Page MenuHomeVyOS Platform
Feed Search

Search
Use Results
Hide Query

Jul 31 2023

n.fort updated the task description for T5420: nftables - upgrade to latest 1.0.8.
Jul 31 2023, 5:19 PM · VyOS 1.4 Sagitta
n.fort created T5420: nftables - upgrade to latest 1.0.8.
Jul 31 2023, 5:17 PM · VyOS 1.4 Sagitta
n.fort changed the status of T5406: "update webproxy blacklists" fails when vrf is being configured from Open to In progress.

PR: https://github.com/vyos/vyos-1x/pull/2123

Jul 31 2023, 4:59 PM · VyOS 1.4 Sagitta
n.fort committed rVYOSONEX96a89fee625b: T5416: fix ipsec matcher.
Jul 31 2023, 11:37 AM
n.fort added a comment to T5416: Ignoring "ipsec match-none" for firewall.

PR: https://github.com/vyos/vyos-1x/pull/2121

Jul 31 2023, 10:12 AM · VyOS 1.4 Sagitta
n.fort changed the status of T5416: Ignoring "ipsec match-none" for firewall from Open to Confirmed.
Jul 31 2023, 10:00 AM · VyOS 1.4 Sagitta

Jul 27 2023

n.fort claimed T5406: "update webproxy blacklists" fails when vrf is being configured.
Jul 27 2023, 10:11 AM · VyOS 1.4 Sagitta

Jul 26 2023

n.fort added a comment to rVYOSONEX5f2e9cb81d89: T5154: NTP: allow maximum of one ipv4 and one ipv6 address on parameter <listen….
In rVYOSONEX5f2e9cb81d89#952981, @Apachez wrote:

Why this limit?

Example: I have 5 interfaces and want to let NTP-clients sync to my VyOS device on 3 of them (which is their default gateway on each network).

With this change this wont be possible unless I enable firewall rules or am I missing something here?

Jul 26 2023, 5:45 PM
n.fort committed rVYOSONEX5f2e9cb81d89: T5154: NTP: allow maximum of one ipv4 and one ipv6 address on parameter <listen….
Jul 26 2023, 4:50 PM
n.fort added a comment to T5399: "show ntp" fails when vrf is being configured.

Thanks for testing and submitting PR

Jul 26 2023, 1:37 PM · VyOS 1.4 Sagitta

Jul 25 2023

n.fort added a comment to T5399: "show ntp" fails when vrf is being configured.

Can you check changing

Jul 25 2023, 5:07 PM · VyOS 1.4 Sagitta

Jul 24 2023

n.fort added a comment to T4460: nhrp not starting due to missing cisco-authentication value.

Re opening this task. Migration script needs to be added.

Jul 24 2023, 6:39 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
n.fort reopened T4460: nhrp not starting due to missing cisco-authentication value as "Confirmed".
Jul 24 2023, 6:38 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
n.fort changed the status of T4889: Add nftables NAT REDIRECT [to localhost] to CLI from In progress to Needs testing.
Jul 24 2023, 10:11 AM · vyatta-nat, VyOS 1.4 Sagitta

Jul 22 2023

n.fort committed rVYOSONEX4c61fa82f59e: T4899: NAT Redirect: adddestination nat redirection (to local host) feature..
Jul 22 2023, 6:41 AM

