NRPE and Server 2012R2 not working together
Posted: Tue Sep 22, 2015 3:41 pm
Hi all,
I've installed NRPE on the Nagios server and have some checks running but none of them are executing on the remote server.
Nagios Server is Centos 7 box
NS Client is Windows Server 2012R2.
There are two issues:
1: Windows firewall is blocking the connection and not allowing things through, despite there being the correct rules in place.
This isn't really for this forum but worth noting.
Also any suggestions would be more than welcome.
2: When I disable windows firewall the Nagios server receives RST packets back from the Windows Server.
Testing Number 2 further:
I ran this command:
And received this:
When I took a deeper look with wireshark the remote windows server was sending back a RST.
This is in response to the Nagios Server's SYN packet to (correct) destination port 5666.
I can ping the remote server no problem:
But I did notice that telnet (on port 5666) also fails:
All other communication to that Server (domain controller) works, e.g. DNS responds without issue.
I installed NSClient on another Server 2012R2 and it just works without issue....
So I'm getting a bit frustrated now as I cannot see any difference in configuration.
I've installed NRPE on the Nagios server and have some checks running but none of them are executing on the remote server.
Nagios Server is Centos 7 box
NS Client is Windows Server 2012R2.
There are two issues:
1: Windows firewall is blocking the connection and not allowing things through, despite there being the correct rules in place.
This isn't really for this forum but worth noting.
Also any suggestions would be more than welcome.
2: When I disable windows firewall the Nagios server receives RST packets back from the Windows Server.
Testing Number 2 further:
I ran this command:
Code: Select all
/usr/local/nagios/libexec/check_nrpe -H 172.16.159.1And received this:
Code: Select all
connect to address 172.16.159.1 port 5666: Connection refusedThis is in response to the Nagios Server's SYN packet to (correct) destination port 5666.
I can ping the remote server no problem:
Code: Select all
PING 172.16.159.1 (172.16.159.1) 56(84) bytes of data.
64 bytes from 172.16.159.1: icmp_seq=1 ttl=128 time=0.202 msBut I did notice that telnet (on port 5666) also fails:
Code: Select all
telnet 172.16.159.1 5666
Trying 172.16.159.1...
telnet: connect to address 172.16.159.1: Connection refused
All other communication to that Server (domain controller) works, e.g. DNS responds without issue.
I installed NSClient on another Server 2012R2 and it just works without issue....
So I'm getting a bit frustrated now as I cannot see any difference in configuration.