monitoring a service

[Jan Scholten]

My first guess is: enable the nagios server in the firewall (easy way),  
run nrpe on a server that is allowed to talk through the firewall or try  
something with check_by_ssh (if ssh is allowed to pass the firewall) and  
ssh to a server behind the Firewall and check the mail service from there.

Maybe someone has a better idea!

Jan
>
> Hi guys,
>
> how i can to monitor a service enable for some IPs by firewall?
> Ex:
> if i try to give telnet in the port 110 of the server with nagios, is  
> deny
> by firewall. Look:
>
> cyberdine:/# telnet 200.210.x.x 110
> Trying 200.210.x.x...
> ^C
> cyberdine:/#
>
> This service (POP3) is enabled for some IPs, like:
>
> (root at webmail) # ipfw sh | grep 110
> 00920        0           0 allow tcp from 200.230.x.x to me dst-port
> 110 setup keep-state
> 00930        0           0 allow tcp from 200.230.x.x to me dst-port
> 110 setup keep-state
> 00940        0           0 allow tcp from 200.210.x.x to me dst-port 110
> setup
> keep-state
> 00950        0           0 allow tcp from 200.210.x.x to me dst-port 110
> setup
> keep-state
> 00950        0           0 allow tcp from 200.246.x.x to me dst-port 110
> setup keep-state
> 00960        2         120 deny log tcp from any to me dst-port 110 setup
> keep-state
>
> This is a server that the nagios is installed.
>
> Any help is appreciated.
>
> Mario Sergio
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement on
> who ports your project to Linux PPC the best. Sponsored by IBM.
> Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when  
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
>



-- 
Jan Scholten
Research and Development Intern
Iconz.co.nz


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null