- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 2 2024
Apr 2 2024
a.apostoliuk changed the status of T6150: Impossible to set a static IP address via RADIUS in IPoE from In progress to Needs testing.
GitHub <[email protected]> committed rVYOSONEX0cb219151645: Merge pull request #3231 from vyos/mergify/bp/sagitta/pr-3212 (authored by dmbaturin).
Apr 1 2024
Apr 1 2024
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX28f22de166d1: bgp: T6151: Fix description in PEER disable-connected-check (authored by fett0 <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX4e77cbaa78fe: bgp: T6151: Fix description in PEER disable-connected-check (authored by fett0 <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3ea4685af7eb: bgp: T6151: Allow configuration of disable-ebgp-connected-route-check (authored by fett0 <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX883055dd9176: bgp: T6010: Allow configuration of disable-ebgp-connected-route-check (authored by fett0 <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX8c40fcfc5ac0: Merge pull request #3212 from fett0/T6151 (authored by fett0 <[email protected]>).
c-po renamed T6192: Support running SSH server in more than one VRF from Multi VRF support for SSH and SNMP to Multi VRF support for SSH.
c-po renamed T6192: Support running SSH server in more than one VRF from Multi VRF support for SSH, NTP and SNMP to Multi VRF support for SSH and SNMP.
a.apostoliuk triaged T6196: route-map and summary-only do not work in BGP aggregation at the same time as Normal priority.
a.apostoliuk changed the status of T6196: route-map and summary-only do not work in BGP aggregation at the same time from Open to In progress.
Always exclude this address from any defined range. This address will never be assigned by the DHCP server.
Ok, it will exclude in any range.
Forget about it
Viacheslav closed T6178: reverse-proxy doesn't check that a certificate exists at set time as Resolved.
GitHub <[email protected]> committed rVYOSONEXae96118ec38c: Merge pull request #3167 from aapostoliuk/T6150-equuleus (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX4999f605b024: Merge pull request #3228 from vyos/mergify/bp/equuleus/pr-3223 (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEXe2bbbce7db2c: Merge pull request #3227 from vyos/mergify/bp/sagitta/pr-3223 (authored by dmbaturin).
c-po moved T6195: dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1 from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
GitHub <[email protected]> committed rVYOSONEXadb89e77eb80: Merge pull request #3226 from vyos/mergify/bp/sagitta/pr-3224 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX8cabdcfc85c8: system: T6193: invalid warning "is not a DHCP interface but uses DHCP name… (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX4e37494b9cb1: dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domains (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX283cc5d8deaf: system: T6193: invalid warning "is not a DHCP interface but uses DHCP name… (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXecdf22fee327: Merge pull request #3223 from c-po/T6193-dhcp-client (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX9e17fae6f961: Merge pull request #3224 from c-po/T2590-dhcpv6-client (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX5e5bb5a40cbd: Merge pull request #3225 from vyos/mergify/bp/sagitta/pr-3222 (authored by dmbaturin).
c-po moved T6195: dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1 from Open to Finished on the VyOS 1.5 Circinus board.
The issue seems to be in zebra/interface.c:
c-po renamed T6195: dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1 from dropbear: package upgrade 2022.83-1+deb12u1 to dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1.
This actually also happens without a reboot on my test system.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3908eaf24f29: T6178: Check that certificate exists during reverse-proxy commit (authored by khramshinr <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX63634b061804: Merge pull request #3222 from HollyGurza/T6178 (authored by c-po).
c-po added a comment to T2590: DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c.
After the fix
HollyGurza added a comment to T6178: reverse-proxy doesn't check that a certificate exists at set time.
HollyGurza changed the status of T6178: reverse-proxy doesn't check that a certificate exists at set time from Open to In progress.
Personally I dont think its a good idea to be able to use VyOS as a jumphost towards victims of scanning.
Apr 1 2024, 8:11 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
@ServerForge It is question for hsflowd
You can open the issue on their git repo
Unknown Object (User) added a comment to T6181: A feature for checking popular ports..
ok, i'll change a port list and nmap scenario
Apr 1 2024, 12:58 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
Its no longer failing to start, but it seems to be only capturing inbound traffic on the tunnel, no outbound. I'm also observing this behavior on vlan interfaces, IE bond0.10.
Mar 31 2024
Mar 31 2024
jestabro closed T6185: Simplify marshalling of section and config data for config-sync, a subtask of T6121: Extend service config-sync for sections vpn, policy, vrf, as Unknown Status.
jestabro closed T6185: Simplify marshalling of section and config data for config-sync as Unknown Status.
jestabro closed T6180: Add application of mask to configtree, a subtask of T6185: Simplify marshalling of section and config data for config-sync, as Unknown Status.
Proposed CLI:
set nat cgnat pool external <external> range 192.0.2.0/30 seq 1 set nat cgnat pool external <external> range 192.0.2.128-192.0.2.132 seq 2 set nat cgnat pool external <external> per-user-limit port 1024 set nat cgnat pool external <external> global-port-range 1024-65535 set nat cgnat pool internal <internal> range 100.64.1.0/24
c-po changed the status of T6192: Support running SSH server in more than one VRF, a subtask of T2321: VRF support for SSH, NTP, SNMP service, from Open to In progress.
c-po changed the status of T6192: Support running SSH server in more than one VRF from Open to In progress.
GitHub <[email protected]> committed rVYOSONEXf62827c80466: Merge pull request #3211 from jestabro/tree-mask (authored by Viacheslav).
Mar 31 2024, 11:28 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
I'm not sure that a list of ports will be helpful in this way.
From time to time, we need to scan specific ports.
What about
force scan-port-host <x.x.x.x> proto <tcp|udp> port '8080-8081,9200' force port--discovery-host <x.x.x.x> proto <tcp|udp> port '8080' force port-scan host <x.x.x.x> proto <tcp|udp> port '8080'
And use native nmap binaries (as python3 nmap module is not installed by default)
Also, it has XML format if you want a custom table:
sudo nmap -oX - 127.0.0.1
Mar 31 2024, 11:28 AM · Restricted Project, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav changed the status of T6173: Build Causes Errors When "--version" Contains Slashes ("/") from Open to In progress.
Viacheslav triaged T6173: Build Causes Errors When "--version" Contains Slashes ("/") as Normal priority.
Viacheslav triaged T6156: Include commit hash from repos in nightly build release description as Normal priority.
Viacheslav added a parent task for T6154: Installer should ask for password twice: T4516: Rewrite system image manipulation tools in Python.
Viacheslav edited projects for T6154: Installer should ask for password twice, added: VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta (1.4.0-epa2).
Viacheslav changed the status of T6185: Simplify marshalling of section and config data for config-sync, a subtask of T6121: Extend service config-sync for sections vpn, policy, vrf, from Open to In progress.
Viacheslav changed the status of T6185: Simplify marshalling of section and config data for config-sync from Open to In progress.
Viacheslav triaged T6188: Add firewall rule description to the output of "show firewall" commands as Wishlist priority.
Viacheslav moved T5832: Allow setting the interface for excluded address in VRRP from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav renamed T6191: Policy route set-mss option is not working correctly from Policy Route Behavior Different from 1.3.x to Policy Route TCP-MSS Behavior Different from 1.3.x.