User Details
User Details
- User Since
- Jun 9 2021, 3:23 PM (163 w, 2 d)
Wed, Jul 24
Wed, Jul 24
n.fort changed the status of T6570: Firewall bridge allways passes traffic to IP layer from Confirmed to In progress.
Thu, Jul 18
Thu, Jul 18
Fri, Jul 12
Fri, Jul 12
n.fort changed the status of T6570: Firewall bridge allways passes traffic to IP layer from Open to Confirmed.
Thu, Jul 4
Thu, Jul 4
n.fort added a comment to T5654: Migrate policy local-route.
n.fort changed the status of T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) from In progress to Needs testing.
Wed, Jul 3
Wed, Jul 3
Tue, Jul 2
Tue, Jul 2
n.fort changed the status of T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) from Open to In progress.
Jun 24 2024
Jun 24 2024
n.fort added a comment to T6266: Firewall flowtable ability to set timeout for TCP and UDP flow.
Now we have:
Jun 19 2024
Jun 19 2024
n.fort added a comment to T6503: Command 'restart ssh' not working.
Command to restart when ssh running on default vrf:
n.fort added a comment to T6488: Firewall op mode output incomplete.
n.fort changed the status of T6488: Firewall op mode output incomplete from Confirmed to In progress.
Jun 14 2024
Jun 14 2024
Jun 6 2024
Jun 6 2024
n.fort changed the status of T3900: Add support for raw tables to firewall from In progress to Needs testing.
n.fort changed the status of T6394: Migrate conntrack timeout sysctl parameter to firewall from In progress to Needs testing.
Jun 5 2024
Jun 5 2024
n.fort moved T6375: Fix/Update NAT Logging from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort moved T6396: MINOR Typo: set system conntrack timeout custom ipv4 rule X from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 24 2024
May 24 2024
n.fort changed the status of T6394: Migrate conntrack timeout sysctl parameter to firewall from Open to In progress.
May 17 2024
May 17 2024
n.fort added a comment to T6344: multiple ntp listen-address commands not working.
Yeah, my bad!
n.fort added a comment to T6344: multiple ntp listen-address commands not working.
Maybe we should create another xml file identical to listen-address.xml.i but without multi option define in line 16.
n.fort added a comment to T6362: Create a conntrack/translations logger daemon.
Related to https://vyos.dev/T5471 ?
May 14 2024
May 14 2024
n.fort changed the status of T3900: Add support for raw tables to firewall from Open to In progress.
n.fort placed T5497: Add ability to resequence rule numbers for firewall up for grabs.
May 10 2024
May 10 2024
n.fort added a comment to T5497: Add ability to resequence rule numbers for firewall.
I'm closing this task a solution was included. I'm not in favor of introducing similar command in configuration mode.
n.fort added a comment to T5794: Flowtable with Bond Race.
Maybe we should change firewall priority, and make sure all interfaces are defined in the system before loading firewall?
n.fort added a comment to T6329: Firewall - Error while printing groups.
n.fort changed the status of T6329: Firewall - Error while printing groups from Open to In progress.
May 8 2024
May 8 2024
n.fort added a comment to T5177: Make the chain policy configurable.
Behavior change for this issue was fix some month ago in migration scripts, in order to remain action "return" when upgrading from older versions to new syntax.
May 7 2024
May 7 2024
Further tests in lab shows that non-ehternet interfaces are needed in order to offload traffic as expected. An example is when using wireguard interface: in order to offload traffic, it's necessary to add interface wgX to the flowtable.
Otherwise, it won't work as expected
n.fort added a comment to T6305: IPoE interface wildcard validation error in firewall rules.
n.fort changed the status of T6305: IPoE interface wildcard validation error in firewall rules from Open to In progress.
May 6 2024
May 6 2024
n.fort added a comment to T6265: Firewall flowtable should allow ethernet only interfaces.
And similar example, using same interfaces and host, but instead of GRE tunnel, using a Wireguard site to site tunnel:
n.fort added a comment to T6265: Firewall flowtable should allow ethernet only interfaces.
Example of using flowtables on mater interfaces, and communication between a local host that is on a VLAN (vlan eth2.22 and host 10.22.22.222), and a remote host that is reachable through a GRE tunnel (tunnel established using interface eth0):
n.fort changed the status of T6265: Firewall flowtable should allow ethernet only interfaces from Open to In progress.
n.fort added a comment to T6265: Firewall flowtable should allow ethernet only interfaces.
n.fort added a comment to T6288: policy route ipv4 rule order behaviour.
