<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 14 (filtered medium)"> <title>Untitled Document</title> <style></style> </head> <body lang="EN-AU" link="blue" vlink="purple"> <div class="WordSection1"> Hello All,<o:p></o:p> <o:p> </o:p> Just to add on, I have done some readings and tested other option is <o:p></o:p> <o:p> </o:p> <![if !supportLists]>1. <![endif]>open /etc/sudoers file and entry a line as like below<o:p></o:p> <o:p> </o:p> Defaults:nagios !requiretty<o:p></o:p> <o:p> </o:p> Note: It means only nagios user not require a tty, but rest of others have. I recommend, this is better option<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Thilakraj.Shanmugam [mailto:Thilakraj.Shanmugam@canberra.edu.au] Sent: Thursday, 25 July 2013 5:37 PM To: Nagios Users List Subject: Re: [Nagios-users] Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Hello All, <o:p></o:p> <o:p> </o:p> I have found the helpful fix after much of struggle, it might be useful someone want to configure and monitor Iptables status.<o:p></o:p> <o:p> </o:p> After write your own plugin, then keep it in /usr/local/nagios/libexec dir.<o:p></o:p> <o:p> </o:p> <![if !supportLists]>1. <![endif]>open /etc/sudoers file and comment line as like below<o:p></o:p> <o:p> </o:p> #Defaults requiretty<o:p></o:p> <o:p> </o:p> <![if !supportLists]>2. <![endif]>End of /etc/sudoers file mention the line as below<o:p></o:p> <o:p> </o:p> nagios servername= NOPASSWD: /sbin/iptables, /usr/local/nagios/libexec/check_nrpe<o:p></o:p> <o:p> </o:p> Note: Do remember to mention your own server name<o:p></o:p> <o:p> </o:p> Now you can test your plugin via check_NRPE and it will give you expected results.<o:p></o:p> Good Luck!<o:p></o:p> <o:p> </o:p> Kind Regards,<o:p></o:p> Thilakraj Shanmugam<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Thilakraj.Shanmugam Sent: Wednesday, 29 May 2013 3:39 PM To: Nagios Users List Subject: RE: Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Hi Deborah et al,<o:p></o:p> <o:p> </o:p> I have tested with nagios user as well.. still no luck with that. Could you some one update if you have any solution on this case.<o:p></o:p> <o:p> </o:p> Kind Regards,<o:p></o:p> Thilak<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Deborah Martin [<a href="mailto:Deborah.Martin@kognitio.com">mailto:Deborah.Martin@kognitio.com</a>] Sent: Tuesday, 14 May 2013 7:30 PM To: Nagios Users List Subject: Re: [Nagios-users] Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Ok – if I look at your output, manually, when the plugin is run as the “root” user it produces the correct result. <o:p></o:p> <o:p> </o:p> But, you haven’t said what the nrpe user is that is running on the remote node and whether the same manual run of the check produces the same output. <o:p></o:p> For example, I run remote plugins through nrpe as the “nagios” user so if I want to manually test a plugin on the remote node, I would first login as the nagios user to ensure I’ve got the same environment that would be used when running via nrpe. It might be that the variables you have set in the script only work as the root user. It’s never a good idea to test as the root user but only as the same user as that used by nagios or nrpe. <o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Deborah <o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Thilakraj.Shanmugam [<a href="mailto:Thilakraj.Shanmugam@canberra.edu.au">mailto:Thilakraj.Shanmugam@canberra.edu.au</a>] Sent: 14 May 2013 09:58 To: Nagios Users List Subject: Re: [Nagios-users] Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Hi Deborah, Thanks for the response.. please find the details below.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [root@abc libexec]# pwd<o:p></o:p> /usr/local/nagios/libexec<o:p></o:p> [root@abc libexec]# ./check_iptables.sh <----- Executing manually script<o:p></o:p> + IPT=/sbin/iptables<o:p></o:p> + GREP=/bin/grep<o:p></o:p> + AWK=/bin/awk<o:p></o:p> + EXPR=/usr/bin/expr<o:p></o:p> + WC=/usr/bin/wc<o:p></o:p> + A=/usr/bin/sudo<o:p></o:p> + E_SUCCESS=0<o:p></o:p> + E_CRITICAL=2<o:p></o:p> + E_UNKNOWN=3<o:p></o:p> ++ /usr/bin/sudo /sbin/iptables -nvL<o:p></o:p> ++ /bin/grep Chain<o:p></o:p> ++ /bin/awk '{ print $2 }'<o:p></o:p> ++ /bin/grep Cid<o:p></o:p> ++ /usr/bin/wc -l<o:p></o:p> + CHAINS=5<o:p></o:p> + '[' 5 -ne 0 ']'<o:p></o:p> + echo 'Firewall is running!'<o:p></o:p> Firewall is running!