zarzax the blog

Over the past few days we have been tackling a nasty Cross Site Request Forgery (CSRF) bug in Nagios 3.0.4. With our bug fix I updated the Nagios documentation to include some information on Enhanced CGI Security and Authentication. This is a much needed addition that answers some of the communities questions regarding different ways to secure Nagios. This post will rehash much of what I wrote about in the documentation. There are many ways to enhance the security of your monitoring server and Nagios environment. This should not be taken as the end all approach to security. Instead, think of it as an introduction to some of the techniques you can use to tighten the security of your system. As always, you should do your research and use the best techniques available. Treat your monitoring server as it were the most important server in your network and you shall be rewarded.

(continue reading…)

I just got back from this years NETWAYS Nagios Conference.  It was a huge success.  It was held again at the City Center Holiday Inn, Nuernberg.  Nuernberg is such a great city.  It really makes me sad that I did not have much time to see more of the city.

The Conference itself was really busy.  They had 3 to 4 tracks every session, with at least 1 track being in English.  This really means that I wake up at 8am, conference starts at 9am, ends at 5pm, with 15min breaks between sessions.  After 5pm there is dinner or bars that we then go to and stay till 2am or 3am.  I have to say that I was completely exhausted when I finally got home.

The best part was I finally got to meet many people that I have only communicated with by email.  I was able to hang out with some of the German community members Hendrik, Joerg, Matthias, and Michael one evening.  We had some great talks about Germany, working in Germany, the future of Nagios, with American Politics splattered in there for good measure.

photo credit: Docklandsboy