Can you try with newver version?
New fixes were applied.
You can check this tasks:
https://vyos.dev/T6269
https://vyos.dev/T6191
Apr 26 2024
Apr 26 2024
n.fort added a comment to T6269: Polixy route "set table" option is not working correctly.
n.fort changed the status of T6269: Polixy route "set table" option is not working correctly from Open to In progress.
Apr 22 2024
Apr 22 2024
n.fort raised the priority of T4853: OpenVPN: unable to commit changes when the interface is down/unknown state from Normal to High.
Any news about this issue @SrividyaA and @c-po ?
Apr 21 2024
Apr 21 2024
n.fort moved T5535: Move disable-directed-broadcast to firewall global-options from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort moved T5535: Move disable-directed-broadcast to firewall global-options from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
n.fort moved T6191: Policy route set-mss option is not working correctly from Need Triage to Finished on the VyOS 1.5 Circinus board.
Apr 19 2024
Apr 19 2024
n.fort added a project to T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.3 Equuleus (1.3.7).
n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.
And do you have similar setup and situation in newer version?
Apr 18 2024
Apr 18 2024
n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.
Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?
Apr 17 2024
Apr 17 2024
n.fort added a comment to T6247: Add CGN "full cone" EIF support per RFC6888 REQ-7.
I saw such repository more than once, but it seems that it has been abandoned. Last commit is dated two years ago.
n.fort changed the status of T5535: Move disable-directed-broadcast to firewall global-options from Confirmed to Needs testing.
n.fort changed the status of T6191: Policy route set-mss option is not working correctly from Confirmed to Needs testing.
Apr 16 2024
Apr 16 2024
n.fort added a comment to T6191: Policy route set-mss option is not working correctly.
n.fort changed Version from 1.4.0-epa2 to 1.4.0-epa2, 1.5-rolling-202404141045 on T6191: Policy route set-mss option is not working correctly.
n.fort changed the status of T6191: Policy route set-mss option is not working correctly from Open to Confirmed.
Apr 15 2024
Apr 15 2024
n.fort added a comment to T5535: Move disable-directed-broadcast to firewall global-options.
n.fort changed the status of T5535: Move disable-directed-broadcast to firewall global-options from Open to Confirmed.
Apr 12 2024
Apr 12 2024
n.fort moved T6213: Validations in firewall groups mistakenly reject correct configurations from Need Triage to Finished on the VyOS 1.4 Sagitta board.
n.fort moved T6213: Validations in firewall groups mistakenly reject correct configurations from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort closed T6213: Validations in firewall groups mistakenly reject correct configurations as Resolved.
Apr 10 2024
Apr 10 2024
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config, a subtask of T5938: Migration fail root task for 1.4-rc, from Confirmed to In progress.
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config from Confirmed to In progress.
n.fort added a comment to T6216: Firewall group names that contain the '+' character break the config.
Apr 9 2024
Apr 9 2024
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config from Open to Confirmed.
n.fort added a comment to T6213: Validations in firewall groups mistakenly reject correct configurations.
n.fort added a comment to T6214: Error when using some constraints.
n.fort renamed T6214: Error when using some constraints from Error when using some contraints to Error when using some constraints.
Apr 8 2024
Apr 8 2024
n.fort moved T6068: Support active-active and active-passive high availability modes in DHCP server from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort moved T6068: Support active-active and active-passive high availability modes in DHCP server from Need Triage to Finished on the VyOS 1.4 Sagitta board.
n.fort changed the status of T6213: Validations in firewall groups mistakenly reject correct configurations from Open to In progress.
Apr 5 2024
Apr 5 2024
n.fort changed the status of T6205: ipoe: error in migration script logic while renaming mac-address to mac, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to Confirmed.
n.fort changed the status of T6205: ipoe: error in migration script logic while renaming mac-address to mac from Open to Confirmed.
Apr 3 2024
Apr 3 2024
n.fort added a comment to T6171: Rename the DHCP server "failover" command to "high-availability mode".
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/3239
n.fort added a comment to T6068: Support active-active and active-passive high availability modes in DHCP server.
PR for Sagitta: https://github.com/vyos/vyos-1x/pull/3239
n.fort added a comment to T6200: Error on adding a wildcard interface.
Try with:
Mar 25 2024
Mar 25 2024