delivery
to an end-user or application."
::= {mtaEntry 6}
mtaReceivedRecipients OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
received since MTA initialization. Recipients this MTA
has no responsibility for, i.e. inactive envelope
recipients or ones referred to in message headers,
should not be counted even if information about such
recipients is available. This includes messages
transmitted to this MTA from other MTAs as well as
messages that have been submitted to the MTA directly
by end-users or applications."
::= {mtaEntry 7}
mtaStoredRecipients OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
currently stored in the MTA. Recipients this MTA has no
responsibility for, i.e. inactive envelope recipients or
ones referred to in message headers, should not be
counted. This includes messages that are awaiting
transmission to some other MTA or are waiting for
delivery to an end-user or application."
::= {mtaEntry 8}
mtaTransmittedRecipients OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
transmitted since MTA initialization. Recipients this
MTA had no responsibility for, i.e. inactive envelope
recipients or ones referred to in message headers,
should not be counted. This includes messages that were
transmitted to some other MTA or are waiting for
delivery to an end-user or application."
::= {mtaEntry 9}
mtaSuccessfulConvertedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages that have been successfully
converted from one form to another since MTA
initialization."
::= {mtaEntry 10}
mtaFailedConvertedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages for which an unsuccessful
attempt was made to convert them from one form to
another since MTA initialization."
::= {mtaEntry 11}
mtaLoopsDetected OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A message loop is defined as a situation where the MTA
decides that a given message will never be delivered to
one or more recipients and instead will continue to
loop endlessly through one or more MTAs. This variable
counts the number of times the MTA has detected such a
situation since MTA initialization. Note that the
mechanism MTAs use to detect loops (e.g., trace field
counting, count of references to this MTA in a trace
field, examination of DNS or other directory information,
etc.), the level at which loops are detected (e.g., per
message, per recipient, per directory entry, etc.), and
the handling of a loop once it is detected (e.g., looping
messages are held, looping messages are bounced or sent
to the postmaster, messages that the MTA knows will loop
won't be accepted, etc.) vary widely from one MTA to the
next and cannot be inferred from this variable."
::= {mtaEntry 12}
-- MTAs typically group inbound reception, queue storage, and
-- outbound transmission in some way, rather than accounting for
-- such operations only across the MTA as a whole. In the most
-- extreme case separate information will be maintained for each
-- different entity that receives messages and for each entity
-- the MTA stores messages for and delivers messages to. Other
-- MTAs may elect to treat all reception equally, all queue
-- storage equally, all deliveries equally, or some combination
-- of this. Overlapped groupings are also possible, where an MTA
-- decomposes its traffic in different ways for different
-- purposes.
-- In any case, a grouping abstraction is an extremely useful for
-- breaking down the activities of an MTA. For purposes of
-- labelling this will be called a "group" in this MIB.
-- Each group contains all the variables needed to monitor all
-- aspects of an MTA's operation. However, the fact that all
-- groups contain all possible variables does not imply that all
-- groups must use all possible variables. For example, a single
-- group might be used to monitor only one kind of event (inbound
-- processing, outbound processing, or storage). In this sort of
-- configuration any counters that are unused as a result of a
-- given MTA's use of the group construct must be inaccessible;
-- e.g., returning either a noSuchName error (for an SNMPv1 get),
-- or a noSuchInstance exception (for an SNMPv2 get).
-- Groups can be created at any time after MTA initialization. Once
-- a group is created it should not be deleted or its mtaGroupIndex
-- changed unless the MTA is reinitialized.
-- Groups are not necessarily mutually exclusive. A given event may
-- be recorded by more than one group, a message may be seen as
-- stored by more than one group, and so on. Groups should be all
-- inclusive, however: if groups are implemented all aspects of an
-- MTA's operation should be registered in at least one group.
-- This freedom lets implementors use different sets of groups to
-- provide different "views" of an MTA.
-- The possibility of overlap between groups means that summing
-- variables across groups may not produce values equal to those in
-- the mtaTable. mtaTable should always provide accurate information
-- about the MTA as a whole.
-- The term "channel" is often used in MTA implementations; channels
-- are usually, but not always, equivalent to a group. However,
-- this MIB does not use the term "channel" because there is no
-- requirement that an MTA supporting this MIB has to map its
-- "channel" abstraction one-to-one onto the MIB's group abstraction.
-- An MTA may create a group or group of groups at any time. Once
-- created, however, an MTA cannot delete an entry for a group from
-- the group table. Deletion is only allowed when the MTA is
-- reinitialized, and is not required even then. This restriction
-- is imposed so that monitoring agents can rely on group
-- assignments being consistent across multiple query operations.
