PR for 1.4 https://github.com/vyos/vyos-1x/pull/1058
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 1 2021
Nov 1 2021
Viacheslav added a parent task for T3933: The firewall does not filter incoming traffic on the interface with vrf.: T2199: Rewrite firewall in new XML/Python style.
Nov 1 2021, 5:16 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
GitHub <[email protected]> committed rVYOSONEX1b7c879b9fed: Merge branch 'current' into T3350-sagitta (authored by zdc <[email protected]>).
GitHub <[email protected]> committed rVYOSONEXf52ca36b3746: Merge pull request #1021 from zdc/T3350-sagitta (authored by c-po).
Viacheslav moved T2683: no dual stack in system static-host-mapping host-name from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T2281: DHCP and Static IPs on Same Interface from Open to In progress.
For 1.4 it is impossible to set both dhcp + static in one commit.
set interfaces ethernet eth2 address dhcp set interfaces ethernet eth2 address 192.0.2.4/24
c-po committed rVYOSONEX0c2384114e8a: dhclient: T3940: Added lease file argument to the `dhclient -x` call (authored by zsdc).
Oct 31 2021
Oct 31 2021
Included this feature in the firewall/zone-policy rewrite: https://github.com/vyos/vyos-1x/pull/1033
johannrichard added a comment to T3916: Add additional Linux capabilities to container configuration.
In T3916#109326, @Viacheslav wrote:WIll be added in the next rolling release, @johannrichard could you test it?
Viacheslav added a comment to T2498: Expected error when deleting vif that has dhcp-server configured.
What wrong with it?
As you use some service which belong to some interface
Or what you expected?
Provide please an example of configurations and steps to reproduce.
This entries:
Viacheslav added a comment to rVYOSONEX17215846b512: netflow: T3953: use warning if "netflow source-ip" does not exist instead of….
The correct task https://phabricator.vyos.net/T3943
Viacheslav added a comment to rVYOSONEX893dd69d975c: netflow: T3953: use warning if "netflow source-ip" does not exist instead of….
The correct task https://phabricator.vyos.net/T3943
Viacheslav removed a project from T3843: l2tp configuration not cleared after delete: VyOS 1.3 Equuleus (1.3.0-epa1).
Viacheslav changed the status of T3846: dmvpn configuration not reapllied after "restart vpn" from Open to In progress.
Same request: T292
syncer edited projects for T2297: NTP add support for pool configuration, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Backport Candidates to Finished on the VyOS 1.3 Equuleus board.
c-po changed the status of T3956: GRE tunnel - unable to move from source-interface to source-address, commit error from Open to In progress.
n.fort added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
Definitely miss behavior is generated by the new interface MGT that was created when assigning MGT vrf to eth0.
Oct 31 2021, 1:45 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
c-po renamed T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from VyOS 1.2.7 upgrade to 1.3.0-epa2 config error if flow-accounting is set to "netflow source-ip" prevents image upgrades if IP address does not exist locally.
c-po moved T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command as Resolved.
Viacheslav added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
PR for crux https://github.com/vyos/vyatta-op-vpn/pull/29
Kim Hagen <[email protected]> committed rVYOSONEX02b6370c3cd1: more 2fa changes.
Kim Hagen <[email protected]> committed rVYOSONEX6748dbe0100c: add part 2fa.
Kim Hagen <[email protected]> committed rVYOSONEX04e87d5a5974: update 2fa qr generation and user creation procedure.
Kim Hagen <[email protected]> committed rVYOSONEXfa101ed0e160: remove default values from xml.
Kim Hagen <[email protected]> committed rVYOSONEX87ee779a977e: add 2fa op files and update template.
Kim Hagen <[email protected]> committed rVYOSONEX65b55f35f836: fix file location and use correct variable.
Kim Hagen <[email protected]> committed rVYOSONEX2a27f35ea595: change secret file location in template.
Kim Hagen <[email protected]> committed rVYOSONEX024839cb1588: update the location of the openvpn-otp.so plugin.
Kim Hagen <[email protected]> committed rVYOSONEX5366f9c9ce98: do not use capitals in opmode.
Restricted Repository Identity added a reverting change for rVYOSONEX415e572dfba7: openvpn: T3736: openvpn-option keeps and adds double dashes (--): rVYOSONEXeb7f8904076e: Revert "openvpn: T3736: openvpn-option keeps and adds double dashes (--)".
