PR for 1.3 https://github.com/vyos/vyos-1x/pull/1122
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
All Stories
Dec 27 2021
Somewhat related since about November builds of Vyos 1.4 I loose my firewall rules when I reboot and make a configuration change. If I do not make a configuration change it doesn't get wiped from the config. The ip table rules are still present but missing from the config causing a reboot to actually wipe the firewall rules... This is a little scary.
vyos@scr1-fw-1:~$ show ver
Its fixed in 1.3.0 release:
@Viacheslav thank you so much for your help!
Dec 26 2021
Closed in favour of T4107 - use "default-information originate"
@NikolayP Change it https://github.com/vyos/vyatta-cfg-firewall/blob/1e06e3f891f8238d565ff0eddb4cd8c9b6032346/templates/firewall/name/node.tag/rule/node.def#L5-L9 to the required range.
According to FRR developer this seems to be intentional
Dec 25 2021
this requires a helper that will be responsible for the DNS resolution and update of the corresponding rules
each DNS resolution will refresh IPs every 15 seconds or in smart mode will rely on DNS TTL for records and will do a lookup on TTL expire (and update firewall if required)
Runtime error on the development image
Interestingly if vyos-configd is in use this bug is triggered. If vyos-configd is not used the bug is not triggered :/
Feels like an FRR issue, bug opened: https://github.com/FRRouting/frr/issues/10263