Jul 21 2023

n.fort changed the status of T5014: Destination NAT - Add Load Balancing capabilities from Open to In progress.
Jul 21 2023, 6:05 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5014: Destination NAT - Add Load Balancing capabilities.
vyos@nat-lb-july# run show config comm | grep nat
set nat destination rule 10 destination port '443'
set nat destination rule 10 inbound-interface 'eth3'
set nat destination rule 10 protocol 'tcp'
set nat destination rule 10 translation load-balance mode 'round-robin'
set nat destination rule 10 translation load-balance translation-address 1.1.1.1 hash-value '0'
set nat destination rule 10 translation load-balance translation-address 2.2.2.2 hash-value '1'
set nat destination rule 10 translation load-balance translation-address 3.3.3.3 hash-value '2'
set nat destination rule 10 translation load-balance upper-limit '3'
set nat destination rule 20 destination port '53'
set nat destination rule 20 inbound-interface 'eth3'
set nat destination rule 20 protocol 'udp'
set nat destination rule 20 translation load-balance mode 'random'
set nat destination rule 20 translation load-balance translation-address 1.1.1.1 hash-value '0-24'
set nat destination rule 20 translation load-balance translation-address 2.2.2.2 hash-value '25-49'
set nat destination rule 20 translation load-balance translation-address 3.3.3.3 hash-value '50-99'
set nat destination rule 20 translation load-balance upper-limit '100'
set system host-name 'nat-lb-july'
[edit]
Jul 21 2023, 6:05 PM · VyOS 1.4 Sagitta

Jul 20 2023

n.fort moved T1297: Add GARP settings to VRRP/keepalived from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Jul 20 2023, 10:41 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
n.fort closed T4497: ping cannot force ipv4 or ipv6 as Resolved.
Jul 20 2023, 10:38 AM · VyOS 1.4 Sagitta

Jul 19 2023

n.fort added a comment to T5371: "system name-server" is not vrf aware.

This could be considred as duplicate task for: https://vyos.dev/T5116

Jul 19 2023, 6:23 PM · VyOS Rolling, Bugs
n.fort closed T5370: Improve example of how to use post-login with multilines as Invalid.
Jul 19 2023, 6:21 PM · VyOS 1.4 Sagitta
n.fort closed T5372: Configuring listen-address for service snmp will result in a warning during commit as Invalid.
Jul 19 2023, 6:15 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5370: Improve example of how to use post-login with multilines.

Changes on documentation don't need a task here.

Jul 19 2023, 6:12 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5372: Configuring listen-address for service snmp will result in a warning during commit.

Already fixed:
https://vyos.dev/T5340

Jul 19 2023, 6:09 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5371: "system name-server" is not vrf aware.

Adding system image using custom vrf it's supported:

Jul 19 2023, 6:04 PM · VyOS Rolling, Bugs
n.fort changed the status of T4889: Add nftables NAT REDIRECT [to localhost] to CLI from Open to In progress.
Jul 19 2023, 2:36 PM · vyatta-nat, VyOS 1.4 Sagitta
n.fort added a comment to T4889: Add nftables NAT REDIRECT [to localhost] to CLI.

PR: https://github.com/vyos/vyos-1x/pull/2100

Jul 19 2023, 2:36 PM · vyatta-nat, VyOS 1.4 Sagitta
n.fort closed T5059: add 'disable' option to DHCP relay config as Resolved.
Jul 19 2023, 11:15 AM · VyOS 1.4 Sagitta
n.fort closed T5340: SNMP and VRF as Resolved.
Jul 19 2023, 11:15 AM · VyOS 1.4 Sagitta
n.fort committed rVYOSONEXce72574ed5ff: T4497: ping: andd option to force ipv4 or ipv6 (-4 | -6).
Jul 19 2023, 7:34 AM

Jul 14 2023

n.fort changed the status of T5059: add 'disable' option to DHCP relay config from In progress to Needs testing.
Jul 14 2023, 6:57 PM · VyOS 1.4 Sagitta
n.fort claimed T4889: Add nftables NAT REDIRECT [to localhost] to CLI.
Jul 14 2023, 6:53 PM · vyatta-nat, VyOS 1.4 Sagitta
n.fort committed rVYOSONEX63f75ddbd948: T5059: relay: add disable options for dhcp-relay and dhcpv6-relay. Also add….
Jul 14 2023, 6:48 PM
n.fort closed T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface as Resolved.

Marking this bug as resolved, since in last comment it shows that DNAT is working using multiple "WANs" connections

Jul 14 2023, 6:39 PM · VyOS 1.4 Sagitta
n.fort changed the status of T4497: ping cannot force ipv4 or ipv6 from Open to Confirmed.
Jul 14 2023, 2:02 PM · VyOS 1.4 Sagitta
n.fort claimed T4356: DHCP v6 client only supports single interface configuration.
Jul 14 2023, 1:09 PM · VyOS 1.4 Sagitta
n.fort closed T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static as Resolved.
Jul 14 2023, 1:06 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .

Also, correct behavior when 1 interface is pppoe, and other dhcp-client:

Jul 14 2023, 1:00 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
n.fort added a comment to T305: loadbalancing does not work with one pppoe connection and another connection of either dhcp or static .

Test #1:

  • Simple configuration with one interface pppoe and other static, WLB working as expected:
Jul 14 2023, 12:47 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, test
n.fort added a comment to T4356: DHCP v6 client only supports single interface configuration.

I see no errors on 1.4:

Jul 14 2023, 11:26 AM · VyOS 1.4 Sagitta

Jul 13 2023

n.fort changed the status of T5059: add 'disable' option to DHCP relay config from Open to In progress.

PR: https://github.com/vyos/vyos-1x/pull/2089

Jul 13 2023, 11:41 AM · VyOS 1.4 Sagitta

Jul 12 2023

n.fort closed T5161: BFD Static Route Monitoring as Resolved.
Jul 12 2023, 7:50 PM · VyOS 1.4 Sagitta
n.fort removed a project from T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups: VyOS 1.4 Sagitta.
Jul 12 2023, 5:06 PM
n.fort added a comment to T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups.

as stated before, in 1.4 now it's possible to specify corresponding interface.

Jul 12 2023, 5:05 PM
n.fort closed T5009: op-mode command: restart dhcp relay-agent not working as Resolved.
Jul 12 2023, 5:03 PM · VyOS 1.3 Equuleus (1.3.3)
n.fort closed T5105: DHCP Server - Wrong error message as Resolved.
Jul 12 2023, 5:02 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5250: Firewall - show firewall group.

PR in firewall refactor: https://github.com/vyos/vyos-1x/pull/2016

Jul 12 2023, 10:13 AM · VyOS 1.4 Sagitta
n.fort changed the status of T5301: NTP: chrony only allows one bind address from Open to In progress.
Jul 12 2023, 10:07 AM · VyOS 1.4 Sagitta
n.fort claimed T5301: NTP: chrony only allows one bind address.
Jul 12 2023, 10:06 AM · VyOS 1.4 Sagitta

Jul 11 2023

n.fort closed T4815: Fix various name server config issues as Resolved.

I'm marking this task as resolved, since it's been in 'Needs Testing' status for more than 6 months

Jul 11 2023, 3:15 PM · VyOS 1.4 Sagitta
n.fort closed T4813: L3VPN over GRE Tunnels as Resolved.
Jul 11 2023, 3:13 PM · VyOS 1.4 Sagitta
n.fort closed T4810: Op-mode show/monitor log pppoe interface does not show any logs as Resolved.

I'm marking this task as resolved, since it's been in 'Needs Testing' status for more than 6 months.

Jul 11 2023, 3:12 PM · VyOS 1.4 Sagitta
n.fort added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

Closed for 1.3 too, because FRR version used in 1.3 doesn't support the feature

Jul 11 2023, 2:58 PM
n.fort added a comment to T4713: vyos@vyos:~$ show nat destination rules | doesn't work.

@icyfire0573 Can you re-check if nat op-mode commands works for you?

Jul 11 2023, 2:40 PM · VyOS 1.4 Sagitta
n.fort closed T4701: Firewall - Implement global option to use one single general chian as Invalid.

Marking as invalid, since firewall cli should move to a more organized and flexible cli strycture.

