Page MenuHomePhabricator
Feed All Stories

Today

Dmitry added a comment to T1609: Dummy interface not up after commit.

PR https://github.com/vyos/vyos-1x/pull/114.

Fri, Aug 23, 1:33 PM
Dmitry added a comment to T1609: Dummy interface not up after commit.

Additional issue with requiring something after disable

Fri, Aug 23, 1:00 PM
c-po added a comment to T1333: pdns_recursor does not perform recursive lookups on domain specific forwarders.

Unfortunately I can not reproduce this issue

Fri, Aug 23, 12:33 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
alkersan added a comment to T1607: Convert 'reset conntrack' and 'reset ip[v6] cache' operations from vyatta-op to new syntax.

Please, review another batch of trivial rewrites from vyatta-op and the corresponding vyatta-op PR

Fri, Aug 23, 11:17 AM · VyOS 1.3 Equuleus
adestis created T1610: Support operator mode commands via REST API.
Fri, Aug 23, 10:29 AM · VyOS 1.3 Equuleus
c-po triaged T1608: bridge: Bridge adding non existing interfaces is allowed but does not work as High priority.
Fri, Aug 23, 10:17 AM · VyOS 1.3 Equuleus
c-po changed Difficulty level from unknown to hard on T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 10:17 AM · VyOS 1.3 Equuleus
c-po added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

This can be solved using multiple ways:

  • add option to the interfaces-bridge.py script to recreate the bridge when triggered externally
    • advantage: the conde is already there
    • disadvantage: the script can easily grow to a wastebin of code executed from 100 places
  • add a dedicated bridge-group-sync.py script which synchronizes the bridge groups and interfaces, called whenever a interface is added to the system (e.g OpenVPN vtun or ethernet vif)
    • advantage: code is contained in a dedicated scirpt
    • disadvantage: more and more scripts might evolve
  • Write a vyos-interfaced which acts as message receiver and will handle tasks as adding/removing IP addresses, adding/removing bridge and bond members
    • advantage: most generic and single source
    • disadvantage: most complex
Fri, Aug 23, 10:15 AM · VyOS 1.3 Equuleus
Dmitry renamed T1609: Dummy interface not up after commit from Dummy interface not up after commin to Dummy interface not up after commit.
Fri, Aug 23, 10:01 AM
Dmitry changed the status of T1609: Dummy interface not up after commit from Open to In progress.
Fri, Aug 23, 10:00 AM
c-po claimed T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 9:49 AM · VyOS 1.3 Equuleus
runar added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

Full console dump to reproduce with comments:

##
## Start without anything
Fri, Aug 23, 9:29 AM · VyOS 1.3 Equuleus
runar added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

the current only way to get the interface added to the group is to remove and readd it to the group.

vyos@vyos# brctl show
bridge name	bridge id		STP enabled	interfaces
br1		8000.525405123456	yes		eth0.1
Fri, Aug 23, 8:53 AM · VyOS 1.3 Equuleus
runar added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

i've updated the description. the bridge is created and comitted prior to the creation of the interface.

Fri, Aug 23, 8:51 AM · VyOS 1.3 Equuleus
runar updated the task description for T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 8:51 AM · VyOS 1.3 Equuleus
c-po added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

If the bridge priority is higher then the ethernet vif this should work out of the box

Fri, Aug 23, 8:49 AM · VyOS 1.3 Equuleus
runar renamed T1608: bridge: Bridge adding non existing interfaces is allowed but does not work from bridge: possible to add non-created interfaces. to bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 8:44 AM · VyOS 1.3 Equuleus
Dmitry added a comment to T1605: L2tp over IPsec not working in Crux.

I confirm, this behavior was reproduced. As I saw, problem with outgoing marked packets from server. Maybe for this case need add some option for marking only incoming packets, like

mark_in=%unique

While using NAT, just set mark=%unique for in and out marking

Fri, Aug 23, 8:43 AM · VyOS 1.2 Crux
c-po closed T1606: Rolling release no longer boots after adding hostname daemon, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Aug 23, 8:43 AM · VyOS 1.2 Crux
c-po closed T1606: Rolling release no longer boots after adding hostname daemon as Resolved.
Fri, Aug 23, 8:43 AM · VyOS 1.3 Equuleus
runar created T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 8:43 AM · VyOS 1.3 Equuleus
alkersan added a comment to T1606: Rolling release no longer boots after adding hostname daemon.

Just checked the vyos-1.2-rolling-201908230337-amd64.iso - it is bootable after install.
Unfortunately name resolution seems broken. Here are some details:

  • VM with the previous working image 1.2-rolling-201908210337:
vyos@vyos:~$ show system image
The system currently has the following image(s) installed:
   1: 1.2-rolling-201908230337
   2: 1.2-rolling-201908210337 (default boot)
Fri, Aug 23, 7:54 AM · VyOS 1.3 Equuleus
zx2c4 added a comment to T1572: Wireguard keyPair per interface.

