Not enabling forwarding fixes this behaviour
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 4 2025
Apr 4 2025
natali-rs1985 added a comment to T7264: VPP NAT: All traffic get NATed if out interface is set with output-feature.
natali-rs1985 added a comment to T7312: VPP static NAT without destination IP address unexpected behavior.
Fix in this PR https://github.com/vyos/vyos-vpp/pull/25
Apr 3 2025
Apr 3 2025
GitHub <noreply@github.com> committed rVYOSONEX85d44fbe2bef: Merge pull request #4431 from sever-sever/T7290 (authored by dmbaturin).
dmbaturin updated the task description for T6694: Move commands that do not fit anywhere else in the new "execute" family.
Viacheslav triaged T7316: Need commit validation for interfaces when mtu configured below 1280 as Normal priority.
There was no a change - I tested with the existing code in trunk and could not replicate the issue - hence the question, given this is a pretty old bug report
panachoi added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
Any chance this might be backported to 1.4 ?
Most likely, the package cannot build or CI has temporary issues to build it
Was added recently https://github.com/vyos/vyos-build/commit/282ca5b30813a19c5af5c14127ec483409dae14c
Viacheslav triaged T7314: Improve firewall remote-group op-mode output with details from nftables as Normal priority.
GitHub <noreply@github.com> committed rVYOSONEXfa3140b0efe3: Merge pull request #4432 from jestabro/relative-path-submod (authored by Viacheslav).
jestabro added a comment to T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance.
markh0338 added a comment to T7314: Improve firewall remote-group op-mode output with details from nftables.
PR incoming shortly.
Pull request created to fix this issue:
https://github.com/vyos/vyos-1x/pull/4433
Apr 2 2025
Apr 2 2025
Note that the duplicate messages are malformed - including what looks like part of the time stamp at the beginning of the message entry.
@dmbaturin Are you sure that should be 100 instead of a two digit number? I think those will be done in lexicographic order, I suspect there may be confusion generated if someone tries to make a 110, and 11 runs first.
Thank you for the quick response to this, and the work to mitigate it 🙌
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
dmbaturin changed Issue type from cosmetic to bug on T7019: Use VyOS release-train in /etc/os-release codename over Debian release name.
Viacheslav closed T7074: VPP interface mode interrupt or polling does not work, a subtask of T7070: VPP related bugs the root task, as Resolved.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
@mjones-vsat I think the wording is good.
dmbaturin closed T7219: VXLAN needs to make remote and group options mutually exclusive as Resolved.
dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
dmbaturin edited projects for T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.2).
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Viacheslav triaged T7312: VPP static NAT without destination IP address unexpected behavior as Normal priority.
Viacheslav closed T7076: VPP check ethernet interface exist before adding to vpp, a subtask of T7070: VPP related bugs the root task, as Resolved.
dmbaturin removed a project from T7076: VPP check ethernet interface exist before adding to vpp: VyOS 1.5 Circinus.
Viacheslav closed T7069: VPP CPU main-core should be verified, a subtask of T7070: VPP related bugs the root task, as Resolved.
jestabro added a comment to T7272: Vyconf: update in memory config tree on response from vyos-commitd.
PR
https://github.com/vyos/vyconf/pull/17
merged
Viacheslav renamed T7255: Impossible to delete protocols under VRF from Impossible to delete protocols OSPF under VRF to Impossible to delete protocols under VRF .
I believe this is caused by the /run/rsyslog/rsyslog.conf file including these 2 entries:
- module(load="imklog") # provides kernel logging support
- module(load="imjournal"...
pull-reqeust created: https://github.com/vyos/vyos-1x/pull/4430
Apr 1 2025
Apr 1 2025
sarthurdev changed the status of T5636: Add GeoIP matching support for policy route from Open to In progress.
sarthurdev changed the status of T5636: Add GeoIP matching support for policy route, a subtask of T4299: Firewall - GeoIP filtering, from Open to In progress.
Response Policy Zone (RPZ)
It would be very very useful feature in VYOS
RPZ allows admins to easily block access to websites via DNS lookup. The lookup is done before the main communication which is based on IP addresses ( which can be blocked by IP Address Blocklists ). Usually the URLs of malicious websites do change much less often, compared to the IPs of them.
natali-rs1985 closed T7283: VPP add static NAT support, a subtask of T7221: VPP related features the root task, as Resolved.
natali-rs1985 moved T7283: VPP add static NAT support from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 renamed T7283: VPP add static NAT support from VPP add 1:1 NAT support to VPP add static NAT support.
dmbaturin edited projects for T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
Viacheslav moved T7286: Add CLI to disable LDP establish hello packets from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Viacheslav moved T7286: Add CLI to disable LDP establish hello packets from Need Triage to Completed on the VyOS Rolling board.
Viacheslav edited projects for T7286: Add CLI to disable LDP establish hello packets, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin changed Is it a breaking change? from none to compatible on T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.
dmbaturin edited projects for T7299: pki: race condition for acme requested certificates - CA auto import only on the second run, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7294: image upgrade will replace symlinks with a copy, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Need Triage to Completed on the VyOS Rolling board.