Can you search for the following file on your device and edit it to test your proposed changes:
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Nov 8 2018
Nov 8 2018
Nov 7 2018
Nov 7 2018
T123 addressed exactly this issue but we not yet have agreed on a CLI yet. I do not know if it's safe to enable it in generall.
c-po closed T975: `Show ip multicast mfc/interface` prints adresses the wrong way around as Resolved.
c-po closed T975: `Show ip multicast mfc/interface` prints adresses the wrong way around, a subtask of T959: Rewrite "protocol igmp-proxy" in XML/Python, as Resolved.
c-po edited projects for T977: Permission denied error when performing config rollback on a machine upgraded from VyOS 1.1.x, added: VyOS 1.2 Crux (VyOS 1.2.0-rc6), VyOS-1.2.0-GA; removed VyOS 1.2 Crux.
The links you refer are for PowerDNS Authoritative Server, we are using PowerDNS Recursor, see https://doc.powerdns.com/recursor/settings.html#local-address
c-po added a comment to T975: `Show ip multicast mfc/interface` prints adresses the wrong way around.
IGMP proxy was imported from Ubiquity Edgerouter running MIPS big-endian CPU. Linux Kernel BAI is also big endian (network byteorder) and the scripts did not take this into account. It will be fixed during T959
@oliko unfortunately I did not getting it to work buw it seems that it's due to lacking support in FRR (https://github.com/FRRouting/frr/issues/2350) and it is on the feature request page - we should get it with newer FRR releases.
We should keep listen-address for all address types but we are able to distinguish between them when building up recursor.conf
Nov 3 2018
Nov 3 2018
c-po changed the status of T959: Rewrite "protocol igmp-proxy" in XML/Python from Open to In progress.
Nov 2 2018
Nov 2 2018
Oct 26 2018
Oct 26 2018
Oct 25 2018
Oct 25 2018
c-po closed T938: IPv4 dhcp relay can't start on default port when explicitly configured as Resolved.
Oct 24 2018
Oct 24 2018
c-po added a comment to T932: DHCP relay config version file is missing, which causes backwards migration to obviously un-loadable old syntax.
Sorry, I just overlooked it.
Oct 23 2018
Oct 23 2018
c-po added a comment to T902: VyOS 1.2.0-rc2 fails to load configuration when conntrack modules are disabled in config.
In T902#23385, @cwadge wrote:It seems that in RC3 no conntrack settings work at all, causing the configuration loading to fail. For instance,
system conntrack tcp loose enablecauses:
sysctl: cannot stat /proc/sys/net/ipv4 netfilter/ip_conntrack_tcp_loose: No such file or directory
Oct 22 2018
Oct 22 2018
c-po edited projects for T634: Remove "service ssh allow-root", added: VyOS 1.3 Equuleus; removed VyOS 1.2 Crux (VyOS 1.2.0-rc4).
c-po closed T634: Remove "service ssh allow-root", a subtask of T631: Rewrite SSH configuration as XML interface definition, as Resolved.
Oct 21 2018
Oct 21 2018
If we can ensure that the key is stored somewhere halfway secure (Jenkins Keystore) it would be okay.
Problem is partly fixed in the latest rolling release. Only this manual step is required in addition at this time:
Oct 20 2018
Oct 20 2018
Ah, yeah! Used that in my current project.
What's required for Kernel Debug?
Okay - I just see that the allow-root feature wasn't working anyway since the SSH XML rewrite.
c-po added a comment to T857: vyatta-conntrack: cleanup node.def files and compile kernel modules statically.
Invalid: Modules like SIP conntrack can't be adjusted during runtime (at least I have not found a way). Only module load parameters are supported. :(
c-po added a comment to T850: Change Request: Handle non existing listen-address assignments in e.g. TFTP or SNMP.
Both SNMP and TFTP now print a warning. In a subsequent step we could change this to be an error on commit and introduce a migration script deleting invalid addresses to not kill currently deployed configs!
I will implement at least a warning message for the user. Enforcing proper IP addresses could break old comfigurations - or they should be deleted by a migration script and then we can print proper error messages.
oth deletion and alias is ok for me. @syncer?
Remove or not remove?
Installing a debug image requires a reboot. apt-get installation works online.
Why? Someone can always install any 3rd party debian package via apt after setting up the repositories. This is in no way different to a parallel build and super easy.
Thats already possible using the custom package option introduced by @dmbaturin
Oct 19 2018
Oct 19 2018
Oct 17 2018
Oct 17 2018
c-po triaged T914: Extend list_interfaces.py to support multiple interface types as Normal priority.
Oct 16 2018
Oct 16 2018
Oct 15 2018
Oct 15 2018
Not at this time.
