[ZBX-15399] „::/0“ in allowed hosts for Zabbix Trapper Items doesn't allow IPv4 anymore Created: 2019 Jan 03  Updated: 2024 Apr 10  Resolved: 2019 Jan 20

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G), Proxy (P), Server (S)
Affects Version/s: 4.0.3, 4.2.0alpha2
Fix Version/s: 4.0.4rc1, 4.2.0alpha3, 4.2 (plan)

Type: Problem report Priority: Minor
Reporter: Sebastian Kremer Assignee: Andrejs Kozlovs
Resolution: Fixed Votes: 0
Labels: API, Trigger
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

LinuxUbuntu 18.04 LTS and Zabbix v4.0.3


Issue Links:
Causes
causes ZBX-15955 Agent allows requests from any hosts ... Closed
caused by ZBX-10820 Potential loss of data when server/pr... Closed
Team: Team A
Team: Team A
Sprint: Sprint 47, Dec 2018, Sprint 48, Jan 2019
Story Points: 0.125

 Description   

Steps to reproduce:

  1. Create an Trapper item via the API with an empty "allowed hosts" field (works with all zabbix server versions, except v3.4 ... a bug?) on v3.4 only '::/0' works fine ... as in the documentation described, "and '::/0' will allow any IPv4 or IPv6 address" "when IPv6 is enabled" (IPv6 is enabled and zabbix-server reports that on startup, too)
  2. Send values to this trapper item

Result:

The Zabbix Server reports "xxx cannot process item "test3" trap: connection from "192.168.40.115" rejected, allowed hosts: '::/0'"

If we change the allowed hosts from '::/0' to '::/0, 0.0.0.0/0' it works

Expected:

  • Zabbix Server accepts the values for trigger items when ::/0 is set, or the allowed hosts is empty 

We have over 90k Trapper Items in hundreds of software projects that reports values to our zabbix servers and with an update from 3.4 to 4.x the automatic creation of new items doesn't work anymore, but we can't upgrade all of our projects (the zabbix integration) for this.

Our Workaround right now will be a cronjob every minute to remove all '::/0' from new created trapper items (update items set trapper_hosts = '' where trapper_hosts = '::/0')



 Comments   
Comment by Vladislavs Sokurenko [ 2019 Jan 03 ]

Could you please show Zabbix srver startup allowed features ?

Comment by Sebastian Kremer [ 2019 Jan 03 ]

9218:20190102:165714.947 ****** Enabled features ******
9218:20190102:165714.947 SNMP monitoring: YES
9218:20190102:165714.947 IPMI monitoring: YES
9218:20190102:165714.947 Web monitoring: YES
9218:20190102:165714.947 VMware monitoring: YES
9218:20190102:165714.947 SMTP authentication: YES
9218:20190102:165714.947 Jabber notifications: YES
9218:20190102:165714.947 Ez Texting notifications: YES
9218:20190102:165714.947 ODBC: YES
9218:20190102:165714.947 SSH2 support: YES
9218:20190102:165714.947 IPv6 support: YES
9218:20190102:165714.947 TLS support: YES
9218:20190102:165714.947 ******************************

Comment by richlv [ 2019 Jan 03 ]

It might be useful to change "trigger" to "trapper" throughout the summary and description.

Comment by Sebastian Kremer [ 2019 Jan 03 ]

You are right, Sorry, I can't change/modify this, @SupportTeam please correct this. Thank you!

Comment by Vladislavs Sokurenko [ 2019 Jan 03 ]

Looks like caused by ZBX-10820

Comment by Andrejs Kozlovs [ 2019 Jan 07 ]

Fixed in:

  • pre-4.0.4rc1 r88338
  • pre-4.2.0alpha3 (trunk) r88340
Generated at Sat Apr 20 12:33:52 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.