-- Groups may be laid out so as to form a hierarchical arrangement,
-- with some groups acting as subgroups for other groups.
-- Alternately, disjoint groups of groups may be used to provide
-- different sorts of "snapshots" of MTA operation. The
-- mtaGroupHierarchy variable provides an indication of how each
-- group fits into the overall arrangement being used.
-- Note that SNMP also defines and uses term "group". MTA groups are
-- NOT the same as SNMP groups.
mtaGroupTable OBJECT-TYPE
SYNTAX SEQUENCE OF MtaGroupEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table holding information specific to each MTA group."
::= {mta 2}
mtaGroupEntry OBJECT-TYPE
SYNTAX MtaGroupEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entry associated with each MTA group."
INDEX {applIndex, mtaGroupIndex}
::= {mtaGroupTable 1}
MtaGroupEntry ::= SEQUENCE {
mtaGroupIndex
INTEGER,
mtaGroupReceivedMessages
Counter32,
mtaGroupRejectedMessages
Counter32,
mtaGroupStoredMessages
Gauge32,
mtaGroupTransmittedMessages
Counter32,
mtaGroupReceivedVolume
Counter32,
mtaGroupStoredVolume
Gauge32,
mtaGroupTransmittedVolume
Counter32,
mtaGroupReceivedRecipients
Counter32,
mtaGroupStoredRecipients
Gauge32,
mtaGroupTransmittedRecipients
Counter32,
mtaGroupOldestMessageStored
TimeInterval,
mtaGroupInboundAssociations
Gauge32,
mtaGroupOutboundAssociations
Gauge32,
mtaGroupAccumulatedInboundAssociations
Counter32,
mtaGroupAccumulatedOutboundAssociations
Counter32,
mtaGroupLastInboundActivity
TimeInterval,
mtaGroupLastOutboundActivity
TimeInterval,
mtaGroupLastOutboundAssociationAttempt
TimeInterval,
mtaGroupRejectedInboundAssociations
Counter32,
mtaGroupFailedOutboundAssociations
Counter32,
mtaGroupInboundRejectionReason
SnmpAdminString,
mtaGroupOutboundConnectFailureReason
SnmpAdminString,
mtaGroupScheduledRetry
TimeInterval,
mtaGroupMailProtocol
OBJECT IDENTIFIER,
mtaGroupName
SnmpAdminString,
mtaGroupSuccessfulConvertedMessages
Counter32,
mtaGroupFailedConvertedMessages
Counter32,
mtaGroupDescription
SnmpAdminString,
mtaGroupURL
URLString,
mtaGroupCreationTime
TimeInterval,
mtaGroupHierarchy
INTEGER,
mtaGroupOldestMessageId
SnmpAdminString,
mtaGroupLoopsDetected
Counter32
}
okay so that's the end of the mtaGroupEntry SEQUENCE, and now we get to meet every single column one by one π each one gets its own little definition, and they're all giving main character energy π
The first one is the index, and it's the ID card for each group inside an MTA πͺͺ
mtaGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index associated with a group for a given MTA."
::= {mtaGroupEntry 1}
Next up are the message counters. These are the ones that track how many messages a group has handled π¬β¨
mtaGroupReceivedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages received to this group since
group creation."
::= {mtaGroupEntry 2}
mtaGroupRejectedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages rejected by this group since
group creation."
::= {mtaGroupEntry 3}
mtaGroupStoredMessages OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of messages currently stored in this
group's queue."
::= {mtaGroupEntry 4}
mtaGroupTransmittedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages transmitted by this group since
group creation."
::= {mtaGroupEntry 5}
Now the volume objects πΈ these measure how much data is moving through, in K-octets.
mtaGroupReceivedVolume OBJECT-TYPE
SYNTAX Counter32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages received to this group since
group creation, measured in kilo-octets. This volume
should include all transferred data that is logically above
the mail transport protocol level. For example, an
SMTP-based MTA should use the number of kilo-octets in the
message header and body, while an X.400-based MTA should use
the number of kilo-octets of P2 data."
::= {mtaGroupEntry 6}
mtaGroupStoredVolume OBJECT-TYPE
SYNTAX Gauge32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages currently stored in this
group's queue, measured in kilo-octets. This volume should
include all stored data that is logically above the mail
transport protocol level. For example, an SMTP-based
MTA should use the number of kilo-octets in the message
header and body, while an X.400-based MTA would use the
number of kilo-octets of P2 data."
