But now, when I restart the iptables' service, the nagios works good... but at the next update of Nagios the follow message looks me: CHECK_NRPE - socket timeout after 10 seconds...
Anyone could help me again??
Thanks
2006/8/14, Hari Sekhon <[EMAIL PROTECTED]>:
If you want the rule to match any ip then you should just leave the -s any and -d any out of the line
iptables -A INPUT -p udp --dport 5666 -j ACCEPT
iptables -A FORWARD -p udp --dport=5666 -j ACCEPT
This will allow anything from anywhere to port 5666 on this host. The second line is not needed unless this box is a router. It's better to do something like
iptables -A INPUT -p udp -s 192.168.1.0/24 --dport 5666 -j ACCEPT
assuming your network is in the 192.168.1.1-255 range, since this would limit the port opening to only those machine on your network (or more specifically those machines in the 192.168.1.0 network).
If it causes you too much trouble, you could be forgiven for doing iptables -F and disable it's re-application in the init scripts (assuming this host is protected behind a firewall!)
Hari
Rodrigo Maceno wrote:Ok, I understood what you said... But you could help me one more time? I tried to put two rules in IpTables:
iptables -A INPUT -p udp -s any/0 -d any/0 --dport=5666 -j ACCEPTbut I don't know if there is anything wrong... Could you help again??
iptables -A FORWARD -p udp -s any/0 -d any/0 --dport=5666 -j ACCEPT
Thanks...
2006/8/14, Hari Sekhon <[EMAIL PROTECTED] >:Rodrigo Maceno wrote:Hello,
I have the nagios installed and working normal, but it only works if I stop he iptables service. I would like to know how do it to run the Nagios without stop iptables. Anyone could help me??
Thanks,
Rodrigo L. Maceno
PS: Sorry for my english... :/
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimohttp://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
you need to learn iptables to open the necessary ports.
man iptables
would be a good place to start.
also, check out which ports are used by services etc using netstat. It will take you a lot of time to figure out, but it's too complicated and specific to your setup for anybody to guide you all the way through.
man netstat
man iptables
will get you started.
Hari
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
