pfSense » pfSense Packages

The Zabbix 6 agent and proxy running on pfSense 2.6.0 fails to set the PSK values from the web GUI in the zabbix conf files. The example below is from the proxy at /usr/local/etc/zabbix6/zabbix_proxy.conf

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping

1. There's currently no fping6 (IPv6) dependency in the package,
2. but if there was, the binary would likely also be in /usr/local/sbin.
   Fping6Location=/usr/local/sbin/fping6
   ProxyMode=0
   #TLSConnect=
   #TLSAccept=
   #TlsCAfile=
   #TlsCRLfile=
   #TlsCERTfile=
   #TlsKEYfile=
   #TLSPSKIdentity=
   #TLSPSKFile=
   StartSNMPTrapper=1
   SNMPTrapperFile=/tmp/zabbix_traps.tmp
   TrapperTimeout=300
   StartTrappers=5

When it should be

Server=172.28.183.43
ServerPort=10051
Hostname=cn-inf-fw-01
ListenIP=0.0.0.0
ListenPort=10051
PidFile=/var/run/zabbix-proxy/zabbix_proxy.pid
DBName=/var/db/zabbix-proxy/proxy.db
LogFile=/var/log/zabbix-proxy/zabbix_proxy.log
ConfigFrequency=60
FpingLocation=/usr/local/sbin/fping

1. There's currently no fping6 (IPv6) dependency in the package,
2. but if there was, the binary would likely also be in /usr/local/sbin.
   Fping6Location=/usr/local/sbin/fping6
   ProxyMode=0
   TLSConnect=psk
   TLSAccept=psk
   #TlsCAfile=
   #TlsCRLfile=
   #TlsCERTfile=
   #TlsKEYfile=
   TLSPSKIdentity=CN-Std
   TLSPSKFile=/usr/local/etc/zabbix6/CN-Std.psk
   StartSNMPTrapper=1
   SNMPTrapperFile=/tmp/zabbix_traps.tmp
   TrapperTimeout=300
   StartTrappers=5

Editing the conf files directly and restarting the Zabbix proxy service works around the issue. There appears to be the same issue with the zabbix6 agent conf.

Thanks
Mat