1UPSD.CONF(5) Network UPS Tools (NUT) UPSD.CONF(5)
2
6 upsd.conf - Configuration for Network UPS Tools upsd
7
10 upsd uses this file to control access to the server and set some other
11 miscellaneous configuration values. This file contains details on
12 access controls, so keep it secure. Ideally, only the upsd process
13 should be able to read it.
14
17 ACL name netblock
18 Define an Access Control List (ACL) called name that contains
20 the network netblock. The netblock can be either the old style,
21 such as this for a traditional "class C":
22 ACL mynet 192.168.50.0/255.255.255.0
24 Or, you can use new‐style "CIDR format":
26 ACL mynet 192.168.50.0/24
28 To just list one host, it would look like one of these:
30 ACL mybox 192.168.50.1/255.255.255.255
32 ACL mybox 192.168.50.1/32
34 ACLs are used whenever you need to refer to a network or host,
36 such as in ACCEPT/REJECT definitions (below) and with
37 "allowfrom" in upsd.users(5).
38 ACCEPT aclname [aclname...]
41 ACCEPT let clients on the hosts or networks defined by aclname
43 connect to upsd. You may specify multiple ACL names on the
44 ACCEPT line, and you may have multiple ACCEPT lines.
45 ACCEPT localhost mybox
47 ACCEPT otherbox
49 REJECT aclname [aclname...]
52 Like ACCEPT, but it denies access instead. upsd will close the
54 connection without reading any data from the network.
55 Note: you should still use firewall rules if your system pro‐
57 vides them. That provides another level of coverage.
58 REJECT badbox
60 REJECT all
62
65 Here is an example configuration to show some of what is possible.
66 "bigserver" has a UPS attached to a serial port. It runs the driver,
68 upsd, and upsmon in master mode. This definition is also referenced
69 with an "allowfrom" in upsd.users(8).
70 "workstation" draws from the same UPS as "bigserver", but has to moni‐
72 tor it over the network. It runs upsmon in slave mode. It is also
73 referenced with an "allowfrom" in upsd.users(8).
74 "webserver" doesn't get power from this UPS at all, but it runs the CGI
76 programs so it can make nice status displays.
77 An abuser's host is explicitly denied.
79 Everything else is rejected.
81 ACL bigserver 10.20.30.1/32
84 ACL workstation 10.20.30.2/32
85 ACL webserver 10.20.30.3/32
86 ACL abuser 192.168.255.128/32
87 ACL all 0.0.0.0/0
88 ACCEPT bigserver workstation webserver
90 REJECT abuser
91 REJECT all
92
94 ACCEPT and REJECT directives are checked in the order they occur in
95 this file. The first ACL which matches a client causes the action to
96 be taken. If you need to ACCEPT one host and REJECT the rest of a net‐
97 work, first list the host, then list the network on a line below it.
98 ACCEPT goodhost
100 REJECT badnet
102 Any IP address which does not match one of your directives will default
104 to REJECT. This is intended to keep your system safe if you forget to
105 put "REJECT all" at the bottom.
106 If you really want the whole world to have access to upsd, you can do
108 "ACCEPT all", but that is not recommended.
109
112 MAXAGE seconds
113 upsd usually allows a driver to stop responding for up to 15
115 seconds before declaring the data "stale". If your driver takes
116 a very long time to process updates but is otherwise opera‐
117 tional, you can use MAXAGE to make upsd wait longer.
118 Most users should leave this at the default value.
120 STATEPATH path
123 Tell upsd to look for the driver state sockets in path rather
125 than the default that was compiled into the program.
126
129 upsd(8), nutupsdrv(8), upsd.users(5)
130 Internet resources:
133 The NUT (Network UPS Tools) home page: http://www.networkupstools.org/
134 Fri Apr 23 2004 UPSD.CONF(5)