Page MenuHomePhabricator

c-po (Christian Poessinger)
User

Projects

User Details

User Since
Aug 3 2017, 1:55 PM (107 w, 1 d)

Recent Activity

Today

c-po added a comment to T1333: pdns_recursor does not perform recursive lookups on domain specific forwarders.

Unfortunately I can not reproduce this issue

Fri, Aug 23, 12:33 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po triaged T1608: bridge: Bridge adding non existing interfaces is allowed but does not work as High priority.
Fri, Aug 23, 10:17 AM · VyOS 1.3 Equuleus
c-po changed Difficulty level from unknown to hard on T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 10:17 AM · VyOS 1.3 Equuleus
c-po added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

This can be solved using multiple ways:

  • add option to the interfaces-bridge.py script to recreate the bridge when triggered externally
    • advantage: the conde is already there
    • disadvantage: the script can easily grow to a wastebin of code executed from 100 places
  • add a dedicated bridge-group-sync.py script which synchronizes the bridge groups and interfaces, called whenever a interface is added to the system (e.g OpenVPN vtun or ethernet vif)
    • advantage: code is contained in a dedicated scirpt
    • disadvantage: more and more scripts might evolve
  • Write a vyos-interfaced which acts as message receiver and will handle tasks as adding/removing IP addresses, adding/removing bridge and bond members
    • advantage: most generic and single source
    • disadvantage: most complex
Fri, Aug 23, 10:15 AM · VyOS 1.3 Equuleus
c-po claimed T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.
Fri, Aug 23, 9:49 AM · VyOS 1.3 Equuleus
c-po added a comment to T1608: bridge: Bridge adding non existing interfaces is allowed but does not work.

If the bridge priority is higher then the ethernet vif this should work out of the box

Fri, Aug 23, 8:49 AM · VyOS 1.3 Equuleus
c-po closed T1606: Rolling release no longer boots after adding hostname daemon, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Aug 23, 8:43 AM · VyOS 1.2 Crux
c-po closed T1606: Rolling release no longer boots after adding hostname daemon as Resolved.
Fri, Aug 23, 8:43 AM · VyOS 1.3 Equuleus

Yesterday

c-po updated the task description for T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:54 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1606: Rolling release no longer boots after adding hostname daemon: T1598: New implementation of the resolv.conf and hosts update mechanism.
Thu, Aug 22, 3:53 PM · VyOS 1.3 Equuleus
c-po added a subtask for T1598: New implementation of the resolv.conf and hosts update mechanism: T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:53 PM · VyOS 1.2 Crux
c-po assigned T1606: Rolling release no longer boots after adding hostname daemon to dmbaturin.
Thu, Aug 22, 3:53 PM · VyOS 1.3 Equuleus
c-po created T1606: Rolling release no longer boots after adding hostname daemon.
Thu, Aug 22, 3:52 PM · VyOS 1.3 Equuleus

Wed, Aug 21

c-po closed T1601: Rewrite loopback interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Wed, Aug 21, 4:38 PM · VyOS 1.3 Equuleus
c-po closed T1601: Rewrite loopback interface type with new style XML/Python interface as Resolved.
Wed, Aug 21, 4:38 PM · VyOS 1.3 Equuleus
c-po changed the status of T1601: Rewrite loopback interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus
c-po changed the status of T1601: Rewrite loopback interface type with new style XML/Python interface from Open to In progress.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus
c-po created T1601: Rewrite loopback interface type with new style XML/Python interface.
Wed, Aug 21, 2:46 PM · VyOS 1.3 Equuleus

Tue, Aug 20

c-po changed Difficulty level from easy to normal on T1524: Add support to set allow-from network in DNS forwarding.
Tue, Aug 20, 10:05 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po closed T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address as Resolved.
Tue, Aug 20, 10:04 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding, a subtask of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address, from In progress to Backport candidate.
Tue, Aug 20, 9:53 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding from In progress to Backport candidate.
Tue, Aug 20, 9:53 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1524: Add support to set allow-from network in DNS forwarding from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Tue, Aug 20, 9:53 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po renamed T1524: Add support to set allow-from network in DNS forwarding from DNS forwarding allow other source addresses then RFC1918 to Add support to set allow-from network in DNS forwarding.
Tue, Aug 20, 9:50 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding, a subtask of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address, from Open to In progress.
Tue, Aug 20, 9:37 AM · VyOS 1.3 Equuleus
c-po changed the status of T1524: Add support to set allow-from network in DNS forwarding from Open to In progress.
Tue, Aug 20, 9:37 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus

Mon, Aug 19

c-po closed T1580: Rewrite dummy interface type with new style XML/Python interface, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Mon, Aug 19, 9:47 PM · VyOS 1.3 Equuleus
c-po closed T1580: Rewrite dummy interface type with new style XML/Python interface as Resolved.
Mon, Aug 19, 9:47 PM · VyOS 1.3 Equuleus
c-po claimed T1580: Rewrite dummy interface type with new style XML/Python interface.
Mon, Aug 19, 8:53 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Mon, Aug 19, 8:53 PM · VyOS 1.3 Equuleus
c-po closed T1377: BGP Weight Not properly applying as Resolved.
Mon, Aug 19, 8:33 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1377: BGP Weight Not properly applying from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po edited projects for T1377: BGP Weight Not properly applying, added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux (VyOS 1.2.2).
Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a comment to T1377: BGP Weight Not properly applying.

