Page MenuHomeVyOS Platform
Feed Advanced Search

Mon, Apr 22

n.fort created T6257: Add op mode commands for dynamic firewall address groups.
Mon, Apr 22, 3:08 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort raised the priority of T4853: OpenVPN: unable to commit changes when the interface is down/unknown state from Normal to High.

Any news about this issue @SrividyaA and @c-po ?

Mon, Apr 22, 2:53 PM · VyOS 1.3 Equuleus (1.3.8)

Sun, Apr 21

n.fort moved T5535: Move disable-directed-broadcast to firewall global-options from Need Triage to Finished on the VyOS 1.5 Circinus board.
Sun, Apr 21, 6:55 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort moved T5535: Move disable-directed-broadcast to firewall global-options from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa3) board.
Sun, Apr 21, 6:55 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T5535: Move disable-directed-broadcast to firewall global-options as Resolved.
Sun, Apr 21, 6:54 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort moved T6191: Policy route set-mss option is not working correctly from Need Triage to Finished on the VyOS 1.5 Circinus board.
Sun, Apr 21, 6:54 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T6191: Policy route set-mss option is not working correctly as Resolved.
Sun, Apr 21, 6:54 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Fri, Apr 19

n.fort added a project to T5153: OpenConnect route restriction via iptables is ignored: VyOS 1.3 Equuleus (1.3.7).
Fri, Apr 19, 9:46 AM · VyOS 1.3 Equuleus (1.3.8), VyOS 1.5 Circinus
n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.

And do you have similar setup and situation in newer version?

Fri, Apr 19, 9:46 AM · VyOS 1.3 Equuleus (1.3.8), VyOS 1.5 Circinus

Apr 18 2024

n.fort added a comment to T5153: OpenConnect route restriction via iptables is ignored.

Output seems to be for VyOS 1.3, rather than 1.5
Can you show VyOS version @PeppyH ?

Apr 18 2024, 5:21 PM · VyOS 1.3 Equuleus (1.3.8), VyOS 1.5 Circinus

Apr 17 2024

n.fort added a comment to T6247: Add CGN "full cone" EIF support per RFC6888 REQ-7.

I saw such repository more than once, but it seems that it has been abandoned. Last commit is dated two years ago.

Apr 17 2024, 7:01 PM
n.fort changed the status of T5535: Move disable-directed-broadcast to firewall global-options from Confirmed to Needs testing.
Apr 17 2024, 8:57 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6191: Policy route set-mss option is not working correctly from Confirmed to Needs testing.
Apr 17 2024, 8:56 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 16 2024

n.fort added a comment to T6191: Policy route set-mss option is not working correctly.

PR: https://github.com/vyos/vyos-1x/pull/3320

Apr 16 2024, 5:51 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed Version from 1.4.0-epa2 to 1.4.0-epa2, 1.5-rolling-202404141045 on T6191: Policy route set-mss option is not working correctly.
Apr 16 2024, 4:57 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6191: Policy route set-mss option is not working correctly from Open to Confirmed.
Apr 16 2024, 4:57 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 15 2024

n.fort added a comment to T5535: Move disable-directed-broadcast to firewall global-options.

PR: https://github.com/vyos/vyos-1x/pull/3309

Apr 15 2024, 2:25 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T5535: Move disable-directed-broadcast to firewall global-options from Open to Confirmed.
Apr 15 2024, 10:12 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 12 2024

n.fort closed T6214: Error when using some constraints as Resolved.
Apr 12 2024, 5:29 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
n.fort moved T6213: Validations in firewall groups mistakenly reject correct configurations from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Apr 12 2024, 5:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort moved T6213: Validations in firewall groups mistakenly reject correct configurations from Need Triage to Finished on the VyOS 1.5 Circinus board.
Apr 12 2024, 5:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T6213: Validations in firewall groups mistakenly reject correct configurations as Resolved.
Apr 12 2024, 5:28 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 10 2024

n.fort claimed T6216: Firewall group names that contain the '+' character break the config.
Apr 10 2024, 2:34 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config, a subtask of T5938: Migration fail root task for 1.4-rc, from Confirmed to In progress.
Apr 10 2024, 2:01 PM · VyOS 1.4 Sagitta (1.4.0-GA)
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config from Confirmed to In progress.
Apr 10 2024, 2:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6216: Firewall group names that contain the '+' character break the config.

PR: https://github.com/vyos/vyos-1x/pull/3290

Apr 10 2024, 2:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 9 2024

n.fort added a subtask for T5938: Migration fail root task for 1.4-rc: T6216: Firewall group names that contain the '+' character break the config.
Apr 9 2024, 12:20 PM · VyOS 1.4 Sagitta (1.4.0-GA)
n.fort added a parent task for T6216: Firewall group names that contain the '+' character break the config: T5938: Migration fail root task for 1.4-rc.
Apr 9 2024, 12:20 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6216: Firewall group names that contain the '+' character break the config from Open to Confirmed.
Apr 9 2024, 12:11 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort created T6216: Firewall group names that contain the '+' character break the config.
Apr 9 2024, 12:11 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6213: Validations in firewall groups mistakenly reject correct configurations.

