Age | Commit message (Collapse) | Author |
|
The format of the CLI specified MAC address was not validated as only addresses
with a colon as seperator are supported. Constraint has been added.
(cherry picked from commit 79af3560e7b2f88b6850739b0e30ee372c51f63b)
|
|
(cherry picked from commit da738cde326fe8974ae270de93c1bce1290aba05)
|
|
(cherry picked from commit 2656fe516907aab9321877a28ad857059a534637)
|
|
(cherry picked from commit 6b9acd904d05460d2f02850e2535c4dc3e9933af)
|
|
|
|
PPPoE server supports setting the MPPE preferences, it is implemented as node
with leafNodes for require, prefer and deny. This will render a wrong AccelPPP
configuration as it will be "None" if specified.
pppoe-server {
ppp-options {
mppe {
deny
require
}
}
}
instead it must be:
pppoe-server {
ppp-options {
mppe require
}
}
|
|
- set system lcd model
- set system lcd device
|
|
Backported changes from equuleus to add port into syslog server options.
|
|
|
|
|
|
|
|
|
|
Internally, we can accept more than one server of each type for sending dynamic DNS updates, but due to a strong check in CLI, it is not possible to add more than one server with the same protocol (except "custom", but it allows to add only one more server). The patch relaxing this limitation by allowing adding as many servers with the same protocol, as needed.
|
|
(cherry picked from commit c87616aaef53e69ddf135725bb33d105afaa6c5b)
|
|
|
|
There is no seclevel "priv" it was a typo and must be "priv"
|
|
|
|
|
|
|
|
syslog: Improved constraint for host/IP check
|
|
There is no legit reason to not allow ports < 1024.
|
|
|
|
previous state
|
|
(cherry picked from commit 742da889afa4375d5b6cb98dada7f2d3ec2f0326)
|
|
(cherry picked from commit 85c9e0200a4619f0388b7fd7ba9a03f4be933ef5)
|
|
(cherry picked from commit 2cd0498f50296d5d9e80b6acafb63dd3d45fb5cd)
|
|
(cherry picked from commit 87ddd50f55cd80873e295d66803ceb072de6fd74)
|
|
- RADIUS shaper settings
(cherry picked from commit d4556b31e920197e1c58febb8d87a1765bfea81f)
|
|
- implementation for locally definied users
(cherry picked from commit c1dc93391b9ec1785ab648fa7685521c85774d28)
|
|
(cherry picked from commit 47c368136342f235765e1a0b611f0783a73ce299)
|
|
(cherry picked from commit 6b7453ea7d2b17e3988895e4fd8a5e8b634a8f90)
|
|
(cherry picked from commit 334677572aef752b0bf2c893bd14bdf6f801bb4b)
|
|
Conflicts:
Makefile
|
|
(cherry picked from commit 8ae02a738df9746ad648a9611ae03e62b5af9e5d)
|
|
(cherry picked from commit 6b25ed2a44dde77f5cbfbf68fb4f5f661a34c1c0)
|
|
|
|
Poessinger et al.
|
|
The SNMPv3 TSM is very complex and I know 0 users of it. Also this is untested
and I know no way how it could be tested. Instead of carrying on dead and
unused code we should favour a drop of it using a proper config migration
script.
(cherry picked from commit 556b528ef9cc1eca9d142ebe1f8f88cd02d536da)
|
|
As of the SNMP specification an SNMP engine ID should be unique per device.
To not make it more complicated for users - only use the global SNMP engine ID.
(cherry picked from commit d523111279b3a9a5266b442db5f04049a31685f7)
|
|
(cherry picked from commit 7f9dceaa7898d6418edcdf148b52b66ccd3bd36a)
|
|
(cherry picked from commit 03c09b1b0d7dfdab9fc87bc7b017455c45141ced)
|
|
(cherry picked from commit 6a6634b02d73cc93cd7368cf2290940b57fae9c7)
|
|
(cherry picked from commit 87df87e3983e120ad171ae9dc2966309fc14fcd8)
|
|
|
|
to follow the established convention.
|
|
Implementation by Daniil Baturin and John Estabrook.
|
|
|
|
Netmasks (both IPv4 and IPv6) that are allowed to use the server. The default
allows access only from RFC 1918 private IP addresses. Due to the aggressive
nature of the internet these days, it is highly recommended to not open up the
recursor for the entire internet. Questions from IP addresses not listed here
are ignored and do not get an answer.
https://docs.powerdns.com/recursor/settings.html#allow-from
Imagine an ISP network with non RFC1918 IP adresses - they can't make
use of PowerDNS recursor.
As of now VyOS hat allow-from set to 0.0.0.0/0 and ::/0 which created an open
resolver. If there is no allow-from statement a config-migrator will add
the appropriate nodes to the configuration, resulting in:
service {
dns {
forwarding {
allow-from 0.0.0.0/0
allow-from ::/0
cache-size 0
ignore-hosts-file
listen-address 192.0.2.1
}
}
}
(cherry picked from commit dc0f641956d002fa8588ef8d1213791cf36e92f2)
|
|
(cherry picked from commit 36f8a1e4e5966c43c5330ff223fa2ef07d346b6e)
|
|
- added a validator for checking if the address is any cidr noted address
(cherry picked from commit 2ee0eff1bd04ef02b0769341eee22543f8011b68)
|