OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: jejema2 on February 17, 2020, 05:05:28 pm

Title: Nrpe[Solved]
Post by: jejema2 on February 17, 2020, 05:05:28 pm

Hello

Already posted in French section, I try here...

I have a fresh install 20.1 upgraded into 20.1.1
I want to monitor the opnsense via a nagios server.
I installed the os-nrpe package via the WUI and configured it to listen to my nagios server.
All requests fall in a timeout error.
 CHECK_NRPE STATE CRITICAL: Socket timeout after 10 seconds.
Nrpe service is up, the commands definition are ok, telnet localhost 5666 ok, but telnet opnsense from nagios server is ko.

Any idea?

Title: Re: Nrpe
Post by: mimugmail on February 17, 2020, 05:50:17 pm

Firewall rule for port 5666?

Title: Re: Nrpe
Post by: jejema2 on February 18, 2020, 04:14:33 pm

the only rule is the allow any/any on LAN side

Title: Re: Nrpe
Post by: mimugmail on February 18, 2020, 04:33:32 pm

And do you see anything on the logs? /var/log/nrpe.log?

Title: Re: Nrpe
Post by: jejema2 on February 18, 2020, 05:16:30 pm

nothing excepted general logs :

[1581687468] Starting up daemon
[1581687468] Server listening on 127.0.0.1 port 5666.
[1581687468] Listening for connections on port 5666
[1581687468] Allowing connections from: 127.0.0.1,<nagios_server_ip>

Title: Re: Nrpe
Post by: fabian on February 18, 2020, 05:25:44 pm

Sounds not reachable from outside of OPnsense. You must listen on an interface IP or 0/0

Title: Re: Nrpe
Post by: jejema2 on February 19, 2020, 11:25:31 am

How can I make it reachable from the outside?

Title: Re: Nrpe
Post by: mimugmail on February 19, 2020, 04:05:10 pm

What so you use as server address?

Title: Re: Nrpe
Post by: jejema2 on February 19, 2020, 04:27:49 pm

Listener address : 127.0.0.1
Allowed hosts : 127.0.0.1 + ip of my nagios server

Title: Re: Nrpe
Post by: mimugmail on February 19, 2020, 08:56:06 pm

Listen Address should be your WAN or LAN address, the address you configured at your central nagios

Title: Re: Nrpe
Post by: jejema2 on February 20, 2020, 10:49:48 am

Great, ok is ok now, thank you very much ! ;D