The similar task https://vyos.dev/T4797
You can add manually nft rules that used for firewall group, but they will overwritten per next firewall change/commit. The whole firewall config will overwritten.
There are 2 ways. Somehow use it in CLI or use native (nft) tables, chains, group-sets and rules which are not overlapping with generated “system” firewall ruleset
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 10 2023
Jun 10 2023
Viacheslav closed T5231: Add op-mode for load-balancing reverse-proxy, a subtask of T5222: Add load-balancing reverse-proxy based on haproxy , as Resolved.
Viacheslav moved T5253: MPLS config removed at boot when wireguard interfaces present from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Jun 9 2023
Jun 9 2023
On another router I've changed the base mounts to sync ie: mount /dev/md127 /boot -o remount,rw,noatime,sync before upgrading, but after a reboot it came back corrupted.
Jun 8 2023
Jun 8 2023
c-po changed the status of T5272: Upgrade OpenVPN to 2.6 in Equuleus, a subtask of T5271: Add support for peer-fingerprint to OpenVPN, from Open to In progress.
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
I have been able to get NAT to work with VRFs with 1.4-rolling-202306080317. However:
<?xml version="1.0"?>
<interfaceDefinition>
<node name="show">
<children>
<node name="interfaces">
<properties>
<help>Show network interface information</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_summary</command>
<children>
<leafNode name="counters">
<properties>
<help>Show network interface counters</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show_counters</command>
</leafNode>
<leafNode name="detail">
<properties>
<help>Show detailed information of all interfaces</help>
</properties>
<command>${vyos_op_scripts_dir}/interfaces.py show</command>
</leafNode>
</children>
</node>
</children>
</node>
</interfaceDefinition>c-po added a comment to T5239: frr 'hostname' missing or incorrect, and domain-name missing totally.
It's actually an old issue.
jestabro added a subtask for T5136: Possible config corruption on upgrade: T5267: Another corruption on upgrade.
jestabro added a parent task for T5267: Another corruption on upgrade: T5136: Possible config corruption on upgrade.
c-po edited projects for T5268: OpenVPN: upgrade package to 2.6 series, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Viacheslav renamed T2196: Dynamic ipv4 interface list hairpin from Dynamic ipv4 interface list to Dynamic ipv4 interface list hairpin.
cuongdt1994 added a comment to T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority'.
With Base Configuration, it's don't have any issues. but after commit command here, error will show error:
Jun 7 2023
Jun 7 2023
c-po changed Why the issue appeared? from none to other on T5265: WAN load-balancing: missing completion helpers.
PR for VyOS 1.3 https://github.com/vyos/vyatta-wanloadbalance/pull/19
c-po changed the status of T5265: WAN load-balancing: missing completion helpers from Open to In progress.
Viacheslav updated the task description for T5264: Add Mellanox Technologies firmware flash module mlxfw to kernel.
Found the problem with command:
Viacheslav changed the status of T5262: Warn the user about unsaved config on reboot/shutdown attempts from Open to Needs testing.
SrividyaA changed the status of T5253: MPLS config removed at boot when wireguard interfaces present from Open to Confirmed.
Jun 6 2023
Jun 6 2023
jestabro added a parent task for T5248: Ability to load config via API in JSON format: T5263: Generalization of REST configure endpoint.
jestabro added a parent task for T3955: Allow commit-confirm through http API: T5263: Generalization of REST configure endpoint.
Could you please try the configuration in the latest rolling release.
Viacheslav changed the status of T5260: Python3 module crypt is deprecated from In progress to Needs testing.
Jun 5 2023
Jun 5 2023
In this case I found the ipv6-address-group and ipv6-network-group not assigned without name or group. Because it's can't show references.
Viacheslav changed the status of T5260: Python3 module crypt is deprecated from Open to In progress.
Viacheslav changed the status of T5261: Add AWS gateway load-balanceing tunnel handler (gwlbtun) from Open to In progress.
jestabro moved T5259: Openconnect cannot pass migration 1-to-2 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
jestabro closed T5259: Openconnect cannot pass migration 1-to-2, a subtask of T5251: Uncaught errors for functions delete/delete_value in Python module configtree.py, as Resolved.
jestabro changed the status of T5259: Openconnect cannot pass migration 1-to-2 from Open to In progress.
jestabro changed the status of T5259: Openconnect cannot pass migration 1-to-2, a subtask of T5251: Uncaught errors for functions delete/delete_value in Python module configtree.py, from Open to In progress.
Viacheslav added a comment to T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
PR for vyos-1x https://github.com/vyos/vyos-1x/pull/2025
Maybe related with https://vyos.dev/T5048
Viacheslav changed the status of T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker from Open to Needs testing.
Viacheslav renamed T5259: Openconnect cannot pass migration 1-to-2 from Openconnect authentication mode should be local by default to Openconnect cannot pass migration 1-to-2.
Viacheslav updated the task description for T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
Viacheslav updated the task description for T5258: git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker.
Jun 4 2023
Jun 4 2023
Draft PR re-opened following fix of regression with option 'recursive'; simplified logic and added optional args to get_config_defaults to mirror get_config_dict. The latter allows easy manipulation of defaults in cases where the automatic merge is not sufficient.
Jun 3 2023
Jun 3 2023
cuongdt1994 updated the task description for T5256: QoS expects protocol number but not protocol name.
cuongdt1994 renamed T5256: QoS expects protocol number but not protocol name from QOS crash and cannot commit to Quality of Services crash with new qos policy.
Viacheslav added a project to T5257: Cannont assign netflow source ip to ip in non default VRF: VyOS 1.4 Sagitta.