Age | Commit message (Collapse) | Author |
|
When NTP is configured on the system, it not only acts as a client
for the configured servers, but also as a server. Although the server
is only available as a time source, it still represents a service that
the user hasn't specifically enabled.
This commit sets the default configuration of NTP to disallow all
external access, so the system acts purely as a client by default, and
also introduces the ability to configure which addresses / subnets are
allowed to both query and use it as a time source. If the servers
configured are specified as host names, these are resolved to IP
addresses before being added to ntp.conf, with the same process carried
out after name server changes.
syntax 'set system ntp client address'
Bug #94 http://bugzilla.vyos.net/show_bug.cgi?id=94
|
|
|
|
Adjusting the mtu node prority from 381 to 382 so child interfaces
set their MTU after the parent interface. This was reported for
multiple vifs when setting the MTU to 9000 for jumbo frames, although
it only exhibited it when more than one vif was configured.
Bug #473 http://bugzilla.vyos.net/show_bug.cgi?id=473
|
|
|
|
Bug #389: Add RFC2136 configuration options for ddclient 3.8.2
|
|
|
|
|
|
Seems to work with 319.
|
|
When configuring DNS fowarding, allow multiple servers to be specified
when setting domain overrides, in order to allow Dnsmasq to gracefully
handle unavailable nameservers.
Bug #408 http://bugzilla.vyos.net/show_bug.cgi?id=408
|
|
Add a couple of configuration options to DDNS, to allow the use=web
option from ddclient when determining the external IP address. This
will allow DDNS to be correctly updated when behind a NAT device.
Syntax:
set service dns dynamic interface eth0 use-web url (url to use)
set service dns dynamic interface eth0 use-web skip (search for this)
Bug #455 http://bugzilla.vyos.net/show_bug.cgi?id=455
|
|
|
|
|
|
|
|
If radvd is not running, the pgrep command returns an empty string, not zero.
Reported-by Carl Byington <vyos-bug@five-ten-sg.com>
|
|
Remove the default value for the console speed node as this is already
set by the system. Update the help text to display the defaults for
both serial and Xen consoles.
|
|
Add support for using the no-ip.com dynamic DNS service with VyOS.
Bug #436 http://bugzilla.vyos.net/show_bug.cgi?id=436
|
|
Add support for using the afraid.org dynamic DNS service with VyOS.
This requires the updated ddclient package built for VyOS to work
correctly as the version currently in squeeze lacks support for the
freedns protocol.
Bug #287 http://bugzilla.vyos.net/show_bug.cgi?id=287
|
|
In the inital state, the "link" option was not usable,
so I moved the "link" directory under "node.tag".
Aftewards, the "link" option became usable.
|
|
|
|
Bug #391: Expose rsyslog log level 'all' in CLI
|
|
|
|
Fix Bug#382 Removing system ipv6 forwarding causes script error.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
options
|
|
Remove the comment from the plaintext-password node regarding empty
encrypted password values as you can't set them as empty.
|
|
You can't create a user without a password, but once this user is
created, you can then delete the encrypted password. However, deleting
the encrypted password from the config doesn't actually remove the
password on the system and in addition breaks the config on reboot,
resulting in the system login node being entirely absent.
This fix ensures that the encrypted password is set to "!" when the
config node is deleted, removing the password login capability for this
account but still allowing SSH RSA key login.
Bug #336 http://bugzilla.vyos.net/show_bug.cgi?id=336
|
|
|
|
|
|
and whatever else we have.
|
|
|
|
|
|
|
|
|
|
Add support for VXLAN
|
|
Rename allow-dhcp-nameservers to disable-dhcp-nameservers and update
the logic to take the new meaning into account. The option is now also
typeless, so the node is either absent (default) or present (enabled).
Format 'set / delete system disable-dhcp-nameservers'
Linked to Bug #182 and Bug #308
Bug #314 http://bugzilla.vyos.net/show_bug.cgi?id=314
|
|
vyatta-cfg-system: expand 'set system allow-dhcp-nameservers' logic
|
|
|
|
Expand the logic in 'set system allow-dhcp-nameservers', so that in
addition to either allowing / denying DHCP related updates to
resolv.conf when the interface changes state, it will also either
add or remove the currently supplied DHCP name-servers depending on
it's state. This change in name-servers will take place immediately
on commit.
Bug #309 http://bugzilla.vyos.net/show_bug.cgi?id=309
|
|
'remote-ip' is nowt set.
|
|
Instead of simply allowing / denying DHCP related updates to resolv.conf
based on the current values of 'set system name-server', as initially
proposed for Bug #182 (http://bugzilla.vyos.net/show_bug.cgi?id=182),
this patch replaces that behaviour with a global option to allow /
deny these updates.
Add 'set system allow-dhcp-nameservers' as a boolean value that has the
default value of true, so allowing DHCP nameserver updates by default.
Bug #308 http://bugzilla.vyos.net/show_bug.cgi?id=308
|
|
(aka /proc/sys/net/ipv4/conf/$intf/proxy_arp_pvlan).
Patch contributed by Shane Short.
|
|
|
|
When the values for SysContact, SysLocation and SysDecr are written to
the snmpd.conf file, they are enclosed in backslash escaped quotes.
This isn't part of the syntax for snmpd.conf and looks wrong / could
break snmp related things, the example snmpd.conf files show these
values as unquoted.
This patch corrects the output and adds validation for the supplied
values, limiting them to a maximum of 255 printable characters
(RFC 3418).
The documentation also needs amending to take this into account.
Bug #261 http://bugzilla.vyos.net/show_bug.cgi?id=261
|