From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bjgs14CtCz34b5 for ; Thu, 17 Jul 2025 18:08:21 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bjgry0mYlz3496 for ; Thu, 17 Jul 2025 18:08:18 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4bjgrx04mMz5gP for ; Thu, 17 Jul 2025 18:08:16 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b="RA//92iJ"; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1752775697; a=rsa-sha256; cv=none; b=iixtv6Ztcsr2zqyE03rHwKUBrESaCA4aStb8Lx4uffNVMXCmaZC0X/VUYw7+IL7Qs6pTu1 IqSZbwhlisAHKj5iPnM/NxfmbM9oRlZVnmm9fe+GHXKsVNyNA2QJqgQYlB1JFnG5vboZzd cnLprv9i575Fjq2a0eHFS7+vDj5ywk2VGVcDMCQZXLlD0SbVRmQujjlHnI0QvFoGsD1ezK Do4ppP+VMXzKBu40WIk/oG/gr9QnZWZPs5xGeYzvs9UVr2VrO7GDIUd+7OO9I4/YDRMPQD eT4Fr5FlVLBOF9R7Y5v3W79g4Cz9afticug448U/gkuR9EoQHBhbqYLfscZVTw== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b="RA//92iJ"; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1752775697; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=HKzemA6oXnmm8o/4nZWrqZbcuUBff+fyidHoA83WqWM=; b=vsCzQYvc6HQzEZlUJYn6FkvpE5PUOA03plEjqarRi6GtpL4Je9sruXF37vgjoSBLJ+w2Gr TxYwYRwx6/zQ1kYWZ5Fb3Qc5MKzd686Yx6FXvM4s02MPM3mL7PuF/+ALOA3nWPwAvoj7Rq tJCdUI9OsxdYw5+tMlnmZSvscG99fZoaq/DWDX3tuytGf/+xbMlwdkoSgaNiUv2whnJzie fkjtlhiSlK7Ck3I1/MgWYT003DgKx4PIlGvKMPoJvFKvgRH3PNP2RolS+yJt53a+IFUlHO RNFbuMfCnBbLZhT2cq3h64cq+mG3lMF3OrJVA29TqA4D2BATm7ziRqaeGhyMQQ== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 92AC722F7C for ; Thu, 17 Jul 2025 20:08:16 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id 0EsAtUNhan9L for ; Thu, 17 Jul 2025 20:08:14 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1752775694; bh=sdEVwROmkMRegG6CKK8TRO5Xsb0juSgPbyq+V6bpP5o=; h=From:To:Subject:Date; b=RA//92iJpOQbi1oAt6vjs+qlEYYx6F1XkJxNg3oJl1JcQNxrt/+JvWpEMfZsqqSa7 w2983Cm4B3LjGSjEj7bUkmEtH/B0Zn007Z+i+TcrZObnS3Ea1k26FkpEJqttbsPfcN 5YTKSWGAdmiiNt0FXhVMEGG7zS754OWQgM0mBVtG7JdtoprLO0vHMt2qFE38XoJXxx t4wXLkKNbUoCcMB4koWETO2Gexv8HjZMbPCBAAjEIWKCbnBlOfr3yf2xQysk7XRfky NfeaqEw5Db/BSd1yhaiVlffnx9zv0MDVURBYVrj+6kGtAqZRz2fjSMPUTd9avf7r3L YgwE48ps9qmXw== Received: from chojin.roevenslambrechts.be (chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id B43C93968FA for ; Thu, 17 Jul 2025 20:08:07 +0200 (CEST) From: Robin Roevens To: development@lists.ipfire.org Subject: [PATCH 0/6] zabbix_agentd: More functionality + CRITICAL OpenVPN fixes Date: Thu, 17 Jul 2025 19:51:59 +0200 Message-ID: <20250717180805.5754-1-robin.roevens@disroot.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-RoevensLambrechts-MailScanner-ID: B43C93968FA.A4A0D X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1753380489.0446@3h/WOr5/2s7C7q4X46ivjQ X-Spamd-Result: default: False [-2.42 / 11.00]; R_DKIM_ALLOW(-1.69)[disroot.org:s=mail]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM(-0.99)[-0.986]; DKIM_REPUTATION(-0.97)[-0.96571779122586]; SPF_REPUTATION_SPAM(0.54)[0.18082013945084]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_SPF_ALLOW(-0.20)[+a:c]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.01)[asn: 50673(0.00), country: NL(-0.01), ip: 178.21.23.139(0.00)]; BAYES_HAM(-0.01)[45.46%]; MISSING_XM_UA(0.00)[]; ARC_NA(0.00)[]; FUZZY_RATELIMITED(0.00)[rspamd.com]; RCPT_COUNT_ONE(0.00)[1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; DKIM_TRACE(0.00)[disroot.org:+]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4bjgrx04mMz5gP Hi all, A new version of the Zabbix Agent, fixing a few bugs. But also added IPFire specific functionality: - ARPing for internet gateway checking as an alternative next to ICMP ping in case ICMP ping is not available for some reason - WireGuard stats and peer monitoring. Now that WireGuard has hit IPFire, Zabbix should be able to monitor it now natively like it can for OpenVPN. - LocationDB functionality. With this Zabbix can query the IPFire locationDB through the IPFire zabbix_agentd. I had this idea from the WireGuard status page on the IPFire WUI where the location of the endpoint IP is shown, and I wanted Zabbix to be able to do the same. Now it can for any IP (in theory from any source it monitors). - OpenVPN fixes: last but certainly not least as this is a CRITICAL patch: I saw a lot of OpenVPN patches last few days, and checked them for any changes that could impact the current Zabbix OpenVPN monitoring and found that the pid file was renamed and that the statistics log was renamed and should now be consulted using the openvpnctrl helper. So I changed the IPFire agent config accordingly. I hope this patch can hit the same Core Update as the OpenVPN patches to prevent the agent from no longer being able to monitor OpenVPN and malfunctioning until next CU. Regards Robin -- Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door MailScanner en lijkt schoon te zijn.