Can you check the MAC address of the card not that the interface got mixed up in their naming?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Oct 4 2021
Oct 3 2021
Oct 2 2021
Package was upgraded to PDNS 4.5 should be fixed - can you please retest with ANY release AFTER
- vyos-1.4-rolling-202110020217-amd64.iso
- vyos-1.3-beta-202110020342-amd64.iso
Oct 1 2021
Sep 30 2021
Sep 29 2021
Sep 28 2021
It works now! Thanks!
Sep 27 2021
In testing:
https://github.com/vyos/vyos-1x/compare/current...jestabro:interface-names
https://github.com/vyos/vyatta-cfg/compare/current...jestabro:interface-names
The following removes legacy code: vyatta_net_name, vyatta_interface_rescan, XorpConfigParser
https://github.com/vyos/vyatta-cfg-system/compare/current...jestabro:interface-names
@danielpo Will be fixed in the next rolling release.
PR https://github.com/vyos/vyos-1x/pull/1016
Change priority for nat66
By the way, the SNMPD service of the router will not restart automatically. After the SNMP service is attacked, the SNMP service cannot be restored even if the device is restarted, which may be an inappropriate implementation.
I have a question. If you confirm the existence of the vulnerability, can you report to the NET-SNMP vendor and apply for a CVE number?
I have sent the POC of the vulnerability to daniil@vyos.io.
By the way, The password of the compressed package is HGkasjgJFYL261.
Hello, I have found three vulnerabilities in V1.2.7, one of which can also be reproduced in V1.3, please continue to check the other versions, I will send all three POCs to your email, thank you for your work.
Adding a few notes here:
- The ideal behavior probably depends on which PKI elements are changed and what services depend on them.
- E.g. OpenVPN does not require a server restart for a CRL change (see https://openvpn.net/community-resources/controlling-a-running-openvpn-process/), but changing the CA or server cert/key would require a restart.
- It seems like there are some swanctrl commands that can conditionally reload parts of the config too without taking all tunnels down
- The former might be useful if you need to renew server certs or something like that and want to do so with the minimal impact
Sep 26 2021
@c-po The mentioned completion help stating is wrong then as it says at the specified path.
Related to T3863 and could also be a XML priority issue as NAT66 has a higher priority then e.g. the tunnel interface