summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-06-28containers: T4473: Fix create container with not exist networkViacheslav Hletenko
Fix for setting container without or wrong network decalaration
2022-06-28Merge pull request #1370 from sever-sever/T4489Christian Poessinger
mpls: T4489: Set priority 400 for MPLS after tunnel
2022-06-28mpls: T4489: Set priority 400 for MPLS after tunnelViacheslav Hletenko
Fix worng behavior with priority with using tunnel interfaces MPLS configuration must be applied after tunnel interfaces as we use an addition sysctl option 'net.mpls.conf.tun0.input = 1' which doesn't exist without tunnel interface Change priority: 299 protocols/mpls 380 interfaces/tunnel To: 380 interfaces/tunnel 400 protocols/mpls
2022-06-26Merge pull request #1368 from sarthurdev/firewall-opsummaryChristian Poessinger
firewall: T4484: Fix op-mode summary for address groups with ranges.
2022-06-25firewall: T4484: Fix op-mode summary for address groups with ranges.sarthurdev
2022-06-25Merge pull request #1360 from sever-sever/T1375Christian Poessinger
op-mode: T1375: Allow to clear dhcp-server lease
2022-06-25Merge pull request #1362 from sarthurdev/T4435Christian Poessinger
firewall: T4435: Verify parent config applied successfully
2022-06-25interfaces: dhcp: T4482: toggle of "dhcp-options no-default-route" has no effectChristian Poessinger
Error introduced by commit 85d6c8f7c ("vyos.configdict: T4391: enable get_interface_dict() ti be used with ConfigTreeQuery()"). Reason was the still in use relative path on calls to node_changed(), these got replaced with absolute config paths and the new implementation if is_node_changed().
2022-06-25dhcp: pppoe: T4384: bugfix not honoring no-default-route CLI optionChristian Poessinger
Commit a2ab95ff68b ("pppoe: T4384: replace default-route CLI option with common CLI nodes already present for DHCP") had an issue as the PPPoE interface options and also DHCP interface options did not honor the no-default-route option. This has been fixed.
2022-06-22Merge pull request #1367 from nicolas-fort/T4475Christian Poessinger
Policy: T4475: add support for matching ipv6 addresses on peer option…
2022-06-22Policy: T4475: add support for matching ipv6 addresses on peer option in ↵Nicolas Fort
route-map
2022-06-21Merge pull request #1366 from c-po/t1748-cli-helpChristian Poessinger
vbash: beautify tab completion output/line breaks
2022-06-20xml: T1748: cleanup <help> and </help> nodes not closing on the same lineChristian Poessinger
Commit a6f82bb484 ("T1748: vbash: beautify tab completion output/line breaks") added a method to split the help string and insert newlines and leading tabs in a deterministic way. This commit cleans up the legacy implementations where leading whitespaces got counted and added by humans in a try/error method.
2022-06-20T1748: vbash: beautify tab completion output/line breaksChristian Poessinger
Indention for multi-line help strings should be auto calculated and not be a human problem. This way we ensure that there is a consistent CLI with predictable newlines at a predictable position.
