From patchwork Thu Mar 27 22:45:51 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Robin Roevens X-Patchwork-Id: 8565 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4ZNzKD3BkZz3xF4 for ; Thu, 27 Mar 2025 22:46:08 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "E5" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZNzKD0xbNz4mS for ; Thu, 27 Mar 2025 22:46:08 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZNzKD0BMlz32wf for ; Thu, 27 Mar 2025 22:46:08 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZNzK90f75z32mc for ; Thu, 27 Mar 2025 22:46:05 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZNzK63hqCz62 for ; Thu, 27 Mar 2025 22:46:02 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=WsE4PMAZ; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1743115562; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=XwnNMMRjHsfnT4AoPfUmh+5Lu4+EDWza6wixtmnep0M=; b=HIDSYyaE5BsFegD4FkGxWF3EdaX0REmdFrJZL/1hBH9zPHVFqPyPUyFIoaUZK/1H7ir3/K 3AKfRZ9uYyw4jfIGyTpOmnS+2cdC2n83r3zE/2+RVWMzSkoGMjZ7Ag1OJygfv5zjTXzhr6 iblqUgH+pFAJDyrpm5dQjap7k/EJSo2LfkU7NWiTPNnIFAZMB+o6SSTB/Gai4KV22F9udL 9j0FnUcZttdcwrLRg6dE/EfbUnpi7/v1/1ZaMU3v+VKQB2bvdOPQq1yKG0d6wGdY3SaG8N 4X/EQydHORQKsl4rEKL9e0ZxYIYvMDWLp29MMYDpUelPPVSZoUl8hBagL7kKMg== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=WsE4PMAZ; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1743115562; a=rsa-sha256; cv=none; b=ogZSCo/U2+lRC7G6iEK5ouLhzK1WtOwhJGctZmmUMwLXPaGIMOqdavFs2NHO6dwWC+r/l5 Vb4/Z3tvaqghDj+ZGGJy5paWrwH87LdZYS2KEYRqFHO8nYnNng9uSEu0OWQ6zKc733ZiK7 Sg4rmy+iNI2SlMBsbQII3MtL+1939zFWQCld9CIsVB5YgIkyTEVwQ+hUvZns5qNyfQ/Rp4 t2bffAPK0an0hyqxR/MEw0VIO5yoh+0gXA6j2JrCnf+agVTf6ny5Y6KJr5yKuHzIHgWWiE 8m6IUXfygnynG1+1JdWdaF+hlhBDG62+zeqVjyLtkfNfV0j6rfFEp5Nd0G1uWA== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 5EB7E25CCC for ; Thu, 27 Mar 2025 23:46:01 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id ooWhLtNf6H_h for ; Thu, 27 Mar 2025 23:46:00 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1743115560; bh=8JLm+NlShMRpD1puNGYdMbqkSIygH0bz0DCklFmPYIo=; h=From:To:Cc:Subject:Date; b=WsE4PMAZuL7T1m+zd1/FMhAI9hfWiFoZocghRgvd56yZMfiqlJVKpMAtnT35E7gkd DoMNRDZSzuWAEkUwER36bMCT/29ZagjYBnKCIAfMJCoFDRi8Thae1rOTkK02VDheC0 dOhDtQjpDTRdvQK8IODLlhMmyauSstyvP4NVuoJISUW3R6/G1QxO+eAm4kiZkCTtD2 U737u2R1HQJZSCUEuctQ9rdqf70CotPTl1qz8Usmw+KAOMNwu2SxsTqStAzuBDk9e1 rRLEciwkrGww+PMG++DPctgDDdeOA83/u0HfVzZqXXB4YxFri1x1d0+2DzJlxBDSG5 BR32J4euHgkzg== Received: from chojin.roevenslambrechts.be (chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id 872DA300049; Thu, 27 Mar 2025 23:45:55 +0100 (CET) From: Robin Roevens To: development@lists.ipfire.org Cc: Robin Roevens Subject: [PATCH 1/2] zabbix_agentd: Update to 7.0.11 (LTS) Date: Thu, 27 Mar 2025 23:45:51 +0100 Message-ID: <20250327224552.3963717-1-robin.roevens@disroot.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 X-RoevensLambrechts-MailScanner-ID: 872DA300049.AD543 X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1743720357.14334@n9I5Dt3DZbPqiyMwId+oKg X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4ZNzK63hqCz62 X-Spamd-Result: default: False [-3.51 / 11.00]; BAYES_HAM(-2.94)[99.75%]; SPF_REPUTATION_SPAM(2.39)[0.79753865989073]; R_DKIM_ALLOW(-1.70)[disroot.org:s=mail]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM(-0.98)[-0.982]; DKIM_REPUTATION(-0.97)[-0.97163786922584]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.00)[asn: 50673(0.00), country: NL(-0.00), ip: 178.21.23.139(0.00)]; RCPT_COUNT_TWO(0.00)[2]; FUZZY_RATELIMITED(0.00)[rspamd.com]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MISSING_XM_UA(0.00)[]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; RCVD_TLS_LAST(0.00)[]; DKIM_TRACE(0.00)[disroot.org:+]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; RBL_SENDERSCORE_REPUT_BLOCKED(0.00)[178.21.23.139:from] X-Rspamd-Action: no action - Update from version 6.0.33 to 7.0.11 - Update of rootfile not required This is a major release update to the next LTS version and breaks compatibility with Zabbix Server 6.x. A survey on the forum resulted in nobody claiming to still use Zabbix Server v6.x. Full changelogs: - https://www.zabbix.com/rn/rn7.0.0 - https://www.zabbix.com/rn/rn7.0.1 - https://www.zabbix.com/rn/rn7.0.2 - https://www.zabbix.com/rn/rn7.0.3 - https://www.zabbix.com/rn/rn7.0.4 - https://www.zabbix.com/rn/rn7.0.5 - https://www.zabbix.com/rn/rn7.0.6 - https://www.zabbix.com/rn/rn7.0.7 - https://www.zabbix.com/rn/rn7.0.8 - https://www.zabbix.com/rn/rn7.0.9 - https://www.zabbix.com/rn/rn7.0.10 - https://www.zabbix.com/rn/rn7.0.11 Signed-off-by: Robin Roevens --- lfs/zabbix_agentd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/zabbix_agentd b/lfs/zabbix_agentd index bd81dba22..dbe2088fb 100644 --- a/lfs/zabbix_agentd +++ b/lfs/zabbix_agentd @@ -26,7 +26,7 @@ include Config SUMMARY = Zabbix Agent -VER = 6.0.37 +VER = 7.0.11 THISAPP = zabbix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = zabbix_agentd -PAK_VER = 16 +PAK_VER = 17 DEPS = fping @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6bf65efe59963294699d8fc6b6456167ae035c075f057c6ca85c612cc41f3f812b14189ed7e03ab2446e751720f8908f8e098fc0fd7335f95251b221b66b674a +$(DL_FILE)_BLAKE2 = 0c6544c64febc51e6fc153863b46e333d9d5564c83f40b71362a15c0533d48e50e5c340b35b2ca0dd1d776d0452f4aae42dc44d4e0e4b2c5949df02efbc7fc06 install : $(TARGET) From patchwork Thu Mar 27 22:45:52 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Robin Roevens X-Patchwork-Id: 8566 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4ZNzKP0ZC5z3xF4 for ; Thu, 27 Mar 2025 22:46:17 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "E5" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZNzKN6xngz4g7 for ; Thu, 27 Mar 2025 22:46:16 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4ZNzKN6D4cz32wg for ; Thu, 27 Mar 2025 22:46:16 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4ZNzKK6sC1z32bF for ; Thu, 27 Mar 2025 22:46:13 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4ZNzKK2pl8z62 for ; Thu, 27 Mar 2025 22:46:13 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b="k8KDlxi/"; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1743115573; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=gcASaAIbj7WRsPlduHALXDNJigavXbdKT/XnqNNzfG4=; b=XvcD/yYR5y8Jr+mQCe64mirTBGvhkXdxAaj1CoN+MhcJyQRNdfd2vuXT8uiYUv+ThKtkJa +yvvN3OMgYAmFnvjuLILtyPM1WM8XB2qb7xbl/TQB+3qyrEtCQT8oXvspZgySjWcNCARyL lUzzQF5DgFEs05dQnunzNYXvq5XK08qqMmgLzbI9ohBw6qQP25T9ml6WqLupXapDT6J2nF PDO3eg4eCVYvwnkuiYwO/+vCas3ktP850LhbPjLkvrdeGBwb/iJp8VoqtpN0GS+TbQrcDc CS+xHwAUC6jS/pr39YrKCXTo2PYLa6QbcH8SADXExr/ZrivRrNCG7f01MGLHcQ== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b="k8KDlxi/"; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org; dmarc=pass (policy=reject) header.from=disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1743115573; a=rsa-sha256; cv=none; b=LdabQ4/Xv9ezPagVTyL/ciL7TJNeG9DGKPatlU1SWdw9lZ0B27UFGUhR5rkpDNSMGMlWJR q9xqZxljsGLu3zV01rSi42LJyLJGHVkgHIdwKDcdQHjtFFOS0EloEIEhLWrKo/Tg6WH8AK 3wwYAzReDDv3r3t6NPlsovVeLPO+6w6WZ/vBfi+C8nGq1ssX8/kgQWjnKlagGqBidRCK8I jLFkBOLX6fQq4UtZkbj83TytpD2Zk7JmEZa/yHZZNQRp8XGQSlht3HW3G8Qo4jmGQW9n2/ 9tN3sl3adhxpNQRPRgEKxZQkam+3d0fD5+eZ5WfNxav4ngZ5LiQofYOsAgfkIA== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 8BF0E25D5D for ; Thu, 27 Mar 2025 23:46:12 +0100 (CET) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id EKDTe_N2F1w5 for ; Thu, 27 Mar 2025 23:46:12 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1743115571; bh=HHiEDC4yaT2SPgFZkw7wxEi9BuRv3JBtdjgsNagpn24=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=k8KDlxi/uAEB7KTDo2hYPNOiiVimTYwJfRg+agPb4BTdyrvZXECcPboa4cRdA0dGS UuOe9ZzAmwrVGc6AzGy8wmV598o9M8XA/O0LtAKvj16AFy2NgxDdHNBk6phf5ulXpS bb47rCgkXK2zk3dIvs54LdtO0w2uYKJ7pjkNUN+PVJiURjiSSkjMHJX5LA+O5v5Wfq 4jJQMFOTFuYbSHm0HHZc4zCqqqoFJc2wACK1WmN/hupm8spextlrZtfTM9SxxLYeAh sJcm74fEIjt7Sk4gSE5TraJItFbbY8MbZ6LXnZUfvdhvfiA7eLcX7Sl9bHRFQIRRF2 CYs+MOkkbu9aQ== Received: from chojin.roevenslambrechts.be (chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id 841B630005F; Thu, 27 Mar 2025 23:46:08 +0100 (CET) From: Robin Roevens To: development@lists.ipfire.org Cc: Robin Roevens Subject: [PATCH 2/2] zabbix_agentd: Disable passive checks by default on new installations. Date: Thu, 27 Mar 2025 23:45:52 +0100 Message-ID: <20250327224552.3963717-2-robin.roevens@disroot.org> In-Reply-To: <20250327224552.3963717-1-robin.roevens@disroot.org> References: <20250327224552.3963717-1-robin.roevens@disroot.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 X-RoevensLambrechts-MailScanner-ID: 841B630005F.AD543 X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1743720369.30928@qgd/2XiGpOQ8BTWm/d7dNA X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4ZNzKK2pl8z62 X-Spamd-Result: default: False [-7.52 / 11.00]; REPLY(-4.00)[]; BAYES_HAM(-2.96)[99.83%]; SPF_REPUTATION_SPAM(2.39)[0.796774932676]; R_DKIM_ALLOW(-1.70)[disroot.org:s=mail]; MID_CONTAINS_FROM(1.00)[]; NEURAL_HAM(-0.98)[-0.978]; DKIM_REPUTATION(-0.97)[-0.96841169767779]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+a:c]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.00)[asn: 50673(0.00), country: NL(-0.00), ip: 178.21.23.139(0.00)]; FUZZY_RATELIMITED(0.00)[rspamd.com]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; DKIM_TRACE(0.00)[disroot.org:+]; MISSING_XM_UA(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; RBL_SENDERSCORE_REPUT_BLOCKED(0.00)[178.21.23.139:from] X-Rspamd-Action: no action Zabbix Agent by default normally forks 10 instances to listen for incoming (passive) checks. I, however, recommend only using active checks on an IPFire instance, so that the agent on the instance will only actively contact the Zabbix server to request a list of checks to perform instead of waiting for the server to contact the agent for every check. This frees up some resources valuable to smaller systems and makes the agent not to listen on any TCP port, which is a possible attack surface less. Users with an existing installation will have to manually add the parameter to their config. This will be documented in the wiki. Signed-off-by: Robin Roevens --- config/zabbix_agentd/zabbix_agentd.conf | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/config/zabbix_agentd/zabbix_agentd.conf b/config/zabbix_agentd/zabbix_agentd.conf index 4480e43f2..a5a608d83 100644 --- a/config/zabbix_agentd/zabbix_agentd.conf +++ b/config/zabbix_agentd/zabbix_agentd.conf @@ -13,7 +13,16 @@ Server=127.0.0.1 ServerActive=127.0.0.1 -# List of comma delimited IP addresses that the agent should listen on. +# Number of pre-forked instances of zabbix_agentd that process passive checks. +# On IPFire this is set to 0 to disable passive checks and only allow active +# checks by default. +# Set this value in a range of 1-100 to enable passive checks or comment it +# out to revert to the Zabbix agent default (10). +StartAgents=0 + +# List of comma delimited IP addresses that the agent should listen on +# for passive checks. +# The agent will not listen on any TCP port when StartAgents is set to 0. ListenIP=GREEN_ADDRESS # This line activates IPFire specific userparameters.