<o:p></o:p> + exit 0 <------ it shows firewall running ( correct output )<o:p></o:p> [root@abc libexec]#<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Client - NRPE config file<o:p></o:p> <o:p> </o:p> [root@abc libexec]# cat /usr/local/nagios/etc/nrpe.cfg |grep -i iptable<o:p></o:p> command[check_iptables]=/usr/local/nagios/libexec/check_iptables.sh<o:p></o:p> [root@abc libexec]#<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [root@abc libexec]# ./check_nrpe -H localhost -c check_iptables<o:p></o:p> Firewall is not running <----- executing via check_nrpe ( wrong output )<o:p></o:p> [root@abc libexec]#<o:p></o:p> <o:p> </o:p> <o:p> </o:p> NRPE Logs<o:p></o:p> -------------<o:p></o:p> <o:p> </o:p> May 14 18:52:28 abc nrpe[31158]: Added command[check_Partion_db]=/usr/local/nagios/libexec/check_disk -w 15% -c 5% -p /db<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Added command[check_Partion_app]=/usr/local/nagios/libexec/check_disk -w 15% -c 5% -p /app<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Added command[check_iptables]=/usr/local/nagios/libexec/check_iptables.sh<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: INFO: SSL/TLS initialized. All network traffic will be encrypted.<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Handling the connection...<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Host is asking for command 'check_iptables' to be run...<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Running command: /usr/local/nagios/libexec/check_iptables.sh<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Command completed with return code 2 and output: Firewall is not running<o:p></o:p> May 14 18:52:28 abc nrpe[31158]: Return Code: 2, Output: Firewall is not running<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Kind Regards,<o:p></o:p> Thilak<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Deborah Martin [<a href="mailto:Deborah.Martin@kognitio.com">mailto:Deborah.Martin@kognitio.com</a>] Sent: Tuesday, 14 May 2013 6:44 PM To: Nagios Users List Subject: Re: [Nagios-users] Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Hi, <o:p></o:p> What is the wrong output being returned ? This might give us all a clue as to the cause of the problem. <o:p></o:p> When you run the check manually, are you doing this as the same user that check_nrpe will use ? <o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Deborah <o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Thilakraj.Shanmugam [<a href="mailto:Thilakraj.Shanmugam@canberra.edu.au">mailto:Thilakraj.Shanmugam@canberra.edu.au</a>] Sent: 14 May 2013 08:43 To: <a href="mailto:nagios-users@lists.sourceforge.net">nagios-users@lists.sourceforge.net</a> Subject: [Nagios-users] Nagios Plugin for IPTABLES Monitoring<o:p></o:p> </div> </div> <o:p> </o:p> Greetings!<o:p></o:p> <o:p> </o:p> Could someone send me nagios plugin which is tested and works well for monitoring IPTABLES in Linux.<o:p></o:p> <o:p> </o:p> I have tested below script but it is not returning correct output to nagios server.<o:p></o:p> <o:p> </o:p> If I execute script manually, it shows correct output…<o:p></o:p> <o:p> </o:p> But if I execute via ./check_nrpe – H localhost –c check_iptables, it shows wrong output.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> Below is my plugin<o:p></o:p> ------------------------------<o:p></o:p> <o:p> </o:p> #!/bin/bash<o:p></o:p> set -x<o:p></o:p> <o:p> </o:p> IPT='/sbin/iptables'<o:p></o:p> GREP='/bin/grep'<o:p></o:p> AWK='/bin/awk'<o:p></o:p> EXPR='/usr/bin/expr'<o:p></o:p> WC='/usr/bin/wc'<o:p></o:p> A='/usr/bin/sudo'<o:p></o:p> <o:p> </o:p> E_SUCCESS="0"<o:p></o:p> E_CRITICAL="2"<o:p></o:p> E_UNKNOWN="3"<o:p></o:p> <o:p> </o:p> CHAINS=`$A $IPT -nvL | $GREP 'Chain' | $AWK '{ print $2 }'| $GREP Cid | $WC -l`<o:p></o:p> <o:p> </o:p> if [ $CHAINS -ne 0 ] ; then<o:p></o:p> echo "Firewall is running!"<o:p></o:p> exit ${E_SUCCESS}<o:p></o:p> <o:p> </o:p> elif [ $CHAINS -eq 0 ] ; then<o:p></o:p> echo "Firewall is not running"<o:p></o:p> exit ${E_CRITICAL}<o:p></o:p> fi<o:p></o:p> <o:p> </o:p> <o:p></o:p> This e-mail and any files transmitted with it are strictly confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, please delete this e-mail immediately. Any unauthorised distribution or copying is strictly prohibited. Whilst Kognitio endeavours to prevent the transmission of viruses via e-mail, we cannot guarantee that any e-mail or attachment is free from computer viruses and you are strongly advised to undertake your own anti-virus precautions. Kognitio grants no warranties regarding performance, use or quality of any e-mail or attachment and undertakes no liability for loss or damage, howsoever caused.<o:p></o:p> <o:p></o:p> This e-mail and any files transmitted with it are strictly confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, please delete this e-mail immediately. Any unauthorised distribution or copying is strictly prohibited. Whilst Kognitio endeavours to prevent the transmission of viruses via e-mail, we cannot guarantee that any e-mail or attachment is free from computer viruses and you are strongly advised to undertake your own anti-virus precautions. Kognitio grants no warranties regarding performance, use or quality of any e-mail or attachment and undertakes no liability for loss or damage, howsoever caused.<o:p></o:p> </div> </body> </html>