They switched to the OpenBSD fork of dhcrelay (I still have a router running OPNsense to test some stuff) 馃檪
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 20 2024
Apr 20 2024
Unknown Object (User) added a comment to T6256: Replace deprecated ISC dhcp-relay (EOL) with something else.
Here is a post from an OPNsense forum administrator in august 2023 (dunno if the below is still valid for OPNsense):
Unknown Object (User) added a comment to T6256: Replace deprecated ISC dhcp-relay (EOL) with something else.
While I do somewhat agree on that, having more than one to choose from, for everything, is going to be a maintenance nightmare.
If you have just 5 things with 2 packages to choose from, you already have 32 different combinations to support.
Having something else than everyone else sounds great, but again, people are not going to switch due to a vuln being found - they are going to push for a fix for it instead.
When evaluating proper replacement (other than choosing the best one for the task) another thing to consider is, if possible, to select something that not everybody else uses in terms of if/when a vuln is found in that softrware then not ALL vendors are affected at once.
Unknown Object (User) added a comment to T6256: Replace deprecated ISC dhcp-relay (EOL) with something else.
Depending on how BSD dependent the OpenBSD one is, that might be the easiest drop-in replacement.
Otherwise I would suggest going for dnsmasq, since it is quiet small and well maintained. (not saying the other projects aren't being maintained, but I don't know about them)
Unknown Object (User) added a comment to T5755: Running set pki ca NAME certificate with a name with spaces breaks the config.
I just built and tested with the latest sagitta commits, and it is preventing it now as expected.
So I would say it can be closed as fixed, since it has been fixed some time between November and now.
c-po moved T6244: Improve formatting in "show system uptime" from Open to Finished on the VyOS 1.5 Circinus board.
c-po edited projects for T6244: Improve formatting in "show system uptime", added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
c-po changed the status of T6244: Improve formatting in "show system uptime" from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX8062edbefb31: Merge pull request #3335 from vyos/mergify/bp/sagitta/pr-3333 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX7a6d24402c43: gre: T6252: allow tunnel MTU to exceed 8024 bytes (authored by fett0 <50275740+fett0@users.noreply.github.com>).
GitHub <noreply@github.com> committed rVYOSONEX4cde677e9e12: gre: T6252: allow tunnel MTU to exceed 8024 bytes (authored by fett0 <50275740+fett0@users.noreply.github.com>).
GitHub <noreply@github.com> committed rVYOSONEX563ca814909d: Merge pull request #3334 from vyos/mergify/bp/sagitta/pr-3035 (authored by c-po).
Viacheslav renamed T6255: Static table description should not contain white-space from Static table description. should not contain white-space to Static table description should not contain white-space.
Apr 19 2024
Apr 19 2024
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXe50eb3c942ce: T5996: add smoketest to check translation of backslash character (authored by jestabro).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX37c1ac4f2ce6: T5996: selectively escape and restore single backslashes in config (authored by jestabro).
Embezzle closed T6242: Add an option to disable certificate verification to reverse proxy as Resolved.
Tested as working in: VyOS 1.5-rolling-202404190019
dmbaturin changed Is it a breaking change? from none to compatible on T6246: Add support for server health checks to reverse proxy.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5a8310147b85: T6246: adds basic haproxy http-check configuration (authored by nvollmar).
GitHub <noreply@github.com> committed rVYOSONEX89b56ef6da19: Merge pull request #3325 from nvollmar/haproxy-http-check (authored by dmbaturin).
n.fort added a project to T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.3 Equuleus (1.3.7).
And do you have similar setup and situation in newer version?
Viacheslav triaged T6251: Extend table number limits for policy route-map set table as Wishlist priority.
Viacheslav triaged T6250: "policy route-map set table" cannot be deleted from the rule as Normal priority.
Viacheslav moved T6221: Enabling VRF breaks connectivity from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Viacheslav moved T6221: Enabling VRF breaks connectivity from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav edited projects for T6221: Enabling VRF breaks connectivity, added: VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.0-epa2).
Viacheslav triaged T6249: ISO builder fails because of changed buster-backport repository as High priority.
This is the result of buster-backports being removed from the main repository server: https://backports.debian.org/news/Removal_of_buster-backports_from_the_debian_archive/
In T5153#184332, @n.fort wrote:Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?
