Page MenuHomeVyOS Platform
Feed Search

Search
Use Results
Hide Query

Aug 27 2023

sarthurdev changed the status of T5080: Disable conntrack by default from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/2176

Aug 27 2023, 8:22 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled as Invalid.

They are created but unused by default (see VYOS_CT_HELPER chain)

Aug 27 2023, 8:14 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5511: Cleanup of unused directories (and files) in order to shrink image-size from Open to Needs testing.
Aug 27 2023, 8:07 AM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEX0e1ec63e513a: qos: T5018: Fix dependents only being set for QoS interfaces.
Aug 27 2023, 5:05 AM
sarthurdev changed the status of T5018: Redirect to IFB removed after change in qos policy from Confirmed to Needs testing.

Thanks for following up on this issue @rayzilt

Aug 27 2023, 12:13 AM · VyOS 1.4 Sagitta

Aug 26 2023

sarthurdev closed T5039: Can't add new local user as Resolved.
Aug 26 2023, 9:42 PM · VyOS 1.4 Sagitta
sarthurdev closed T5023: PKI commit fails to update dependents as Resolved.
Aug 26 2023, 9:40 PM · VyOS 1.4 Sagitta
sarthurdev closed T4512: enable-default-log on zone-policy as Resolved.
Aug 26 2023, 9:39 PM · VyOS 1.4 Sagitta
sarthurdev closed T5003: Upgrade base system to Debian 12 "Bookworm" as Resolved.
Aug 26 2023, 9:38 PM · VyOS 1.4 Sagitta
sarthurdev closed T5404: Ability to completely disable firewall/conntrack as Invalid.

Closing as dupe of T5080

Aug 26 2023, 9:36 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5080: Disable conntrack by default, a subtask of T5160: Firewall refactor, from Open to In progress.
Aug 26 2023, 9:35 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5080: Disable conntrack by default from Open to In progress.
Aug 26 2023, 9:35 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev changed the status of T3509: No BCP38 for IPv6 on VyOS from In progress to Needs testing.
Aug 26 2023, 5:40 PM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEXd62f8ed1e360: firewall: T3509: Add support for IPv6 return path filtering.
Aug 26 2023, 12:59 PM
sarthurdev committed rVYOSONEXb6f742716da5: interface: T3509: Add per-interface IPv6 source validation.
Aug 26 2023, 12:59 PM
sarthurdev committed rVYOSONEX2509a1ab84cd: firewall: T5160: Remove unused zone template.
Aug 26 2023, 12:59 PM

Aug 25 2023

sarthurdev committed rVYOSONEX8884f021582e: github: Add PR labels to easily identify base branches.
Aug 25 2023, 4:14 PM
sarthurdev committed rVYOSONEX14c7264de462: container: T5463: Fix iteration to publish all port nodes.
Aug 25 2023, 4:12 PM
sarthurdev added a comment to T5463: Containers allow publish IPv6 address port.

PR to fix indentation: https://github.com/vyos/vyos-1x/pull/2171

Aug 25 2023, 1:46 PM · VyOS 1.4 Sagitta

Aug 23 2023

sarthurdev claimed T3509: No BCP38 for IPv6 on VyOS.

Draft PR: https://github.com/vyos/vyos-1x/pull/2163

Aug 23 2023, 11:52 PM · VyOS 1.4 Sagitta

Aug 22 2023

sarthurdev added a comment to T3509: No BCP38 for IPv6 on VyOS.

I did start writing support for this but didn't have time to build and test it at the time. If anyone wants to test it out: https://github.com/sarthurdev/vyos-1x/commit/9199b75d75ceea3b7d49f0e3d71a19175b7b1326

Aug 22 2023, 6:34 PM · VyOS 1.4 Sagitta

Aug 16 2023

sarthurdev added a comment to T5160: Firewall refactor.
In T5160#156025, @Apachez wrote:

2.2: Invalid shall ALWAYS be processed BEFORE established/related/other rules otherwise it will not serve it purpose.

Aug 16 2023, 9:57 AM · VyOS 1.4 Sagitta

Jul 27 2023

sarthurdev added a comment to T5404: Ability to completely disable firewall/conntrack.

It is a bug that it’s on by default, see other task. Will be fixed after new firewall refactor is merged.

Jul 27 2023, 9:31 AM · VyOS 1.4 Sagitta

Jul 11 2023

sarthurdev committed rVYOSONEX3cd4da1b41a9: pki: T5275: Add op-mode output options for PEM format.
Jul 11 2023, 10:24 PM
sarthurdev added a comment to T5080: Disable conntrack by default.

