summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-01-30T1160: fix (ro|rw)community ACLChristian Poessinger
WHen building up the SNMP v2 community ro/rw access all hosts from a INET version could access even when the community was locked to one INET family. Example #1: set service snmp community bar network 172.16.0.0/12 Allowed access only to IPv4 network 172.16.0.0/12 but it allowed acces from IPv6 ::/0. Example #2: set service snmp community baz network 2001:db8::/64 Limited IPv6 access to 2001:db8::/64 but IPv4 was open to 0.0.0.0/0 (cherry picked from commit cc07c4727bdffb4c220ce28ab9f697b01fe4afb7)
2019-01-26Merge branch 'current' into cruxDaniil Baturin
2019-01-26T1193: add some tests for the config parser.Daniil Baturin
2019-01-26T1193: remove the commands pipe since it's no longer needed.Daniil Baturin
2019-01-26[webproxy] T1203: do not attempt to migrate proxy-bypass if it doesn't exist.Daniil Baturin
2019-01-25Fix: T1178: Scheduled script breaks ability to modify configurationhagbard
2019-01-22Revert "Fix: T1178 - Scheduled script breaks ability to modify configuration"hagbard
This reverts commit 632893abf5c7bf935d866462a107ed1eef1747b3.
2019-01-22Revert "adjusted unit test"hagbard
This reverts commit 0d80b06ccd33fc2a0001b8641ce45070f0e8726d.
2019-01-21adjusted unit testhagbard
2019-01-21Fix: T1178 - Scheduled script breaks ability to modify configurationhagbard
2019-01-12Correct the command suggestion in the "show vpn ipsec sa" scriptDaniil Baturin
in case when no active SAs are found.
2019-01-12T1175: add support for DMVPN connections to the "show vpn ipsec sa" script.Daniil Baturin
2019-01-12T1041: make upstream DNS server optionalChristian Poessinger
The name-server option under "service dns-forwarding" was never mandatory so users never needed to specify an upstream server. With the recent switch to PowerDNS recursor in VyOS 1.2.0 we will act as a full DNS recursor when there is no upstream DNS server configured. (cherry picked from commit 3c563b3ae8397da33a03c0429c17b97eb9625c5f)
2019-01-12T1041: make upstream DNS server optionalChristian Poessinger
The name-server option under "service dns-forwarding" was never mandatory so users never needed to specify an upstream server. With the recent switch to PowerDNS recursor in VyOS 1.2.0 we will act as a full DNS recursor when there is no upstream DNS server configured.
2019-01-08Merge pull request #63 from daniel-pro/T1077hagbard-01
T1077: Update show_ipsec_sa.py
2019-01-07Fix: T1168 - Upgrade: 1,1,7 -> 1.2.0-epa2 (command conversion)hagbard
2019-01-06Fix: T1162 - WireGuard: Unable to modify tunnels - KeyError: 'state'hagbard
2019-01-06Merge branch 'current' into cruxChristian Poessinger
* current: T1129: replace quotes when dealing with 'subnet/global-parameters' T1129: fix handling of raw DHCP 'subnet-parameters' T1159: correct handling of SAs without PFS in "show vpn ipsec sa". T1147: Fix SNMP config file generation on newly installed systems Initial implementation of declarative config dict retrieval library. T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11
2019-01-06T1129: replace quotes when dealing with 'subnet/global-parameters'Christian Poessinger
2019-01-06T1129: fix handling of raw DHCP 'subnet-parameters'Christian Poessinger
subnet-parameters were not added to the resulting configuration.
2019-01-06Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2019-01-06T1159: correct handling of SAs without PFS in "show vpn ipsec sa".Daniil Baturin
2019-01-06T1159: correct handling of SAs without PFS in "show vpn ipsec sa".Daniil Baturin
2019-01-03T1147: Fix SNMP config file generation on newly installed systemsChristian Poessinger
(cherry picked from commit 59471ed0c249771fa6c46cf0b020222b7caeee42)
2019-01-03T1147: Fix SNMP config file generation on newly installed systemsChristian Poessinger
2019-01-02Initial implementation of declarative config dict retrieval library.Daniil Baturin
2019-01-02Merge pull request #64 from daniel-pro/T1119Daniil Baturin
T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11
2019-01-01T1119: 'show vpn ipsec sa' shows tunnel twice in 1.2.0-RC11Daniel
Removed duplicates from "connections" list.
2018-12-31Merge branch 'current' into cruxDaniil Baturin
2018-12-31T1128: restart SNMP on hostname change.Daniil Baturin
2018-12-31T1112: migrate BGP redistribute metric and route-map options too.Daniil Baturin
2018-12-31T1112: migrate BGP redistribute options (patch by Merijn).Daniil Baturin
2018-12-31T1108: warn the user and exit if there are no established IPsec SAs.Daniil Baturin
2018-12-18Update show_ipsec_sa.pyDaniel
2018-12-17Merge pull request #62 from daniel-pro/T1104Daniil Baturin
T1104 : "show vpn ipsec sa" crashes
2018-12-16Update show_ipsec_sa.pydaniel-pro
2018-12-16Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2018-12-16Merge branch 'current' into cruxDaniil Baturin
2018-12-16Revert "T1087: Firewall on Wireguard Interface implementation"Daniil Baturin
This reverts commit 51f61991092a163f680e4ec8f122e73f4074ddf9. It's not how it's done, those templates are generated by a script in vyatta-cfg-firewall. If we are planning a firewall overhaul in 1.3.x, there's no reason to transplant the old approach to new code.
2018-12-11T1087: Firewall on Wireguard Interface implementationhagbard
2018-12-09T1091: extend DNS forwarding/DNSSEC completion help textChristian Poessinger
(cherry picked from commit f968d0846abc416c0eac51aeff55551f9df2dea0)
2018-12-09T1091: extend DNS forwarding/DNSSEC completion help textChristian Poessinger
2018-12-09T1091: add DNS forwarding completion helpers for DNSSECChristian Poessinger
(cherry picked from commit f9ad571f6d2a6238fe841f8eb1acf7daced1c7d5)
2018-12-09T1091: add DNS forwarding completion helpers for DNSSECChristian Poessinger
2018-12-07T1060: build fix for wrong config-version numberChristian Poessinger
Commit 9d35610c173 ("T1060: add missing version file for webproxy") assumed that there is a webproxy config version of 0 but we already have 1. This lead to duplicate files detected by apt.
2018-12-07Merge pull request #61 from dsteinkopf/currentChristian Poessinger
T1060: Add webproxy migration script (proxy-bypass -> whitelist).
2018-12-03Merge branch 'current' into cruxDaniil Baturin
2018-12-03T956: display SA traffic counters in human-redable units.Daniil Baturin
2018-12-03T956: correct IKE proposal string parsing for SAs with non-zero counters.Daniil Baturin
2018-12-02T1060: Add webproxy migration script (proxy-bypass -> whitelist).Dirk Steinkopf
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-02 14:29:25 +0000