summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-03-17T103: [dhcp-server] add support to configure host declarative namesChristian Poessinger
(cherry picked from commit 0fefe3c3b9250ad2ba841287a94036119728c708)
2019-03-08T1277: [dhcp-server] bugfix 'show dhcp server leases'Christian Poessinger
The script did not check if the service was actually configured or not. This caused a FileNotFoundError for unconfigured services. vyos@vyos:~$ show dhcp server leases Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_dhcp.py", line 123, in <module> leases = get_leases(lease_file, state='active') File "/usr/libexec/vyos/op_mode/show_dhcp.py", line 60, in get_leases leases = IscDhcpLeases(lease_file).get() File "/usr/lib/python3/dist-packages/isc_dhcp_leases/iscdhcpleases.py", line 110, in get with open(self.filename) as lease_file: FileNotFoundError: [Errno 2] No such file or directory: '/config/dhcpd.leases' (cherry picked from commit ed620ef7e8ba741e165698c558b110a31cc35dfd)
2019-03-08T1277: [dhcpv6-server] bugfix 'show dhcpv6 server leases'Christian Poessinger
The script did not check if the service was actually configured or not. This caused a FileNotFoundError for unconfigured services. vyos@vyos:~$ show dhcpv6 server leases Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 77, in <module> leases = get_leases(lease_file, state='active') File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 46, in get_leases leases = IscDhcpLeases(lease_file).get() File "/usr/lib/python3/dist-packages/isc_dhcp_leases/iscdhcpleases.py", line 110, in get with open(self.filename) as lease_file: FileNotFoundError: [Errno 2] No such file or directory: '/config/dhcpdv6.leases' (cherry picked from commit a6700c7d3b75854c3b213b65951a51464cd073be)
2019-02-28Fix: T1217 - cant delete wireguard wg0 interfacehagbard
2019-02-28enhancement: T1225 - wireguard implement 'set int wireguard wg0 peer name ↵hagbard
disable' to disable single peers Conflicts: debian/changelog
2019-02-28IP validation for allowed ip corrected.hagbard
2019-02-28fixes T1238 - Wireguard allows invalid IP'shagbard
Conflicts: debian/changelog
2019-02-28fixes: T1254 - generate wireguard keypair fails when executed on the isohagbard
- keypair can now be generated and used from the running iso to create wg tunnels on the fly Conflicts: debian/changelog
2019-02-28Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2019-02-28T1272: send VRRP messages from the base interface in RFC-compliant mode only ↵Daniil Baturin
in unicast mode (patch by Johan Fredin).
2019-02-25T1234: add missing option when processing dhcp-relay packetsChristian Poessinger
(cherry picked from commit f0084de554d71d0f011c7fd2c6009f1864bd9d77)
2019-02-25[tftp] T1261: always adjust directory permissions of tftprootChristian Poessinger
(cherry picked from commit 583975299c625d6049be6561d70e4cadc9976242)
2019-02-25[tftp] T1261: bugfix allow-upload handlingChristian Poessinger
(cherry picked from commit fbfe43b5ae7692e6ee6ce6d5517efdb2cdf8f022)
2019-02-25[tftp] T1261: reorder DAEMON_ARGSChristian Poessinger
(cherry picked from commit 3a1e484c69c883af03f355f0349ef218212207e1)
2019-02-25[tftp] T1261: bugfix listening on multiple IP addessesChristian Poessinger
tftp-hpa which is the TFTP daemon used by VyOS does not support listening on multiple IP adresses. With this limitation we will start one TFTP daemon instance per configured listen-address via systemd. (cherry picked from commit 735a24d58ddf55294241ce8160471fe9be062498)
2019-02-25[dhcp] T1211: avoid blank DHCP hostnames taking down DNSChristian Poessinger
(cherry picked from commit 944a665cfc19cca1af9d46a70fb31ba1f4893d68)
2019-02-21T1256: Execute "show ipsec vpn ipsec sa" returns incorrect resultsDaniel Pro
Not sure it's a normal case scenario, the one highlighted in T1256. To managed it I changed the "if" logic.