Jul 11 2023, 2:34 PM · VyOS 1.4 Sagitta
n.fort closed T1928: Is the 'Welcome to VyOS' message when using SSH an information leak? as Resolved.
Jul 11 2023, 2:20 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
n.fort closed T3976: Missing prefix-list and access-list option from ipv6 route-map as Resolved.
Jul 11 2023, 2:19 PM
n.fort edited projects for T2408: DHCP Relay upstream and downstream interfaces, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta.
Jul 11 2023, 12:36 PM · VyOS 1.4 Sagitta
n.fort closed T4542: route-map: "match prefix-len" incorrect behavior as Resolved.
Jul 11 2023, 12:29 PM · VyOS 1.4 Sagitta
n.fort closed T4460: nhrp not starting due to missing cisco-authentication value as Resolved.
Jul 11 2023, 12:25 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
n.fort closed T4262: install image doesn't respect chosen root partition size as Resolved.

Closing this task since it has been in "Needs Testing" status for more than one year, for both 1.3 and 1.4 projects.

Jul 11 2023, 11:53 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
n.fort edited projects for T4079: Source/Destination NAT GROUP, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta.
Jul 11 2023, 11:32 AM · VyOS 1.3 Equuleus (1.3.5)
n.fort closed T1877: Feature Request: Allow NAT to use network and address groups as Resolved.
Jul 11 2023, 11:32 AM · VyOS 1.4 Sagitta
n.fort edited projects for T3976: Missing prefix-list and access-list option from ipv6 route-map, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta.
Jul 11 2023, 11:25 AM
n.fort added a comment to T3973: Feature Request: Multicast ping. Change TTL in Echo-reply from VyOS.

Once we move to new firewall and re-work on mangle/PBR, this could be achieved easily.

Jul 11 2023, 11:24 AM · Restricted Project, VyOS Rolling
n.fort closed T4392: Multiline login banner text reports error on commit as Resolved.

Working on latest build:

Jul 11 2023, 10:52 AM · VyOS 1.4 Sagitta
n.fort added a comment to T1928: Is the 'Welcome to VyOS' message when using SSH an information leak?.

As said in previous comments, login banner is available, both on 1.3 and 1.4
I think this task can be marked as resolved

Jul 11 2023, 10:22 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jul 10 2023

n.fort closed T762: Include rulseset in firewall as Resolved.

Jump action is available in 1.4
Then, I'm setting this task as resolved

Jul 10 2023, 7:21 PM · VyOS 1.4 Sagitta
n.fort removed a project from T2754: PBR doesn't work with VRRP: VyOS 1.4 Sagitta.
Jul 10 2023, 7:15 PM · VyOS 1.3 Equuleus (1.3.6)
n.fort closed T3578: Prefix-List(6) update cause empty prefix-list(6) as Resolved.
Jul 10 2023, 7:03 PM · VyOS 1.4 Sagitta

Jul 6 2023

n.fort changed the status of T5340: SNMP and VRF from In progress to Needs testing.
Jul 6 2023, 6:10 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5154: Chrony - multiple listen addresses.

PR: https://github.com/vyos/vyos-1x/pull/2078

Jul 6 2023, 6:05 PM · VyOS 1.4 Sagitta
n.fort changed the status of T5154: Chrony - multiple listen addresses from Confirmed to In progress.
Jul 6 2023, 6:05 PM · VyOS 1.4 Sagitta
n.fort committed rVYOSONEX572f79cdf0b1: T5340: snmp: add checks while configuring snmp listen-address with and without….
Jul 6 2023, 3:59 PM
n.fort changed the status of T5154: Chrony - multiple listen addresses from Open to Confirmed.
Jul 6 2023, 12:04 PM · VyOS 1.4 Sagitta
n.fort claimed T5154: Chrony - multiple listen addresses.
Jul 6 2023, 11:22 AM · VyOS 1.4 Sagitta
n.fort added a comment to T4500: Missing firewall logs.

Can we close this task?

Jul 6 2023, 10:24 AM · VyOS 1.4 Sagitta

Jul 5 2023

n.fort changed the status of T5340: SNMP and VRF from Confirmed to In progress.
Jul 5 2023, 1:26 PM · VyOS 1.4 Sagitta
n.fort added a comment to T5340: SNMP and VRF.

