The firewall for ocserv is handled by https://gitlab.com/openconnect/ocserv/-/blob/master/src/ocserv-fw and uses iptables by default
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Apr 13 2023
Apr 13 2023
Viacheslav moved T4939: VRRP command no-preempt not work as expected from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T4727: Add RADIUS rate limit support to PPTP server from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 12 2023
Apr 12 2023
@Harliff Could you re-check?
Viacheslav moved T5152: Telegraf agent hostname isn't qualified from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1954
Apr 11 2023
Apr 11 2023
Viacheslav edited projects for T5152: Telegraf agent hostname isn't qualified, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1952
PR for 1.4 fix https://github.com/vyos/vyos-1x/pull/1953
Viacheslav changed the subtype of T4727: Add RADIUS rate limit support to PPTP server from "Task" to "Feature Request".
Viacheslav changed the status of T5152: Telegraf agent hostname isn't qualified from In progress to Needs testing.
For 1.4 rate-limit in the wrong place
set vpn pptp remote-access authentication rate-limit
Expected in the radius section:
set vpn pptp remote-access authentication radius rate-limit
@n.fort Could you add PR for 1.3?
@fernando Could you add PR for 1.3?
Viacheslav changed the status of T5152: Telegraf agent hostname isn't qualified from Open to In progress.
Viacheslav added projects to T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta.
Could you send sudo nft list ruleset ?
Apr 10 2023
Apr 10 2023
Viacheslav changed the status of T5012: Control network configuration from Cloud-Init config from In progress to Needs testing.
Fixed in T5047
Viacheslav changed the status of T5065: Mixing `destination port xxx` and `destination group port-group yyy` in firewall rules doesn't work, but can be commited from In progress to Needs testing.
Viacheslav changed the status of T5065: Mixing `destination port xxx` and `destination group port-group yyy` in firewall rules doesn't work, but can be commited from Open to In progress.
Viacheslav closed T5078: VyOS BGP does not support 'show bgp neighbors $NB filtered-routes' as Resolved.
So we can close it. Thank you for contributing.
Viacheslav added a comment to T5078: VyOS BGP does not support 'show bgp neighbors $NB filtered-routes'.
Just waiting for a new rolling image and checking that those commands are present for CLI :)
If all goods we can close it
Viacheslav changed the subtype of T5122: Move "archive-areas" to defaults.toml to support "non-free-firmware" repository from "Task" to "Feature Request".
Targets and logs will be fixed in the next rolling release
Viacheslav added a comment to T5148: OpenVPN cannot start due to could not load plugin shared object /openvpn-otp.so.
Smoketest PR https://github.com/vyos/vyos-1x/pull/1947
Viacheslav changed the status of T5078: VyOS BGP does not support 'show bgp neighbors $NB filtered-routes' from Open to Needs testing.
Viacheslav changed the status of T5148: OpenVPN cannot start due to could not load plugin shared object /openvpn-otp.so from In progress to Needs testing.
Viacheslav added a comment to T5078: VyOS BGP does not support 'show bgp neighbors $NB filtered-routes'.
Create please the PR
Thanks.
Viacheslav closed T5110: Show frr op-mode vtysh_pam: Failed in account validation, a subtask of T5100: Update FRR to 8.5, as Resolved.
