@hensur See PR, I implemented a merge script and provided three solutions.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 22 2022
Jan 22 2022
sarthurdev committed rVYOSONEX3e55af0ccdf0: Firewall: T4186: Adding icmpv6 corrections, in corcondancy of what was done for… (authored by Nicolas Fort <nicolasfort1988@gmail.com>).
GitHub <noreply@github.com> committed rVYOSONEX3b7629eaa4c8: Merge pull request #1184 from sarthurdev/firewall_icmp (authored by c-po).
Jan 21 2022
Jan 21 2022
artooro closed T4200: Assigning ipv6-name to interface is not generating nftables rules as Resolved.
artooro added a comment to T4200: Assigning ipv6-name to interface is not generating nftables rules.
Confirmed, I just built a new image using 1.4-rolling-202201212148 and I can no longer reproduce the issue.
PR + migration: https://github.com/vyos/vyos-1x/pull/1184
In T4199#117215, @n.fort wrote:
Loading address group described in task and then printing, works OK.
Tested on VyOS 1.4-rolling-202201180317 and working as expected.
Seems solved, Not reproducible on VyOS 1.4-rolling-202201180317
n.fort changed the status of T4199: Commit failed when setting icmpv6 type any from In progress to Confirmed.
Did did work as expeced
vyos@vyos# run show config comm | grep fire set firewall ipv6-name FOO rule 10 action 'accept' set firewall ipv6-name FOO rule 10 icmpv6 type 'echo-request' set firewall ipv6-name FOO rule 10 protocol 'ipv6-icmp'
Also, while matching parameters valid in nftables, such as echo-reply, commit fails too:
GitHub <noreply@github.com> committed rVYOSONEXf791d3ef4c33: Merge pull request #1183 from hensur/current-ipv6-local-route (authored by c-po).
Should be fixed with https://github.com/vyos/vyos-1x/pull/1183
Bug related: https://phabricator.vyos.net/T4186
sarthurdev changed the status of T4199: Commit failed when setting icmpv6 type any from Open to In progress.
sarthurdev added a comment to T4200: Assigning ipv6-name to interface is not generating nftables rules.
I can't reproduce this issue on latest rolling
I'm looking into it. From the logs it seems like for src in (pbr[rule_rm][rule]['source'] or ['']) doesn't work if 'source' doesn't exist.
goodNETnick <pknet@ya.ru> committed rVYOSONEX28a92e75cf93: DHCP: T4196: fix client-prefix-length parameter.
GitHub <noreply@github.com> committed rVYOSONEXec5eb00bd83a: Merge pull request #1180 from goodNETnick/dhcp-client-prefix (authored by c-po).
@hensur Smoketest failed.
Unknown Object (User) added a comment to T4154: Error add second gre tunnel with the same source interface.
(VyOS 1.4-rolling-202201200814) - The same.
Unknown Object (User) added a comment to T4137: Firewall group configuration allows to set incorrect port range and invalid port.
I ve testet it on (Version:VyOS 1.4-rolling-202201200814). It seems well.
Unknown Object (User) added a comment to T4115: reboot in <x> not working as expected.
I ve tested this scenario on VyOS 1.4-rolling-202201200814, as said Srividya you can choose minutes betwen 1-99.
If this is critical, you can expand the range by opening a "feature request".
Jan 20 2022
Jan 20 2022
c-po closed T4171: Interface config migration error on 1.2.8 -> 1.4 upgrade, a subtask of T3871: Resolve unexpected interface name reordering, as Resolved.
Seems to have fixed it
GitHub <noreply@github.com> committed rVYOSONEX93cdb6f1ca00: Merge pull request #1182 from jestabro/migrate-while-udev (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXfcb1b6c69ffc: Merge pull request #1181 from sarthurdev/firewall (authored by c-po).
Viacheslav renamed T4197: Vyos arm64-latest build issue with telegraf pkg from Vyos arm64-latest build issue to Vyos arm64-latest build issue with telegraf pkg.
