[0/6] zabbix_agentd: More functionality + CRITICAL OpenVPN fixes

Message ID	20250717180805.5754-1-robin.roevens@disroot.org
Headers	From: Robin Roevens <robin.roevens@disroot.org> To: development@lists.ipfire.org Subject: [PATCH 0/6] zabbix_agentd: More functionality + CRITICAL OpenVPN fixes Date: Thu, 17 Jul 2025 19:51:59 +0200 Message-ID: <20250717180805.5754-1-robin.roevens@disroot.org> Precedence: list Sender: <development@lists.ipfire.org> Mail-Followup-To: <development@lists.ipfire.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-RoevensLambrechts-MailScanner-ID: B43C93968FA.A4A0D country: NL(-0.01), ip: 178.21.23.139(0.00)]; BAYES_HAM(-0.01)[45.46%]; MISSING_XM_UA(0.00)[]; ARC_NA(0.00)[]; FUZZY_RATELIMITED(0.00)[rspamd.com]; RCPT_COUNT_ONE(0.00)[1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; DKIM_TRACE(0.00)[disroot.org:+]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]
Series	zabbix_agentd: More functionality + CRITICAL OpenVPN fixes \| [0/6] zabbix_agentd: More functionality + CRITICAL OpenVPN fixes [1/6] zabbix_agentd: Update to 7.0.16 (LTS) [2/6] zabbix_agentd: Add ARPing method for checking Internet Gateway [3/6] zabbix_agentd: Add WireGuard specific monitoring items [4/6] zabbix_agentd: Add LocationDB functionality [5/6] zabbix_agentd: Openvpn-2.6: fix pid name for services stats [6/6] zabbix_agentd: Openvpn-2.6: use the helper binary to read the status log

Message ID

20250717180805.5754-1-robin.roevens@disroot.org

Headers

From: Robin Roevens <robin.roevens@disroot.org>
To: development@lists.ipfire.org
Subject: [PATCH 0/6] zabbix_agentd: More functionality + CRITICAL OpenVPN
 fixes
Date: Thu, 17 Jul 2025 19:51:59 +0200
Message-ID: <20250717180805.5754-1-robin.roevens@disroot.org>
Precedence: list
Sender: <development@lists.ipfire.org>
Mail-Followup-To: <development@lists.ipfire.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-RoevensLambrechts-MailScanner-Watermark: 
 1753380489.0446@3h/WOr5/2s7C7q4X46ivjQ
X-Spamd-Result: default: False [-2.42 / 11.00];
	R_DKIM_ALLOW(-1.69)[disroot.org:s=mail];
	MID_CONTAINS_FROM(1.00)[];
	NEURAL_HAM(-0.99)[-0.986];
	DKIM_REPUTATION(-0.97)[-0.96571779122586];
	SPF_REPUTATION_SPAM(0.54)[0.18082013945084];
	R_MISSING_CHARSET(0.50)[];
	DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject];
	R_SPF_ALLOW(-0.20)[+a:c];
	MIME_GOOD(-0.10)[text/plain];
	MX_GOOD(-0.01)[];
	IP_REPUTATION_HAM(-0.01)[asn: 50673(0.00), country: NL(-0.01),
 ip: 178.21.23.139(0.00)];
	BAYES_HAM(-0.01)[45.46%];
	MISSING_XM_UA(0.00)[];
	ARC_NA(0.00)[];
	FUZZY_RATELIMITED(0.00)[rspamd.com];
	RCPT_COUNT_ONE(0.00)[1];
	FROM_EQ_ENVFROM(0.00)[];
	MIME_TRACE(0.00)[0:+];
	DKIM_TRACE(0.00)[disroot.org:+];
	TO_DN_NONE(0.00)[];
	RCVD_COUNT_THREE(0.00)[3];
	ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1];
	PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org];
	TO_MATCH_ENVRCPT_ALL(0.00)[];
	ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL];
	RCVD_TLS_LAST(0.00)[];
	FROM_HAS_DN(0.00)[]
X-Rspamd-Action: no action
X-Rspamd-Server: mail01.haj.ipfire.org
X-Rspamd-Queue-Id: 4bjgrx04mMz5gP

Series

zabbix_agentd: More functionality + CRITICAL OpenVPN fixes |

Message

Robin Roevens 17 Jul 2025, 5:51 p.m. UTC

Hi all,

A new version of the Zabbix Agent, fixing a few bugs.
But also added IPFire specific functionality:
- ARPing for internet gateway checking as an alternative next to ICMP
  ping in case ICMP ping is not available for some reason
- WireGuard stats and peer monitoring.
  Now that WireGuard has hit IPFire, Zabbix should be able to monitor 
  it now natively like it can for OpenVPN.
- LocationDB functionality. 
  With this Zabbix can query the IPFire locationDB through the IPFire 
  zabbix_agentd. I had this idea from the WireGuard status page on the 
  IPFire WUI where the location of the endpoint IP is shown, and I 
  wanted Zabbix to be able to do the same. 
  Now it can for any IP (in theory from any source it monitors).
- OpenVPN fixes: last but certainly not least as this is a CRITICAL
  patch:
  I saw a lot of OpenVPN patches last few days, and checked them for any
  changes that could impact the current Zabbix OpenVPN monitoring and
  found that the pid file was renamed and that the statistics log was
  renamed and should now be consulted using the openvpnctrl helper.
  So I changed the IPFire agent config accordingly.

I hope this patch can hit the same Core Update as the OpenVPN patches
to prevent the agent from no longer being able to monitor OpenVPN and
malfunctioning until next CU.

Regards

Robin