when pressing "Access NagiosXI" button I get an error

This board serves as an open discussion and support collaboration point for Nagios XI. NOTE: Nagios XI customers should use the Customer Support forum to obtain expedited support.

Re: when pressing "Access NagiosXI" button I get an error

Postby cdienger » Mon May 14, 2018 2:27 pm

I suspect there are other rules in /etc/ufw that are doing the blocking since the ICMP message is happening at a very low level. A look over "iptables -L" may shed some more light on this.
User avatar
cdienger
Support Tech
 
Posts: 1276
Joined: Tue Feb 07, 2017 11:26 am

Re: when pressing "Access NagiosXI" button I get an error

Postby jankogaga » Tue May 15, 2018 6:29 am

Here is an attached output of iptables -L

Thanks
Attachments
iptable.txt
(28.5 KiB) Downloaded 12 times
jankogaga
 
Posts: 25
Joined: Thu Apr 19, 2018 8:16 am

Re: when pressing "Access NagiosXI" button I get an error

Postby cdienger » Tue May 15, 2018 4:29 pm

The reject-with icmp-port-unreachable lines could be the culprit. Someone much more familiar with your firewall policy would need to review this though and see if there can be any logging enabled to determine which one is blocking it the request.
User avatar
cdienger
Support Tech
 
Posts: 1276
Joined: Tue Feb 07, 2017 11:26 am

Re: when pressing "Access NagiosXI" button I get an error

Postby jankogaga » Wed May 16, 2018 8:08 am

Iptable rules look fine to me.
Please note that in my first post in this thread, I had the different case (unfortunately I don't have a screenshot)
...
Then at URL:
https://nagiosxi.abz-testing.de/

when pressing "Access NagiosXI" button I get an error:
"This site can’t be reached"
...
So, Nagiosxi had a broadcasting to the public address, but just a button doesn't work.
Later, I tried an installation from the scratch and a broadcasting didn't work.
I guess, something in configuration is wrong on Nagios server.
jankogaga
 
Posts: 25
Joined: Thu Apr 19, 2018 8:16 am

Re: when pressing "Access NagiosXI" button I get an error

Postby cdienger » Thu May 17, 2018 11:54 am

The button will attempt to access https://xihost/nagiosxi/ where xihost is the IP or hostname used to access https://host/.

The issue now is that you cannot reach https://xihost/nagiosxi/ where xihost is the public hostname or IP of the xi machine, correct? In this case, it is being blocked at a much lower level than XI operates with a message that suggests the firewall is blocking it. As a test I would try the following:

iptables -I INPUT 1 -p tcp --dport 8459 -j ACCEPT
User avatar
cdienger
Support Tech
 
Posts: 1276
Joined: Tue Feb 07, 2017 11:26 am

Re: when pressing "Access NagiosXI" button I get an error

Postby jankogaga » Fri May 18, 2018 2:47 am

When I accessed https://xihost/nagiosxi/ the firewall rules were the same (in the first installation).
I already provided my iptables -L output and you can see the following rule:
Code: Select all
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:8459
ACCEPT     udp  --  anywhere             anywhere             udp dpt:8459
jankogaga
 
Posts: 25
Joined: Thu Apr 19, 2018 8:16 am

Re: when pressing "Access NagiosXI" button I get an error

Postby cdienger » Fri May 18, 2018 3:29 pm

There is something occurring to the system outside the scope of the Nagios solution. I would test on a clean install and see if you have the same issues.
User avatar
cdienger
Support Tech
 
Posts: 1276
Joined: Tue Feb 07, 2017 11:26 am

Re: when pressing "Access NagiosXI" button I get an error

Postby jankogaga » Mon May 21, 2018 2:16 am

Let me once explain what I tried in brief.
Two times I tried clean installation on KVM.
The first time, I got to the configuration page of Nagiosxi on my PC (so I had a broadcasting from KVM to the public address).
The second time, I didn't manage to get Nagiosxi to the public address, but I configured the Nagiosxi inside KVM.
The strange thing, I did both times the same installations steps.
I doubt that the third clean installation would bring better outcome since KVM is the same as well as the installation code.
So, something needs to be changed in KVM network settings or in the Nagiosxi settings.
jankogaga
 
Posts: 25
Joined: Thu Apr 19, 2018 8:16 am

Previous

Return to Nagios XI

Who is online

Users browsing this forum: No registered users and 16 guests