Livestatus tcp6 only_from (hardening)

Troubleshooting
1

Hello community,

I’m trying to configure my Distributed Monitoring Sites for use with IPv6 which should be possible since 1.6.0. However, when I’m trying to configure the field in omd config <site> I get an error message:

image

I tried many different things (IPv6 addresses can be written differently, eg. zeros can be left out) but nothing but v4 addresses seem to work.

image

Can you please provide a working example with - say - one v4 address, one v4 subnet, one v6 address, one v6 subnet?

Or maybe give a hint what I might be doing wrong? Really desperate here, even tried a literal "0.0.0.0 ::/0" and it doesn’t work. :confounded:

2

I can only say there was no way to modify the IPv6 value :slight_smile:
The function is broken at the moment i say.

3

Okay, I got it working now by modifying the ~/etc/xinetd.d/mk-livestatus with:

...
protocol = tcp6
only_from = x.x.x.x/yy z:z:z:z::z/yy

but I consider this a dirty workaround more than a real solution.

4

Yes the manual way should work. What is broken is only the omd config.

5

Have you tried putting the IPv6 network/mask into $OMD_ROOT/etc/omd/site.conf?

The variable CONFIG_LIVESTATUS_TCP_ONLY_FROM is stored there.

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.