[Pkg-nagios-devel] Bug#860802: Bug#860802: nagios-nrpe-server: nrpe daemon doesn't log client IP address

Ralf G. R. Bergs Ralf+Debian at bergs.biz
Thu Apr 20 10:31:15 UTC 2017


Hi Bas.

On 17-04-20 12:18, Bas Couwenberg wrote:
> Since this is an upstream issue, I've forwarded your request upstream.
Thanks a lot.
> On 2017-04-20 12:07, Ralf G. R. Bergs wrote:
>> I'm seeing scans from hosts on the internet like follows:
I was wrong. That was my own Nagios server, which is running under
Ubuntu. I recently upgraded it to Ubuntu 17.04, and the nrpe plugin is
at version 3, so it tries to connect with protocol version 3 first, then
2. This gives the warnings I reported... :-)
> Due to NRPEs security track record you should really put the NRPE
> services behind a firewall and only allow connections from your
> Nagios/Icinga server(s), i.e. the allowed_hosts.
Yes, I know. Actually the NRPE agent is using TCP wrappers, which I am
using to "protect" the agent. It's not a firewall, but it should do its
job. Thanks for the heads up! :-)

Kr,

R    alf



More information about the Pkg-nagios-devel mailing list