Icinga2 | add OpnSense
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path
# icinga2 daemon -C = (version: r2.9.1-1)
| step | Icinga2 Master | Action on the OPNSense device | ||
| go to [user Manager] | ||||
| create a user icinga2 | ||||
| 1 | # apt install -y python-enum34 python-requests | |||
| 2 | # cd /usr/lib/nagios/pluginsCustom | |||
| # mkdir opnsense | ||||
| # cd opnsense | ||||
| wget https://raw.githubusercontent.com/nbuchwitz/check_opnsense/master/check_opnsense.py | ||||
| chmod +x check_opnsense.py | ||||
| # icinga2 daemon -C | ||||
| mkdir /etc/icinga2/conf.d/opnsense | ||||
| vi /etc/icinga2/conf.d/opnsense/opnsene-update.conf | object CheckCommand "check_opnsense-update" { command = [ PluginCustomDir + "/opnsense/check_opnsense.py" ] arguments = { "-H" = "$opnsense_host$" "--api-key" = "$opnsense_api_key$" "--api-secret" = "$opnsense_api_secret$" "-m" = "$opnsense_function$" "-w" = "$opnsense_TRESHOLD_WARNING$" "-c" = "$opnsense_TRESHOLD_CRITICAL$" "-k" = "$opnsense_insecure$" } vars.opnsense_host = "10.147.42.7" vars.opnsense_api_key = "key" vars.opnsense_api_secret = "key" vars.opnsense_function = "updates" vars.opnsense_insecure = "-k" } |
|||
| # cd /etc/icinga2/zones.d/master/ open the file your host is defined | ||||
|
vi xxxxxx.conf to check for update is Default 5 minutes not necessary |
9 object Service "check_opnsense" { 10 host_name = "opnsense.domain" check_interval = 1h 11 check_command = "check_opnsense-update" 12 } |
|||
| # icinga2 daemon -C | ||||
| # systemctl restart icinga2 |
-
-
-
-
-
| uptime | snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.25.1.1.0 | Timeticks: (63656350) 7 days, 8:49:23.50 |
| snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.1.0 | STRING: "FreeBSD FW-03.kozo.ch 11.1-RELEASE-p11 FreeBSD 11.1-RELEASE-p11 21b4c8ea1d5(stable/18.7) amd64" | |
| Hostname | snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.5.0 | STRING: "FW-03.kozo.ch" |
| iso.3.6.1.4.1.2021.10.1.2.1 = STRING: "Load-1" iso.3.6.1.4.1.2021.10.1.2.2 = STRING: "Load-5" iso.3.6.1.4.1.2021.10.1.2.3 = STRING: "Load-15" iso.3.6.1.4.1.2021.10.1.3.1 = STRING: "0.40" iso.3.6.1.4.1.2021.10.1.3.2 = STRING: "0.52" iso.3.6.1.4.1.2021.10.1.3.3 = STRING: "0.49" |
||
| iso.3.6.1.2.1.31.1.1.1.1.2 = STRING: "igb1" iso.3.6.1.2.1.31.1.1.1.2.2 = Counter32: 8742 iso.3.6.1.2.1.25.3.2.1.3.262146 = STRING: "network interface igb1" |
||
| iso.3.6.1.2.1.31.1.1.1.1.1 = STRING: "igb0" iso.3.6.1.2.1.31.1.1.1.2.1 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262145 = STRING: "network interface igb0" |
||
| iso.3.6.1.2.1.31.1.1.1.1.3 = STRING: "igb2" iso.3.6.1.2.1.31.1.1.1.2.3 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262147 = STRING: "network interface igb2" |
||
| iso.3.6.1.2.1.31.1.1.1.1.8 = STRING: "ath0_wlan1" iso.3.6.1.2.1.31.1.1.1.2.8 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262152 = STRING: "network interface ath0_wlan1" |
-
Source/Quellen:
-
- github.com/nbuchwitz/check_opnsense
- Formun Opnsense | API Information request
-
-
-
-
-
- Anker 575 USB-C Docking Station (13-in-1), 85W für Laptops
- Perfect Server Hardware for Virtualization | Proxmox | pve-05
- Pioneer Blu-Ray/BD/DVD/CD Reader/writer USB 3.0 BDR-XD07TB | WORKS OK with Debian 11
- NOT WORKING WITH DEBIAN 11 | Dockingstation | IcyBox 14-in-1 USB Type-C | IB-DK2262AC
- How to remove systemd services
- Laptop | Lenovo | Thinkpad E15 Gen3 AMD
- Laptop | Lenovo | LENOVO-IDEA IdeaPad 3 15IGL05 Notebook (15.6 ", 128 GB SSD, Business Black)
- D. Klimo | Kent monoblocks
- TTN Mapper
- LILYGO TTGO T-Beam V1.1 ESP32 LoRa 868Mhz GPS 18650 Board
- LILYGO® TTGO T-Beam 868MHz -> The Things Network (TTN/TTS) -> Karte | Infos und Video bei Alex (www.aeq-web.com)
- Kabelfarben 3.3V, 5V, 12V, 230V | Durchmesser
- 01 Digi-Bee Stand01 Wetter
- Solar Panel | 6V 3W Solar Panel JY D145x145
- TTGO LoRa32 V2.1_1.6 version 433/868/915Mhz ESP32 LoRa OLED 0.96 Inch SD Card Bluetooth WIFI wireless Module ESP-32 SMA
- -pve-04 | Disk SSD and HDD
- DISK SSD | 1 TB | Samsung SSD 870 EVO 1TB - 1TB
- NanoVNA V2
- CubeSat | antennas |
- KoZo_GS3_433MHz
- tinyGS - shortcut what it means
- TinyGS Telegram community | published Links
- Wolfgang W. Osterhage (Springer Verlag Sachbuch 2021): Die Geschichte der Raumfahrt | (gefundene Fehler)
- ucs Univention some commands
- SMA-Stecker / SMA-Buchse
Microsoft hält eine Lücke in der LNK-Anzeige für nicht behebenswert. Sie wurde inzwischen gegen europäische Diplomaten missbraucht.
Nicht jeder Schaden, der durch digitale Täuschung entsteht, ist laut Landgericht Bielefeld direkt durch eine Hausratversicherung mit Internetschutz abgedeckt.
Angreifer können IBM Tivoli Monitoring und Nagios XI attackieren und Dateien manipulieren oder sogar Schadcode ausführen. Sicherheitsupdates sind verfügbar.
Angreifer missbauchen Schwachstellen in VMware und XWiki, warnt die IT-Sicherheitsbehörde CISA. Updates stopfen die Lücken.

