- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Mar 28 2025
Mar 28 2025
c-po edited projects for T7293: virtual-ethernet interface vif MTU does not work, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.0).
c-po changed the status of T7293: virtual-ethernet interface vif MTU does not work from Open to In progress.
sajiby3k renamed T7293: virtual-ethernet interface vif MTU does not work from Virtual-Interface vif mtu does not work to Virtual-ethernet Interface vif mtu does not work.
c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Open to Finished on the VyOS 1.5 Circinus board.
Mar 27 2025
Mar 27 2025
Mar 26 2025
Mar 26 2025
tjh added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
Thank you very much @Embezzle - This is a feature I've been hoping for for a long time (at the moment I have a script that runs via VyOS cron and updates a firewall filter and commits it) - really appreciate you taking the time to do this piece of work.
Much Love.
Embezzle closed T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc. as Resolved.
Tested as working in: VyOS 2025.03.26-0018-rolling
dmbaturin renamed T7217: Private SSH key reuse in the console server service from Key reuse in VyOS Dropbear deployment to Private SSH key reuse in the console server service.
Viacheslav added a comment to T7207: OpenVPN Op-cmd: Client ip address is not displayed in the server-bridge mode.
Opened an issue https://github.com/OpenVPN/openvpn/issues/709
Viacheslav added a comment to T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency.
New VyOS CLI option disable-establish-hello should be implemented in https://vyos.dev/T7286 (for the current)
Viacheslav changed the status of T7219: VXLAN needs to make remote and group options mutually exclusive from Open to In progress.
Viacheslav raised the priority of T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius from Normal to High.
Mar 25 2025
Mar 25 2025
dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin renamed T7219: VXLAN needs to make remote and group options mutually exclusive from VXLAN does not verify if remote and group added together bug to VXLAN needs to make remote and group options mutually exclusive.
dmbaturin moved T7092: Add support for configuring container registry mirrors from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin added a project to T7118: Add redistribution of NHRP to other routing protocols: VyOS 1.5 Circinus.
Embezzle changed the status of T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc. from In progress to Needs testing.
Viacheslav edited projects for T7138: "show qos shaper" doesn't work with VRFs, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta.
Will this be backported to 1.4 ahead of the 1.4.2 release?
Mar 23 2025
Mar 23 2025
Viacheslav added a comment to T6353: Add a warning when the user tries to set a password too simple.
Mar 21 2025
Mar 21 2025
Viacheslav changed the status of T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency from In progress to Needs testing.
Mar 20 2025
Mar 20 2025
Viacheslav changed the status of T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency from Open to In progress.
I'm sorry, all it took was to disable PFS. PFS prevented future SA's from happening due to a policy mismatch.
Mar 18 2025
Mar 18 2025
Thanks. I'll see what I can do about reporting this upstream!
Hi Morgan,
Viacheslav changed the status of T7257: Multiple IPSEC SA not initiating/IPSec SA not renewing from Open to Needs reporter action.
Add a set of commands to reproduce (from both sites)
jestabro added a comment to T7246: Wireguard: Traceback error received if the public-key starts with //.
c-po renamed T7253: Image build fails due to missing linux-tools package from `linux-tools` Package Missing from Repository to linux-tools package Missing from Repository - not build during Kernel build.
c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Need Triage to Completed on the VyOS Rolling board.
dmbaturin added projects to T7157: Route leaking using route-map: VyOS 1.4 Sagitta (1.4.3), VyOS 1.5 Circinus.
jestabro changed the status of T7246: Wireguard: Traceback error received if the public-key starts with // from Open to In progress.
The lexer is unnecessarily aggressive in disallowing strings following '//', originally added to ignore version string information. This has the side effect of ignoring legitimate values. Since the version string is extracted before parsing, this restriction can be dropped. Fix in preparation.
Mar 17 2025
Mar 17 2025
c-po changed Is it a breaking change? from validation to compatible on T7246: Wireguard: Traceback error received if the public-key starts with //.
c-po changed Is it a breaking change? from compatible to validation on T7246: Wireguard: Traceback error received if the public-key starts with //.
c-po added a comment to T7246: Wireguard: Traceback error received if the public-key starts with //.
Change is perfectly compatible as it was not working in the first place.
Viacheslav triaged T7246: Wireguard: Traceback error received if the public-key starts with // as Normal priority.
I can't assign myself to this task for whatever reason, but here is a PR to correct this behavior:
https://github.com/vyos/vyos-1x/pull/4400
SrividyaA renamed T7246: Wireguard: Traceback error received if the public-key starts with // from Wireguard: Need a valid error if the public-key is invalid base64 to Wireguard: Traceback error received if the public-key starts with //.
dmbaturin changed Is it a breaking change? from none to compatible on T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update.
dmbaturin triaged T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update as Normal priority.
dmbaturin edited projects for T7246: Wireguard: Traceback error received if the public-key starts with //, added: VyOS 1.4 Sagitta (1.4.3), VyOS Rolling, VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.1).
jestabro moved T6925: Can not remove config-management from config - raises AttributeError from Open to Finished on the VyOS 1.5 Circinus board.
MITRE has assigned CVE-2025-30095.
Mar 16 2025
Mar 16 2025
indrajitr closed T6948: DHCP records out of sync with vyos hostd state after system restart as Resolved.
indrajitr closed T7052: Refactor kea dhcp op-mode functions to helper functions in vyos.kea as Resolved.
c-po raised the priority of T7248: DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide-dhcpv6-client from High to Urgent!.
c-po renamed T7248: DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide-dhcpv6-client from DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide dhcp6 client to DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide-dhcpv6-client.
c-po renamed T7248: DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide-dhcpv6-client from Add smoketest verifying that there is no invalid syntax or parsind error for wide dhcp6 client to DHCPv6: add smoketest verifying that there is no invalid syntax or parsing error for wide dhcp6 client.
Mar 15 2025
Mar 15 2025
c-po updated the task description for T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update.
Mar 14 2025
Mar 14 2025
Did you have a chance to testing ?