Project

General

Profile

Actions
Copy link

Anomalie #990

closed

zabbix ne peut pas passer par le VPN

Added by Loïc Dachary about 12 years ago. Updated about 12 years ago.

Status:
Fermé
Priority:
Normale
Assignee:
Loïc Dachary
Category:
Task
Target version:
Novembre 2012
Start date:
11/03/2012
Due date:
11/03/2012
% Done:

100%

Estimated time:
Spent time:
1:00 h
Difficulté:
2 Facile

Description

Sur ns1 /etc/init.d/firewall contient

        # OpenVPN
        ${IPT} -I INPUT  -p udp --dport 1194 -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p icmp -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p icmp -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 22  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 22  -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 53  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 53  -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p udp --dport 53  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p udp --dport 53  -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 80  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 80  -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 443  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 443  -j ACCEPT
        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 3306  -j ACCEPT
        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 3306  -j ACCEPT

et donc quand c'est relancé comme dit dans http://127.0.0.1:8080/dokuwiki/doku.php?id=sysadm:fonctions:firewall ça interdit a zabbix de passer

Related issues 1 (0 open — 1 closed)

Blocks Admins - Demande #984: monitor openstack controllerFerméLoïc Dachary11/03/201211/04/2012

Actions
Actions
Copy link
 #1

Updated by Loïc Dachary about 12 years ago

  • Due date set to 11/03/2012
  • Status changed from En cours de traitement to Fermé
  • % Done changed from 40 to 100

sur ns1.april.org et pavot.april.org

commit fcde59f2b2673a75608fcd0ac10ef4851ac1cdfb
Author: root <root@april.org>
Date:   Sat Nov 3 17:48:16 2012 +0100

    ajout du port 10050 dans la liste des ports autorisés pour le VPN interne de l'April afin que zabbix puisse passer par le VPN pour relever le\
s données de l'agent zabbix

diff --git a/init.d/firewall.sh b/init.d/firewall.sh
index 9bb332a..dd70cf4 100755
--- a/init.d/firewall.sh
+++ b/init.d/firewall.sh
@@ -327,6 +327,8 @@ fwstart() {
         ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 443  -j ACCEPT
         ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 3306  -j ACCEPT
         ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 3306  -j ACCEPT
+        ${IPT} -I INPUT  -s $NET_VPN -d $NET_VPN -p tcp --dport 10050  -j ACCEPT
+        ${IPT} -I OUTPUT -s $NET_VPN -d $NET_VPN -p tcp --dport 10050  -j ACCEPT
 }

 #

puis relancé sur ns1.april.org uniquement

Actions
Copy link

Also available in: Atom PDF