@adestis Could you share commands, on how to reproduce this bug? Thanks.
GitHub <noreply@github.com> committed rVYOSONEX876d108c5dba: Merge pull request #1144 from hensur/current-ipv6-local-route (authored by c-po).
Viacheslav changed the subtype of T4196: DHCP server client-prefix-length parameter results in non-functional leases from "Task" to "Bug".
Viacheslav changed the status of T4196: DHCP server client-prefix-length parameter results in non-functional leases from Open to In progress.
Unknown Object (User) added a comment to T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Unknown Object (User) added a comment to T4196: DHCP server client-prefix-length parameter results in non-functional leases.
From ISC-DHCP manual pages:
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcp-options
Unknown Object (User) updated the task description for T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Unknown Object (User) created T4196: DHCP server client-prefix-length parameter results in non-functional leases.
Jan 19 2022
Jan 19 2022
GitHub <noreply@github.com> committed rVYOSONEX569dfa77f07c: Merge pull request #1177 from sarthurdev/mac_groups (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX10a740096edb: Merge pull request #1176 from sarthurdev/firewall (authored by c-po).
fett0 <fernando.gmaidana@gmail.com> committed rVYOSONEXc31f085b5d87: OSPF : T4195: ability to set maximum paths for OSPF.
GitHub <noreply@github.com> committed rVYOSONEX258dd07904be: Merge pull request #1179 from fett0/T4195 (authored by c-po).
PR for required interface "nodes" https://github.com/vyos/vyatta-cfg-firewall/pull/30
Viacheslav changed the subtype of T4194: prefix-list no check for duplicate entries from "Task" to "Bug".
In fact you find a new bug in 1.4
Seems to be working fine as far as I can see.
Hello @Viacheslav, thanks for reply, so, if you'll bridge vtun94 and eth0.94 to br94 will it work in L2 level?
Did you push this update to nightbuild?
Jan 19 2022, 3:39 AM · Bugs, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
Unknown Object (User) created T4194: prefix-list no check for duplicate entries.
Jan 18 2022
Jan 18 2022
Some details in T4193
GitHub <noreply@github.com> committed rVYOSONEXc77369761f9c: Merge pull request #1178 from sarthurdev/firewall_T4188 (authored by c-po).
Resolved in T3873
sarthurdev changed the status of T4188: Firewall does not correctly handle conntracking from In progress to Needs testing.
johannrichard awarded T3560: Ability to create groups of MAC addresses a Like token.
sarthurdev changed the status of T3560: Ability to create groups of MAC addresses, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
sarthurdev changed the status of T3560: Ability to create groups of MAC addresses from Open to Needs testing.
sarthurdev renamed T4188: Firewall does not correctly handle conntracking from Firewall does not match ICMPv6 packets to Firewall does not correctly handle conntracking.
sarthurdev changed the status of T4188: Firewall does not correctly handle conntracking from Open to In progress.
Okay, thanks for the update. I have found a conntrack issue in the code. Will have a fix in shortly.
Unknown Object (User) added a comment to T3522: policy based routing not working.
Looks like I see the same issue for 1.3.0. Reproducing steps:
set interfaces ethernet eth1 address 'dhcp' set protocols static table 1 route 0.0.0.0/0 dhcp-interface eth1
Thanks, this does fix the ICMP issue, however rule 10 which is supposed to accept packets with related/established states (say a HTTP response following a request), doesn't seem to match any packets, and the packets get dropped by the default rule.
TCP Flags seems to be working on firewall filter config.
Tested on VyOS 1.4-rolling-202201180317 and working as expected
sarthurdev closed T4155: PBR: `set table main` fails in `firewall.py` with newer rolling releases , a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
sarthurdev closed T3286: Switch the firewall from iptables to nftables, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
sarthurdev changed the status of T1292: Issues while deleting all rules from a firewall, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
sarthurdev changed the status of T1292: Issues while deleting all rules from a firewall from Open to Needs testing.
Fixed in 1.4 PR: https://github.com/vyos/vyos-1x/pull/1176