::= {mtaGroupEntry 7}
mtaGroupTransmittedVolume OBJECT-TYPE
SYNTAX Counter32
UNITS "K-octets"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total volume of messages transmitted by this group
since group creation, measured in kilo-octets. This
volume should include all transferred data that is logically
above the mail transport protocol level. For example, an
SMTP-based MTA should use the number of kilo-octets in the
message header and body, while an X.400-based MTA should use
the number of kilo-octets of P2 data."
::= {mtaGroupEntry 8}
Recipients next π this is the count of everyone a message is addressed to, and it's the same vibe across all three objects, just for different buckets of messages.
mtaGroupReceivedRecipients OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
received to this group since group creation.
Recipients this MTA has no responsibility for should not
be counted."
::= {mtaGroupEntry 9}
mtaGroupStoredRecipients OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
currently stored in this group's queue. Recipients this
MTA has no responsibility for should not be counted."
::= {mtaGroupEntry 10}
mtaGroupTransmittedRecipients OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of recipients specified in all messages
transmitted by this group since group creation.
Recipients this MTA had no responsibility for should not
be counted."
::= {mtaGroupEntry 11}
Time-based objects are next β° they tell you how long ago something happened, and they all use the TimeInterval type.
mtaGroupOldestMessageStored OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since the oldest message in this group's queue was
placed in the queue."
::= {mtaGroupEntry 12}
Association objects are where it gets lowkey dramatic π€ we've got current associations, accumulated ones, and the rejected and failed ones, and each one has its own job.
mtaGroupInboundAssociations OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of current associations to the group, where the
group is the responder."
::= {mtaGroupEntry 13}
mtaGroupOutboundAssociations OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of current associations to the group, where the
group is the initiator."
::= {mtaGroupEntry 14}
mtaGroupAccumulatedInboundAssociations OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of associations to the group since
group creation, where the MTA was the responder."
::= {mtaGroupEntry 15}
mtaGroupAccumulatedOutboundAssociations OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of associations from the group since
group creation, where the MTA was the initiator."
::= {mtaGroupEntry 16}
mtaGroupLastInboundActivity OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since the last time that this group had an active
inbound association for purposes of message reception."
::= {mtaGroupEntry 17}
mtaGroupLastOutboundActivity OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since the last time that this group had a
successful outbound association for purposes of
message delivery."
::= {mtaGroupEntry 18}
mtaGroupLastOutboundAssociationAttempt OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since the last time that this group attempted
to make an outbound association for purposes of
message delivery."
::= {mtaGroupEntry 34}
mtaGroupRejectedInboundAssociations OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of inbound associations the group has
rejected, since group creation. Rejected associations
are not counted in the accumulated association totals."
::= {mtaGroupEntry 19}
mtaGroupFailedOutboundAssociations OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number associations where the group was the
initiator and association establishment has failed,
since group creation. Failed associations are
not counted in the accumulated association totals."
::= {mtaGroupEntry 20}
Okay the reason objects are the tea β they hold the failure reason for the last association, and yes, the spelling in the description is exactly how it's written. Don't @ me π
mtaGroupInboundRejectionReason OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The failure reason, if any, for the last association this
group refused to respond to. If no association attempt
has been made since the MTA was initialized the value
should be 'never'."
::= {mtaGroupEntry 21}
mtaGroupOutboundConnectFailureReason OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The failure reason, if any, for the last association attempt
this group initiated. If no association attempt has been
made since the MTA was initialized the value should be
'never'."
::= {mtaGroupEntry 22}
mtaGroupScheduledRetry OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The amount of time until this group is next scheduled to
attempt to make an association."
::= {mtaGroupEntry 23}
Mail protocol is next π§ this one identifies which protocol the group is running, and the way it's built is so specific, it's iconic.
mtaGroupMailProtocol OBJECT-TYPE
SYNTAX OBJECT IDENTIFIER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"An identification of the protocol being used by this group.
For an group employing OSI protocols, this will be the
Application Context. For Internet applications, OID
values of the form {applTCPProtoID port} or {applUDPProtoID
port} are used for TCP-based and UDP-based protocols,
respectively. In either case 'port' corresponds to the
primary port number being used by the protocol. The
usual IANA procedures may be used to register ports for
new protocols. applTCPProtoID and applUDPProtoID are
defined in the NETWORK-SERVICES-MIB, RFC 2788."
::= {mtaGroupEntry 24}
The name object is a lot too π the description walks through a few different naming styles depending on what kind of MTA you've got, so read it slowly.
mtaGroupName OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A descriptive name for the group. If this group connects to
a single remote MTA this should be the name of that MTA. If
this in turn is an Internet MTA this should be the domain
name. For an OSI MTA it should be the string encoded
distinguished name of the managed object using the format
defined in RFC 2253. For X.400(1984) MTAs which do not
have a Distinguished Name, the RFC 2156 syntax
'mta in globalid' used in X400-Received: fields can be
used."
::= {mtaGroupEntry 25}
Last but not least, the conversion counters and the descriptive stuff π these track format conversions and give the group a description and URL so status displays look cute.
mtaGroupSuccessfulConvertedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages that have been successfully
converted from one form to another in this group
since group creation."
::= {mtaGroupEntry 26}
mtaGroupFailedConvertedMessages OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of messages for which an unsuccessful
attempt was made to convert them from one form to
another in this group since group creation."
::= {mtaGroupEntry 27}
mtaGroupDescription OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A description of the group's purpose. This information is
intended to identify the group in a status display."
::= {mtaGroupEntry 28}
mtaGroupURL OBJECT-TYPE
SYNTAX URLString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A URL pointing to a description of the group. This
information is intended to identify and briefly describe
the group in a status display."
::= {mtaGroupEntry 29}
mtaGroupCreationTime OBJECT-TYPE
SYNTAX TimeInterval
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Time since this group was first created."
::= {mtaGroupEntry 30}
Okay bestie, the group hierarchy and error stuff is up next, so let's keep going π
mtaGroupHierarchy OBJECT-TYPE
SYNTAX INTEGER (-2147483648..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Describes how this group fits into the hierarchy. A
positive value is interpreted as an mtaGroupIndex
value for some other group whose variables include
those of this group (and usually others). A negative
value is interpreted as a group collection code: Groups
with common negative hierarchy values comprise one
particular breakdown of MTA activity as a whole. A
zero value means that this MIB implementation doesn't
implement hierarchy indicators and thus the overall
group hierarchy cannot be determined."
::= {mtaGroupEntry 31}
mtaGroupOldestMessageId OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Message ID of the oldest message in the group's queue.
Whenever possible this should be in the form of an
RFC 822 msg-id; X.400 may convert X.400 message
identifiers to this form by following the rules laid
out in RFC2156."
::= {mtaGroupEntry 32}
mtaGroupLoopsDetected OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A message loop is defined as a situation where the MTA
decides that a given message will never be delivered to
one or more recipients and instead will continue to
loop endlessly through one or more MTAs. This variable
counts the number of times the MTA has detected such a
situation in conjunction with something associated with
this group since group creation. Note that the
mechanism MTAs use to detect loops (e.g., trace field
counting, count of references to this MTA in a trace
field, examination of DNS or other directory information,
etc.), the level at which loops are detected (e.g., per
message, per recipient, per directory entry, etc.), and
the handling of a loop once it is detected (e.g., looping
messages are held, looping messages are bounced or sent
to the postmaster, messages that the MTA knows will loop
won't be accepted, etc.) vary widely from one MTA to the
next and cannot be inferred from this variable."
::= {mtaGroupEntry 33}
-- The mtaGroupAssociationTable provides a means of correlating
-- entries in the network services association table with the
-- MTA group responsible for the association.
mtaGroupAssociationTable OBJECT-TYPE
SYNTAX SEQUENCE OF MtaGroupAssociationEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table holding information regarding the associations
for each MTA group."
::= {mta 3}
mtaGroupAssociationEntry OBJECT-TYPE
SYNTAX MtaGroupAssociationEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entry holding information regarding the associations
for each MTA group."
INDEX {applIndex, mtaGroupIndex, mtaGroupAssociationIndex}
::= {mtaGroupAssociationTable 1}
MtaGroupAssociationEntry ::= SEQUENCE {
mtaGroupAssociationIndex
INTEGER
}
mtaGroupAssociationIndex OBJECT-TYPE
SYNTAX INTEGER (1..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reference into association table to allow correlation of
this group's active associations with the association table."
::= {mtaGroupAssociationEntry 1}
-- The mtaGroupErrorTable gives each group a way of tallying
-- the specific errors it has encountered. The mechanism
-- defined here uses RFC 1893 status codes to identify
-- various specific errors. There are also classes for generic
-- errors of various sorts, and the entire mechanism is also
-- extensible, in that new error codes can be defined at any
-- time.
mtaGroupErrorTable OBJECT-TYPE
SYNTAX SEQUENCE OF MtaGroupErrorEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The table holding information regarding accumulated errors
for each MTA group."
::= {mta 5}
mtaGroupErrorEntry OBJECT-TYPE
SYNTAX MtaGroupErrorEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The entry holding information regarding accumulated
errors for each MTA group."
INDEX {applIndex, mtaGroupIndex, mtaStatusCode}
::= {mtaGroupErrorTable 1}
MtaGroupErrorEntry ::= SEQUENCE {
mtaStatusCode
INTEGER (4000000..5999999),
mtaGroupInboundErrorCount
Counter32,
mtaGroupInternalErrorCount
Counter32,
mtaGroupOutboundErrorCount
Counter32
}
mtaGroupInboundErrorCount OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Count of the number of errors of a given type that have
been accumulated in association with a particular group
while processing incoming messages. In the case of SMTP
these will typically be errors reporting by an SMTP
server to the remote client; in the case of X.400
these will typically be errors encountered while
processing an incoming message."
::= {mtaGroupErrorEntry 1}
mtaGroupInternalErrorCount OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Count of the number of errors of a given type that have
been accumulated in association with a particular group
during internal MTA processing."
::= {mtaGroupErrorEntry 2}
mtaGroupOutboundErrorCount OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Count of the number of errors of a given type that have
been accumulated in association with a particular group's
outbound connection activities. In the case of an SMTP
client these will typically be errors reported while
attempting to contact or while communicating with the
remote SMTP server. In the case of X.400 these will
typically be errors encountered while constructing
or attempting to deliver an outgoing message."
::= {mtaGroupErrorEntry 3}
mtaStatusCode OBJECT-TYPE
SYNTAX INTEGER (4000000..5999999)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An index capable of representing an Enhanced Mail System
Status Code. Enhanced Mail System Status Codes are
defined in RFC 1893. These codes have the form
class.subject.detail
Here 'class' is either 2, 4, or 5 and both 'subject' and
'detail' are integers in the range 0..999. Given a status
code the corresponding index value is defined to be
((class * 1000) + subject) * 1000 + detail. Both SMTP
error response codes and X.400 reason and diagnostic codes
can be mapped into these codes, resulting in a namespace
capable of describing most error conditions a mail system
encounters in a generic yet detailed way."
::= {mtaGroupErrorEntry 4}
-- Conformance information
mtaConformance OBJECT IDENTIFIER ::= {mta 4}
mtaGroups OBJECT IDENTIFIER ::= {mtaConformance 1}
mtaCompliances OBJECT IDENTIFIER ::= {mtaConformance 2}
-- Compliance statements
mtaCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 1566 implementations
which support the Mail Monitoring MIB for basic
monitoring of MTAs."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC1566Group}
::= {mtaCompliances 1}
mtaAssocCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 1566 implementations
which support the Mail Monitoring MIB for monitoring
of MTAs and their associations."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC1566Group, mtaRFC1566AssocGroup}
::= {mtaCompliances 2}
mtaRFC2249Compliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2249 implementations
which support the Mail Monitoring MIB for basic
monitoring of MTAs."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2249Group}
::= {mtaCompliances 5}
mtaRFC2249AssocCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2249 implementations
which support the Mail Monitoring MIB for monitoring of
MTAs and their associations."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2249Group, mtaRFC2249AssocGroup}
::= {mtaCompliances 6}
mtaRFC2249ErrorCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2249 implementations
which support the Mail Monitoring MIB for monitoring of
MTAs and detailed errors."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2249Group, mtaRFC2249ErrorGroup}
::= {mtaCompliances 7}
mtaRFC2249FullCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2249 implementations
which support the full Mail Monitoring MIB for
monitoring of MTAs, associations, and detailed errors."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2249Group, mtaRFC2249AssocGroup,
mtaRFC2249ErrorGroup}
::= {mtaCompliances 8}
mtaRFC2789Compliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2789 implementations
which support the Mail Monitoring MIB for basic
monitoring of MTAs."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2789Group}
::= {mtaCompliances 9}
mtaRFC2789AssocCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2789 implementations
which support the Mail Monitoring MIB for monitoring of
MTAs and their associations."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2789Group, mtaRFC2789AssocGroup}
::= {mtaCompliances 10}
mtaRFC2789ErrorCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2789 implementations
which support the Mail Monitoring MIB for monitoring of
MTAs and detailed errors."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2789Group, mtaRFC2789ErrorGroup}
::= {mtaCompliances 11}
mtaRFC2789FullCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for RFC 2789 implementations
which support the full Mail Monitoring MIB for
monitoring of MTAs, associations, and detailed errors."
MODULE -- this module
MANDATORY-GROUPS {mtaRFC2789Group, mtaRFC2789AssocGroup,
mtaRFC2789ErrorGroup}
::= {mtaCompliances 12}
-- Units of conformance
mtaRFC1566Group OBJECT-GROUP
OBJECTS {
mtaReceivedMessages, mtaStoredMessages,
mtaTransmittedMessages, mtaReceivedVolume, mtaStoredVolume,
mtaTransmittedVolume, mtaReceivedRecipients,
mtaStoredRecipients, mtaTransmittedRecipients,
mtaGroupReceivedMessages, mtaGroupRejectedMessages,
mtaGroupStoredMessages, mtaGroupTransmittedMessages,
mtaGroupReceivedVolume, mtaGroupStoredVolume,
mtaGroupTransmittedVolume, mtaGroupReceivedRecipients,
mtaGroupStoredRecipients, mtaGroupTransmittedRecipients,
mtaGroupOldestMessageStored, mtaGroupInboundAssociations,
mtaGroupOutboundAssociations,
mtaGroupAccumulatedInboundAssociations,
mtaGroupAccumulatedOutboundAssociations,
mtaGroupLastInboundActivity, mtaGroupLastOutboundActivity,
mtaGroupRejectedInboundAssociations,
mtaGroupFailedOutboundAssociations,
mtaGroupInboundRejectionReason,
mtaGroupOutboundConnectFailureReason,
mtaGroupScheduledRetry, mtaGroupMailProtocol, mtaGroupName}
STATUS current
DESCRIPTION
"A collection of objects providing basic monitoring of MTAs.
This is the original set of such objects defined in RFC
1566."
::= {mtaGroups 10}
mtaRFC1566AssocGroup OBJECT-GROUP
OBJECTS {
mtaGroupAssociationIndex}
STATUS current
DESCRIPTION
"A collection of objects providing monitoring of MTA
associations. This is the original set of such objects
defined in RFC 1566."
::= {mtaGroups 11}
mtaRFC2249Group OBJECT-GROUP
OBJECTS {
mtaReceivedMessages, mtaStoredMessages,
mtaTransmittedMessages, mtaReceivedVolume, mtaStoredVolume,
mtaTransmittedVolume, mtaReceivedRecipients,
mtaStoredRecipients, mtaTransmittedRecipients,
mtaSuccessfulConvertedMessages, mtaFailedConvertedMessages,
mtaGroupReceivedMessages, mtaGroupRejectedMessages,
mtaGroupStoredMessages, mtaGroupTransmittedMessages,
mtaGroupReceivedVolume, mtaGroupStoredVolume,
mtaGroupTransmittedVolume, mtaGroupReceivedRecipients,
mtaGroupStoredRecipients, mtaGroupTransmittedRecipients,
mtaGroupOldestMessageStored, mtaGroupInboundAssociations,
mtaGroupOutboundAssociations, mtaLoopsDetected,
mtaGroupAccumulatedInboundAssociations,
mtaGroupAccumulatedOutboundAssociations,
mtaGroupLastInboundActivity, mtaGroupLastOutboundActivity,
mtaGroupLastOutboundAssociationAttempt,
mtaGroupRejectedInboundAssociations,
mtaGroupFailedOutboundAssociations,
mtaGroupInboundRejectionReason,
mtaGroupOutboundConnectFailureReason,
mtaGroupScheduledRetry, mtaGroupMailProtocol, mtaGroupName,
mtaGroupSuccessfulConvertedMessages,
mtaGroupFailedConvertedMessages, mtaGroupDescription,
mtaGroupURL, mtaGroupCreationTime, mtaGroupHierarchy,
mtaGroupOldestMessageId, mtaGroupLoopsDetected}
STATUS current
DESCRIPTION
"A collection of objects providing basic monitoring of MTAs.
This group was originally defined in RFC 2249."
::= {mtaGroups 4}
mtaRFC2249AssocGroup OBJECT-GROUP
OBJECTS {
mtaGroupAssociationIndex}
STATUS current
DESCRIPTION
"A collection of objects providing monitoring of MTA
associations. This group was originally defined in RFC
2249."