@Merijn this look slike a problem with a validation script in VyOS - sorry.
ipaddrcheck_functions.c
ipaddrcheck_functions.c: In function ‘is_ipv6_cidr’:
ipaddrcheck_functions.c:104:23: error: unknown escape sequence: '\.' [-Werror]
re = pcre_compile("^(((?:(?:(?:[A-F0-9]{1,4}:){6}|(?=(?:[A-F0-9]{0,4}:){0,6}(?:[0-9]{1,3}\.){3}[0-9]{1,3}$)(([0-9A-F]{1,4}:){0,5}|:)((:[0-9A-F]{1,4}){1,5}:|:)|::(?:[A-F0-9]{1,4}:){5})(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])|(?:[A-F0-9]{1,4}:){7}[A-F0-9]{1,4}|(?=(?:[A-F0-9]{0,4}:){0,7}[A-F0-9]{0,4}$)(([0-9A-F]{1,4}:){1,7}|:)((:[0-9A-F]{1,4}){1,7}|:)|(?:[A-F0-9]{1,4}:){7}:|:(:[A-F0-9]{1,4}){7}))(\\/\\d{1,3}))$",
^
ipaddrcheck_functions.c:104:23: error: unknown escape sequence: '\.' [-Werror]
ipaddrcheck_functions.c: In function ‘is_ipv6_single’:
ipaddrcheck_functions.c:131:23: error: unknown escape sequence: '\.' [-Werror]
re = pcre_compile("^(?:(?:(?:[A-F0-9]{1,4}:){6}|(?=(?:[A-F0-9]{0,4}:){0,6}(?:[0-9]{1,3}\.){3}[0-9]{1,3}$)(([0-9A-F]{1,4}:){0,5}|:)((:[0-9A-F]{1,4}){1,5}:|:)|::(?:[A-F0-9]{1,4}:){5})(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])|(?:[A-F0-9]{1,4}:){7}[A-F0-9]{1,4}|(?=(?:[A-F0-9]{0,4}:){0,7}[A-F0-9]{0,4}$)(([0-9A-F]{1,4}:){1,7}|:)((:[0-9A-F]{1,4}){1,7}|:)|(?:[A-F0-9]{1,4}:){7}:|:(:[A-F0-9]{1,4}){7})$",
^
ipaddrcheck_functions.c:131:23: error: unknown escape sequence: '\.' [-Werror]
cc1: all warnings being treated as errors
Makefile:363: recipe for target 'ipaddrcheck_functions.o' failed
make[3]: *** [ipaddrcheck_functions.o] Error 1
make[3]: Leaving directory '/home/jenkins/workspace/ipaddrcheck/build/jessie64devel.vyos.net/src'c-po added a comment to T901: Vyatta firewall service (vyatta-router.service) times out with zone-based policies.
With less powerfull hardware (as this Atom D525) I'm fine with this change request.
Oct 14 2018
Oct 14 2018
Problem still exists with 1.2.0-rolling+201810120820-amd64.iso
c-po added a comment to T896: Dynamic DNS configuration for CUSTOM provider does not add 'server' to ddclient.conf.
Can you provide your configuration, please?
Oct 11 2018
Oct 11 2018
Okay, the problem is not DMVPN relevant. I have a weird OSPF routing problem. When disabling OSPF between both routers everything is ok.
Oct 10 2018
Oct 10 2018
vyos-documentation is still a playground but feel free to add. Always makes sense to play arround with new concepts
According to http://conntrack-tools.netfilter.org/manual.html
Oct 9 2018
Oct 9 2018
Ok, I can confirm that above config from @runar works for this setup using all VyOS 1.2.0-rc images
c-po renamed T887: Can't reset DMVPN tunnel - error missing-argument from Can't reset DMVPN tunnel to Can't reset DMVPN tunnel - error missing-argument.
Okay, the above error
Killing OpenNHRP as suggested by @runar and relaunching it with:
Oct 8 2018
Oct 8 2018
The problem still exists using VyOS 1.2.0-rc1.
Oct 7 2018
Oct 7 2018
At time of this writing we don‘t support any GPU drivers in the 4.18 branch, obly framebuffer.
c-po added a comment to T852: Router responding to arp requests for all addresses, breaks Windows networking!.
THX for testing. I'm currently buiulding a second image for testing and will keep you updated! The second one ships Linux Kernel 4.19-rc6 so we can see if the issue still exists or is gone!
c-po added a comment to T852: Router responding to arp requests for all addresses, breaks Windows networking!.
Okay, can you please test if the issue exists with the following image:
c-po added a comment to T852: Router responding to arp requests for all addresses, breaks Windows networking!.
Anyone also tried loading some up2date firmware from https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/ ?
c-po added a comment to T852: Router responding to arp requests for all addresses, breaks Windows networking!.
We can switch back to 4.14. for testing, yes
Oct 3 2018
Oct 3 2018
I think it's better to assign @dmbaturin b/c he build the used pdns package located at http://dev.packages.vyos.net/repositories/current/debian/pool/main/p/pdns-recursor/ and I have no access to this location.
Sure, what I need to do?
Oct 2 2018
Oct 2 2018
Latest Firmware can be found here: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/
@deafen can you please retest with latest VyOS 1.2.0 rolling? We have the latest 4.18.11 Kernel now.