PR: https://github.com/vyos/vyos-1x/pull/3281

Apr 9 2024, 11:13 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6214: Error when using some constraints.

PR: https://github.com/vyos/vyos-1x/pull/3281

Apr 9 2024, 11:13 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
n.fort renamed T6214: Error when using some constraints from Error when using some contraints to Error when using some constraints.
Apr 9 2024, 9:45 AM · VyOS 1.4 Sagitta (1.4.0-epa2)
n.fort created T6214: Error when using some constraints.
Apr 9 2024, 9:44 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Apr 8 2024

n.fort moved T6068: Support active-active and active-passive high availability modes in DHCP server from Need Triage to Finished on the VyOS 1.5 Circinus board.
Apr 8 2024, 12:04 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort moved T6068: Support active-active and active-passive high availability modes in DHCP server from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Apr 8 2024, 12:03 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T6068: Support active-active and active-passive high availability modes in DHCP server as Resolved.
Apr 8 2024, 12:03 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6213: Validations in firewall groups mistakenly reject correct configurations from Open to In progress.
Apr 8 2024, 11:12 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort created T6213: Validations in firewall groups mistakenly reject correct configurations.
Apr 8 2024, 11:11 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 5 2024

n.fort changed the status of T6205: ipoe: error in migration script logic while renaming mac-address to mac, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to Confirmed.
Apr 5 2024, 2:59 PM · VyOS 1.4 Sagitta (1.4.0-GA)
n.fort changed the status of T6205: ipoe: error in migration script logic while renaming mac-address to mac from Open to Confirmed.
Apr 5 2024, 2:59 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Apr 3 2024

n.fort added a comment to T6171: Rename the DHCP server "failover" command to "high-availability mode".

PR for Sagitta: https://github.com/vyos/vyos-1x/pull/3239

Apr 3 2024, 6:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6068: Support active-active and active-passive high availability modes in DHCP server.

PR for Sagitta: https://github.com/vyos/vyos-1x/pull/3239

Apr 3 2024, 6:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6200: Error on adding a wildcard interface.

Try with:

Apr 3 2024, 6:08 PM · VyOS 1.4 Sagitta

Mar 25 2024

n.fort added a comment to T6171: Rename the DHCP server "failover" command to "high-availability mode".

PR for current: https://github.com/vyos/vyos-1x/pull/3188

Mar 25 2024, 6:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6171: Rename the DHCP server "failover" command to "high-availability mode" from Open to In progress.
Mar 25 2024, 2:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort created T6171: Rename the DHCP server "failover" command to "high-availability mode".
Mar 25 2024, 2:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 22 2024

n.fort closed T6110: Insufficient validation of range option with failover in DHCP server as Resolved.
Mar 22 2024, 3:07 PM · VyOS 1.3 Equuleus (1.3.7)
n.fort moved T6136: Configuring a dynamic address group, config script did not check whether the group was created from Need Triage to Finished on the VyOS 1.5 Circinus board.
Mar 22 2024, 3:05 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T6136: Configuring a dynamic address group, config script did not check whether the group was created as Resolved.
Mar 22 2024, 3:05 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort moved T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity from Need Triage to Finished on the VyOS 1.5 Circinus board.
Mar 22 2024, 3:04 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort closed T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Mar 22 2024, 3:04 PM · VyOS 1.4 Sagitta (1.4.0-GA)
n.fort closed T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity as Resolved.
Mar 22 2024, 3:04 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6068: Support active-active and active-passive high availability modes in DHCP server.
Mar 22 2024, 2:40 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6068: Support active-active and active-passive high availability modes in DHCP server from Open to In progress.
Mar 22 2024, 10:59 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 20 2024

n.fort added a project to T6147: Conntrack not working as expected with global state-policy: VyOS 1.5 Circinus.
Mar 20 2024, 6:56 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6147: Conntrack not working as expected with global state-policy from Open to Confirmed.
Mar 20 2024, 6:52 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort created T6147: Conntrack not working as expected with global state-policy.
Mar 20 2024, 6:51 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 19 2024

n.fort changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from In progress to Needs testing.
Mar 19 2024, 8:36 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 18 2024

n.fort changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from Confirmed to In progress.
Mar 18 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.

And a simple note for your usage @wenzk
Change
set firewall ipv4 name WAN_IN rule 30 icmp
to this:
set firewall ipv4 name WAN_IN rule 30 protocol icmp

Mar 18 2024, 3:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.

PR: https://github.com/vyos/vyos-1x/pull/3146

Mar 18 2024, 2:57 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort claimed T6136: Configuring a dynamic address group, config script did not check whether the group was created.
Mar 18 2024, 10:03 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 15 2024

n.fort added a comment to T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity.

PR for 1.5: https://github.com/vyos/vyos-1x/pull/3137

Mar 15 2024, 9:45 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a project to T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity: VyOS 1.5 Circinus.
Mar 15 2024, 9:43 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort changed the status of T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to Confirmed.
Mar 15 2024, 2:33 PM · VyOS 1.4 Sagitta (1.4.0-GA)
n.fort changed the status of T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity from Open to Confirmed.
Mar 15 2024, 2:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 8 2024

n.fort added a comment to T6110: Insufficient validation of range option with failover in DHCP server.

