I guess we will make use of nftables when the firewall codebase is rewritten. That rewrite is a major effort and on the roadmap - but it does not have momentum/priority yet due to limited resources.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 17 2019
Nov 17 2019
c-po committed rVYOSONEX1f7b0412316d: openvpn: fix typo in op-mode command on display rx bytes (authored by Andras Elso <ea333@freemail.hu>).
c-po committed rVYOSONEX05c9967ac312: T1801: escape isolated backslashes before passing to ConfigTree() (authored by jestabro).
c-po moved T1792: Update WireGuard to Debian release 0.0.20191012-1 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.4) board.
c-po added a project to T1792: Update WireGuard to Debian release 0.0.20191012-1: VyOS 1.2 Crux (VyOS 1.2.4).
c-po moved T1800: Update Linux Kernel to v4.19.84 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.4) board.
c-po renamed T1809: Wireless: SSID scan does not work in AP mode from Wireless: SSID scan doe not work in AP mode to Wireless: SSID scan does not work in AP mode.
c-po moved T1809: Wireless: SSID scan does not work in AP mode from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.4) board.
c-po moved T1809: Wireless: SSID scan does not work in AP mode from Need Triage to VyOS 1.2.4 on the VyOS 1.2 Crux board.
Nov 16 2019
Nov 16 2019
as I read your script it works in a different way. Also its location seems to be wrong. OpenVPN is handled here:
https://github.com/vyos/vyatta-cfg-system/commit/bb686343fc913413ff51edfeb63929759bee0fde
Nov 14 2019
Nov 14 2019
Nov 12 2019
Nov 12 2019
c-po moved T1787: Failed config migration from V1.2.3 to 1.2-rolling-201911030217 from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T1673: vif bridge-group not migrated to bridge member interface from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T1627: Rewrite wireless interface in new style XML syntax from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T989: Add support for IPoE server from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1763: CloudFlare DDNS support from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po moved T517: Rewrite the wireless interface configuration in the new style (python + XML) from Backlog to Finished on the VyOS 1.3 Equuleus board.
c-po moved T808: replace lighthttpd with nginx from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T56: Add pkcs11 support to OpenVPN interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T50: Better support for tcp-mss from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T239: Improve documentation for the firewall all-ping setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T592: lldpcli: unknown command from argument 1: `#` from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1062: Cannot connect to a newly created Amazon EC2 instance via SSH from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T823: Rewrite DHCP op mode in the new style from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1313: Add support for reusable build flavours from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1565: [wireguard] - use VYOS_TAGNODE_VALUE to determine changed tagNodes from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1570: Unable to build for ocaml/dune for armhf on docker and chroot from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1656: equuleus: buster: arm: iso creation failes because of intel drivers from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1741: Add system wide proxy setting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1756: Modify output to be more useful - Wireguard from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1789: ddclient not working with generated RFC2136 / nsupdate config from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1791: Update Linux Kernel to 4.19.82 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1792: Update WireGuard to Debian release 0.0.20191012-1 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1800: Update Linux Kernel to v4.19.84 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Nov 11 2019
Nov 11 2019
Due to some internal logic in net-snmp this can not be done so easy.
c-po triaged T1799: Add support for GENEVE (Generic Network Virtualization Encapsulation) as Low priority.
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from In Progress to Finished on the VyOS 1.3 Equuleus board.
c-po committed rVYOSONEXb2939e7f69ba: [OpenVPN]: T1704: Changed the description of ncp-ciphers in config (authored by vindenesen).
Nov 10 2019
Nov 10 2019
c-po moved T1793: Editing description on an interface causes BGP sessions to reset on commit from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po changed the status of T1793: Editing description on an interface causes BGP sessions to reset on commit from Confirmed to Needs testing.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
Tomorrows rolling release will come with a first version of the fix. It requires you to use speed/duplex auto setting. The next part will also cover fixed speed/duplex settings.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
The offender is the call to vyos.ifconfig.set_flow_control() which triggers /sbin/ethtool --pause eth0 autoneg on tx on rx on. we should only change this if it is really necessary and not on every commit.
c-po closed T1792: Update WireGuard to Debian release 0.0.20191012-1, a subtask of T1791: Update Linux Kernel to 4.19.82, as Resolved.
Colons in interface description should be allowed. There are tools like libreNMS which use defined prefixes for internal mapping and they have a colon inside.
c-po edited a custom field on T1793: Editing description on an interface causes BGP sessions to reset on commit.
c-po changed the status of T1793: Editing description on an interface causes BGP sessions to reset on commit from Open to Confirmed.
c-po added a comment to T1793: Editing description on an interface causes BGP sessions to reset on commit.
There should be no reason the session is reset. This is an implementation "missdesign" by me when rewriting the ethernet interface. All interfaces are placed in admin down state on commit and will be placed in admin up state once the commit has run. and interface is not disabled.
Nov 9 2019
Nov 9 2019
c-po changed the status of T1792: Update WireGuard to Debian release 0.0.20191012-1, a subtask of T1791: Update Linux Kernel to 4.19.82, from Open to In progress.
c-po changed the status of T1792: Update WireGuard to Debian release 0.0.20191012-1 from Open to In progress.
c-po changed the status of T1030: Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4) from Unknown Status to Resolved.
c-po changed the status of T1030: Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4), a subtask of T1763: CloudFlare DDNS support, from Unknown Status to Resolved.
c-po moved T1030: Upgrade ddclient from 3.8.2 to 3.9.0 (support Cloudflare API v4) from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.4) board.
Backport to crux complete
Nov 8 2019
Nov 8 2019
Nov 7 2019
Nov 7 2019
The real problem is the config parser it seems as it can not deal with special characters used in a pre-login banner.
Nov 5 2019
Nov 5 2019
Ah you were using bleeding edge equuleus builds. Ddclient 3.9.0 has been added to recent rolling image.
Nov 4 2019
Nov 4 2019
Confirmed using a copy of the Hyper-V VM