Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-08-25 | T6671: add smoketest for dependency deferred to priority | John Estabrook | |
2024-08-25 | configdep: T6671: run dependency only if not scheduled by priority | John Estabrook | |
2024-08-25 | configd: T6671: track scripts proposed and scripts called | John Estabrook | |
2024-08-25 | configdiff: T5666: provide list of scripts scheduled for proposed commit | John Estabrook | |
2024-08-25 | xml: T5666: add with_tag keyword arg to owner | John Estabrook | |
2024-08-24 | dhclient: T6667: Added workaround for communication with FRR | zsdc | |
To increase the chance for dhclient to configure routes in FRR, added a workaround. Now 10 attempts are performed with 1 second delay and only after this dhclient gives up. | |||
2024-08-22 | T6561: Add vrf aware for show ntp | Viacheslav Hletenko | |
2024-08-22 | Merge pull request #4001 from fett0/T6668 | Christian Breunig | |
op_mode: T6668: Add detailed statistics infomartion about MACsec | |||
2024-08-22 | Merge pull request #4000 from sever-sever/T6672 | Christian Breunig | |
T6672: Fix system option ssh-client source-interface | |||
2024-08-21 | op_mode: T6668: Add detailed statistics infomartion about MACsec interfaces | fett0 | |
2024-08-21 | T6672: Fix system option ssh-client source-interface | Viacheslav Hletenko | |
Fix for system option ssh-client source-interface For the `verify_source_interface` the key `ifname` if required | |||
2024-08-20 | Merge pull request #3975 from lucasec/t6183 | Christian Breunig | |
T6183: interfaces openvpn: suppport specifying IP protocol version | |||
2024-08-20 | Merge pull request #3977 from natali-rs1985/T5743-current | Christian Breunig | |
T5743: HTTPS API ability to import PKI certificates | |||
2024-08-18 | Merge pull request #3997 from natali-rs1985/T3961-current | Christian Breunig | |
op_mode: T3961: Generate PKI expect 2 character country code | |||
2024-08-18 | op_mode: T3961: Generate PKI expect 2 character country code | Nataliia Solomko | |
2024-08-18 | xml: T6650: fix unused ArgumentTypeError imported from argparse | Christian Breunig | |
2024-08-16 | T6659: suricata: use unique cluster_id per interface (#3992) | Lucas Christian | |
2024-08-16 | Merge pull request #3987 from natali-rs1985/T6649-current | Daniil Baturin | |
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces | |||
2024-08-16 | Merge pull request #3989 from jestabro/write_file-err | Christian Breunig | |
utils: T6658: fix write_file check in case of empty directory path | |||
2024-08-16 | Merge pull request #3988 from nicolas-fort/T5794 | Christian Breunig | |
T5794: firewall: change firewall priority in oder to be loaded after all interfaces | |||
2024-08-15 | utils: T6658: fix write_file check in case of empty directory path | John Estabrook | |
2024-08-15 | T5794: change firewall priority in oder to be loaded after all interfaces. | nicolas | |
2024-08-15 | T6649: Accel-ppp separate vlan-mon from listen interfaces | Nataliia Solomko | |
2024-08-15 | Merge pull request #3982 from nicolas-fort/T6636 | Christian Breunig | |
T6636: firewall: fix firewall template in order print logs for default-action | |||
2024-08-14 | Merge pull request #3980 from natali-rs1985/T6651-current | Christian Breunig | |
op_mode: T6651: Add a top level op mode word "execute" | |||
2024-08-14 | Merge pull request #3981 from nicolas-fort/T6646 | Daniil Baturin | |
T6646: conntrack: in ignore rules, if protocols=all, do not append it to the rule | |||
2024-08-14 | Merge pull request #3971 from jestabro/op-mode-cache | Daniil Baturin | |
xml: T6650: add initial op-mode cache support | |||
2024-08-14 | T6636: firewall: fix firewall template in order to write logs for ↵ | Nicolas Fort | |
default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too | |||
2024-08-14 | T6646: conntrack: in ignore rules, if protocols=all, do not append it to the ↵ | Nicolas Fort | |
rule | |||
2024-08-14 | op_mode: T6651: Add a top level op mode word "execute" | Nataliia Solomko | |
2024-08-13 | T6183: interfaces openvpn: suppport specifying IP protocol version | Lucas Christian | |
2024-08-13 | T5743: HTTPS API ability to import PKI certificates | Nataliia Solomko | |
2024-08-12 | Merge pull request #3958 from natali-rs1985/T6624-current | Christian Breunig | |
suricata: T6624: Make it possible for suricata address groups to reference each other | |||
2024-08-12 | suricata: T6624: Fix for service suricata address-groups cannot be used in ↵ | Nataliia Solomko | |
each other | |||
2024-08-12 | Merge pull request #3970 from lucasec/t6648 | Christian Breunig | |
T6648: dhcpv6-server: align stateless DHCPv6 options with stateful | |||
2024-08-12 | T6648: dhcpv6-server: align stateless DHCPv6 options with stateful | Lucas Christian | |
2024-08-12 | Merge pull request #3937 from jestabro/env-set-alternative | Christian Breunig | |
configd: T6633: inject missing env vars for configfs utility | |||
2024-08-12 | configd: T6633: inject missing env vars for configfs utility | John Estabrook | |
2024-08-12 | Merge pull request #3961 from jestabro/verify-interface-exists-config | John Estabrook | |
configverify: T6642: verify_interface_exists requires config_dict arg | |||
2024-08-12 | configverify: T6642: verify_interface_exists requires config_dict arg | John Estabrook | |
The function verify_interface_exists requires a reference to the ambient config_dict rather than creating an instance. As access is required to the 'interfaces' path, provide as attribute of class ConfigDict, so as not to confuse path searches of script-specific config_dict instances. | |||
2024-08-12 | xml: T6650: add initial op-mode cache support | John Estabrook | |
2024-08-11 | Merge pull request #3965 from kumvijaya/current | Christian Breunig | |
T6637: add pr commenting back in un-used import check | |||
2024-08-11 | Merge branch 'current' into current | Vijayakumar A | |
2024-08-10 | Merge pull request #3964 from nicolas-fort/T6643 | Christian Breunig | |
T6643: firewall: fix ip address range parsing on firewall rules. | |||
2024-08-10 | T6637: add pr commenting back in un-used import check | Vijayakumar A | |
2024-08-09 | T6643: firewall: fix ip address range parsing on firewall rules. | Nicolas Fort | |
2024-08-09 | Merge pull request #3960 from jestabro/verify-interface-state-exists | Daniil Baturin | |
qos: T6638: require interface state existence in verify conditional | |||
2024-08-08 | qos: T6638: require interface state existence in verify conditional | John Estabrook | |
2024-08-08 | Merge pull request #3955 from jestabro/configd-in-session-false | Daniil Baturin | |
configd: T6640: enforce in_session returns False under configd | |||
2024-08-07 | configd: T6640: enforce in_session returns False under configd | John Estabrook | |
The CStore in_session check is a false positive outside of a config session if a specific environment variable is set with an existing referent in unionfs. To allow extensions when running under configd and avoid confusion, enforce in_session returns False. |