summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-09-05T4974: add proper dependency on openvpn-dcoChristian Breunig
2024-09-02Merge pull request #4018 from nicolas-fort/T6647Daniil Baturin
T6647: firewall. Introduce patch for accepting invalid ARP and DHCP
2024-09-02Merge pull request #4022 from rgwan/currentChristian Breunig
T6681: Add option for SLAAC to support suppress Interval Advertisement in RA Packets
2024-09-01smoketest: T6681: radvd: verify new "no-send-interval" CLI optionChristian Breunig
2024-08-28T6647: firewall. Introduce patch for accepting ARP and DHCP replies on ↵Nicolas Fort
stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall.
2024-08-27T6681: Add option for SLAAC to support suppress Interval Advertisement in RAsHikari Kongou
2024-08-27Merge pull request #4019 from kumvijaya/currentVijayakumar A
T6678: added darker ruff linting workflow
2024-08-26T6678: added darker ruff linting workflowVijayakumar A
2024-08-26Merge pull request #4015 from jestabro/configdep-prioChristian Breunig
T6671: defer config dependency if scheduled in priority queue
2024-08-25T6671: add smoketest for dependency deferred to priorityJohn Estabrook
2024-08-25configdep: T6671: run dependency only if not scheduled by priorityJohn Estabrook
2024-08-25configd: T6671: track scripts proposed and scripts calledJohn Estabrook
2024-08-25configdiff: T5666: provide list of scripts scheduled for proposed commitJohn Estabrook
2024-08-25xml: T5666: add with_tag keyword arg to ownerJohn Estabrook
2024-08-24dhclient: T6667: Added workaround for communication with FRRzsdc
To increase the chance for dhclient to configure routes in FRR, added a workaround. Now 10 attempts are performed with 1 second delay and only after this dhclient gives up.
2024-08-22T6561: Add vrf aware for show ntpViacheslav Hletenko
2024-08-22Merge pull request #4001 from fett0/T6668Christian Breunig
op_mode: T6668: Add detailed statistics infomartion about MACsec
2024-08-22Merge pull request #4000 from sever-sever/T6672Christian Breunig
T6672: Fix system option ssh-client source-interface
2024-08-21op_mode: T6668: Add detailed statistics infomartion about MACsec interfacesfett0
2024-08-21T6672: Fix system option ssh-client source-interfaceViacheslav Hletenko
Fix for system option ssh-client source-interface For the `verify_source_interface` the key `ifname` if required
2024-08-20Merge pull request #3975 from lucasec/t6183Christian Breunig
T6183: interfaces openvpn: suppport specifying IP protocol version
2024-08-20Merge pull request #3977 from natali-rs1985/T5743-currentChristian Breunig
T5743: HTTPS API ability to import PKI certificates
2024-08-18Merge pull request #3997 from natali-rs1985/T3961-currentChristian Breunig
op_mode: T3961: Generate PKI expect 2 character country code
2024-08-18op_mode: T3961: Generate PKI expect 2 character country codeNataliia Solomko
2024-08-18xml: T6650: fix unused ArgumentTypeError imported from argparseChristian Breunig
2024-08-16T6659: suricata: use unique cluster_id per interface (#3992)Lucas Christian
2024-08-16Merge pull request #3987 from natali-rs1985/T6649-currentDaniil Baturin
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces
2024-08-16Merge pull request #3989 from jestabro/write_file-errChristian Breunig
utils: T6658: fix write_file check in case of empty directory path
2024-08-16Merge pull request #3988 from nicolas-fort/T5794Christian Breunig
T5794: firewall: change firewall priority in oder to be loaded after all interfaces
2024-08-15utils: T6658: fix write_file check in case of empty directory pathJohn Estabrook
2024-08-15T5794: change firewall priority in oder to be loaded after all interfaces.nicolas
2024-08-15T6649: Accel-ppp separate vlan-mon from listen interfacesNataliia Solomko
2024-08-15Merge pull request #3982 from nicolas-fort/T6636Christian Breunig
T6636: firewall: fix firewall template in order print logs for default-action
2024-08-14Merge pull request #3980 from natali-rs1985/T6651-currentChristian Breunig
op_mode: T6651: Add a top level op mode word "execute"
2024-08-14Merge pull request #3981 from nicolas-fort/T6646Daniil Baturin
T6646: conntrack: in ignore rules, if protocols=all, do not append it to the rule
2024-08-14Merge pull request #3971 from jestabro/op-mode-cacheDaniil Baturin
xml: T6650: add initial op-mode cache support
2024-08-14T6636: firewall: fix firewall template in order to write logs for ↵Nicolas Fort
default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too
2024-08-14T6646: conntrack: in ignore rules, if protocols=all, do not append it to the ↵Nicolas Fort
rule
2024-08-14op_mode: T6651: Add a top level op mode word "execute"Nataliia Solomko
2024-08-13T6183: interfaces openvpn: suppport specifying IP protocol versionLucas Christian
2024-08-13T5743: HTTPS API ability to import PKI certificatesNataliia Solomko
2024-08-12Merge pull request #3958 from natali-rs1985/T6624-currentChristian Breunig
suricata: T6624: Make it possible for suricata address groups to reference each other
2024-08-12suricata: T6624: Fix for service suricata address-groups cannot be used in ↵Nataliia Solomko
each other
2024-08-12Merge pull request #3970 from lucasec/t6648Christian Breunig
T6648: dhcpv6-server: align stateless DHCPv6 options with stateful
2024-08-12T6648: dhcpv6-server: align stateless DHCPv6 options with statefulLucas Christian
2024-08-12Merge pull request #3937 from jestabro/env-set-alternativeChristian Breunig
configd: T6633: inject missing env vars for configfs utility
2024-08-12configd: T6633: inject missing env vars for configfs utilityJohn Estabrook
2024-08-12Merge pull request #3961 from jestabro/verify-interface-exists-configJohn Estabrook
configverify: T6642: verify_interface_exists requires config_dict arg
2024-08-12configverify: T6642: verify_interface_exists requires config_dict argJohn Estabrook
The function verify_interface_exists requires a reference to the ambient config_dict rather than creating an instance. As access is required to the 'interfaces' path, provide as attribute of class ConfigDict, so as not to confuse path searches of script-specific config_dict instances.
2024-08-12xml: T6650: add initial op-mode cache supportJohn Estabrook