Kim Hagen <[email protected]> committed rVYOSONEXba8630da9639: pull request fixes.
Kim Hagen <[email protected]> committed rVYOSONEX2349f2d91213: openvpn: T3805: use vyos.util.makedir() to create system directories (authored by c-po).
Kim Hagen <[email protected]> committed rVYOSONEX9cd3c3bfe04b: openvpn: T3805: use vyos.util.write_file() to store certificates (authored by c-po).
Kim Hagen <[email protected]> committed rVYOSONEXc567b43807fa: openvpn: T3805: fix bool logic in verify_pki() for client mode (authored by c-po).
Kim Hagen <[email protected]> committed rVYOSONEX699d4533c543: openvpn: T3805: drop privileges using systemd - required for rtnetlink (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX2274dbf90474: Merge branch 'current' into 2fa (authored by UnicronNL).
Kim Hagen <[email protected]> committed rVYOSONEX2acfffab8b98: openvpn: T3642: Fix password_protected check (authored by nagua).
Kim Hagen <[email protected]> committed rVYOSONEX0a4ba4cb7017: add openvpn-otp dependency.
Kim Hagen <[email protected]> committed rVYOSONEXf8dca381b482: update writer to nicer read write.
Kim Hagen <[email protected]> committed rVYOSONEX28db7b15426f: use vyos read_file and write_file functions.
Kim Hagen <[email protected]> committed rVYOSONEXd2c17f9864d2: do not use Path.
GitHub <[email protected]> committed rVYOSONEX629c169a43ff: openvpn: T3834: Support for Two Factor Authentication totp (authored by UnicronNL).
c-po moved T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the subtype of T3955: Allow commit-confirm through http API from "Task" to "Feature Request".
Bug still present in 1.3.0-epa2 version.
c-po moved T3761: Bump salt-minion to 3000 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
Oct 30 2021
Oct 30 2021
c-po added a comment to T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Awesome report, thanks
c-po changed the status of T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from Open to In progress.
klipz added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@Viacheslav Yes, I have updated the system to 1.2.8-LTS. I will let you know if the disappearing openvpn tun interface reoccurs.
marc_s renamed T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from [Includes proposed fix] FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error to FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Viacheslav added a comment to T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress..
PR for crux https://github.com/vyos/vyos-1x/pull/1057
vyos@r12-lts:~$ show conf com | match vrrp set high-availability vrrp group GRP02 hello-source-address '203.0.113.1' set high-availability vrrp group GRP02 interface 'eth1.50' set high-availability vrrp group GRP02 no-preempt set high-availability vrrp group GRP02 priority '150' set high-availability vrrp group GRP02 rfc3768-compatibility set high-availability vrrp group GRP02 virtual-address '192.168.99.2/31' set high-availability vrrp group GRP02 vrid '10' vyos@r12-lts:~$ show interfaces vrrp Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- eth1.50v10 192.168.99.2/31 u/u vyos@r12-lts:~$
Viacheslav changed the status of T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress. from Confirmed to In progress.
Unknown Object (User) changed the status of T3952: Add sh bgp ipv4/ipv6 vpn command from In progress to Needs testing.
PR for crux https://github.com/vyos/vyos-1x/pull/1056
Viacheslav added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@klipz Could you re-check it with 1.2.8?
Viacheslav closed T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate as Not Applicable.
Oct 29 2021
Oct 29 2021
To fix some of this issue I modified line 102-103 in show_nat_rules.py:
n.fort added a comment to T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate.
I have done a lab using 1.3.0-epa2 version, and got no troubles.
Have configured 2 IP addresses on interface, and configured zone based firewall. I'm able to ping everywhere, using both IP addresses of that interface.
Also I checked that counters on firewall rules got increased while pinging from any of both IP addresses.
Viacheslav changed the status of T3394: Error on removing dhcpv6 address from interface from Open to In progress.
c-po changed the status of T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to In progress.
c-po added a comment to T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally.
[email protected]# commit [ system flow-accounting ] Your "netflow source-ip" does not exist in the system
Viacheslav renamed T3796: Wireguard interfaces are not shown in op-mode from Crux Wireguard Documentation Seems Incorrect to Wireguard interfaces are not shown in op-mode.