Zabbix outgoing ports

[oliverm]

Does anyone know what ports zabbix server makes its outbound connections from ? I know it connects to the agent on 10050, and the agent to the server on 10051, but i need to know what port the connections FROM the server to the agent come from.

Olly

[Alexei]

Any random port higher than 1024.

[oliverm]

Is there anyway to force it to connect from a defined range of ports so that i can include these in our outbound firewall ports ?

[Alexei]

It is not supported by ZABBIX. Perhaps this can be configured somehow on OS level, I don't know...

[sterno]

If your server is on Linux you may be able to use an iptables SNAT rule to rewrite the outbound connections to a specified range of source ports. You can probably do it with ipfilter or pf on other platforms, but off the top of my head I don't remember the syntax.

The proper place for this to be addressed is at the application level. However, I don't think it's very common to filter on the source port - usually the only source port filtering is based on ports above/below 1024 or inside/outside the ephemeral range. I have used very few applications that allow you to specify source ports.