Don't use the same private key in two places at the same time. This means it's not a good idea to copy private keys between computers and use it in two places, and probably also means you shouldn't assign the private key to two interfaces on the same computer at the same time, unless you have a really particular and weird setup and know precisely the implications of it. Doesn't sound like that's the case here. So you're probably best doing a private key per interface.

Fri, Aug 23, 7:17 AM · VyOS 1.2 Crux

Yesterday

syncer closed T1131: open-vm-tools causing 100% CPU load as Resolved.
Thu, Aug 22, 10:36 PM · VyOS 1.2 Crux (VyOS 1.2.2), VyOS 1.3 Equuleus
syncer changed the status of T1468: BGP route-reflector-client config erroneously claims remote-as is incorrect from In progress to Backport candidate.
Thu, Aug 22, 10:36 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
syncer moved T1468: BGP route-reflector-client config erroneously claims remote-as is incorrect from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Thu, Aug 22, 10:34 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
syncer changed the status of T1468: BGP route-reflector-client config erroneously claims remote-as is incorrect from Open to In progress.
Thu, Aug 22, 10:34 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
rgrant added a comment to T1468: BGP route-reflector-client config erroneously claims remote-as is incorrect.

Does this mean it'll make it into Crux soon?

Thu, Aug 22, 10:10 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
alkersan changed the status of T1607: Convert 'reset conntrack' and 'reset ip[v6] cache' operations from vyatta-op to new syntax from Open to In progress.
Thu, Aug 22, 5:40 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:54 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1606: Rolling release no longer boots after adding hostname daemon: T1598: New implementation of the resolv.conf and hosts update mechanism.
Thu, Aug 22, 3:53 PM · VyOS 1.3 Equuleus
c-po added a subtask for T1598: New implementation of the resolv.conf and hosts update mechanism: T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:53 PM · VyOS 1.2 Crux
c-po assigned T1606: Rolling release no longer boots after adding hostname daemon to dmbaturin.
Thu, Aug 22, 3:53 PM · VyOS 1.3 Equuleus
c-po created T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:52 PM · VyOS 1.3 Equuleus
koef created T1605: L2tp over IPsec not working in Crux.
Thu, Aug 22, 12:48 PM · VyOS 1.2 Crux
runar triaged T1604: equuleus: buster: vbash: tab completion breaks as Normal priority.
Thu, Aug 22, 7:48 AM · VyOS 1.3 Equuleus

Wed, Aug 21

runar added a comment to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.

@UnicronNL , no need to apply the patch, it is already applied to the codebase. this issue needs to be something else

Wed, Aug 21, 10:18 PM · VyOS-1.2.0-GA
alkersan closed T1596: Convert 'telnet' and 'traceroute' vyatta-op commands to new syntax, a subtask of T689: Converting simple op-mode commands from vyatta-op to new syntax, as Resolved.
Wed, Aug 21, 8:35 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
alkersan closed T1596: Convert 'telnet' and 'traceroute' vyatta-op commands to new syntax as Resolved.
Wed, Aug 21, 8:35 PM · VyOS 1.3 Equuleus
cmsitv added a comment to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.
In T1070#41443, @runar wrote:

@UnicronNL could you apply my patch to the codebase?

Wed, Aug 21, 8:15 PM · VyOS-1.2.0-GA
jestabro moved T1602: equuleus: buster: add live build apt options for choosing vyos packages from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Wed, Aug 21, 7:19 PM · VyOS 1.3 Equuleus
runar triaged T1603: equuleus: buster: upgrade live-boot to new version as Normal priority.
Wed, Aug 21, 5:54 PM · VyOS 1.3 Equuleus
hagbard added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.

moved get functions into properties, for ifalias, macaddr and mtu to see how it works. If the old get_ function is being used, it prints a message to the console but still works. Will see how well that works.
https://github.com/vyos/vyos-1x/commit/0b9c894fcece6df553a89e42147768ce6efaf372

Wed, Aug 21, 5:43 PM · VyOS 1.3 Equuleus
c-po closed T1601: Rewrite loopback interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Wed, Aug 21, 4:38 PM · VyOS 1.3 Equuleus
c-po closed T1601: Rewrite loopback interface type with new style XML/Python interface as Resolved.
Wed, Aug 21, 4:38 PM · VyOS 1.3 Equuleus
zsdc changed the status of T1361: VRRP Starts After FRR, Creating Inconsistent Routes - from Open to Confirmed.

The problem is in FRRouting itself. It can be reproduced in 7.0.1-20190820-04-g047efd6, 7.1-20190820-02-g1ed807a. But in 7.2-dev-20190820-03-g9316c82 everything work as expected.
We should try to find which changes fixed this problem and reapply it to one of the current stable FRR versions or wait for the next stable.

