Note that the PR for T4797 was never updated for requested changes:
https://github.com/vyos/vyos-1x/pull/1648
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
All Stories
Aug 31 2023
Any updates on this?
Still bug
vyos@r1# set service webproxy
Possible completions:
append-domain
Default domain name
> authentication
Proxy Authentication Settings
+> cache-peer Specify other caches in a hierarchy
cache-size Disk cache size in MB (default: 100)
default-port Default Proxy Port (default: 3128)
disable-access-log
Disable logging of HTTP accesses
+ domain-block Domain name to block
+ domain-noncache
Domain name to access without caching
+> listen-address
IPv4 listen-address for WebProxy [REQUIRED]
maximum-object-size
Maximum size of object to be stored in cache in kilobytes
mem-cache-size
Memory cache size in MB
minimum-object-size
Maximum size of object to be stored in cache in kilobytes
outgoing-address
Outgoing IP address for webproxy
+ reply-block-mime
MIME type to block
reply-body-max-size
Maximum reply body size in KB
> url-filtering
URL filtering settingsFixed VyOS 1.3-stable-202308240442
set interfaces tunnel tun1 encapsulation 'gre' set interfaces tunnel tun1 remote '203.0.113.254' set interfaces tunnel tun1 source-address '203.0.113.1'
- Error in show firewall group:
I can confirm that I experienced the same thing with update to VyOS 1.4-rolling-202308310021.
I assume backports will be used once VyOS 1.3.4 gets compiled?
PR is merged
Fixed VyOS 1.3-stable-202308240442
vyos@r1# set firewall group network-group NG network 198.51.100.0/24 [edit] vyos@r1# commit [edit] vyos@r1# set firewall group network-group NG network 198.51.100.99/32 [edit] vyos@r1# commit [edit] vyos@r1#
If you use interface as a peer, you have to use interface peer-group
in FRR
r1(config-router)# neighbor eth1 interface peer-group
VyOS
vyos@r1# set protocols bgp 65001 neighbor eth1 interface peer-group Possible completions: <text> peer group for this peer
Aug 30 2023
I did some modification to fix this problem.
https://github.com/vyos/vyos-build/pull/386
Adding geo-ip and fqnd too:
https://github.com/vyos/vyos-1x/pull/2188
@csszep Yes it is expected, IPv6 has no sysctl and requires the nftables rule to function. The nftables execution is slightly slower, so there's no benefit to change it for IPv4.
This was resolved, and present in 1.3.0.
This is superseded by T5528.
This possible corruption on system update is resolved in the commit; further investigation of the effect of coreutils behavior change will be in subtask T5527.
PR is created https://github.com/vyos/vyos-build/pull/385
Cherry-pick for 1.3.4 https://github.com/vyos/vyos-1x/pull/2187
It cannot reproduce in the current 1.3 VyOS 1.3-stable-202308240442
vyos@r1:~$ sudo sysctl -a | grep send_redire net.ipv4.conf.all.send_redirects = 1 net.ipv4.conf.default.send_redirects = 0 net.ipv4.conf.dum0.send_redirects = 0 net.ipv4.conf.eth0.send_redirects = 0 net.ipv4.conf.eth1.send_redirects = 0 net.ipv4.conf.eth2.send_redirects = 0 net.ipv4.conf.eth3.send_redirects = 0 net.ipv4.conf.eth4.send_redirects = 0 net.ipv4.conf.eth5.send_redirects = 0 net.ipv4.conf.eth6.send_redirects = 0 net.ipv4.conf.lo.send_redirects = 1 vyos@r1:~$ vyos@r1:~$ vyos@r1:~$ reboot now
It could be added the same way https://github.com/vyos/vyatta-cfg-quagga/commit/db2f0bbeb375e0d568ef4740bad2b50690cd8644 (if required)
If not, just close it. Already have in 1.4
This also affects latest rolling release as of 1.4-rolling-202308240020 which is available @vyos.io
We won't extend the old Perl code anymore (for 1.3.x) https://github.com/vyos/vyatta-cfg-qos/pull/19
Implemented for 1.4