added wazuh_agent_nat boolean variable for agents behind nat

[jheikki100]

Added templating for enabling any IP option in OSSEC agent registration process
Template for both auth_agent and API registration
These changes should not change the previous default behavior of the role.

[manuasir]

Hello @jheikki100 ,

This looks good :) This will be merged once the tests are passing.
Thank you so much for this contribution, appreciated.

Cheers

[manuasir]

Please @jheikki100 ,

I've changed the destination branch to the 3.9.4_7.2.0, where the changes for the upcoming release are being merged.
Thanks again.

[jheikki100]

Hi Manuel, we have been investigating and testing, and it seems that the option "wazuh_agent_nat" is not going to work. I found after trying and failing following piece of information on Wazuh forums: https://groups.google.com/forum/#!searchin/wazuh/agents$20behind$20nat%7Csort:date/wazuh/8YWOUCH7N64/hJd2pOvgDQAJ What it basically says, is that when setting up the ossec.conf on the manager as suggested, wazuh_agent_nat=true will cause wazuh agent registration fail, since it will translate -I any on the second agent as existing agent and refuses to register. For us it works, when we set the option to false. So from the point of view working behind NAT this option is actually not useful and could be removed upstream. Best, Jani Heikkinen

…

On Fri, Jul 19, 2019 at 3:19 PM Manuel J. Bernal ***@***.***> wrote: Merged #208 <#208> into 3.9.4_7.2.0. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#208?email_source=notifications&email_token=AAOR55OSH2ENFK2ENTGPJK3QAG5PRA5CNFSM4IEYRPY2YY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOSTBSEZI#event-2495816293>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAOR55IXAFS6FWRRH7CCXN3QAG5PRANCNFSM4IEYRPYQ> .