Firewall Issue

[aalvino]

Hello All, any help with this would be greatly appreciated.

I am trying to monitor a server which is remotely located at a customer facility.
As part of our connection to them, they do NOT allow connections to be initiated from the server within their network which I am trying to monitor to anywhere.

zabbix_server ---- > zabbix_agentd - OK
zabbix_agentd -----> zabbix_server - rejected

I thought that as long as I disabled the "Active" checks, I would be fine. Meaning I thought that all requests are initiated from the zabbix server (hosted within my network) to the agent (hosted in customer network).

I have disabled the active checks but I am still not able to get the monitoring working. What I see in tcpdump is that the server sends a request to the agent, but the agent then seems to try to ping the server from which it received the request? Is this intentional, and can I turn it off?

Thanks Again...

[Alexei]

You may want to enable parameter DisableActive in ZABBIX Agent configuration file. Also, make sure that Server is set correctly (is there any NAT in-between?).

[aalvino]

Thanks for the response
I do already have DisableActive=1 set in my zabbix_agentd.conf file.

The NAT question is a good one!
Yes, there is NATing occuring. What I have set the Server IP address to in the zabbix_agentd.conf file is the IP address which is the "Source" IP in the tcp packet. I.E. When I do tcpdump on the agent machine, the IP address that I see the request coming from is the IP address I have set the Server= value in the zabbix_agentd.conf.

Is that the correct way to do it, or should it be set to the Non-Nat'd IP address of the server?