- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 7 2024
May 7 2024
Viacheslav renamed T6305: IPoE interface wildcard validation error in firewall rules from Firewall interface wildcard validation error to Firewall ipoe interface wildcard validation error.
HollyGurza moved T4248: There isn't a way to remove the only rule from the (traffic-policy) class. from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T4718: DHCP server listen-address doesn't take effect if the interface is in a VRF from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza changed the status of T6082: BGP doesn't allow the same local AS and remote AS in peer groups from Confirmed to In progress.
HollyGurza added a comment to T6082: BGP doesn't allow the same local AS and remote AS in peer groups.
Viacheslav moved T6311: Nftables build add dependency asciidoc-base from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav moved T6311: Nftables build add dependency asciidoc-base from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
The current workaround is manual DNAT rules:
set nat destination rule 100 destination port '80' set nat destination rule 100 protocol 'tcp' set nat destination rule 100 translation redirect port '3128'
Add any rules before 100 for excluding DNAT and use "bypass"
Few PR checks failing, i will check and fix
Used codeql reusable workflow in a reference repo.
Please review and merge
https://github.com/vyos/vyos-1x/pull/3420
Min config for old implementation with redirect (1.2):
set service webproxy listen-address 192.168.122.12 set service webproxy url-filtering squidguard block-category 'aggressive' set service webproxy url-filtering squidguard local-block 'mytest.local' set service webproxy whitelist destination-address '192.0.2.1' set service webproxy whitelist destination-address '192.0.2.2' set service webproxy whitelist source-address '192.0.2.222' set service webproxy whitelist source-address '192.0.2.223'
Added reusable workflow for codeql
Please review and approve
https://github.com/vyos/vyos-github-actions/pull/2
syncer edited projects for T3202: Enable wireguard debug messages by default, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T2798: Allow port range in tc filter, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4287: wireless: cannot set regulatory domain, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4305: Global log facility does not have consistent default settings, and doesn't change when modified, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4399: nhrp - add or delete nhrp tunnel restart opennhrp process, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4401: Networking needs to be reset during config boot (in some environments), added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4461: Improve negated firewall groups in cli, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4561: reset ip bgp <neighbor> allows reset bgp peer for ipv4, also it should exist one for ipv6, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4564: Root task for rewriting [op-mode] to vyos.opmode format, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4635: Add zebra option ip nht resolve-via-default as default option, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4608: IPSec shows only one IKE for the same peer, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4281: System users migration can lead to inaccessible shell, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5287: Unable to advertise EVPN type 3 (multicast) routes when using a route-map, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5307: QoS - traffic-class-map services , added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5356: DMVPN NHRP spoke stops sending resolution requests upon restart, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5386: Execute VRRP transition script when `set high-availability disable` is commited, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5405: Add VRF support for "update geoip", added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5458: USB Console options is missing for a new image after "add system image" upgrade, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5471: Conntrack logging doesnt seem to be working, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5514: Improve error handling when/if config.boot is deleted or missing , added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5522: Add logging for which mksquashfs syntax is being used, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5570: PAM config RADIUS ignore for default and success, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5790: ISIS invalid format of hello packet when interface mtu is between 1501 and 1535, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5666: Provide list of config-mode scripts scheduled for proposed commit, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5906: Some cloud-init options may be stale or broken., added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5907: cloud-init root task for 1.5 and 1.4 , added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T1641: VRRP conntrack-sync dropping packets passing through the router, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T2584: pppoe-server NAS-Filter-Rule attribute, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T2804: OSPFv3 Stub / NSSA [no summary], added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T3153: Route leaking to default VRF in Wireguard, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T3159: L2TP MTU mismatch between client and server, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T3204: Performance system option destroy defined sysctl custom params, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4280: dhcp-relay: does not work with wireguard uplink, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T3393: IPoE does not assign IPv6 PD or WAN address, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4455: smp-affinity required by some platforms but doesn't exists in the CLI, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4588: BGP Peer Group Scaling issues, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T4600: Closing IPV6CP by client closes PPPoE link completely, even if IPv6 is optional, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5931: Add option to append route-target when adding additional imports, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T5985: Downloaded files end up with unwieldy file attributes, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6022: set system image default-boot, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6030: QoS policy shaper can generate unexpected tc filter rate rules, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6049: wwan didn't setup static IP addres and MTU on wwan0, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6082: BGP doesn't allow the same local AS and remote AS in peer groups, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6092: Static interface index, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6123: Limit NTP allow-client config to internal addresses by default, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6187: Use correct CPU counts adjusted for SMT when necessary, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6225: Unhandled exception when configuring random-detect QoS policy, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6291: Add op mode commands for displaying LACP information for bonding interfaces, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6297: Implement behavior like in VyOS 1.3 for qos random detect policy, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6044: OpenVPN certificate revocation does not work properly, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0).
syncer edited projects for T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0).
syncer edited projects for T3195: Add support for cisco style GRE keepalives, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T2770: Allow any character to be used in the SNMP community field, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
syncer edited projects for T6309: Check code quality with CodeQL, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta (1.4.0).
There is an ongoing discussion in the background between the maintainers for more then a year how to get rid of the hw-id node in general and do such a detection once during initial boot.
c-po edited projects for T6308: Ability to remap ethernet interfaces to other/new mac-addresses, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
May 6 2024
May 6 2024
Viacheslav moved T6307: procps is missing from vyos-1x build dependencies from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
And similar example, using same interfaces and host, but instead of GRE tunnel, using a Wireguard site to site tunnel:
Example of using flowtables on mater interfaces, and communication between a local host that is on a VLAN (vlan eth2.22 and host 10.22.22.222), and a remote host that is reachable through a GRE tunnel (tunnel established using interface eth0):
By looking at this and the documentation, I do not see any proofs that flowtables support any encapsulation except VLAN and PPPOE.
n.fort changed the status of T6265: Firewall flowtable should allow ethernet only interfaces from Open to In progress.
Viacheslav changed the status of T6307: procps is missing from vyos-1x build dependencies from Open to In progress.
Can you try with newver version?
New fixes were applied.
You can check this tasks:
https://vyos.dev/T6269
https://vyos.dev/T6191