@syncer Will address this after T5160 is merged

Jul 11 2023, 9:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev moved T5275: Add op mode commands for exporting certificates to PEM files with correct headers from Open to In Progress on the VyOS 1.4 Sagitta board.
Jul 11 2023, 9:26 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
sarthurdev changed the status of T5275: Add op mode commands for exporting certificates to PEM files with correct headers from Open to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/2087

Jul 11 2023, 9:25 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

Jul 3 2023

sarthurdev claimed T5275: Add op mode commands for exporting certificates to PEM files with correct headers.
Jul 3 2023, 8:48 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

Jun 15 2023

sarthurdev added a comment to T5293: Support for Floating Rules (Global Firewall-Rules that are automatically applied before all other Zone Rules).

Should be possible when new refactor is merged: T5160

Jun 15 2023, 5:43 PM · VyOS 1.4 Sagitta
sarthurdev added a comment to T5294: Wildcard Domains / TLDs in Firewall-Rules (and perhaps groups).

This would have to be handled with DNS and not in the firewall. Hostnames work on firewall because they are resolved prior to use in rules.

Jun 15 2023, 5:42 PM · VyOS Rolling

May 4 2023

sarthurdev added a comment to T5200: Static routing tables are not created with dhcp route.

It might be a boot/slow DHCP lease issue.

May 4 2023, 9:54 AM · Invalid

May 3 2023

sarthurdev renamed T5200: Static routing tables are not created with dhcp route from Static routing tables are not created to Static routing tables are not created with dhcp route.
May 3 2023, 10:46 PM · Invalid
sarthurdev created T5200: Static routing tables are not created with dhcp route.
May 3 2023, 10:36 PM · Invalid

Apr 20 2023

sarthurdev committed rVYOSONEX77858da1e564: pki: T3642: Fix show command if no CA certs are present.
Apr 20 2023, 5:35 AM

Apr 17 2023

sarthurdev added a comment to T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6).

Draft PR: https://github.com/vyos/vyos-1x/pull/1960

Apr 17 2023, 1:20 PM · VyOS 1.5 Circinus

Apr 14 2023

sarthurdev changed the status of T5162: Invalid json in configd-include.json from Open to Needs testing.
Apr 14 2023, 11:02 PM
sarthurdev added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.

Just to clarify, it changes again to pod-networkname in https://github.com/vyos/vyos-1x/commit/2a876059826927ef204e359a40395955f27503ce (next rolling image) to avoid name constraint issues.

Apr 14 2023, 8:23 AM

Apr 13 2023

sarthurdev added a comment to T5157: Containers are inaccessable on vyos-1.4-rolling-202304070317.

Can you share container config section?

Apr 13 2023, 9:29 PM

Mar 29 2023

sarthurdev added a comment to T5101: VYOS 1.4 release no longer displayes output for 'sudo ipsec statusall'.
Management Commands
Mar 29 2023, 9:30 PM · VyOS 1.4 Sagitta

Mar 23 2023

sarthurdev committed rVYOSONEX62875954a667: ipsec: T2816: Cleanup dhcp hook file if not required.
Mar 23 2023, 2:19 PM
sarthurdev committed rVYOSONEX98940e92d5c7: ipsec: T5003: Resolve issue with ipsec DHCP test.
Mar 23 2023, 2:19 PM

Mar 22 2023

sarthurdev changed the status of T5018: Redirect to IFB removed after change in qos policy from In progress to Needs testing.
Mar 22 2023, 4:18 PM · VyOS 1.4 Sagitta

Mar 11 2023

sarthurdev claimed T5080: Disable conntrack by default.
Mar 11 2023, 3:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev created T5080: Disable conntrack by default.
Mar 11 2023, 3:39 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 9 2023

sarthurdev committed rVYOSONEX25b64f32a22c: qos: T5018: Fix interface tc qdisc cleanup.
Mar 9 2023, 6:38 PM
sarthurdev committed rVYOSONEXc3039903aff9: qos: T5018: Use configdep to fix interface mirror/redirect issue.
Mar 9 2023, 6:38 PM
sarthurdev added a comment to T5018: Redirect to IFB removed after change in qos policy.

PR: https://github.com/vyos/vyos-1x/pull/1881

Mar 9 2023, 5:09 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5018: Redirect to IFB removed after change in qos policy from Confirmed to In progress.
Mar 9 2023, 4:26 PM · VyOS 1.4 Sagitta
sarthurdev closed T5075: QoS removes interface mirror/redirect rules as Invalid.

My bad

Mar 9 2023, 3:23 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5075: QoS removes interface mirror/redirect rules from Open to In progress.
Mar 9 2023, 3:15 PM · VyOS 1.4 Sagitta
sarthurdev created T5075: QoS removes interface mirror/redirect rules.
Mar 9 2023, 3:15 PM · VyOS 1.4 Sagitta
sarthurdev added a comment to T3008: Migrate from ntpd to chronyd.

