summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2019-02-28T1272: send VRRP messages from the base interface in RFC-compliant mode only ↵Daniil Baturin
in unicast mode (patch by Johan Fredin).
2019-02-24[tftp] T1261: always adjust directory permissions of tftprootChristian Poessinger
2019-02-24[tftp] T1261: bugfix allow-upload handlingChristian Poessinger
2019-02-24[tftp] T1261: reorder DAEMON_ARGSChristian Poessinger
2019-02-24[tftp] T1261: bugfix listening on multiple IP addessesChristian Poessinger
tftp-hpa which is the TFTP daemon used by VyOS does not support listening on multiple IP adresses. With this limitation we will start one TFTP daemon instance per configured listen-address via systemd.
2019-02-22feature: static-host-mapping - made IP address (param inet) mandatoryhagbard
2019-02-22removed a debugger print I forgut during mergehagbard
2019-02-22Fixes: T1262 - dhcp requested WAN ip address doesn't get search parameter in ↵hagbard
/etc/resolv.conf
2019-02-22pdns_recursor check improved, spits out a message for /var/run if it's not ↵hagbard
running.
2019-02-22bugfix: static-mapping-host alias not mandatory, verification adjustedhagbard
2019-02-21Fixes: T1257: implement 'set system static-host-mapping' in host_name.py and ↵hagbard
remove old function calls
2019-02-21[IPsec] T1260: VICI-based implementation of "show vpn ipsec sa"Daniil Baturin
2019-02-21[dhcp] T1211: avoid blank DHCP hostnames taking down DNSChristian Poessinger
2019-02-21T1256: Execute "show ipsec vpn ipsec sa" returns incorrect resultsDaniel Pro
Not sure it's a normal case scenario, the one highlighted in T1256. To managed it I changed the "if" logic.
2019-02-20T1255: read in modifications from third party scripts before altering /etc/hostsChristian Poessinger
E.g. DHCP server can update /etc/hosts with somw mappings - those mappings were lost on any subsequent invocation of host_name.py
2019-02-20T1255: add newlines for 3rd party script amendmentsChristian Poessinger
2019-02-19fixes: T1254 - generate wireguard keypair fails when executed on the isohagbard
- keypair can now be generated and used from the running iso to create wg tunnels on the fly
2019-02-17hostname: bugfix for overwriting search domainsChristian Poessinger
2019-02-16Add header to resolver configuration fileChristian Poessinger
2019-02-16Temporary remove hostname test to get module to compile againChristian Poessinger
2019-02-16hostname: additional test case fixesChristian Poessinger
2019-02-16Tests: fix hostname testsChristian Poessinger
Commit 3d3eccd687 ("T1174: migrate local hostname/DNS handling to vyos-1x") changed a lot of the internal data handling for setting the systems host and domain name information.
2019-02-14T1174: migrate local hostname/DNS handling to vyos-1xChristian Poessinger
2019-02-14[vyos.configtree] T1248: add a function for node copyingDaniil Baturin
Also improve sanity checks in the rename function and add unit tests for copy and rename.
2019-02-10T1213: ddclient: proper enquote web-skip parameterChristian Poessinger
2019-02-08T1234: add missing option when processing dhcp-relay packetsChristian Poessinger
2019-02-05T1231: Remove cache file of 'service dns dynamic'Christian Poessinger
When deleting or changing "service dns dynamic" the cache file of ddclient is not removed, leading to abandoned host names which might be already gone.
2019-02-04enhancement: T1225 - wireguard implement 'set int wireguard wg0 peer name ↵hagbard
disable' to disable single peers
2019-02-01[broadcast-relay] T1224: fix missing newline between comment and options.Daniil Baturin
2019-01-30Fix: T1217 - cant delete wireguard wg0 interfacehagbard
2019-01-30T1213: fix ddclient when no server is givenChristian Poessinger
2019-01-30Add build time tests for NTPkamijin_fanta
2019-01-30T1160: fix (ro|rw)community ACLChristian Poessinger
WHen building up the SNMP v2 community ro/rw access all hosts from a INET version could access even when the community was locked to one INET family. Example #1: set service snmp community bar network 172.16.0.0/12 Allowed access only to IPv4 network 172.16.0.0/12 but it allowed acces from IPv6 ::/0. Example #2: set service snmp community baz network 2001:db8::/64 Limited IPv6 access to 2001:db8::/64 but IPv4 was open to 0.0.0.0/0
2019-01-26T1193: add some tests for the config parser.Daniil Baturin
2019-01-26T1193: remove the commands pipe since it's no longer needed.Daniil Baturin
2019-01-26[webproxy] T1203: do not attempt to migrate proxy-bypass if it doesn't exist.Daniil Baturin
2019-01-25Fix: T1178: Scheduled script breaks ability to modify configurationhagbard
2019-01-22Revert "Fix: T1178 - Scheduled script breaks ability to modify configuration"hagbard
This reverts commit 632893abf5c7bf935d866462a107ed1eef1747b3.
2019-01-22Revert "adjusted unit test"hagbard
This reverts commit 0d80b06ccd33fc2a0001b8641ce45070f0e8726d.
2019-01-21adjusted unit testhagbard
2019-01-21Fix: T1178 - Scheduled script breaks ability to modify configurationhagbard
2019-01-12Correct the command suggestion in the "show vpn ipsec sa" scriptDaniil Baturin
in case when no active SAs are found.
2019-01-12T1175: add support for DMVPN connections to the "show vpn ipsec sa" script.Daniil Baturin
2019-01-12T1041: make upstream DNS server optionalChristian Poessinger
The name-server option under "service dns-forwarding" was never mandatory so users never needed to specify an upstream server. With the recent switch to PowerDNS recursor in VyOS 1.2.0 we will act as a full DNS recursor when there is no upstream DNS server configured.
2019-01-08Merge pull request #63 from daniel-pro/T1077hagbard-01
T1077: Update show_ipsec_sa.py
2019-01-07Fix: T1168 - Upgrade: 1,1,7 -> 1.2.0-epa2 (command conversion)hagbard
2019-01-06Fix: T1162 - WireGuard: Unable to modify tunnels - KeyError: 'state'hagbard
2019-01-06T1129: replace quotes when dealing with 'subnet/global-parameters'Christian Poessinger
2019-01-06T1129: fix handling of raw DHCP 'subnet-parameters'Christian Poessinger
subnet-parameters were not added to the resulting configuration.
2019-01-06T1159: correct handling of SAs without PFS in "show vpn ipsec sa".Daniil Baturin