Backported to crux

Mon, Aug 19, 8:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po created T1597: /usr/sbin/rsyslogd after deleting "system syslog".
Mon, Aug 19, 8:24 PM · VyOS 1.2 Crux

Sat, Aug 17

c-po added a comment to T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.

Also the subtask T1524 should be part of this migration script as if the new allow-from node does not exist it should be populated by the current hard-coded addresses of 0.0.0.0/0 and ::/0

Sat, Aug 17, 8:46 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1524: Add support to set allow-from network in DNS forwarding: T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.
Sat, Aug 17, 8:46 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a subtask for T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address: T1524: Add support to set allow-from network in DNS forwarding.
Sat, Aug 17, 8:46 PM · VyOS 1.3 Equuleus
c-po changed the status of T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address from Open to In progress.
Sat, Aug 17, 8:45 PM · VyOS 1.3 Equuleus
c-po created T1595: Migrate deprecated "service dns forwarding listen-on" to listen-address.
Sat, Aug 17, 8:45 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1524: Add support to set allow-from network in DNS forwarding.
Sat, Aug 17, 8:00 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po claimed T1524: Add support to set allow-from network in DNS forwarding.
Sat, Aug 17, 5:32 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a comment to T1333: pdns_recursor does not perform recursive lookups on domain specific forwarders.

Using 1.2-rolling-201908171107 I configured:

set service dns forwarding domain example.com server '172.16.10.1'
set service dns forwarding listen-address '172.18.201.10'
set service dns forwarding name-server '1.1.1.1'
Sat, Aug 17, 5:31 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po updated the task description for T1580: Rewrite dummy interface type with new style XML/Python interface.
Sat, Aug 17, 4:40 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1591: OpenVPN "run show openvpn client status" does not work.
Sat, Aug 17, 4:33 PM · VyOS 1.2 Crux
c-po added a comment to T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
  1. OpenVPN site-to-site
Sat, Aug 17, 9:51 AM · VyOS 1.3 Equuleus
c-po placed T849: Make IPv4 and IPv6 BGP options syntax consistent up for grabs.
Sat, Aug 17, 12:43 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
c-po moved T1569: interfaceconfig class documetation from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus
c-po moved T1556: Rewrite Bridge in new style XML syntax from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus
c-po moved T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus
c-po moved T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group” from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus
c-po moved T1592: Update Linux Kernel to v4.19.67 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus
c-po moved T1551: Error when creating QinQ interface without earlier sets firewall name, if it used from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po moved T1551: Error when creating QinQ interface without earlier sets firewall name, if it used from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
Sat, Aug 17, 12:41 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po added projects to T1551: Error when creating QinQ interface without earlier sets firewall name, if it used: VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus.
Sat, Aug 17, 12:40 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po closed T1551: Error when creating QinQ interface without earlier sets firewall name, if it used as Resolved.
Sat, Aug 17, 12:40 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po closed T1592: Update Linux Kernel to v4.19.67 as Resolved.
Sat, Aug 17, 12:39 AM · VyOS 1.3 Equuleus
c-po claimed T1592: Update Linux Kernel to v4.19.67.
Sat, Aug 17, 12:37 AM · VyOS 1.3 Equuleus
c-po created T1592: Update Linux Kernel to v4.19.67.
Sat, Aug 17, 12:37 AM · VyOS 1.3 Equuleus
c-po removed a subtask for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python: T1586: OpenVPN add IPv6 support to tunnels.
Sat, Aug 17, 12:29 AM · VyOS 1.3 Equuleus
c-po removed a parent task for T1586: OpenVPN add IPv6 support to tunnels: T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Sat, Aug 17, 12:29 AM · VyOS 1.3 Equuleus
c-po closed T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”, a subtask of T1556: Rewrite Bridge in new style XML syntax, as Wontfix.
Sat, Aug 17, 12:28 AM · VyOS 1.3 Equuleus
c-po closed T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group” as Wontfix.
Sat, Aug 17, 12:28 AM · VyOS 1.3 Equuleus
c-po added a comment to T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”.

This error won't be fixed as the new Python/XML implementation of OpenVPN has been merged into current and will appear in the next rolling release.