Discovered a couple of problems with chrony using the existing CLI.

Mar 9 2023, 12:25 PM · VyOS 1.4 Sagitta

Mar 2 2023

sarthurdev committed rVYOSONEX19ad6dc524bc: login: T5039: Support hashing rounds in `encrypted-password` values.
Mar 2 2023, 4:13 PM
sarthurdev changed the status of T5039: Can't add new local user from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1863

Mar 2 2023, 2:46 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5039: Can't add new local user from Open to In progress.
Mar 2 2023, 2:06 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), a subtask of T3315: Supports dhcpv6 agent execution from pppoe0 interface, from Open to In progress.
Mar 2 2023, 1:41 PM
sarthurdev changed the status of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6) from Open to In progress.

Have started work on migrating isc-dhcp v4/v6 server to Kea.

Mar 2 2023, 1:41 PM · VyOS 1.5 Circinus

Feb 22 2023

sarthurdev committed rVYOSONEX806273bff6a6: openconnect: T5023: Conf script missing optional config parameter.
Feb 22 2023, 9:12 AM
sarthurdev changed the status of T5023: PKI commit fails to update dependents from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1840

Feb 22 2023, 9:03 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5023: PKI commit fails to update dependents from Open to In progress.
Feb 22 2023, 8:54 AM · VyOS 1.4 Sagitta
sarthurdev created T5023: PKI commit fails to update dependents.
Feb 22 2023, 8:54 AM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEX1ab7b853114c: ipsec: T4593: Remove references to deleted variables.
Feb 22 2023, 5:45 AM

Feb 21 2023

sarthurdev changed the status of T5003: Upgrade base system to Debian 12 "Bookworm" from In progress to Needs testing.

Builds completing. ISO worker on Jenkins should be fixed and pushing new rolling images shortly.

Feb 21 2023, 8:43 PM · VyOS 1.4 Sagitta

Feb 15 2023

sarthurdev committed rVYOSONEX7bacde871bb9: debian: T5003: Fixes for Debian Bookworm.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX71f91f08f45c: debian: T5003: Update XDP for latest libbpf.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEXda37c537975d: debian: T5003: Remove obsolete crda package.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX06ce53e7ea7d: debian: T5003: Temp fix for smoketest running.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX9e32eb737444: debian: T5003: Build tests require iproute2.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX27ca5b9d6d69: debian: T5003: Update WLB smoketest for Bookworm.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX19d19fc97e3b: debian: T5003: Fixes dynamic DNS for Bookworm.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX819eab870836: debian: T5003: Fix chronyd start error.
Feb 15 2023, 6:06 PM
sarthurdev committed rVYOSONEX45b16864b11e: ipsec: T4593: Migrate and remove legacy `include-ipsec` nodes.
Feb 15 2023, 6:03 PM

Feb 13 2023

sarthurdev added a comment to T5003: Upgrade base system to Debian 12 "Bookworm".

https://github.com/vyos/vyos-build/pull/306
https://github.com/vyos/vyos-1x/pull/1817
https://github.com/vyos/vyatta-cfg/pull/60
https://github.com/vyos/vyos-http-api-tools/pull/3

Feb 13 2023, 5:57 PM · VyOS 1.4 Sagitta
sarthurdev moved T5003: Upgrade base system to Debian 12 "Bookworm" from Open to In Progress on the VyOS 1.4 Sagitta board.
Feb 13 2023, 12:42 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5003: Upgrade base system to Debian 12 "Bookworm" from Open to In progress.
Feb 13 2023, 12:41 AM · VyOS 1.4 Sagitta

Feb 3 2023

sarthurdev added a comment to T3871: Resolve unexpected interface name reordering.
In T3871#141847, @jestabro wrote:

Before adopting the approach mentioned above, there was development of an alternative using pyudev within an 'interface-monitor' daemon; the following branches contain (a version of) the rebased code. It would need a few hours of attention to check the logic and add the is_persistent check from vyos-interface-rescan.py; it could use some refactoring as well.

https://github.com/vyos/vyos-1x/compare/current...jestabro:vyos-1x:interface-monitor
https://github.com/vyos/vyatta-cfg/compare/current...jestabro:vyatta-cfg:interface-monitor
https://github.com/vyos/vyos-build/compare/current...jestabro:vyos-build:interface-monitor

Feb 3 2023, 9:33 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA)

Jan 29 2023

sarthurdev closed T4965: empty description in firewall group causes configuration error on migration as Resolved.

