Page 1 of 1

Why I need to disable ufw to enter to the web interface Nagi

Posted: Thu Jun 11, 2015 3:19 pm
by Jessuzz94
Sorry its me again, I have monitoring some devices with nagios connected in one switch, all devices and my server is in the same network, but i need to disable the firewall in the ubunu server (where i have nagios) to enter to the web interface.

Another issue is that i have monitoring windows server in virtual box, all services its okay, but the PING service doesnt work, and reality i cant ping to the win server physically, this is when the firewall of winserver is on, when is off the PING service is up and i can ping, Do i need to cofigure the ports of winservers to ping with the firewall on and the nagios server to enter to the web interface with the firewall on too?

Re: Why I need to disable ufw to enter to the web interface

Posted: Thu Jun 11, 2015 4:09 pm
by tgriep
Here is a link for changing the firewall settings on your ubuntu server.
https://help.ubuntu.com/community/UFW
Your windows server, we will need to know which version you are running in that to allow ICMP inbound.

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 11:06 am
by Jessuzz94
Im using WS 2012, how to allow ICMP?, finding i look that it protocol doesnt have port

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 11:33 am
by tgriep
Try this link for Windows 2012 server ICMP inbound rule for your firewall.
http://blog.blksthl.com/2012/11/20/how- ... rver-2012/

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 11:47 am
by Jessuzz94
Thanks, it works, it needed to allow the protocol not a port in specific, duh xD.

So, the problem with accessing to the nagios web interface without the ufw disable, how i can enter with my nagios server firewall enabled?

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 11:56 am
by tgriep
Try running this to allow http and https through the firewall.

Code: Select all

sudo ufw allow 80/tcp
sudo ufw allow 433/tcp

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 12:43 pm
by Jessuzz94
It works, its secure to allow these ports right?

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 12:51 pm
by tgriep
Yes

Re: Why I need to disable ufw to enter to the web interface

Posted: Fri Jun 12, 2015 12:55 pm
by Jessuzz94
Very thanks!, can close this trhead :)