Wed, Aug 21, 4:27 PM · VyOS 1.2 Crux
jestabro added a subtask for T476: Start builds for Debian 10 (Buster): T1602: equuleus: buster: add live build apt options for choosing vyos packages.
Wed, Aug 21, 4:16 PM · VyOS 1.3 Equuleus
jestabro added a parent task for T1602: equuleus: buster: add live build apt options for choosing vyos packages: T476: Start builds for Debian 10 (Buster).
Wed, Aug 21, 4:16 PM · VyOS 1.3 Equuleus
jestabro changed the status of T1602: equuleus: buster: add live build apt options for choosing vyos packages from Open to In progress.
Wed, Aug 21, 4:16 PM · VyOS 1.3 Equuleus
jestabro added a subtask for T476: Start builds for Debian 10 (Buster): T1584: equuleus: buster: add consistent grub options for predictable interface names.
Wed, Aug 21, 4:07 PM · VyOS 1.3 Equuleus
jestabro added a parent task for T1584: equuleus: buster: add consistent grub options for predictable interface names: T476: Start builds for Debian 10 (Buster).
Wed, Aug 21, 4:06 PM · VyOS 1.3 Equuleus
runar added a comment to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.

@UnicronNL could you apply my patch to the codebase?

Wed, Aug 21, 3:29 PM · VyOS-1.2.0-GA
cmsitv added a comment to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.

I an confirm as well this is happening in 1.2.2. Is there anyway to cronjob a restart of the process to re-establish connectivity to the hub as a workaround?

Wed, Aug 21, 3:08 PM · VyOS-1.2.0-GA
c-po changed the status of T1601: Rewrite loopback interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus
c-po changed the status of T1601: Rewrite loopback interface type with new style XML/Python interface from Open to In progress.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus
c-po created T1601: Rewrite loopback interface type with new style XML/Python interface.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus
Dmitry added a comment to T1583: l2tp vpn edits does not restart xl2tpd on commit .

https://phabricator.vyos.net/T834

On vyos-1.2-rolling-201908201244-amd64.iso won`t reproduce. All ok, configuration edits are applied.
May close this bug.

Wed, Aug 21, 7:20 AM · VyOS 1.2 Crux
alkersan triaged T1600: Convert 'ping' operation from vyatta-op to new syntax as Normal priority.
Wed, Aug 21, 6:41 AM · VyOS 1.3 Equuleus
alkersan placed T1599: Convert 'connect', 'disconnect' and 'clear' ppp interface operations from vyatta-op to new syntax up for grabs.
Wed, Aug 21, 6:33 AM · VyOS 1.3 Equuleus
alkersan triaged T1599: Convert 'connect', 'disconnect' and 'clear' ppp interface operations from vyatta-op to new syntax as Normal priority.
Wed, Aug 21, 6:33 AM · VyOS 1.3 Equuleus

Tue, Aug 20

dmbaturin triaged T1598: New implementation of the resolv.conf and hosts update mechanism as Unbreak Now! priority.
Tue, Aug 20, 4:53 PM · VyOS 1.2 Crux
hammersoft added a comment to T834: accel-ppp: l2tp implementation.

On vyos-1.2-rolling-201908201244-amd64.iso won`t reproduce. All ok, configuration edits are applied.

Tue, Aug 20, 4:02 PM · VyOS 1.3 Equuleus
Radeon24 added a comment to T1299: Allow SNMPd to be extended with custom scripts.

Hello, this function works great, but I think it could be better if we can specify a custom OID for each custom script. For exemple, LibreNMS needs to have specific OID to make automatic OS/hardware detection working : https://docs.librenms.org/Support/SNMP-Configuration-Examples/#linux-snmpd-v2
Thank you.

Tue, Aug 20, 11:51 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po changed Difficulty level from easy to normal on T1524: Add support to set allow-from network in DNS forwarding.
Tue, Aug 20, 10:05 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po closed T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address as Resolved.
Tue, Aug 20, 10:04 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding, a subtask of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address, from In progress to Backport candidate.
Tue, Aug 20, 9:53 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding from In progress to Backport candidate.
Tue, Aug 20, 9:53 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1524: Add support to set allow-from network in DNS forwarding from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Tue, Aug 20, 9:53 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po renamed T1524: Add support to set allow-from network in DNS forwarding from DNS forwarding allow other source addresses then RFC1918 to Add support to set allow-from network in DNS forwarding.
Tue, Aug 20, 9:50 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding, a subtask of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address, from Open to In progress.
Tue, Aug 20, 9:37 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding from Open to In progress.
Tue, Aug 20, 9:37 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
hexes placed T1448: Permissions after image update up for grabs.
Tue, Aug 20, 5:46 AM · VyOS 1.2 Crux