Fixed in commit: https://github.com/vyos/vyos-1x/commit/6eea12512e59cc28f5c2e5ca5ec7e9e7b21731da

Jan 29 2023, 9:39 AM · VyOS 1.4 Sagitta

Jan 7 2023

sarthurdev added a comment to T4919: TPM-backed config encryption.

Draft PR: https://github.com/vyos/vyos-1x/pull/1740

Jan 7 2023, 12:03 PM · VyOS Rolling, VyOS 1.5 Circinus
c-po awarded T4919: TPM-backed config encryption a 100 token.
Jan 7 2023, 8:36 AM · VyOS Rolling, VyOS 1.5 Circinus

Jan 6 2023

sarthurdev claimed T4919: TPM-backed config encryption.
Jan 6 2023, 7:48 PM · VyOS Rolling, VyOS 1.5 Circinus
sarthurdev created T4919: TPM-backed config encryption.
Jan 6 2023, 7:44 PM · VyOS Rolling, VyOS 1.5 Circinus

Dec 23 2022

sarthurdev committed rVYOSONEXe1a6051d6b94: firewall: T2199: Add mac-address match to `destination` side.
Dec 23 2022, 9:29 PM
sarthurdev committed rVYOSONEX71468176ab6b: firewall: T2199: Fix typo in `rule-log-level.xml.i` header.
Dec 23 2022, 9:29 PM

Dec 3 2022

sarthurdev committed rVYOSONEXf916f40ee9a7: firewall: T478: Fix firewall group circular dependency check.
Dec 3 2022, 2:27 PM
sarthurdev added a comment to T478: Firewall address group (multi and nesting).

PR to fix recursion check: https://github.com/vyos/vyos-1x/pull/1691

Dec 3 2022, 11:43 AM · VyOS 1.4 Sagitta

Nov 22 2022

sarthurdev committed rVYOSONEX8b7a1399fb2b: container: T4834: Limit network names to 11 characters (15 char max including….
Nov 22 2022, 5:45 PM
sarthurdev changed the status of T4834: Limit container network name to 15 characters from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1674

Nov 22 2022, 11:58 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T4834: Limit container network name to 15 characters from Open to In progress.
Nov 22 2022, 11:55 AM · VyOS 1.4 Sagitta
sarthurdev created T4834: Limit container network name to 15 characters.
Nov 22 2022, 11:55 AM · VyOS 1.4 Sagitta

Nov 17 2022

sarthurdev committed rVYOSONEX586b24e0af1a: policy: T2199: T4605: Migrate policy route interface to `policy route|route6….
Nov 17 2022, 4:52 PM

Nov 11 2022

sarthurdev added a comment to T4605: Firewall change default table names.

PR for policy route refactor updates to vyos_mangle: https://github.com/vyos/vyos-1x/pull/1654

Nov 11 2022, 4:49 PM · VyOS 1.4 Sagitta

Nov 7 2022

sarthurdev committed rVYOSONEX81ca81d44d84: containers: T2216: Skip test if image not available.
Nov 7 2022, 4:40 PM
sarthurdev committed rVYOSONEXf9d19a14f96e: containers: T2216: Move skopeo and busybox image to smoketest post-install.
Nov 7 2022, 4:40 PM

Nov 3 2022

sarthurdev committed rVYOSONEX051e063fdf2e: firewall: T970: Refactor domain resolver, add firewall source/destination….
Nov 3 2022, 8:11 PM
sarthurdev committed rVYOSONEXb4b491d424fb: nat: T1877: T970: Add firewall groups to NAT.
Nov 3 2022, 8:11 PM
sarthurdev triaged T4797: External address/network lists for firewall (Local and remote) as Wishlist priority.
Nov 3 2022, 7:44 PM · VyOS Rolling
sarthurdev changed the status of T1097: Make firewall groups work everywhere that's appropropriate from Open to In progress.

PR adds groups to NAT: https://github.com/vyos/vyos-1x/pull/1633

Nov 3 2022, 7:41 PM · VyOS 1.4 Sagitta
sarthurdev changed the status of T1097: Make firewall groups work everywhere that's appropropriate, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to In progress.
Nov 3 2022, 7:41 PM · VyOS 1.4 Sagitta (1.4.0-epa2)

Nov 1 2022

sarthurdev changed the status of T1877: Feature Request: Allow NAT to use network and address groups from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1633

Nov 1 2022, 12:48 PM · VyOS 1.4 Sagitta
sarthurdev added a comment to T970: Support matching domain name in firewall rules.

Adds firewall node rule N source/destination fqdn domain.com for single domains per rule and refactors resolver daemon.

Nov 1 2022, 12:47 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
First
Prev
Next