HP-UX Host Intrusion Detection System Version 4.3 administrator guide

Table F-2 System Manager Error Messages (continued)
ActionMeaningError Message
Either specify a specific IP address
or 0.0.0.0 (or “::” for
IPv6) . If you specify a specific IP
address, it must correspond to the
network interface for the network
connecting the administration and
agent systems. If 0.0.0.0 (or
“::” for IPv6) is selected, the
administration system can be
connected to agent systems that are
reachable on any of the
administration’s network
interfaces.
On your administration system,
edit /opt/ids/bin/idsgui. Set
the INTERFACE variable to either
the IP address you have chosen, or
to 0.0.0.0 ( or "::" for
IPV6) .
NOTE: By setting the value of the
INTERFACE variable to 0.0.0.0 (or
"::" for IPv6), the System Manager
will listen on a port (see
Configuring Ports (page 40)) on all
available interfaces. Any potential
risk from listening on all available
interfaces can be avoided by setting
the INTERFACE variable to an IP
address that the name service maps
to the local host name.
For example, change the
INTERFACE line to read
“INTERFACE=192.0.2.4”. When
you are done, reset the file
permissions to u=rx (500).
On each agent system managed by
the System Manager, the
REMOTEHOST variable in the
[RemoteSA] section in /etc/opt/
ids/ids.cf must be updated as
follows:
If the INTERFACE variable in /opt/
ids/bin/idsgui is empty, then the
local host name maps to multiple IP
addresses according to the name service
and the System Manager does not know
which IP address (and the corresponding
interface) to listen for agent connections.
If the INTERFACE variable in /opt/
ids/bin/idsgui is set to a host name,
then the specified host name maps to
multiple IP addresses according to the
name service and the System Manager
does not know which IP address (and the
corresponding interface) to use to listen
for agent connections.
This host (hostname) has multiple
network addresses. The INTERFACE
configuration setting in idsgui must
specify the hostname/IP address of
the interface to listen for connections
from agents or 0.0.0.0 or :: to listen on
all interfaces.
System Manager Messages 211