Hi All
I have a zabbix server and a proxy in a DMZ to monitor hosts in other DMZ's. With our network setup, we are not allowed to initiate a connection from within a DMZ to a server outside a DMZ, in this case the zabbix server.
I had just configured the setup with Zabbix_Server on an open network, with Zabbix_Proxy in an untrusted DMZ. I configured DMZ_Client to be monitored by Zabbix_Proxy. This all worked fine since Zabbix_Proxy initiated a connection to DMZ_Client on 10050 for the normal checks. I also included both hosts in the agent config so that if I need to disable the proxy, I can still monitor the server with Zabbix_Server without editing the agent config :
Server=Zabbix_Server,Zabbix_Proxy
When I configured an active check for log file monitoring, I was not receiving any data. I turned up debugging and found that DMZ_Client was trying to get a list of active checks from Zabbix_Server on port 10051, which was not allowed by the firewall. It did not try to get a list of checks from Zabbix_Proxy at all. I then changed the config file to read
Server=Zabbix_Proxy,Zabbix_Server
Zabbix agent then got a list of active checks from Zabbix_Proxy and sent data back to Zabbix_Proxy on port 10051.
Can I suggest that the agent checks both servers on the server list until it can connect and get a list of checks. It should not stop on the first server on the list.
Thanks
shaun
I have a zabbix server and a proxy in a DMZ to monitor hosts in other DMZ's. With our network setup, we are not allowed to initiate a connection from within a DMZ to a server outside a DMZ, in this case the zabbix server.
I had just configured the setup with Zabbix_Server on an open network, with Zabbix_Proxy in an untrusted DMZ. I configured DMZ_Client to be monitored by Zabbix_Proxy. This all worked fine since Zabbix_Proxy initiated a connection to DMZ_Client on 10050 for the normal checks. I also included both hosts in the agent config so that if I need to disable the proxy, I can still monitor the server with Zabbix_Server without editing the agent config :
Server=Zabbix_Server,Zabbix_Proxy
When I configured an active check for log file monitoring, I was not receiving any data. I turned up debugging and found that DMZ_Client was trying to get a list of active checks from Zabbix_Server on port 10051, which was not allowed by the firewall. It did not try to get a list of checks from Zabbix_Proxy at all. I then changed the config file to read
Server=Zabbix_Proxy,Zabbix_Server
Zabbix agent then got a list of active checks from Zabbix_Proxy and sent data back to Zabbix_Proxy on port 10051.
Can I suggest that the agent checks both servers on the server list until it can connect and get a list of checks. It should not stop on the first server on the list.
Thanks
shaun