Appendix C Security Issues

This appendix describes security issues related to the activity of a Netra Proxy Cache Array.

Update Daemon

The Netra Proxy Cache Array software uses an update daemon that enables a Netra Proxy Cache host to receive configuration updates from the administrative host. By default, this daemon, /opt/SUNWoam/lib/oampushd, enables updates from any host that knows its port number and is on the same subnet as the Netra Proxy Cache machine.

To disable updates on a given host, use the oamcontrol command, as follows:

# /opt/SUNWscalr/bin/oamcontrol disable_updates

To re-enable updates, use the enable_updates option to oamcontrol. See the oamcontrol (1) man page for all of the arguments to that command.