PR: https://github.com/vyos/vyos-1x/pull/2072

Jul 5 2023, 1:11 PM · VyOS 1.4 Sagitta
n.fort changed the status of T5340: SNMP and VRF from Open to Confirmed.
Jul 5 2023, 10:38 AM · VyOS 1.4 Sagitta
n.fort created T5340: SNMP and VRF.
Jul 5 2023, 10:36 AM · VyOS 1.4 Sagitta

Jun 30 2023

n.fort closed T5283: IPoE server assigns network address as Resolved.
Jun 30 2023, 6:59 PM · VyOS 1.4 Sagitta
n.fort added a comment to T4502: Consider implementing (NAT/other) flow table offload.

Hi @vfreex . The idea is to add this feature, and several more, once we get new firewall cli structure: https://github.com/vyos/vyos-1x/pull/2016

Jun 30 2023, 12:15 PM · VyOS 1.4 Sagitta

Jun 12 2023

n.fort committed rVYOSONEX8a79769bf447: T5283: ipoe-server: add more flexibility in subnet parameter..
Jun 12 2023, 6:50 PM
n.fort changed the status of T5283: IPoE server assigns network address from Open to Confirmed.
Jun 12 2023, 2:30 PM · VyOS 1.4 Sagitta
n.fort created T5283: IPoE server assigns network address.
Jun 12 2023, 2:30 PM · VyOS 1.4 Sagitta

Jun 5 2023

n.fort added a comment to T5256: QoS expects protocol number but not protocol name.

Maybe related with https://vyos.dev/T5048

Jun 5 2023, 2:33 PM · VyOS 1.4 Sagitta

May 31 2023

n.fort changed the status of T5250: Firewall - show firewall group from Open to In progress.
May 31 2023, 6:39 PM · VyOS 1.4 Sagitta
n.fort created T5250: Firewall - show firewall group.
May 31 2023, 6:39 PM · VyOS 1.4 Sagitta

May 12 2023

n.fort assigned T5210: IPSec cosmetic bug for Warning vti inrerface to jnulandicho.
May 12 2023, 2:15 PM · VyOS 1.4 Sagitta

Apr 27 2023

n.fort closed T5037: Firewall - Add queue action as Resolved.
Apr 27 2023, 11:23 AM · VyOS 1.4 Sagitta
n.fort closed T5050: Firewall - Add options for logging packets as Resolved.
Apr 27 2023, 11:21 AM · VyOS 1.4 Sagitta
n.fort closed T5055: Firewall - Add packet type matcher (pkttype) as Resolved.
Apr 27 2023, 11:20 AM · VyOS 1.4 Sagitta
n.fort closed T5128: Policy route - Allow wildcard interfaces as Resolved.
Apr 27 2023, 11:19 AM · VyOS 1.4 Sagitta

Apr 14 2023

n.fort changed the status of T5160: Firewall refactor from Open to In progress.
Apr 14 2023, 3:11 PM · VyOS 1.4 Sagitta
n.fort created T5160: Firewall refactor.
Apr 14 2023, 3:09 PM · VyOS 1.4 Sagitta

Apr 3 2023

n.fort created T5140: Firewall network-group problems.
Apr 3 2023, 9:57 AM · VyOS 1.3 Equuleus (1.3.4)

Mar 31 2023

n.fort committed rVYOSONEX599c5405e7ff: T5128: Policy Route: allow wildcard on interface.
Mar 31 2023, 2:16 PM
n.fort committed rVYOSONEXc41af9698aba: T5128: Add contraint for firewall interface. Also update smoketest to include….
Mar 31 2023, 2:16 PM

Mar 30 2023

n.fort added a comment to T5128: Policy route - Allow wildcard interfaces.

PR: https://github.com/vyos/vyos-1x/pull/1922

Mar 30 2023, 1:18 PM · VyOS 1.4 Sagitta
First
Prev
Next