User Details
User Details
- User Since
- Jun 9 2021, 3:23 PM (173 w, 5 d)
Yesterday
Yesterday
Fri, Oct 4
Fri, Oct 4
n.fort changed the status of T6760: Firewall - Add set options of "set policy route" to normal firewall rules from In progress to Needs testing.
Thu, Oct 3
Thu, Oct 3
n.fort changed the status of T6760: Firewall - Add set options of "set policy route" to normal firewall rules from Open to In progress.
n.fort changed the status of T6757: Openconnect - source address for Radius auth not working from In progress to Needs testing.
Wed, Oct 2
Wed, Oct 2
n.fort changed the status of T6687: NAT - Add support for fqdn entries from In progress to Needs testing.
n.fort changed the status of T6757: Openconnect - source address for Radius auth not working from Confirmed to In progress.
n.fort changed the status of T6757: Openconnect - source address for Radius auth not working from Open to Confirmed.
Fri, Sep 20
Fri, Sep 20
Wed, Sep 18
Wed, Sep 18
n.fort changed the status of T6723: op-mode command 'show firewall" is not complete from Confirmed to In progress.
Tue, Sep 17
Tue, Sep 17
n.fort renamed T6723: op-mode command 'show firewall" is not complete from op-mode command 'show filreall" is not complete to op-mode command 'show firewall" is not complete.
n.fort changed the status of T6723: op-mode command 'show firewall" is not complete from Open to Confirmed.
n.fort closed T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid as Resolved.
Sep 3 2024
Sep 3 2024
Aug 30 2024
Aug 30 2024
n.fort added a comment to T6687: NAT - Add support for fqdn entries.
Aug 29 2024
Aug 29 2024
n.fort added a comment to T6641: Show command for interface messages.
Showing all logs for interface might print more information than it's needed. Maybe a different approach:
n.fort added a comment to T6344: multiple ntp listen-address commands not working.
PR for docuemntation: https://github.com/vyos/vyos-documentation/pull/1531
Aug 26 2024
Aug 26 2024
n.fort added a comment to T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid.
Aug 23 2024
Aug 23 2024
n.fort added a comment to T5177: Make the chain policy configurable.
I think we can close this one
n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule as Resolved.
Aug 16 2024
Aug 16 2024
n.fort changed the status of T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid from Confirmed to In progress.
Aug 15 2024
Aug 15 2024
n.fort added a comment to T5794: Flowtable with Bond Race.
Aug 14 2024
Aug 14 2024
n.fort added a comment to T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule.
n.fort changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule from Open to In progress.
n.fort changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to In progress.
Aug 12 2024
Aug 12 2024
n.fort changed the status of T6643: IP Address range in firewall rules throws error from In progress to Needs testing.
n.fort changed the status of T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid from Open to Confirmed.
Config to reproduce the issue:
Aug 9 2024
Aug 9 2024
n.fort changed the status of T6643: IP Address range in firewall rules throws error from Confirmed to In progress.
Aug 7 2024
Aug 7 2024
Aug 5 2024
Aug 5 2024
n.fort changed the status of T6636: Show log firewall not printing logs for default-actions for custom ruleset from Open to Confirmed.
Aug 2 2024
Aug 2 2024
n.fort changed the status of T6631: Error on firewall while using jump-target and no custom ruleset are present from Open to In progress.
Jul 30 2024
Jul 30 2024
n.fort added a comment to T6570: Firewall bridge allways passes traffic to IP layer.
n.fort changed the status of T5680: Allow selecting mac-groups in bridge firewall from Confirmed to In progress.
Jul 29 2024
Jul 29 2024
Jul 24 2024
Jul 24 2024
n.fort changed the status of T6570: Firewall bridge allways passes traffic to IP layer from Confirmed to In progress.
Jul 18 2024
Jul 18 2024
Jul 12 2024
Jul 12 2024
n.fort changed the status of T6570: Firewall bridge allways passes traffic to IP layer from Open to Confirmed.
Jul 4 2024
Jul 4 2024
n.fort added a comment to T5654: Migrate policy local-route.
n.fort changed the status of T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) from In progress to Needs testing.
Jul 3 2024
Jul 3 2024
Jul 2 2024
Jul 2 2024
n.fort changed the status of T6536: Config migration does not work as expected when update from 1.3.2 to 1.4.0 (with NAT with wildcard and sysctl parameters) from Open to In progress.
Jun 24 2024
Jun 24 2024
n.fort added a comment to T6266: Firewall flowtable ability to set timeout for TCP and UDP flow.
Now we have:
Jun 19 2024
Jun 19 2024
n.fort added a comment to T6503: Command 'restart ssh' not working.
Command to restart when ssh running on default vrf:
n.fort added a comment to T6488: Firewall op mode output incomplete.
n.fort changed the status of T6488: Firewall op mode output incomplete from Confirmed to In progress.
Jun 14 2024
Jun 14 2024
Jun 6 2024
Jun 6 2024
n.fort changed the status of T3900: Add support for raw tables to firewall from In progress to Needs testing.
n.fort changed the status of T6394: Migrate conntrack timeout sysctl parameter to firewall from In progress to Needs testing.
Jun 5 2024
Jun 5 2024
n.fort moved T6375: Fix/Update NAT Logging from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort moved T6396: MINOR Typo: set system conntrack timeout custom ipv4 rule X from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 24 2024
May 24 2024
n.fort changed the status of T6394: Migrate conntrack timeout sysctl parameter to firewall from Open to In progress.
May 17 2024
May 17 2024
n.fort added a comment to T6344: multiple ntp listen-address commands not working.
Yeah, my bad!
n.fort added a comment to T6344: multiple ntp listen-address commands not working.
Maybe we should create another xml file identical to listen-address.xml.i but without multi option define in line 16.
n.fort added a comment to T6362: Create a conntrack/translations logger daemon.
Related to https://vyos.dev/T5471 ?
May 14 2024
May 14 2024
n.fort changed the status of T3900: Add support for raw tables to firewall from Open to In progress.
n.fort placed T5497: Add ability to resequence rule numbers for firewall up for grabs.
May 10 2024
May 10 2024
n.fort added a comment to T5497: Add ability to resequence rule numbers for firewall.
I'm closing this task a solution was included. I'm not in favor of introducing similar command in configuration mode.
n.fort added a comment to T5794: Flowtable with Bond Race.
Maybe we should change firewall priority, and make sure all interfaces are defined in the system before loading firewall?
n.fort added a comment to T6329: Firewall - Error while printing groups.
n.fort changed the status of T6329: Firewall - Error while printing groups from Open to In progress.
May 8 2024
May 8 2024
n.fort added a comment to T5177: Make the chain policy configurable.
Behavior change for this issue was fix some month ago in migration scripts, in order to remain action "return" when upgrading from older versions to new syntax.
May 7 2024
May 7 2024
Further tests in lab shows that non-ehternet interfaces are needed in order to offload traffic as expected. An example is when using wireguard interface: in order to offload traffic, it's necessary to add interface wgX to the flowtable.
Otherwise, it won't work as expected