::= {mtaGroups 5}
mtaRFC2249ErrorGroup OBJECT-GROUP
OBJECTS {
mtaGroupInboundErrorCount, mtaGroupInternalErrorCount,
mtaGroupOutboundErrorCount}
STATUS current
DESCRIPTION
"A collection of objects providing monitoring of
detailed MTA errors. This group was originally defined
in RFC 2249."
::= {mtaGroups 6}
mtaRFC2789Group OBJECT-GROUP
OBJECTS {
mtaReceivedMessages, mtaStoredMessages,
mtaTransmittedMessages, mtaReceivedVolume, mtaStoredVolume,
mtaTransmittedVolume, mtaReceivedRecipients,
mtaStoredRecipients, mtaTransmittedRecipients,
mtaSuccessfulConvertedMessages, mtaFailedConvertedMessages,
mtaGroupReceivedMessages, mtaGroupRejectedMessages,
mtaGroupStoredMessages, mtaGroupTransmittedMessages,
mtaGroupReceivedVolume, mtaGroupStoredVolume,
mtaGroupTransmittedVolume, mtaGroupReceivedRecipients,
mtaGroupStoredRecipients, mtaGroupTransmittedRecipients,
mtaGroupOldestMessageStored, mtaGroupInboundAssociations,
mtaGroupOutboundAssociations, mtaLoopsDetected,
mtaGroupAccumulatedInboundAssociations,
mtaGroupAccumulatedOutboundAssociations,
mtaGroupLastInboundActivity, mtaGroupLastOutboundActivity,
mtaGroupLastOutboundAssociationAttempt,
mtaGroupRejectedInboundAssociations,
mtaGroupFailedOutboundAssociations,
mtaGroupInboundRejectionReason,
mtaGroupOutboundConnectFailureReason,
mtaGroupScheduledRetry, mtaGroupMailProtocol, mtaGroupName,
mtaGroupSuccessfulConvertedMessages,
mtaGroupFailedConvertedMessages, mtaGroupDescription,
mtaGroupURL, mtaGroupCreationTime, mtaGroupHierarchy,
mtaGroupOldestMessageId, mtaGroupLoopsDetected}
STATUS current
DESCRIPTION
"A collection of objects providing basic monitoring of MTAs.
This is the appropriate group for RFC 2789."
::= {mtaGroups 7}
mtaRFC2789AssocGroup OBJECT-GROUP
OBJECTS {
mtaGroupAssociationIndex}
STATUS current
DESCRIPTION
"A collection of objects providing monitoring of MTA
associations. This is the appropriate group for RFC
2789 association monitoring."
::= {mtaGroups 8}
mtaRFC2789ErrorGroup OBJECT-GROUP
OBJECTS {
mtaGroupInboundErrorCount, mtaGroupInternalErrorCount,
mtaGroupOutboundErrorCount}
STATUS current
DESCRIPTION
"A collection of objects providing monitoring of
detailed MTA errors. This is the appropriate group
for RFC 2789 error monitoring."
::= {mtaGroups 9}
END
5. Changes made since RFC 2249 πβ¨
Okay so this revision fixes a bunch of little technical slip-ups in the mail monitoring MIB from RFC 2249 [18]. Literally tiny glow-ups, but they matter! π
(1) All DisplayStrings have been changed to SnmpAdminStrings,
(2) the conformance groups for different versions of this MIB have been corrected,
(3) the required mtaStatusCode entry has been added to MtaGroupErrorEntry (which does not affect the bits on the wire in any way), and
(4) the recommendation that an empty string be returned if the last operation was successful has been removed from mtaGroupInboundRejectionReason and mtaGroupOutboundConnectFailureReason as it conflicts with the stated purpose of these variables. π
6. Acknowledgements π«Ά
This document is a work product of the Mail and Directory Management (MADMAN) Working Group of the IETF. It's based on an earlier MIB designed by S. Kille, T. Lenggenhager, D. Partain, and W. Yeong. πΈ The Electronic Mail Association's TSC committee was super instrumental in giving feedback on and suggesting enhancements to RFC 1566 [19], and that's what led to this document. Iconic teamwork π
7. References π
[1] Harrington, D., Presuhn, R. and B. Wijnen, "An Architecture for Describing SNMP Management Frameworks", RFC 2571, April 1999.
[2] Rose, M. and K. McCloghrie, "Structure and Identification of Management Information for TCP/IP-based Internets", STD 16, RFC 1155, May 1990.
[3] Rose, M. and K. McCloghrie, "Concise MIB Definitions", STD 16, RFC 1212, March 1991.
