Page MenuHomeVyOS Platform

mtudosoiu (Marian Tudosoiu)
User

Projects

User does not belong to any projects.

User Details

User Since
Feb 18 2018, 11:26 AM (140 w, 8 h)

Recent Activity

Jun 3 2019

mtudosoiu added a comment to T1392: Large firewall rulesets cause the system to lose configuration and crash at startup.

I was looking on this issue. Please find below a description of what I think is the root cause for this issue:

Jun 3 2019, 8:12 AM · VyOS 1.2 Crux (VyOS 1.2.5), VyOS 1.3 Equuleus

Apr 11 2018

mtudosoiu added a comment to T35: Add IPv6 firewall network groups.

I have created a new pull request in order to solve an issue I noticed during tests for IPv6 firewall groups.
How to replicate the issue:

  • configure an address-group/network group for ipv6
  • configure an address-group/network group for ipv4
  • configure an ipv4 firewall rule
  • commit and save the cofig
  • reload the vyos

After reload the IPv6 address-groups/network-groups are deleted.

Apr 11 2018, 11:04 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Mar 23 2018

mtudosoiu added a comment to T35: Add IPv6 firewall network groups.

I discovered an issue with port-group that have root cause the change implemented for ipv6 address and network groups.

Mar 23 2018, 9:09 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Mar 14 2018

mtudosoiu added a comment to T35: Add IPv6 firewall network groups.

I've changed the code in order to have IPv6 address and network groups under global group configuration tree
Please take a look on the pull request I've created https://github.com/vyos/vyatta-cfg-firewall/pull/8 and please merge it to the current branch

Mar 14 2018, 10:03 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Mar 12 2018

mtudosoiu added a comment to T35: Add IPv6 firewall network groups.

I've created a change that add support for ipv6 address and network groups to vyos. Please review it https://github.com/vyos/vyatta-cfg-firewall/pull/7 an provide your feedback.
@dmbaturin merged this to current branch 1.2.0-rc1

Mar 12 2018, 12:42 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Feb 23 2018

mtudosoiu added a comment to T556: use debian:jessie docker container as build node for vyos1.2.x.

if we setup the volume as working dir inside the container the mknod function during the make iso process will fail if the docker host is MacOs or Windows.
The error is "mknod: Function not implemented " and is related to how docker engine is implemented to run on Mac and Windows systems

Feb 23 2018, 7:37 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Feb 21 2018

mtudosoiu added a comment to T556: use debian:jessie docker container as build node for vyos1.2.x.

Perfect. I will update the Readme and push again the change.

Feb 21 2018, 1:36 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
mtudosoiu added a comment to T556: use debian:jessie docker container as build node for vyos1.2.x.

I've created this pull request for Dockerfile to vyos-build repository
https://github.com/vyos/vyos-build/pull/15/commits/428c73d96ff745ba61ba834d9d2a42d5dc8ed5cd

Feb 21 2018, 1:29 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
mtudosoiu added a comment to T556: use debian:jessie docker container as build node for vyos1.2.x.

thank you for this.
I would suggest to install more dependencies using this docker file. The complete list of what I think we should use is:

squashfs-tools  # Required for squashfs file system
git                      # Required, for cloning the source
autoconf                 # Required, for generating build scripts
dpkg-dev                 # Required, used in build scripts
live-helper              # Required, for ISO build
syslinux                 # Required, for ISO build
genisoimage              # Required, for ISO build
make                     # Required, for ISO build
lsb-release              # Required, used by configure script
ssh                      # Optional, for cloning over SSH
sudo                     # Optional, ISO build requires root privileges
fakechroot               # Required, for ISO build
devscripts               # Optional, for building submodules (kernel etc)
kernel-package           # Optional, for building the kernel
libtool                  # Optional, for building certain packages (eg vyatta-op-vpn)
libglib2.0-dev           # Optional, for building vyatta-cfg 
libboost-filesystem-dev  # Optional, for building vyatta-cfg
libapt-pkg-dev           # Optional, for building vyatta-cfg
flex                     # Optional, for building vyatta-cfg
bison                    # Optional, for building vyatta-cfg
libperl-dev              # Optional, for building vyatta-cfg
libnfnetlink-dev         # Optional, for building vyatta-cfg-vpn
vim                      # Optional, vim, vi, nano or other text editor
Feb 21 2018, 7:42 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Feb 20 2018

mtudosoiu created T556: use debian:jessie docker container as build node for vyos1.2.x.
Feb 20 2018, 8:52 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
mtudosoiu claimed T555: add tools/submod-mk to vyos-build repository.

I've created pull request https://github.com/vyos/vyos-build/pull/15 to solve this issue

Feb 20 2018, 8:37 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
mtudosoiu created T555: add tools/submod-mk to vyos-build repository.
Feb 20 2018, 8:32 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Feb 19 2018

mtudosoiu added a comment to T171: Unable to delete a firewall fule.

The use case this patch solve is the following:
-we have a firewall with multiple rules set
-the firewall is mapped to an interface
-we want to remove one/or multiple rules from the rule chain (this is not possible using current VyOs version as long as the filter is mapped to an interface)

Feb 19 2018, 12:49 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc7)
mtudosoiu added a comment to T171: Unable to delete a firewall fule.

I created this patch for this issue https://github.com/vyos/vyatta-cfg-firewall/pull/6

Feb 19 2018, 11:31 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc7)