PR: https://github.com/vyos/vyos-1x/pull/3111

Mar 8 2024, 3:16 PM · VyOS 1.3 Equuleus (1.3.7)
n.fort changed the status of T6110: Insufficient validation of range option with failover in DHCP server from Open to Confirmed.
Mar 8 2024, 2:27 PM · VyOS 1.3 Equuleus (1.3.7)
n.fort created T6110: Insufficient validation of range option with failover in DHCP server.
Mar 8 2024, 2:27 PM · VyOS 1.3 Equuleus (1.3.7)
n.fort closed T6086: NAT does not work with network-groups as Resolved.
Mar 8 2024, 12:01 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort closed T6075: Applying firewall rules with a non-existent interface group as Resolved.
Mar 8 2024, 11:32 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort closed T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 as Resolved.
Mar 8 2024, 11:32 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort closed T6094: Destination Nat not Making Firewall Rules as Resolved.
Mar 8 2024, 11:31 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus

Mar 6 2024

n.fort changed the status of T6097: vrf_zones blocking ipv6 traffic from Open to Confirmed.
Mar 6 2024, 1:32 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus
n.fort changed the status of T6094: Destination Nat not Making Firewall Rules from In progress to Needs testing.
Mar 6 2024, 1:27 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
n.fort changed the status of T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 from In progress to Needs testing.
Mar 6 2024, 1:24 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort changed the status of T6075: Applying firewall rules with a non-existent interface group from In progress to Needs testing.
Mar 6 2024, 1:24 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus

Mar 5 2024

n.fort added a comment to T6075: Applying firewall rules with a non-existent interface group.

PR: https://github.com/vyos/vyos-1x/pull/3088

Mar 5 2024, 1:49 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort changed the status of T6075: Applying firewall rules with a non-existent interface group from Open to In progress.
Mar 5 2024, 1:32 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort changed the status of T6094: Destination Nat not Making Firewall Rules from Open to In progress.
Mar 5 2024, 11:04 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
n.fort raised the priority of T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 from Normal to High.
Mar 5 2024, 11:03 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort changed the status of T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 from Open to In progress.

PR: https://github.com/vyos/vyos-1x/pull/3087

Mar 5 2024, 11:02 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort added a comment to T6094: Destination Nat not Making Firewall Rules.

PR: https://github.com/vyos/vyos-1x/pull/3087

Mar 5 2024, 11:01 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus

Mar 4 2024

n.fort added a comment to T6094: Destination Nat not Making Firewall Rules.

Duplicated: https://vyos.dev/T6061

Mar 4 2024, 3:20 PM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
n.fort changed the status of T6086: NAT does not work with network-groups from In progress to Needs testing.
Mar 4 2024, 2:02 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort claimed T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1.
Mar 4 2024, 1:38 PM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort changed the status of T6086: NAT does not work with network-groups from Confirmed to In progress.
Mar 4 2024, 11:37 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort added a comment to T6086: NAT does not work with network-groups.

PR: https://github.com/vyos/vyos-1x/pull/3080

Mar 4 2024, 11:37 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
n.fort closed T6054: load-balancing wan - doesn't configure a list of ports as Resolved.
Mar 4 2024, 10:06 AM · VyOS 1.4 Sagitta (1.4.0-epa2)

Feb 23 2024

n.fort added a comment to T6054: load-balancing wan - doesn't configure a list of ports .

PR: https://github.com/vyos/vyos-1x/pull/3042

Feb 23 2024, 2:16 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
n.fort changed the status of T6054: load-balancing wan - doesn't configure a list of ports from Open to Confirmed.
Feb 23 2024, 12:31 PM · VyOS 1.4 Sagitta (1.4.0-epa2)

Feb 20 2024

n.fort added a project to T6049: wwan didn't setup static IP addres and MTU on wwan0: VyOS 1.4 Sagitta.
Feb 20 2024, 6:48 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus

Feb 16 2024

n.fort moved T6019: Bump nftables and libnftnl version from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Feb 16 2024, 10:35 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort closed T6019: Bump nftables and libnftnl version as Resolved.
Feb 16 2024, 10:34 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort moved T6009: Firewall - Time not working properly when not using UTC from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Feb 16 2024, 10:33 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort closed T6009: Firewall - Time not working properly when not using UTC as Resolved.
Feb 16 2024, 10:33 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Feb 12 2024

n.fort changed the status of T6019: Bump nftables and libnftnl version from In progress to Needs testing.
Feb 12 2024, 5:05 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort changed the status of T6009: Firewall - Time not working properly when not using UTC from In progress to Needs testing.
Feb 12 2024, 5:05 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort added a comment to T6019: Bump nftables and libnftnl version.

PR for fix in vyos-build: https://github.com/vyos/vyos-build/pull/501
PR for smoketest (modified because of change in build): https://github.com/vyos/vyos-1x/pull/2991

Feb 12 2024, 12:44 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus