Seems solved, Not reproducible on VyOS 1.4-rolling-202201180317
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 21 2022
Jan 21 2022
n.fort changed the status of T4199: Commit failed when setting icmpv6 type any from In progress to Confirmed.
Did did work as expeced
vyos@vyos# run show config comm | grep fire set firewall ipv6-name FOO rule 10 action 'accept' set firewall ipv6-name FOO rule 10 icmpv6 type 'echo-request' set firewall ipv6-name FOO rule 10 protocol 'ipv6-icmp'
Also, while matching parameters valid in nftables, such as echo-reply, commit fails too:
GitHub <noreply@github.com> committed rVYOSONEXf791d3ef4c33: Merge pull request #1183 from hensur/current-ipv6-local-route (authored by c-po).
Should be fixed with https://github.com/vyos/vyos-1x/pull/1183
Bug related: https://phabricator.vyos.net/T4186
sarthurdev changed the status of T4199: Commit failed when setting icmpv6 type any from Open to In progress.
sarthurdev added a comment to T4200: Assigning ipv6-name to interface is not generating nftables rules.
I can't reproduce this issue on latest rolling
I'm looking into it. From the logs it seems like for src in (pbr[rule_rm][rule]['source'] or ['']) doesn't work if 'source' doesn't exist.
goodNETnick <pknet@ya.ru> committed rVYOSONEX28a92e75cf93: DHCP: T4196: fix client-prefix-length parameter.
GitHub <noreply@github.com> committed rVYOSONEXec5eb00bd83a: Merge pull request #1180 from goodNETnick/dhcp-client-prefix (authored by c-po).
@hensur Smoketest failed.
Unknown Object (User) added a comment to T4154: Error add second gre tunnel with the same source interface.
(VyOS 1.4-rolling-202201200814) - The same.
Unknown Object (User) added a comment to T4137: Firewall group configuration allows to set incorrect port range and invalid port.
I ve testet it on (Version:VyOS 1.4-rolling-202201200814). It seems well.
Unknown Object (User) added a comment to T4115: reboot in <x> not working as expected.
I ve tested this scenario on VyOS 1.4-rolling-202201200814, as said Srividya you can choose minutes betwen 1-99.
If this is critical, you can expand the range by opening a "feature request".
Jan 20 2022
Jan 20 2022
c-po closed T4171: Interface config migration error on 1.2.8 -> 1.4 upgrade, a subtask of T3871: Resolve unexpected interface name reordering, as Resolved.
Seems to have fixed it
GitHub <noreply@github.com> committed rVYOSONEX93cdb6f1ca00: Merge pull request #1182 from jestabro/migrate-while-udev (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXfcb1b6c69ffc: Merge pull request #1181 from sarthurdev/firewall (authored by c-po).
Viacheslav renamed T4197: Vyos arm64-latest build issue with telegraf pkg from Vyos arm64-latest build issue to Vyos arm64-latest build issue with telegraf pkg.
@adestis Could you share commands, on how to reproduce this bug? Thanks.
GitHub <noreply@github.com> committed rVYOSONEX876d108c5dba: Merge pull request #1144 from hensur/current-ipv6-local-route (authored by c-po).
Viacheslav changed the subtype of T4196: DHCP server client-prefix-length parameter results in non-functional leases from "Task" to "Bug".
Viacheslav changed the status of T4196: DHCP server client-prefix-length parameter results in non-functional leases from Open to In progress.
Unknown Object (User) added a comment to T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Unknown Object (User) added a comment to T4196: DHCP server client-prefix-length parameter results in non-functional leases.
From ISC-DHCP manual pages:
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcp-options
Unknown Object (User) updated the task description for T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Unknown Object (User) created T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Jan 19 2022
Jan 19 2022
GitHub <noreply@github.com> committed rVYOSONEX569dfa77f07c: Merge pull request #1177 from sarthurdev/mac_groups (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX10a740096edb: Merge pull request #1176 from sarthurdev/firewall (authored by c-po).
fett0 <fernando.gmaidana@gmail.com> committed rVYOSONEXc31f085b5d87: OSPF : T4195: ability to set maximum paths for OSPF.
