On Thursday April 23 2009 01:01:41 pm Martyn wrote: > I'm not being ignorant but as I complete novice on none windows boxes, how > do I put "setting 3" in front of the line Sorry, it should be #, no 3 (dumb shift mistake).
just comment the line out by putting the # in the front of the line: # only_from = 127.0.0.1 Sorry for that, Christian > > Many thanks for your reply > > Martyn > > -----Original Message----- > From: Christian Schneemann [mailto:cschneem...@suse.de] > Sent: 23 April 2009 11:05 > To: nagios-users@lists.sourceforge.net > Subject: Re: [Nagios-users] only_from = 127.0.0.1 > > On Thursday April 23 2009 11:07:06 am Martyn wrote: > > Can anybody tell me how I use domains names instead of IP address in > > the nrpe file, I have read somewhere that you can use tcp wrappers > > which I have tried. > > > > My nrpe file looks like this: > > > > # default: on > > # description: NRPE (Nagios Remote Plugin Executor) service nrpe { > > flags = REUSE > > socket_type = stream > > port = 5666 > > wait = no > > user = nagios > > group = nagios > > server = /usr/local/nagios/bin/nrpe > > server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd > > log_on_failure += USERID > > disable = no > > only_from = 127.0.0.1 > > } > > > > > > And my hosts.allow looks like > > > > # > > # hosts.allow This file describes the names of the hosts which are > > # allowed to use the local INET services, as decided > > # by the '/usr/sbin/tcpd' server. > > # > > nrpe: 17.0.0.1 monitor.domain.co.uk > > > > But I'm still getting Could not complete SSL handshake, is the above > > configuration correct or can I not use domain names instead of IP's > > You have to adjust the "olny_from" line, your hosts.allow allows 17.0.0.1 > to connect to nrpe, but xinetd rejects the request, because you just allows > connections from 127.0.0.1 (or is there the 2 missing in the hosts.allow > line?) > > you can simply write the domain name to only_from. > > If you use the hosts.allow you could even exclude the only_from line from > the xinetd configuration by setting 3 in front of the line. > > Greetings, > Christian > > > Thanks > > > > Martyn > > -- > Christian Schneemann > > ------------------------------------- > SUSE LINUX Products GmbH, > Maxfeldstr. 5, D - 90409 Nürnberg > > Phone: +49 (0)911 - 740 53 0 > e-mail: cschneem...@suse.de > ------------------------------------- > SUSE LINUX Products GmbH, GF: Markus Rex HRB 16746 (AG Nürnberg) > > --------------------------------------------------------------------------- >- -- > Stay on top of everything new and different, both inside and around Java > (TM) technology - register by April 22, and save $200 on the JavaOne (SM) > conference, June 2-5, 2009, San Francisco. > 300 plus technical and hands-on sessions. Register today. > Use priority code J9JMT32. http://p.sf.net/sfu/p > _______________________________________________ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > > ::: Please include Nagios version, plugin version (-v) and OS when > ::: reporting > > any issue. > > ::: Messages without supporting info will risk being sent to /dev/null -- Christian Schneemann ------------------------------------- SUSE LINUX Products GmbH, Maxfeldstr. 5, D - 90409 Nürnberg Phone: +49 (0)911 - 740 53 0 e-mail: cschneem...@suse.de ------------------------------------- SUSE LINUX Products GmbH, GF: Markus Rex HRB 16746 (AG Nürnberg) ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null