Check manual page of check_mk.only_from

check_mk.only_from

Author: Mathias Kettner

License: GPL

Distribution: official part of Check_MK

Supported Agents: Linux, Windows

This checks makes sure that the Check_MK agent on the target system has configured certain IP address based access restrictions. The check needs the agent to be configured with those restrictions. The windows agent is configured via an .ini-file. The Linux agent is configured via /etc/xinetd.d/check_mk.

Check parameters

Parameter	Type	Description
target_networks	list(string)	A python list of the allowed networks and IP addresses the agent should be configured for. The order of the entries is not relevant. To host addresses a /32 will be appended automatically.

Performance data

None.

Inventory

One check is created per host, if check_mk_only_from_default is explicitely set in main.mk and the agent provides an OnlyFrom: header in the section <<>>.

Configuration variables

Variable	Type	Description
check_mk_only_from_default	list(string)	Default IP access configuration expected from agents. This variable must be set in order for the inventory to create checks, even if you configure more more specific parameters via check_parameters.

Examples

# Expect agent to accecpt only localhost and one specific network
check_mk_only_from_default = [ "192.168.56.0/30", "127.0.0.1" ]

# Hosts with the tag 'dmz' should have an different configuration
check_parameters += [
 ( [ "10.0.0.0/8" ], [ "dmz" ], ALL_HOSTS, [ "Check_MK Agent Access" ] ),
]