2019-02-10T1231: Remove cache file of 'service dns dynamic'Christian Poessinger
When deleting or changing "service dns dynamic" the cache file of ddclient is not removed, leading to abandoned host names which might be already gone. (cherry picked from commit ec604ef88e2845bcd75070f6dff325ccc50873aa)
2019-02-10T1213: ddclient: proper enquote web-skip parameterChristian Poessinger
(cherry picked from commit ad011db299196a2e5defa7d8030be149d71d53ee)
2019-02-01[broadcast-relay] T1224: fix missing newline between comment and options.Daniil Baturin
2019-01-30dynamic-dns: add completion list for service providersChristian Poessinger
(cherry picked from commit 31b1b2cb8873f62f8054c87953cd8bd59b59add1)
2019-01-30T1213: fix ddclient when no server is givenChristian Poessinger
(cherry picked from commit cc3f6088783373bd56cd821599bdc12ba123125b)
2019-01-30T1160: fix (ro|rw)community ACLChristian Poessinger
WHen building up the SNMP v2 community ro/rw access all hosts from a INET version could access even when the community was locked to one INET family. Example #1: set service snmp community bar network 172.16.0.0/12 Allowed access only to IPv4 network 172.16.0.0/12 but it allowed acces from IPv6 ::/0. Example #2: set service snmp community baz network 2001:db8::/64 Limited IPv6 access to 2001:db8::/64 but IPv4 was open to 0.0.0.0/0 (cherry picked from commit cc07c4727bdffb4c220ce28ab9f697b01fe4afb7)
2019-01-26Merge branch 'current' into cruxDaniil Baturin
2019-01-26T1193: add some tests for the config parser.Daniil Baturin
2019-01-26T1193: remove the commands pipe since it's no longer needed.Daniil Baturin
2019-01-26[webproxy] T1203: do not attempt to migrate proxy-bypass if it doesn't exist.Daniil Baturin
2019-01-25Fix: T1178: Scheduled script breaks ability to modify configurationhagbard
2019-01-22Revert "Fix: T1178 - Scheduled script breaks ability to modify configuration"hagbard
This reverts commit 632893abf5c7bf935d866462a107ed1eef1747b3.
2019-01-22Revert "adjusted unit test"hagbard
This reverts commit 0d80b06ccd33fc2a0001b8641ce45070f0e8726d.
2019-01-21adjusted unit testhagbard
2019-01-21Fix: T1178 - Scheduled script breaks ability to modify configurationhagbard
2019-01-12Correct the command suggestion in the "show vpn ipsec sa" scriptDaniil Baturin
in case when no active SAs are found.
2019-01-12T1175: add support for DMVPN connections to the "show vpn ipsec sa" script.Daniil Baturin
2019-01-12T1041: make upstream DNS server optionalChristian Poessinger
The name-server option under "service dns-forwarding" was never mandatory so users never needed to specify an upstream server. With the recent switch to PowerDNS recursor in VyOS 1.2.0 we will act as a full DNS recursor when there is no upstream DNS server configured. (cherry picked from commit 3c563b3ae8397da33a03c0429c17b97eb9625c5f)
2019-01-12T1041: make upstream DNS server optionalChristian Poessinger
The name-server option under "service dns-forwarding" was never mandatory so users never needed to specify an upstream server. With the recent switch to PowerDNS recursor in VyOS 1.2.0 we will act as a full DNS recursor when there is no upstream DNS server configured.
2019-01-08Merge pull request #63 from daniel-pro/T1077hagbard-01
T1077: Update show_ipsec_sa.py
2019-01-07Fix: T1168 - Upgrade: 1,1,7 -> 1.2.0-epa2 (command conversion)hagbard
2019-01-06Fix: T1162 - WireGuard: Unable to modify tunnels - KeyError: 'state'hagbard
2019-01-06Merge branch 'current' into cruxChristian Poessinger
* current: T1129: replace quotes when dealing with 'subnet/global-parameters' T1129: fix handling of raw DHCP 'subnet-parameters' T1159: correct handling of SAs without PFS in "show vpn ipsec sa". T1147: Fix SNMP config file generation on newly installed systems Initial implementation of declarative config dict retrieval library. T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11
2019-01-06T1129: replace quotes when dealing with 'subnet/global-parameters'Christian Poessinger
2019-01-06T1129: fix handling of raw DHCP 'subnet-parameters'Christian Poessinger
subnet-parameters were not added to the resulting configuration.
2019-01-06Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2019-01-06T1159: correct handling of SAs without PFS in "show vpn ipsec sa".Daniil Baturin
2019-01-06T1159: correct handling of SAs without PFS in "show vpn ipsec sa".Daniil Baturin
2019-01-03T1147: Fix SNMP config file generation on newly installed systemsChristian Poessinger
(cherry picked from commit 59471ed0c249771fa6c46cf0b020222b7caeee42)
2019-01-03T1147: Fix SNMP config file generation on newly installed systemsChristian Poessinger
2019-01-02Initial implementation of declarative config dict retrieval library.Daniil Baturin
2019-01-02Merge pull request #64 from daniel-pro/T1119Daniil Baturin
T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11
2019-01-01T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11Daniel
Removed duplicates from "connections" list.