2022-06-20T778: T782: dhcp-server: add missing bootfile-size and bootfile-name constraintsChristian Poessinger
2022-06-20dhcp: T4156: bootfile-option: add missing constraints and valueHelpChristian Poessinger
2022-06-18policy: T4467: bugfix relative (+/-) increase of metricChristian Poessinger
2022-06-16smoketest: policy: T4467: validate relative route-map metricChristian Poessinger
2022-06-16vyos.ifconfig: T4384: fix file permission (664) on interface.pyChristian Poessinger
2022-06-16Merge pull request #1363 from sever-sever/T4468Christian Poessinger
webproxy: T4468: Fix regex for squidguard source-group
2022-06-16webproxy: T4468: Fix regex for squidguard source-groupViacheslav Hletenko
2022-06-16dhclient: T2393: introduce 20 seconds stop timeout - required for ↵Christian Poessinger
smoketesting on Qemu
2022-06-16op-mode: T1375: Allow to clear dhcp-server leaseViacheslav Hletenko
Allow to reset dhcp-leases per ip Parse file '/config/dhcpd.leases' find match section 'lease x.x.x.x {}' And remove this section clear dhcp-server lease 192.0.2.21
2022-06-15firewall: T4435: Verify parent config applied successfullysarthurdev
2022-06-15Merge pull request #1361 from sarthurdev/firewall_namedChristian Poessinger
firewall: T4147: Use named sets for firewall groups
2022-06-15Merge pull request #1359 from dmbaturin/help-proofreading-1Christian Poessinger
Improve IPsec help strings
2022-06-14firewall: T970: Use set prefix to domain groupssarthurdev
2022-06-14firewall: T4147: Use named sets for firewall groupssarthurdev
* Refactor nftables clean-up code * Adds policy route test for using firewall groups
2022-06-14Improve IPsec help stringsDaniil Baturin
2022-06-12Merge pull request #1357 from sarthurdev/geoipChristian Poessinger
firewall: T4299: Add support for GeoIP filtering
2022-06-11firewall: T4299: Add support for GeoIP filteringsarthurdev
2022-06-10Merge pull request #1356 from sarthurdev/nested_groupsChristian Poessinger
firewall: T478: Add support for nesting groups
2022-06-10firewall: T478: Add support for nesting groupssarthurdev
2022-06-10scripts: T4465: node.def generation requires whitespace on multiple use of ↵Christian Poessinger
<path>
2022-06-10Merge pull request #1355 from nicolas-fort/T4458-ipv4-ttlChristian Poessinger
Firewall:T4458: Add ttl match option in firewall
2022-06-10Merge pull request #1326 from sever-sever/T4429Christian Poessinger
op-mode: T4429: Ability to detect external IP address
2022-06-10xml: drop not always applicable REQUIRED suffix from completion help stringChristian Poessinger
If a parameter is required is determined from the Python string on commit. This "indicator" is not used consistently and sometimes missing, or added where it is not required anymore due to Python script improvement/rewrite.
2022-06-10Firewall:T4458: Add ttl match option in firewallNicolas Fort
2022-06-10Revert "dmvpn: nhrp: T4434: secret length can not exceed 8 characters"Christian Poessinger
This reverts commit 6f818ee9033ee3abeedbed73eb44331dc27e7408.
2022-06-10nhrp: T4460: update error message for cisco-authentication password lengthChristian Poessinger
2022-06-10Merge pull request #1353 from nicolas-fort/T4460Christian Poessinger
Protocols: T4460: Add input checks for cisco-authentication in nhrp
2022-06-10Merge pull request #1354 from sever-sever/T970Christian Poessinger
firewall: T970: Fix for Regex for domain and check empty group
2022-06-10firewall: T970: Fix for Regex for domain and check empty groupViacheslav Hletenko
It can be more then 5 symbols in top-level-domain address for example '.photography' and '.accountants' Firewall group can be added without address: * set firewall group domain-group DOMAIN Check if 'address' exists in group_config
2022-06-10Protocols: T4460: Add input checks for cisco-authentication parameter in ↵Nicolas Fort
nhrp protocol
2022-06-10Merge pull request #1322 from nicolas-fort/T3907-fwall-logDaniil Baturin
Firewall: T3907: add log-level options in firewall
2022-06-10Merge pull request #1352 from sever-sever/T970-testJohn Estabrook
smoketest: T970: Add commit after static-host-mapping
2022-06-10smoketest: T970: Add commit after static-host-mappingViacheslav Hletenko
Staic-host-mapping 'example.com' should be exists before we configure firewall domain-group FOO address example.com
2022-06-09smoketest: sstp: T4444: verify port can be changedChristian Poessinger
2022-06-09sstp: T4444: merge of defaultValue already done in get_accel_dict()Christian Poessinger
2022-06-09xml: sstp: T4444: re-use port-number.xml.i building blockChristian Poessinger