Mon, Aug 19

c-po closed T1580: Rewrite dummy interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Mon, Aug 19, 9:47 PM · VyOS 1.3 Equuleus
c-po closed T1580: Rewrite dummy interface type with new style XML/Python interface as Resolved.
Mon, Aug 19, 9:47 PM · VyOS 1.3 Equuleus
c-po claimed T1580: Rewrite dummy interface type with new style XML/Python interface.
Mon, Aug 19, 8:53 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Mon, Aug 19, 8:53 PM · VyOS 1.3 Equuleus
c-po closed T1377: BGP Weight Not properly applying as Resolved.
Mon, Aug 19, 8:33 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1377: BGP Weight Not properly applying from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po edited projects for T1377: BGP Weight Not properly applying, added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux (VyOS 1.2.2).
Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a comment to T1377: BGP Weight Not properly applying.

Backported to crux

Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
syncer added a comment to T1377: BGP Weight Not properly applying.

@hagbard can you take a look if that was backported?

Mon, Aug 19, 8:24 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po created T1597: /usr/sbin/rsyslogd after deleting "system syslog".
Mon, Aug 19, 8:24 PM · VyOS 1.2 Crux
syncer reopened T1377: BGP Weight Not properly applying as "Open".
Mon, Aug 19, 8:23 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
rem5 added a comment to T1377: BGP Weight Not properly applying.

Still seeing this bug in 1.2.2. VyOS config has weights configured, but in the FRR config, weight is missing.

Mon, Aug 19, 8:20 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
alkersan added a comment to T1596: Convert 'telnet' and 'traceroute' vyatta-op commands to new syntax.

Please review PRs in vyos-1x and vyatta-op.

Mon, Aug 19, 6:49 PM · VyOS 1.3 Equuleus
Line2 added a comment to T1333: pdns_recursor does not perform recursive lookups on domain specific forwarders.

I just tested again.
Running on rolling VyOS-1.2-201908130337, same config as before, recursor.conf is ok.
Updated VyOS to rolling VyOS-1.2-201908190337, reboot, check recursor.conf. The domain forwarding is missing.
Reboot again, it's back in the recursor.conf.

Mon, Aug 19, 8:24 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
alkersan changed the status of T1596: Convert 'telnet' and 'traceroute' vyatta-op commands to new syntax from Open to In progress.
Mon, Aug 19, 7:28 AM · VyOS 1.3 Equuleus
alkersan closed T1590: Convert 'show system' operations from vyatta-op to python/xml syntax as Resolved.
Mon, Aug 19, 6:16 AM · VyOS 1.3 Equuleus
alkersan closed T1590: Convert 'show system' operations from vyatta-op to python/xml syntax, a subtask of T689: Converting simple op-mode commands from vyatta-op to new syntax, as Resolved.
Mon, Aug 19, 6:16 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Sun, Aug 18

alkersan added a comment to T1590: Convert 'show system' operations from vyatta-op to python/xml syntax.

@dmbaturin ok, will address that in the next rewrite

Sun, Aug 18, 4:25 PM · VyOS 1.3 Equuleus
dmbaturin added a comment to T1590: Convert 'show system' operations from vyatta-op to python/xml syntax.

@alkersan Looks good, thanks!

Sun, Aug 18, 4:24 PM · VyOS 1.3 Equuleus
alkersan added a comment to T1590: Convert 'show system' operations from vyatta-op to python/xml syntax.

A pair of PRs were made in vyos-1x and vyatta-op.
Thought they would get linked to this task by phabricator automatically, but that didn't happen.

Sun, Aug 18, 4:03 PM · VyOS 1.3 Equuleus
runar added a comment to T1570: Unable to build for ocaml/dune for armhf on docker and chroot.

I've also tested this on the newly released dune1.11.1 with the same result

Sun, Aug 18, 11:02 AM · VyOS 1.3 Equuleus

Sat, Aug 17

syncer closed T338: maintainers@vyos.net is unreachable. as Resolved.
Sat, Aug 17, 10:40 PM · Infrastructure
c-po added a comment to T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.

Also the subtask T1524 should be part of this migration script as if the new allow-from node does not exist it should be populated by the current hard-coded addresses of 0.0.0.0/0 and ::/0

Sat, Aug 17, 8:46 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1524: Add support to set allow-from network in DNS forwarding: T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.
Sat, Aug 17, 8:46 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a subtask for T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address: T1524: Add support to set allow-from network in DNS forwarding.
Sat, Aug 17, 8:46 PM · VyOS 1.3 Equuleus
c-po changed the status of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address from Open to In progress.
Sat, Aug 17, 8:45 PM · VyOS 1.3 Equuleus
c-po created T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.
Sat, Aug 17, 8:45 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1524: Add support to set allow-from network in DNS forwarding.
Sat, Aug 17, 8:00 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus