From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZPcP52qjWz32dy for ; Fri, 28 Mar 2025 23:36:41 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZPcP16Yblz335J for ; Fri, 28 Mar 2025 23:36:37 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZPcP04QP4zNV for ; Fri, 28 Mar 2025 23:36:36 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=BSK2MTqO; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1743204996; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=1Jdq2C5aSC1VoReoZ6ic7Zd5bXY01H1sZ5tDCbxjdck=; b=KtzPvbGqHQm/4RXLjHzcdygvzK/Uz48Qeo+Z03LW9NjyptDd3d/T2ifFmi6kNPQTU3+iMA RW8RSvSmycqJ+luaBT1TYDNHIOv/FIySWUmawerTULfBJA1bBJd+mzPLBRYcQue1KWHNBd rk9xaVdy56o5oyJgQJXFaVSdvDc6nEw8cGlC97jcOgHXXT63ZgKp2+PX7PN/0pYxZBNZ9u lnmwsHEz54wexLVqFyUzCzOBSrAknuJL6YFQlYSfb8pZnuQDauhR/6UguCDxh/kMo9L/N+ rjvxaKELIUjsgAv2mD+feqbq74nZILgb+PZB6mu7NW35+bD/dwQOJtKBYGa2UA== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=BSK2MTqO; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1743204996; a=rsa-sha256; cv=none; b=MiwhOG7snlFhtlx8WdU1CwPvaGf7GCcP8gdsM+k6RiXbMqTOlzEqWTQyXbriH+XeADAqbv DB85jKosqkhbNdzh1L+sR6TuEjb4EGUfK9+W2pSEhJFseNUBIgQmS8Q611AAbI+Fe1tN+1 6kM2DoXlBv9hf+jmHJ0u3/jy9H6ekRprUnsNTdAdIGD+RxMxGj3+I4F2o2bApjsolSV0Sb Y7mQnGXOMxWxgz/G0Pto0AvsGz1kvsnTLtX3vVZNbRC2kMhUu+bS9f+bLoWZ1iulrIhvM4 BZSnt0KstMWqT3/dOjka6KwywW4NZwhRFbs1KVBpBHcrw715lyynKhiadFoPPQ== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id B80FD256DF for ; Sat, 29 Mar 2025 00:36:35 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id 9Gj6r0NaXhKv for ; Sat, 29 Mar 2025 00:36:35 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1743204995; bh=c9PB6YE9DnLOpAy7Kf3hv3/rRt1v5vaY5b1OUd6LO9I=; h=From:To:Subject:Date; b=BSK2MTqOADSvBON7z0176WitIfGPFg/2PawLtPRzDrc8WH14SZOSWDEQmj7GtPCef MaZXsSn/JCjq56scEKkMGZfjzV/lmZ824FzgIemzOmVPipYEJHn5qSR3PFznMezWDT gyYcUwucww+qqXzBOv1rIEb0/jk2wWnX+nZvyM+vOziGA6adJhs148APkIp/8Tkiqq StCQazK/xVrFbRA4enYJcgLNIx8Yas06kJiCL6+htw7iyLjNE4WuPGGWq4P0PckJfv kgqo7QrtxDVxjKN+rmMEyp0AwoviXElDH2tYynqlWrXou/GJUkWVSFXepFwRSqp51r KtAk783wTqJPQ== Received: from chojin.roevenslambrechts.be (Chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id 862043017ED for ; Sat, 29 Mar 2025 00:36:30 +0100 (CET) From: Robin Roevens To: development@lists.ipfire.org Subject: [PATCH] zabbix_agentd: Set passive check agents to 3 by default Date: Sat, 29 Mar 2025 00:23:31 +0100 Message-ID: <20250328233625.68561-1-robin.roevens@disroot.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-RoevensLambrechts-MailScanner-ID: 862043017ED.A2ACD X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1743809792.5427@uWRus73wiAETojJmAIPf+Q X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4ZPcP04QP4zNV X-Spamd-Result: default: False [-0.58 / 11.00]; SPF_REPUTATION_SPAM(2.38)[0.7930749196059]; R_DKIM_ALLOW(-1.70)[disroot.org:s=mail]; MID_CONTAINS_FROM(1.00)[]; DKIM_REPUTATION(-0.97)[-0.96841160586569]; NEURAL_HAM(-0.97)[-0.968]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; BAYES_HAM(-0.02)[53.10%]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.00)[asn: 50673(0.00), country: NL(-0.00), ip: 178.21.23.139(0.00)]; FROM_HAS_DN(0.00)[]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; ARC_NA(0.00)[]; FUZZY_RATELIMITED(0.00)[rspamd.com]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; RCVD_TLS_LAST(0.00)[]; MISSING_XM_UA(0.00)[]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[disroot.org:+]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; RBL_SENDERSCORE_REPUT_BLOCKED(0.00)[178.21.23.139:from] X-Rspamd-Action: no action Hi again Sorry for the spam, but it seems I made a mistake by setting the number of Zabbix agent forks to 0 in my last patch. TLDR; That change breaks the monitoring of OpenVPN Clients in the Zabbix monitoring template I provide and promote on the IPFire wiki. After upgrading to Zabbix Agent v7 I noticed it forking 10 instances on my mini appliance (old version) in contrary to only 3 instances on previous versions of Zabbix agent, and I wrongly thought my monitoring template for it is only using active checks, so I concluded that we simply don't need passive checks unless a user decides otherwise. But I forgot that for monitoring OpenVPN clients, my template generates new hosts (one for each client) on the Zabbix Server, all pointing to the same IPFire instance. But those hosts representing OpenVPN clients won't receive the results of their checks if they are set to active, since active checks relies on the hostname of the IPFire instance to be the same as the hostname set in the Zabbix Server. And that is not the case for those OpenVPN clients. Regards Robin -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door MailScanner en lijkt schoon te zijn.