GitHub <noreply@github.com> committed rVYOSONEX258dd07904be: Merge pull request #1179 from fett0/T4195 (authored by c-po).
PR for required interface "nodes" https://github.com/vyos/vyatta-cfg-firewall/pull/30
Viacheslav changed the subtype of T4194: prefix-list no check for duplicate entries from "Task" to "Bug".
In fact you find a new bug in 1.4
Seems to be working fine as far as I can see.
Hello @Viacheslav, thanks for reply, so, if you'll bridge vtun94 and eth0.94 to br94 will it work in L2 level?
Did you push this update to nightbuild?
Jan 19 2022, 3:39 AM · Bugs, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
Unknown Object (User) created T4194: prefix-list no check for duplicate entries.
Jan 18 2022
Jan 18 2022
Some details in T4193
GitHub <noreply@github.com> committed rVYOSONEXc77369761f9c: Merge pull request #1178 from sarthurdev/firewall_T4188 (authored by c-po).
Resolved in T3873
sarthurdev changed the status of T4188: Firewall does not correctly handle conntracking from In progress to Needs testing.
johannrichard awarded T3560: Ability to create groups of MAC addresses a Like token.
sarthurdev changed the status of T3560: Ability to create groups of MAC addresses, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
sarthurdev changed the status of T3560: Ability to create groups of MAC addresses from Open to Needs testing.
sarthurdev renamed T4188: Firewall does not correctly handle conntracking from Firewall does not match ICMPv6 packets to Firewall does not correctly handle conntracking.
sarthurdev changed the status of T4188: Firewall does not correctly handle conntracking from Open to In progress.
Okay, thanks for the update. I have found a conntrack issue in the code. Will have a fix in shortly.
Unknown Object (User) added a comment to T3522: policy based routing not working.
Looks like I see the same issue for 1.3.0. Reproducing steps:
set interfaces ethernet eth1 address 'dhcp' set protocols static table 1 route 0.0.0.0/0 dhcp-interface eth1
Thanks, this does fix the ICMP issue, however rule 10 which is supposed to accept packets with related/established states (say a HTTP response following a request), doesn't seem to match any packets, and the packets get dropped by the default rule.
TCP Flags seems to be working on firewall filter config.
Tested on VyOS 1.4-rolling-202201180317 and working as expected
sarthurdev closed T4155: PBR: `set table main` fails in `firewall.py` with newer rolling releases , a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
sarthurdev closed T3286: Switch the firewall from iptables to nftables, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
sarthurdev changed the status of T1292: Issues while deleting all rules from a firewall, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
sarthurdev changed the status of T1292: Issues while deleting all rules from a firewall from Open to Needs testing.
Fixed in 1.4 PR: https://github.com/vyos/vyos-1x/pull/1176
@klipz In my case, the only problem is adding the wlan interface to the bridge at startup (looks like an order thing), when vyos is started (and the wlan interface is up) no problem to add it to the bridge witth the CLI.
The XDP proof of concept program that is availbale in 1.4 does not support 802.1q - those headers are not parsed and processed.
c-po changed the status of T4187: XDP broken for VLAN/vif interfaces with hardware offloading from Open to Confirmed.
What would be the use-case? We can start PDNS in one VRF context only.
c-po changed the status of T3700: Support VLAN tunnel mapping of VLAN aware bridges, a subtask of T3137: Let VLAN aware bridge approach the behavior of professional equipment, from In progress to On hold.
c-po changed the status of T3700: Support VLAN tunnel mapping of VLAN aware bridges from In progress to On hold.
Jan 17 2022
Jan 17 2022
Viacheslav added a comment to T2762: VRF: when SSHd is VRF bound all commands are executed in VRF context.
PR for ping https://github.com/vyos/vyos-1x/pull/1175