It cannot pass the smoketest /usr/libexec/vyos/tests/smoke/cli/test_interfaces_wireless.py
06:48:28 DEBUG - test_wireless_access_point_bridge (__main__.WirelessInterfaceTest.test_wireless_access_point_bridge) ... FAIL 06:48:29 DEBUG - test_wireless_access_point_bridge (__main__.WirelessInterfaceTest.test_wireless_access_point_bridge) ... ERROR 06:48:30 DEBUG - test_wireless_add_single_ip_address (__main__.WirelessInterfaceTest.test_wireless_add_single_ip_address) ... ERROR 06:48:32 DEBUG - test_wireless_add_single_ip_address (__main__.WirelessInterfaceTest.test_wireless_add_single_ip_address) ... ERROR 06:48:33 DEBUG - test_wireless_hostapd_config (__main__.WirelessInterfaceTest.test_wireless_hostapd_config) ... FAIL 06:48:34 DEBUG - test_wireless_hostapd_config (__main__.WirelessInterfaceTest.test_wireless_hostapd_config) ... ERROR 06:48:37 DEBUG - test_wireless_hostapd_wpa_config (__main__.WirelessInterfaceTest.test_wireless_hostapd_wpa_config) ... FAIL 06:48:38 DEBUG - test_wireless_hostapd_wpa_config (__main__.WirelessInterfaceTest.test_wireless_hostapd_wpa_config) ... ERROR
Viacheslav changed the status of T5148: OpenVPN cannot start due to could not load plugin shared object /openvpn-otp.so from Open to In progress.
Viacheslav moved T5151: EAP-TLS TLSv1.0/1.1 regression after T5003 from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 7 2023
Apr 7 2023
Viacheslav added a comment to T5148: OpenVPN cannot start due to could not load plugin shared object /openvpn-otp.so.
Otp not configured
Viacheslav updated the task description for T5148: OpenVPN cannot start due to could not load plugin shared object /openvpn-otp.so.
Apr 6 2023
Apr 6 2023
We have targets-checks 203.0.113.1, 192.0.2.1, and if any of these targets are unreachable, we delete this route.
Is it correct?
Viacheslav closed T5125: Add op-mode commands for hsflowd based sflow, a subtask of T5086: Integrate hsflowd for sflow accounting, as Resolved.
Viacheslav closed T5146: Show recent login of all users, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Invalid.
A similar output exists
show system login users Possible completions: <Enter> Execute the current command all Show information about all accounts locked Show information about locked accounts other Show information about non VyOS user accounts vyos Show information about VyOS user accounts`
Apr 5 2023
Apr 5 2023
Viacheslav changed the status of T5146: Show recent login of all users, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from Open to In progress.
Viacheslav closed T5145: Add maxsyslogins maximum number of all logins on system , a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
Apr 4 2023
Apr 4 2023
Viacheslav changed the status of T5138: Add patch to accel-ppp build L2TP LNS use Calling-Number as RADIUS Calling-Station-ID from In progress to Needs testing.
Viacheslav changed the status of T5145: Add maxsyslogins maximum number of all logins on system , a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from In progress to Needs testing.
Viacheslav changed the status of T5145: Add maxsyslogins maximum number of all logins on system from In progress to Needs testing.
PR https://github.com/vyos/vyos-1x/pull/1939
set system login max-login-session '1' set system login timeout '600'
Viacheslav changed the status of T5145: Add maxsyslogins maximum number of all logins on system , a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from Open to In progress.
Viacheslav changed the status of T5145: Add maxsyslogins maximum number of all logins on system from Open to In progress.
Viacheslav updated the task description for T4712: Collaborative Protection Profile cPP for Network Devices root task.
@Harliff It is better to write to this task if you find bugs or propose new features.
So anyone could claim/fix it.
Thanks.
Viacheslav updated the task description for T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events..
Viacheslav updated the task description for T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events..
Viacheslav changed the status of T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events., a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from Open to In progress.
Viacheslav changed the status of T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events. from Open to In progress.
Viacheslav changed the status of T5138: Add patch to accel-ppp build L2TP LNS use Calling-Number as RADIUS Calling-Station-ID from Open to In progress.
@neilmckee Thanks.
If output looks good we can close the task
Viacheslav closed T4362: Wan Load Balancing - Can't create routing tables, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
Apr 3 2023
Apr 3 2023
Viacheslav updated the task description for T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events..
Viacheslav updated the task description for T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events..
Viacheslav updated the task description for T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events..
Viacheslav changed the status of T4362: Wan Load Balancing - Can't create routing tables, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to Needs testing.
Viacheslav changed the status of T4362: Wan Load Balancing - Can't create routing tables from Open to Needs testing.
@marc_s Will be fixed in the next rolling release, could you check?