Apr 18 2024
Apr 18 2024
Hi,
I was playing around with VyOS and thought i'd build myself an iso and hit this issue. Not sure if its the correct way to solve it, but this is what I did:
syncer reassigned T5752: Check compatibility of new image tools with XCP-NG images from jestabro to Viacheslav.
jestabro claimed T5986: Container: Error on commit when environment variable value contains \n line break.
This will be resolved after backport of T5996.
jestabro moved T6245: Unhandled exception in "show openvpn server" from Open to Finished on the VyOS 1.5 Circinus board.
GitHub <noreply@github.com> committed rVYOSONEX63eb47d62eff: Merge pull request #3331 from vyos/mergify/bp/sagitta/pr-3330 (authored by jestabro).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3976eebd3d10: openvpn: T6245: return 'n/a' if client info not available (authored by jestabro).
GitHub <noreply@github.com> committed rVYOSONEX8bb55a50d08b: Merge pull request #3330 from jestabro/show-openvpn-fail (authored by dmbaturin).
Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?
Viacheslav placed T2279: Router resolves as 127.0.1.1 when using Router's Recursive DNS up for grabs.
Viacheslav edited projects for T4732: need an option for VRF name when you specify location for commit-archive, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav closed T4422: WAN load-balance status failed on all interfaces if one of them failed, a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Wontfix.
Viacheslav closed T4422: WAN load-balance status failed on all interfaces if one of them failed as Wontfix.
Test addresses have to be different
Viacheslav changed the status of T4422: WAN load-balance status failed on all interfaces if one of them failed, a subtask of T4470: Rewrite load-balancing wan to XML/Python, from Open to Needs reporter action.
Viacheslav changed the status of T4422: WAN load-balance status failed on all interfaces if one of them failed from Open to Needs reporter action.
Viacheslav added a comment to T4422: WAN load-balance status failed on all interfaces if one of them failed.
Provide the set of the commands to reproduce
Viacheslav removed a project from T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.4 Sagitta.
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
GitHub <noreply@github.com> committed rVYOSONEXcc2458dfc74a: Merge pull request #3329 from vyos/mergify/bp/sagitta/pr-3326 (authored by dmbaturin).
Viacheslav changed the status of T6221: Enabling VRF breaks connectivity from Open to Needs testing.
dmbaturin added a project to T6245: Unhandled exception in "show openvpn server": VyOS 1.4 Sagitta (1.4.0-epa3).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX6d15ae068e47: T6221: Return default ip rule values after deleting VRF (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEX3a50e87584a8: Merge pull request #3326 from sever-sever/T6221 (authored by dmbaturin).
dmbaturin edited projects for T5986: Container: Error on commit when environment variable value contains \n line break, added: VyOS 1.4 Sagitta (1.4.0-epa3); removed VyOS 1.4 Sagitta.
Viacheslav added a project to T5471: Conntrack logging doesnt seem to be working: VyOS 1.5 Circinus.
The old implementation used this script and https://github.com/vyos/vyatta-conntrack/blob/current/src/vyatta-conntrack-logging.c for the logging and it seems not impelemted for the current
At least there is not mention of the log
GitHub <noreply@github.com> committed rVYOSONEXe8f93864cf72: Merge pull request #3328 from vyos/mergify/bp/sagitta/pr-3327 (authored by jestabro).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXbbe0821213b7: pki: T6241: do not call dependency before its initialization (authored by jestabro).
sarthurdev committed rVYOSONEXa88b3bd344cc: pki: T6241: do not call dependency before its initialization (authored by jestabro).
GitHub <noreply@github.com> committed rVYOSONEXfc3fd89a6fa4: Merge pull request #3327 from sarthurdev/T6241 (authored by jestabro).
Without subtasks, it is going to be dead.
@Apachez It is not clear what you want to fix exactly. Fix all and do all working well could be related to any task.
Viacheslav edited projects for T5673: Enable `CONFIG_DEBUG_INFO_DWARF5` and `CONFIG_DEBUG_INFO_BTF` in the Linux kernel, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav edited projects for T5737: Eigrp #11301 - Configuration failed error type: validation, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Viacheslav closed T5755: Running set pki ca NAME certificate with a name with spaces breaks the config as Not Applicable.
Not reproduced on VyOS 1.5-rolling-202404141045
vyos@r-left# set pki ca "my test ca name" certificate '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'