zabbix_server doesn't have a ListenIP configuration option to force the server to only listen for incoming connections on a specific IP address. This simple patch, which is based on the ListenIP implementation in zabbix_agent, adds that feature.
Why is this useful? On a server with multiple network interfaces, you can select which one you want to use for zabbix. If you are using zabbix to monitor just one server and have zabbix_agent and zabbix_server running on that one server, then you can set the agent and server to both listen on 127.0.0.1 and by doing so you lock out any remote connections for better security.
This feature has been requested before...
Why is this useful? On a server with multiple network interfaces, you can select which one you want to use for zabbix. If you are using zabbix to monitor just one server and have zabbix_agent and zabbix_server running on that one server, then you can set the agent and server to both listen on 127.0.0.1 and by doing so you lock out any remote connections for better security.
This feature has been requested before...
Comment