VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls 2023-09-18T18:26:51+00:00 2023-09-18T18:26:51+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2023-09-18T18:24:22+00:00 urn:sha1:fb3ef9af5e394aa25692003fb3c185bfedefe3cb - Moves MSS node out of `tcp-flags.xml.i` and into `tcp-mss.xml.i` - Update smoketest to verify TCP flag matching 2022-09-22T17:44:50+00:00 Christian Poessinger christian@poessinger.com 2022-09-22T17:38:14+00:00 urn:sha1:e1d3fd0b29a1178e775cbc86f6c0011a682506ba This extends commit 28573ffe4f ("xml: T4698: drop validator name="range" and replace it with numeric"). The first version allowed both a range and discrete numbers to be validated by the numeric validator. This had a flaw as both 22 and 22-30 were valid at the same time. The generic "port-number.xml.i" building block only allows a discrete number. Now if a user set port 22-30 for e.g. SSH the daemon did no longer start. This is why range validation must be explicitly enabled. 2022-09-16T07:16:17+00:00 Christian Poessinger christian@poessinger.com 2022-09-16T07:15:21+00:00 urn:sha1:28573ffe4fd939a266006840f999c99babe89dce After T4669 added support for range validation to the OCaml validator there is no need to keep the slow Python validator in place. Raplace all occurances of <validator name="range" argument="--min=1 --max=65535"/> with <validator name="numeric" argument="--range 1-65535"/>. 2022-08-18T21:28:28+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2022-08-18T17:09:17+00:00 urn:sha1:fd15f9d2ab6a7e5bbc07ff2e8b10c064984492ce Ability to drop|accept packets based on TCP MSS size set firewall name <tag> rule <tag> tcp mss '501-1460' 2022-01-17T11:28:12+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-01-15T11:48:48+00:00 urn:sha1:64668771d5f14fc4b68fff382d166238c164bdde * Add support for ECN and CWR flags