Nagios Support Forum

Hello,

This is probably a simple question but I can't find the answer in the documentation...I have a firewall between a gearman worker and a NagiosXI server. What ports need to be open for them to communicate? just 5666? and is that between just the worker and the nagios server or do I also need something opened up between the remote hosts that are monitored?

I've added the host to the hostgroups defined in the hostgroup line defined in the config file, but I stiil get the following error in the check results.

CHECK_NRPE: Socket timeout after 30 seconds.\n

so I'm assuming that I still need something opened in the FW.

Thanks,
Leszek

If you are only using gearman, and then having the gearman worker call check_nrpe, you would likely only need tcp port 4730, however that is configurable. You should look at /etc/gearmand/gearmand.conf on the gearman server(this doesn't necessarily have to be the nagios system) and see what port it is using. If that file is not available or not working correctly, look at the /etc/mod_gearman/mod_gearman_neb.conf to see where nagios is looking for gearmand server, then look at it's gearmand.conf. If the check_nrpe command is going through another firewall, host or network based, you will then nee 5666 open. I believe in the case of gearman, it should be the worker(remote) initializing the connection to the server, and I know nrpe will be the caller(check_nrpe) system initiating the connection not the host being checked.

Thanks for the reply Spenser. I'm waiting to hear back from our network guys to verify what ports are open between those servers... I'll let you know what I find out.

Thanks,
Leszek

Great. Let us know when they get back to you.