[4] Rose, M., "A Convention for Defining Traps for use with the SNMP", RFC 1215, March 1991.
[5] McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
[6] McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
[7] McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
[8] Case, J., Fedor, M., Schoffstall, M. and J. Davin, "Simple Network Management Protocol", STD 15, RFC 1157, May 1990.
[9] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Introduction to Community-based SNMPv2", RFC 1901, January 1996.
[10] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Transport Mappings for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1906, January 1996.
[11] Case, J., Harrington D., Presuhn R. and B. Wijnen, "Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)", RFC 2572, April 1999.
[12] Blumenthal, U. and B. Wijnen, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)", RFC 2574, April 1999.
[13] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser, "Protocol Operations for Version 2 of the Simple Network Management Protocol (SNMPv2)", RFC 1905, January 1996.
[14] Levi, D., Meyer, P. and B. Stewart, "SNMPv3 Applications", RFC 2573, April 1999.
[15] Wijnen, B., Presuhn, R. and K. McCloghrie, "View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)", RFC 2575, April 1999.
[16] Freed, N. and S. Kille, "Network Services Monitoring MIB", RFC 2788, March 2000.
[17] Wahl, M., Kille, S. and T. Howes, "Lightweight Directory Access Protocol (v3): UTF-8 String Representation of Distinguished Names", RFC 2253, December 1997.
[18] Freed, N. and S. Kille, "Mail Monitoring MIB", RFC 2249, January 1998.
[19] Freed, N. and S. Kille, "Mail Monitoring MIB", RFC 1566, January 1994.
[20] Kille, S., "Mapping between X.400(1988) and RFC 822/MIME", RFC 2156, January 1998.
[21] Crocker, D., "Standard for the Format of ARPA Internet Text Message", STD 11, RFC 822, August 1982.
[22] Vaudreuil, G., "Enhanced Mail System Status Codes", RFC 1893, January 1996.
8. Security Considerations π
Heads up, bestie: this section is serious business, so read it closely! π¨
There are no management objects defined in this MIB that have a MAX-ACCESS clause of read-write and/or read-create. So, if this MIB is implemented correctly, then there is no risk that an intruder can alter or create any management objects of this MIB via direct SNMP SET operations. π‘οΈ
However, this MIB does provide passive information about the existence, type, and configuration of applications on a given host that could potentially indicate some sort of vulnerability. Finally, the information MIB provides about network usage could be used to analyze network traffic patterns. π
SNMPv1 by itself is not a secure environment. Even if the network itself is secure (for example by using IPSec), even then, there is no control as to who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB. π
It is recommended that the implementers consider the security features as provided by the SNMPv3 framework. Specifically, the use of the User-based Security Model RFC 2574 [12] and the View-based Access Control Model RFC 2575 [15] is recommended. π
It is then a customer/user responsibility to ensure that the SNMP entity giving access to an instance of this MIB, is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them. π
9. Author and Chair Addresses π
Here's where you can find the people behind this one, bestie π«Ά
Ned Freed
Innosoft International, Inc.
1050 Lakes Drive
West Covina, CA 91790
USA
Phone: +1 626 919 3600
Fax: +1 626 919 3614
EMail: ned.freed@innosoft.com
Steve Kille, MADMAN WG Chair
MessagingDirect Ltd.
The Dome, The Square
Richmond TW9 1DT
UK
Phone: +44 20 8332 9091
EMail: Steve.Kille@MessagingDirect.com
10. Full Copyright Statement βοΈ
Copyright (C) The Internet Society (2000). All Rights Reserved. π
Okay, so the vibe here is "share it, just don't mess with it" π You can copy this document and hand it to people, and you can write derivative works that comment on it, explain it, or help people implement it. You can publish and distribute all of that, in whole or in part, with no restrictions, as long as the copyright notice and this paragraph stay on every copy and derivative work. The document itself, though, can't be modified in any way. That includes removing the copyright notice or the references to the Internet Society or other Internet organizations. The exceptions are developing Internet standards, where the copyright procedures in the Internet Standards process must be followed, and translating it into languages other than English. β¨
The permissions are perpetual, which means the Internet Society and its successors or assigns won't revoke them. Permanent access, iconic π
This document and the information in it are provided on an "AS IS" basis, and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. π No cap, the fine print is serious.
Acknowledgement πΈ
Funding for the RFC Editor function is currently provided by the Internet Society. π§
π¦ where this page comes from
- ietf: rfc2789 2000-03
- π girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms