nrpe service not found

[sbury]

I am trying to set-up my firewall to allow nagios checks on a workstation. I am using RHEL 6. Even though nrpe is listed as a firehol service here: https://firehol.org/firehol-manual/firehol-services/#service-nrpe
I receive the error that nrpe is an unknown service. I created a custom service but that is still not working.

[philwhineray]

Hi, could you please add the version of firehol, an extract of your config and the exact error message and I will try to help.

[sbury]

Firehol version: v 1.296 2013/01/06
Error message for using nrpe without custom service defined:

FireHOL: Processing file /etc/firehol/firehol.conf:/etc/init.d/firehol: line 5574: rules_nrpe: command not found

---

ERROR #: 1
WHAT : Running complex rules function rules_nrpe() for client 'nrpe'
WHY : There is no service 'nrpe' defined.
COMMAND: client nrpe accept
SOURCE : line 27 of /etc/firehol/firehol.conf

/etc/init.d/firehol: line 5574: rules_nrpe: command not found

---

ERROR #: 2
WHAT : Running complex rules function rules_nrpe() for server 'nrpe'
WHY : There is no service 'nrpe' defined.
COMMAND: server nrpe accept
SOURCE : line 31 of /etc/firehol/firehol.conf

Config producing the above error:

version 5
mers_ips="10.2.119.0/24"
other_byu="ssh.et.byu.edu, ssh.fsl.byu.edu, m7int01.fsl.byu.edu, m7int02.fsl.byu.edu"
interface em1 internal src "${mers_ips} ${other_byu}"
client all accept
client vnc accept
client nrpe accept
server ssh accept
server vnc accept
server nrpe accept
interface em1 campus src not "${mers_ips} ${other_byu}"
client all accept

There is no error message for after defining the nrpe service, but the nagios checks still fail. Below is the config with the nrpe service definition:

version 5
mers_ips="10.2.119.0/24"
other_byu="ssh.et.byu.edu, ssh.fsl.byu.edu, m7int01.fsl.byu.edu, m7int02.fsl.byu.edu"
server_nrpe_ports="tcp/5666"
client_nrpe_ports="default 5666"
interface em1 internal src "${mers_ips} ${other_byu}"
client all accept
client vnc accept]
client nrpe accept
server ssh accept
server vnc accept
server nrpe accept
interface em1 campus src not "${mers_ips} ${other_byu}"
client all accept

Thank you for your help! It very well may be a nagios issue.

[philwhineray]

The nrpe service was not added until v2, which explains that part of the problem.

I think you probably want this definition:

server_nrpe_ports="tcp/5666"
client_nrpe_ports="default"

i.e. no 5666 on the client ports. If that does not work, you need to look at the iptables logs to check which ports are being used.

[sbury]

I will try that thanks!