Access the Nagios web interface from the Internet?

[Andy Harrison]

On 15 Jun 2004 20:43:49 +0200, Horvath Tamas <zsitfa at axelero.hu> wrote:
> 
> Hi Folks!
> 
> Our colleges asked me to make our Nagios web site accessible from the
> Internet.
> 
> Our Nagios box is in our Intranet and it will be very complicated to
> move it to the DMZ.
> 
> I have to options: configure a remote access VPN to our LAN
> or let firewalls allow HTTPS access to the Nagios box.
> 
> They would like the second (and easier to implement) one, but I think
> this solution is more vulnerable than the 1st one: crackers can exploit
> Linux or Apache or Nagios CGI vulnerabilities.
> 
> Is there any recommendation how can a Nagios web interface be accessible
> from the Internet in a secure way?
> 
> Thank you for any help, tips, suggestions.
> 
> Tamas
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
> Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
> Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
> REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
> 

I've done it with an ssh tunnel myself.

I've used something like:

ssh -P -N -f -L 60443:localhost:443 nagios.example.com

Just pop open a browser and access https://localhost:60443

If the nagios server isn't directly accessible via ssh, you could do:

ssh -P -N -f -L 60443:nagios.example.com:443 firewall.example.com

Then when you access https://localhost:60443 it will hit the firewall
and forward on to the nagios server.

If the web server is confused about the localhost request, just add
another hostname in the hosts file.  So where you see 127.0.0.1   
localhost, append nagios.example.com to that line.

-- 
Andy Harrison


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null