IPCop Zabbix Agent

[xstreur]

Hello,

I managed to install the Zabbix_Agentd and get in running on my ipcop (Firewall system). The agent is running but the server is not able to get to port 10050/10051 (/etc/servcies is updated) on the agent system while these ports are problably disabled. I get connection refused.

I'd like to monitor the firewal from the inside network. How can I manage to do this?

Please help.

Thanx in advance.

[RohrbaGe]

Ipcop

Hi,

this is more an IPCOP related problem.

I have running several IPCOPs, but never tried to get the agent running there.
So I would be also interested, if you have build an zabbix agent for 1.4.10 with a static option.

The way, how to allow such connection would be to add firewall rule
on the IPCOP.
I´m note quite sure, if that can be done with the cops frontend,
but somehow I will find a way.
Because on the frontend you can allow external access only.
But I would try to add the internal zabbix server IP.
and look then at the iptables.


Gerald

[xstreur]

Port forarding/static library

Compiled 1.1 release agent with static library on suse 10.0 box. Works on ipcop box now. Had to change the port for a DMZ machine.

[RohrbaGe]

Hi xstreur,

how have you compiled the agent? I tried with the static option, but this fails.

./configure --enable-agent --enable-static --prefix=/test
I`m very interested in an agent for IPCOP.
What are the necessary steps to build one?

Regards
Gerald

[mackhy]

IPCOP Agent

Hi

I got IPCOP 1.4.21 and i need to also monitor it in my internal network.
kindly please assist with the HOWTO guide or script to do so

Regards

mackhy

[kyi]

@xstreur

can you provide the agent for the IPCop? Or send it to me via mail?

thank you

[mandragora]

Hi everybody,

I also need a Agent for IPCOP 1.4.21
Does anybody have it ?

thank you

best regards
mandragora

[hyarion]

I have an agent compiled for IPCop. I posted a link for it last year but it appears the link doesnt work anymore. I've re-uploaded it to mediafire and will try organise a permanent link for it in the near future.

Although it was compiled from over a year ago it supports the latest version of Zabbix Server and works on the latest version of IPCop - 1.4.21.

I am monitoring over 30 ipcop boxes using this agent.

Download Link:

http://www.ambrosia-designs.co.za/zabbix_agentd.zip

To install it you need to do the following:

Upload the agent as well as a config file to your ipcop box using something like winscp. Run the following commands:

cp zabbix_agentd /usr/local/sbin
useradd zabbix
mkdir /etc/zabbix
cp zabbix_agentd.conf /etc/zabbix

To run it type

/usr/local/sbin/zabbix_agentd

To make it startup when ipcop boots/reboots add it to the end of /etc/rc.d/rc.netaddress.up

[mandragora]

hello hyarion,

many thx for the agent and your post.
i will try your agent soon as possible.

thx
best regards
mandragora

[mandragora]

Hi hyarion,

it works perfektly

thank you
best regards
mandragora

[mandragora]

please delete this post

thx

[hyarion]

Glad I could help!

Something I've just got working which you may find useful as well, is a custom parameter for checking the ipcop version.

Add this to your config file:
UserParameter=ipcop.version, grep version /var/ipcop/general-functions.pl |cut -d= -f2 | tr -d [:blank:]\;\' |head -1

Then add an item in zabbix with the following:
key: ipcop.version
type: character

You can then add a trigger such as this:
{Template_IPCop:ipcop.version.str(1.4.21)}=0

Just modify the version number in the trigger whenever a new version comes out and you'll know if one of your ipcops is out of date.

[mandragora]

hi hyarion,

one small question.
ivé added a item and a trigger like your tutorial in my zabbix 1.6.6.
when i activate the trigger this error message occurs.

Template_IPCop:ipcop.version ipcop.version 30 90 0 ZABBIX agent Not supported Network Not supported by ZABBIX agent

do you have a idea whats happen.

and do you use any trigger more for your ipcops ?

thank you for helping me

best regards
christian

[hyarion]

Actually, now that you mention it, I keep forgetting that most people use the default agent choices, not the "active" ones.

I have all my items set to "Zabbix Agent (active)" - this means the agents report back to the server, the server doesn't actively search for them.

The only exception to this is 3 simple checks.

I'm not overly clued up with errors in zabbix yet (I'm still learning myself), but I would recommend trying the following:

1. Ensure the custom UserParameter has been added to the config file on the ipcop box. Reboot ipcop to ensure the agent uses the new config. Try adding the item and the trigger again.

2. Double-check your item settings. Also look at "Latest Data" section in zabbix to check if it is showing anything there.

3. Try using the config file I've attached to this post. You'll need to edit the server ip address and the hostname to fit your setup.


As for items/triggers I have the following setup:

Type of Check - Name I've given it - Key
1. Simple Check - "Alive" - icmpping
This pings the firewalls dyndns address and lets me know if they are online.

2. Simple Check - "Web" - http, 445
This checks that external web access has been configured and is working so that accessing the ipcop settings is possible.

3. Simple Check - "SSH" - ssh, 222
This checks that SSH has been enabled and is working.

4. Zabbix Agent (active) - "Free Space on /" - vfs.fs.size[/,free]
5. Zabbix Agent (active) - "Free Space on /var/log" - vfs.fs.size[/var/log,free]
These check the space availability for the 2 partitions.

6. Zabbix Agent (active) - "Version" - ipcop.version
As discussed, checks version of ipcop

7. Zabbix Agent (active) - "Nettraffic Installed" - vfs.file.exists[/var/ipcop/net-traffic/version]
8. Zabbix Agent (active) - vfs.file.exists[/usr/local/bandwidthd/etc/bandwidthd.conf]
These check that the addons, nettraffic and bandwidthd, have been installed.

Most of them are set to check once every 24 hours, with the "alive" item checking every 5min. Then I have a trigger for each of those.

[ventas]

Hi hyarion,

great to see that you're able monitoring IPCop. The download isn't available anymore. Could you please upload to a new location? I really want to test the template!

Thanks!