Sat, Aug 17, 12:28 AM · VyOS 1.3 Equuleus
c-po closed T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, as Invalid.
Sat, Aug 17, 12:27 AM · VyOS 1.3 Equuleus
c-po closed T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config as Invalid.
Sat, Aug 17, 12:27 AM · VyOS 1.3 Equuleus
c-po changed the status of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, from In progress to Needs testing.
Sat, Aug 17, 12:22 AM · VyOS 1.3 Equuleus
c-po changed the status of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from In progress to Needs testing.
Sat, Aug 17, 12:22 AM · VyOS 1.3 Equuleus

Fri, Aug 16

c-po added a subtask for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python: T1591: OpenVPN "run show openvpn client status" does not work.
Fri, Aug 16, 9:56 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1591: OpenVPN "run show openvpn client status" does not work: T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Fri, Aug 16, 9:56 PM · VyOS 1.2 Crux
c-po created T1591: OpenVPN "run show openvpn client status" does not work.
Fri, Aug 16, 9:56 PM · VyOS 1.2 Crux
c-po added a subtask for T1556: Rewrite Bridge in new style XML syntax: T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”.
Fri, Aug 16, 10:29 AM · VyOS 1.3 Equuleus
c-po added a parent task for T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”: T1556: Rewrite Bridge in new style XML syntax.
Fri, Aug 16, 10:29 AM · VyOS 1.3 Equuleus
c-po created T1589: OpenVPN configuration error: Must specify “local-address” or “bridge-group”.
Fri, Aug 16, 10:28 AM · VyOS 1.3 Equuleus

Thu, Aug 15

c-po added a comment to T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.

This is actually invalid. There is no way with the current CLI design to specify the local address node with an optional subnet-mask leaf node.

Thu, Aug 15, 10:51 PM · VyOS 1.3 Equuleus
c-po assigned T1587: New implementation of "monitor interface" to dmbaturin.
Thu, Aug 15, 8:18 PM · VyOS 1.2 Crux
c-po created T1587: New implementation of "monitor interface".
Thu, Aug 15, 8:18 PM · VyOS 1.2 Crux
c-po created T1586: OpenVPN add IPv6 support to tunnels.
Thu, Aug 15, 12:18 PM · VyOS 1.3 Equuleus

Wed, Aug 14

c-po renamed T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python from Rewrite OpenVPN interface in new style XML syntax to Rewrite OpenVPN interface/op-commands in new style XML/Python.
Wed, Aug 14, 11:01 AM · VyOS 1.3 Equuleus
c-po updated the task description for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Wed, Aug 14, 10:59 AM · VyOS 1.3 Equuleus
c-po updated the task description for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python.
Wed, Aug 14, 10:59 AM · VyOS 1.3 Equuleus

Tue, Aug 13

c-po changed Version from - to 1.1.7 on T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.
Tue, Aug 13, 7:16 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.
Tue, Aug 13, 7:16 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.
Tue, Aug 13, 7:16 PM · VyOS 1.3 Equuleus
c-po created T1582: OpenVPN CLI supports setting local-address multiple times but only the first makes it to the config.
Tue, Aug 13, 7:03 PM · VyOS 1.3 Equuleus
c-po added a comment to T1581: Add GNU Wget.

Why not use curl which is inside the image?

Tue, Aug 13, 7:01 PM · vyatta-busybox, VyOS 1.2 Crux
c-po added a comment to T1551: Error when creating QinQ interface without earlier sets firewall name, if it used.

Okay. Please test with latest rolling so we can possibly backport this to crux

Tue, Aug 13, 6:36 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po changed the status of T1551: Error when creating QinQ interface without earlier sets firewall name, if it used from Open to Backport candidate.
Tue, Aug 13, 2:18 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po created T1580: Rewrite dummy interface type with new style XML/Python interface.
Tue, Aug 13, 2:13 PM · VyOS 1.3 Equuleus
c-po removed a subtask for T1556: Rewrite Bridge in new style XML syntax: T1557: Create generic abstraction for configuring interfaces e.g. IP address.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po edited parent tasks for T1557: Create generic abstraction for configuring interfaces e.g. IP address, added: T1579: Rewrite all interface types in new XML/Python style; removed: T1556: Rewrite Bridge in new style XML syntax.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po added a subtask for T1579: Rewrite all interface types in new XML/Python style: T1557: Create generic abstraction for configuring interfaces e.g. IP address.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python: T1579: Rewrite all interface types in new XML/Python style.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po added a parent task for T1556: Rewrite Bridge in new style XML syntax: T1579: Rewrite all interface types in new XML/Python style.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po added subtasks for T1579: Rewrite all interface types in new XML/Python style: T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, T1556: Rewrite Bridge in new style XML syntax.
Tue, Aug 13, 2:12 PM · VyOS 1.3 Equuleus
c-po created T1579: Rewrite all interface types in new XML/Python style.
Tue, Aug 13, 2:11 PM · VyOS 1.3 Equuleus
c-po added a comment to T1551: Error when creating QinQ interface without earlier sets firewall name, if it used.

I have no experience with Q-in-Q but does it even make sense to apply a firewall to the outer side of a Q-in-Q link?

Tue, Aug 13, 2:01 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po updated the task description for T1551: Error when creating QinQ interface without earlier sets firewall name, if it used.
Tue, Aug 13, 1:46 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po updated the task description for T1551: Error when creating QinQ interface without earlier sets firewall name, if it used.
Tue, Aug 13, 1:45 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)
c-po changed Version from - to 1.2.0 on T1551: Error when creating QinQ interface without earlier sets firewall name, if it used.
Tue, Aug 13, 1:42 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.3)