I use Checkmk for monitoring my VMs. The Grommunio appliance is also in a VM and I wanted to use Checkmk for monitoring. I installed net-SNPM and the Checkmk agent on the appliance for this purpose. When creating the host, Checkmk does not succeed in establishing a connection to the Grommunio server, neither to the Checkmk agent nor via SNMP. Both SNMP and the Checkmk agent are listening on the corresponding ports. But a telnet from Checkmk always results in "no route to host" only for these two ports.
This is the result of netstat -tulpn on the Grommunio appliance:
gromm:~ # netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN 1807/nginx: master
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1807/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1712/sshd: /usr/sbi
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 2149/master
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1807/nginx: master
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 2149/master
tcp 0 0 127.0.0.1:9312 0.0.0.0:* LISTEN 1688/searchd
tcp 0 0 127.0.0.1:9306 0.0.0.0:* LISTEN 1688/searchd
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 1396/snmpd
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 1730/mysqld
tcp 0 0 0.0.0.0:2693 0.0.0.0:* LISTEN 1672/piler-smtp
tcp 0 0 127.0.0.1:11334 0.0.0.0:* LISTEN 1671/rspamd: main p
tcp 0 0 127.0.0.1:11333 0.0.0.0:* LISTEN 1671/rspamd: main p
tcp 0 0 127.0.0.1:11332 0.0.0.0:* LISTEN 1671/rspamd: main p
tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN 1681/redis-server 1
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1807/nginx: master
tcp6 0 0 :::8443 :::* LISTEN 1807/nginx: master
tcp6 0 0 :::143 :::* LISTEN 1802/imap
tcp6 0 0 :::110 :::* LISTEN 1804/pop3
tcp6 0 0 :::80 :::* LISTEN 1807/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1712/sshd: /usr/sbi
tcp6 0 0 :::25 :::* LISTEN 2149/master
tcp6 0 0 :::24 :::* LISTEN 1799/delivery-queue
tcp6 0 0 :::443 :::* LISTEN 1807/nginx: master
tcp6 0 0 :::587 :::* LISTEN 2149/master
tcp6 0 0 :::995 :::* LISTEN 1804/pop3
tcp6 0 0 :::993 :::* LISTEN 1802/imap
tcp6 0 0 ::1:11334 :::* LISTEN 1671/rspamd: main p
tcp6 0 0 ::1:11333 :::* LISTEN 1671/rspamd: main p
tcp6 0 0 ::1:11332 :::* LISTEN 1671/rspamd: main p
tcp6 0 0 ::1:6666 :::* LISTEN 709/timer
tcp6 0 0 :::10080 :::* LISTEN 1801/http
tcp6 0 0 :::10443 :::* LISTEN 1801/http
tcp6 0 0 :::6556 :::* LISTEN 24307/cmk-agent-ctl
tcp6 0 0 ::1:5555 :::* LISTEN 1803/midb
tcp6 0 0 ::1:5000 :::* LISTEN 1801/http
tcp6 0 0 ::1:33333 :::* LISTEN 708/event
tcp6 0 0 :::8080 :::* LISTEN 1807/nginx: master
udp 0 0 0.0.0.0:161 0.0.0.0:* 1396/snmpd
I opened the udp-port 161 for SNMP manually via iptables-command.
There is still Apparmor on the appliance, but the service is not running. So I really don't know what to do. Does anyone know the problem and have a solution?
