[ZBX-23322] Simple check, net.tcp.service, outgoing connection Created: 2023 Aug 28  Updated: 2025 May 29  Resolved: 2025 May 29

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Proxy (P), Server (S)
Affects Version/s: 6.0.21, 6.4.6
Fix Version/s: 7.0.14rc1, 7.2.8rc1, 7.4.0rc1

Type: Documentation task Priority: Trivial
Reporter: Aigars Kadikis Assignee: Andrii Fediuk
Resolution: Fixed Votes: 1
Labels: None
Remaining Estimate: Not Specified
Time Spent: 1h
Original Estimate: Not Specified

Issue Links:
Sub-task
Story Points: 0.5

 Description   

Regarding security, out of the box, a "zabbix-selinux-policy" package whitelists the bare minimum ports.

When implementing custom "net.tcp.service" checks and if SELinux works in enforced mode, then it will still result in a non-working data collection.

On the page:

https://www.zabbix.com/documentation/6.0/en/manual/config/items/itemtypes/simple_checks

https://www.zabbix.com/documentation/current/en/manual/config/items/itemtypes/simple_checks

There should be a hint:

If SELinux works in enforced mode. Please check if the new outgoing connection has not been blocked:

grep denied /var/log/audit/audit.log

 Comments   
Comment by Andrii Fediuk [ 2025 May 23 ]

Updated documentation:

  • Simple checks: 7.0, 7.2, 7.4 (added a note suggesting to check outgoing connections).
Generated at Sat Jun 14 17:07:59 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.