which monitoring model?

[rilemre]

Hello everybody,

I'm plan to monitor lan and webservers with zabbix: httpd, mysqld, etc should be monitored.

all theses servers are acceded only through ssh.

some will be available everywhere, but some, including lan or dmz servers won't: I don't wants to open ssh on these servers for security reasons and for now there is no vpn.

zabbix server is hosted on my laptop.
ssh tunnels are initiated through my laptop.

for now, passive checks works fine in every location through ssh tunnel.
but I have problems with actives checks: mysql template (http://www.zabbix.com/wiki/howto/mon...ng_replication) and apache monitoring (http://www.zabbix.com/wiki/templates/apache) are maded through actives check and hosts cannot connect to zabbix server.

zabbix_proxy was a good solution to collect data if I'm not connected to monitored hosts but because this is zabbix_proxy which connect to zabbix_server I'm still in front off the same problem: client can't connect directly to zabbix_server.

my question is the following one: does this configuration is possible? i do not really want to set zabbix_server on a internet server also for security reasons and for accessibility.
is it possible to convert active check to passive checks?

thanks for your help