<span style=" font-size:12pt;font-family:Arial">Hi  Roger,</span>
<br>
<br><tt><span style=" font-size:10pt">Hello Marco, Here in Firewall_1 you
are running upsd only?  Isn't it upsmon that <br>
you should be running?</span></tt>
<br>
<br><span style=" font-size:12pt;font-family:Arial">You are right I described
it wrong. Firewall -1 is only running upsmon and this works without a Problem.</span>
<br><span style=" font-size:12pt;font-family:Arial">It is not possible
that Firewall-2 can reach the "nut-server", because Firewall-1
and Firewall-2 are a Hot-Standby Cluster and share all IPs except the ones
on the HA Interface (Network B).</span>
<br><span style=" font-size:12pt;font-family:Arial">I also cannot apply
a Nat Rule to circumvent the IP issue, because all Rules get applied to
both Firewalls.</span>
<br>
<br><span style=" font-size:12pt;font-family:Arial">I tried to run the
upsd on Firewall-1 to Proxy the Requests from Firewall-2, because I thought
that I can configure UPSD on Firewall-1 in a way to relay the UPS Information
from "S" to Firewall-2.</span>
<br>
<br><span style=" font-size:12pt;font-family:Arial">I hope this is understandable
now.</span>
<br>
<br><span style=" font-size:12pt;font-family:Arial">Kind Regards</span>
<br>
<br><span style=" font-size:12pt;font-family:Arial">Marco Hald</span>
<br>
<br>
<br><img src=cid:_1_143588A814358634003E03BFC1258685 width=188 height=45 style="border:0px solid;">
<br><span style=" font-size:12pt;font-family:Arial">Stadtverwaltung Crailsheim</span>
<br><span style=" font-size:12pt;font-family:Arial">Ressort Digitales &
Kommunikation</span>
<br><span style=" font-size:12pt;font-family:Arial">Sachgebiet EDV</span>
<br><span style=" font-size:12pt;font-family:Arial">Marktplatz 1</span>
<br><span style=" font-size:12pt;font-family:Arial">74564 Crailsheim</span>
<br>
<br><span style=" font-size:12pt;font-family:Arial">Telefon +49 7951 403-1167</span>
<br><span style=" font-size:12pt;font-family:Arial">marco.hald@crailsheim.de</span>
<br><a href=www.crailsheim.de><span style=" font-size:12pt;color:blue;font-family:Arial">www.crailsheim.de</span></a>
<br>
<br>
<br>
<br>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Von:
       </span><span style=" font-size:9pt;font-family:sans-serif">"Roger
Price" <roger@rogerprice.org></span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">An:
       </span><span style=" font-size:9pt;font-family:sans-serif">"nut-upsuser
Mailing List" <nut-upsuser@lists.alioth.debian.org></span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Datum:
       </span><span style=" font-size:9pt;font-family:sans-serif">23.02.2021
11:47</span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Betreff:
       </span><span style=" font-size:9pt;font-family:sans-serif">Re:
[Nut-upsuser] Antwort: Re:  Proxy upsmon</span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Gesendet
von:        </span><span style=" font-size:9pt;font-family:sans-serif">"Nut-upsuser"
<nut-upsuser-bounces+marco.hald=crailsheim.de@alioth-lists.debian.net></span>
<br>
<hr noshade>
<br>
<br>
<br><tt><span style=" font-size:10pt">On Tue, 23 Feb 2021, marco.hald@crailsheim.de
wrote:<br>
<br>
> here is a Diagramm of the Connections<br>
>                    
                     
  Machine "S"<br>
> +----------------------------+          
+--------------------+              
                     
                     
               <br>
> |  Socomec UPS              
|           |nut-server        
 |                  
                     
                     
           <br>
> |  only capable of SNMP      |-----------|Ubuntu
Server 20.04 |                
                     
                     
             <br>
> |                    
       |           |with upsd
2.7.4     |              
                     
                     
               <br>
> +----------------------------+          
+--------------------+              
                     
                     
               <br>
>                    
                    
            |        
                <br>
> +-----------------------------+          
           |        
                     
                     
                     
               <br>
> |  Firewall-1 with upsd 2.6.2 |   Network A    
     |              
<br>
> |  without SNMP Support       |----------------------+
                     
                     
                     
                     
 <br>
> +-----------------------------+          
                     
                     
                     
                     
               <br>
>             | Network B    
                     
                     
     <br>
<br>
Hello Marco, Here in Firewall_1 you are running upsd only?  Isn't
it upsmon that <br>
you should be running?<br>
<br>
>             | Network B    
                     
                     
      <br>
> +-----------------------------+          
                     
                     
                     
                     
               <br>
> |  Firewall-2 with upsd 2.6.2 |          
                     
                     
                     
                     
               <br>
> |  without SNMP Support       |    
                     
                     
                     
                     
                     <br>
> +-----------------------------+      <br>
<br>
In Firewall_2 you need upsmon to be able to talk to "nut-server"
machine S<br>
<br>
> My Problem is Firewall-2 can only reach Firewall-1.<br>
<br>
I guess that Firewall_1 is supporting two networks, A and B, and that you
cannot <br>
get from a machine on network B to machine S on network A.  Is this
correct? <br>
Do the firewall logs record any rejected traffic?<br>
<br>
> Firewall-1 can reach every Device.<br>
> On Firewall-1 the nut-server is configured as Monitor and the shutdown
works properly.<br>
<br>
When you say "nut-server" one thinks of upsd, not upsmon.  I
guess you mean <br>
"nut-client".<br>
<br>
> The Connection from Firewall-2 to Firewall-1 works via netcat.<br>
<br>
But does netcat "nut-server" 3493 work on machine Firewall_2
?<br>
<br>
Roger_______________________________________________<br>
Nut-upsuser mailing list<br>
Nut-upsuser@alioth-lists.debian.net<br>
</span></tt><a href="https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser"><tt><span style=" font-size:10pt">https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser</span></tt></a><tt><span style=" font-size:10pt"><br>
</span></tt>
<br>
<br>