- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 13 2022
Jan 13 2022
Viacheslav closed T4109: Extend high-availability/keepalived for support virtual-server lb as Resolved.
Viacheslav changed the status of T4182: Show vrrp if vrrp not configured bug from Open to In progress.
@hensur I'm glad you reimplemented this feature. Come on
GitHub <noreply@github.com> committed rVYOSONEXe91d15b58a21: Merge pull request #1163 from sever-sever/T4177 (authored by c-po).
jack9603301 changed the status of T2898: Support NDP proxy, a subtask of T2518: Add support for IPv6 NAT (NPTv6), from Open to In progress.
jack9603301 changed the status of T2898: Support NDP proxy, a subtask of T3089: Migrate port mirroring to vyos-1x and support two-way traffic mirroring, from Open to In progress.
Viacheslav changed the status of T4179: Add op-mode CLI for show high-availability virtual-server from Open to In progress.
johannrichard added a comment to T4155: PBR: `set table main` fails in `firewall.py` with newer rolling releases .
See comment in T4164: is working now.
johannrichard added a comment to T4159: Empty firewall group (address, network & port) generates invalid nftables config, commit fails.
See comment in T4164: my config runs through easily now.
johannrichard added a comment to T4164: PBR: network groups (as well as address and port groups) don't resolve in `nftables_policy.conf`.
@sdev this (and the other fixes) look promising: after upgrading to the latest rolling release from 13.1.2022, both the example provided in the ticket as well as my config (a copy of my production setup with rules covering PBR, empty groups, references to "defines" in PBR rules) ran through easily. My production config created no errors when loading the config after the update.
sarthurdev changed the status of T4178: policy based routing tcp flags issue from Open to In progress.
Thanks for the report, working on the fix now.
johannrichard added a comment to T4164: PBR: network groups (as well as address and port groups) don't resolve in `nftables_policy.conf`.
In T4164#116547, @mTx87 wrote:seems like policy based routing not working.
mTx87 added a comment to T4164: PBR: network groups (as well as address and port groups) don't resolve in `nftables_policy.conf`.
moved my comment to a new bug request to keep this one here clean.
Viacheslav changed the status of T4177: Strip-private doesn't work for service monitoring from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEXb34c9664ba69: Merge pull request #1162 from sever-sever/T3872 (authored by c-po).
Any updates? No one?
Jan 13 2022, 3:56 AM · Bugs, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
Jan 12 2022
Jan 12 2022
but wasn't necessary on VyOS 1.4-rolling-202109280217
so I guess changes to FRR that are the cause right?
Add neighbors to their proper afi:
Viacheslav moved T4161: Policy route-map - Incorrect value help for local preference from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T4162: VPN ipsec ike-group - Incorrect value help for ikev2-reauth from Open to Finished on the VyOS 1.4 Sagitta board.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.169 / 5.10.89 to Update Linux Kernel to v5.4.171 / 5.10.91.
GitHub <noreply@github.com> committed rVYOSONEXddc7a0cc5378: Merge pull request #1161 from sarthurdev/firewall (authored by c-po).
- Incorrect custom scripts data if used tunX interfaces
- Allow inputs.ethtool only on Ethernet interfaces, by default it tries to get statistics from each interface, template
Jan 12 19:37:30 r11-roll telegraf[7703]: 2022-01-12T17:37:30Z E! [inputs.ethtool] Error in plugin: dum0 stats: operation not supported Jan 12 19:37:30 r11-roll telegraf[7703]: 2022-01-12T17:37:30Z E! [inputs.ethtool] Error in plugin: gretap0 driver: operation not supported Jan 12 19:37:30 r11-roll telegraf[7703]: 2022-01-12T17:37:30Z E! [inputs.ethtool] Error in plugin: gre0 driver: operation not supported Jan 12 19:37:30 r11-roll telegraf[7703]: 2022-01-12T17:37:30Z E! [inputs.ethtool] Error in plugin: erspan0 driver: operation not supported
Incorrect custom scripts data if used 'tun' interface
https://github.com/vyos/vyos-1x/blob/current/src/etc/telegraf/custom_scripts/show_interfaces_input_filter.py
Viacheslav moved T4152: NHRP shortcut-target holding-time does not work from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
sarthurdev changed the status of T2199: Rewrite firewall in new XML/Python style from Open to Needs testing.
Viacheslav edited projects for T4168: IPsec VPN is impossible to restart when DMVPN is configured, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T3872: Add configurable telegraf monitoring service from Open to Needs testing.
Viacheslav changed the status of T4173: Wan Load Balancing - Error on firewall NAT rules from In progress to Needs testing.
Viacheslav changed the status of T4173: Wan Load Balancing - Error on firewall NAT rules from Open to In progress.
Viacheslav moved T4152: NHRP shortcut-target holding-time does not work from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T4168: IPsec VPN is impossible to restart when DMVPN is configured from Open to In progress.
yes, you are right:
sarthurdev changed the status of T4160: Firewall - Error in rules that matches everything except something from In progress to Needs testing.
Viacheslav closed T4174: Validation fails when entering port range with upper port 65535, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
Viacheslav closed T4174: Validation fails when entering port range with upper port 65535 as Resolved.
sarthurdev moved T4131: Show firewall group incorrect format members from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4137: Firewall group configuration allows to set incorrect port range and invalid port from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4144: Firewall address-group - Improve error messages from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4148: Firewall - Error messages not that clear as it were in old firewall from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4155: PBR: `set table main` fails in `firewall.py` with newer rolling releases from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4160: Firewall - Error in rules that matches everything except something from Open to In Progress on the VyOS 1.4 Sagitta board.
Unknown Object (User) changed the status of T4167: DMVPN apply wrong param on the first configuration from In progress to Needs testing.
Unknown Object (User) added a comment to T4100: Firewall increase maximum number of rules.
Jan 11 2022
Jan 11 2022
sarthurdev changed the status of T4160: Firewall - Error in rules that matches everything except something from Open to In progress.
Forgot that my PR for WLB was still a draft. That the jump does seem to be created properly with this PR in place.
That build at 08:11 UTC was a couple of hours before the commit was merged: https://github.com/vyos/vyos-1x/commit/f97144259335102c3d96b232cbb0af4970120d62
yes , i'm using this version :
Unknown Object (User) added a comment to T4167: DMVPN apply wrong param on the first configuration.
Seems to be working on my latest build?
Unknown Object (User) changed the status of T4167: DMVPN apply wrong param on the first configuration from Open to In progress.
I've checked with this new build , it works with validator ranges/port :
GitHub <noreply@github.com> committed rVYOSONEX968afb9e67a2: Merge pull request #1160 from bjw-s/T4174 (authored by c-po).
Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs <me@bjw-s.dev> committed rVYOSONEX4793e2fc0baf: firewall: validators: T4174: Correct upper port range boundary.
GitHub <noreply@github.com> committed rVYOSONEXb55ac8e2c06c: Merge pull request #1159 from sarthurdev/firewall (authored by c-po).
bjw-s updated the task description for T4174: Validation fails when entering port range with upper port 65535.
I've been testing and it works :
Nicolas Fort <nicolasfort1988@gmail.com> committed rVYOSONEX1b8f421727ee: ike-group: T4162: Correct helper description for ikev2-reauth.
GitHub <noreply@github.com> committed rVYOSONEX24954d470102: Merge pull request #1157 from nicolas-fort/T4162 (authored by c-po).