search for: keyexpire

...ebben. De computers zijn verbonden met een switch. Dit is de inhoud van mijn bestanden: Op computer 1 genaamd suse met ip 192.168.0.99 netmask 255.255.255.0 /etc/tinc/tinc.conf: Name = suse TapDevice = /dev/tun PrivateKeyFile = /etc/tinc/test-vpn/rsa_key.priv ConnectTo = Arnout Hostnames = no KeyExpire = 3600 PingTimeout = 60 /etc/tinc/test-vpn/tinc-up #!/bin/sh ifconfig eth0 down ifconfig eth0 hw ether fe:fd:00:00:00:00 ifconfig eth0 192.168.0.99 netmask 255.255.255.0 ifconfig eth0 -arp /etc/tinc/test-vpn/tinc.conf Name = suse TapDevice = /dev/tun PrivateKeyFile = /etc/tinc/test-vpn/rsa_key...

Hi Guys, Say when tinc is running all good, the "server" contains all the key files of clients. If we remove the key file for client A during run, how long before does server find out the key file is gone? I see a "KeyExpire" option in the conf file, is this the time? In my own experiment, the client will still be able to connect to the tinc network even if the key file is being removed. Of course the connection will be gone if I restart tinc server on the client side. Thank you. Heng -------------- next part --...

...0 eth1 172.17.0.0 * 255.255.0.0 U 0 0 0 eth0 192.168.0.0 * 255.255.0.0 U 0 0 0 tap0 default 172.17.255.254 0.0.0.0 UG 0 0 0 eth0 :: tinc.conf :: Name=glenn Device=/dev/tap0 ConnectTo = melc KeyExpire = 30000000 PrivateKeyFile = /etc/tinc/boppen/rsa_key.priv :: tinc-up :: #!/bin/sh ifconfig tap0 hw ether fe:fd:00:00:00:00 ifconfig tap0 192.168.5.250 netmask 255.255.0.0 ifconfig tap0 -arp ::hosts/melc :: Subnet = 192.168.1.0/24 Address = 194.165.252.37 Port = 655 TCPOnly = yes -----BEGIN RSA PU...

Hello, I was following the instructions at https://cran.r-project.org/bin/linux/ubuntu/#secure-apt but encountered this message upon apt-get update: GPG error: http://cran.rstudio.com trusty/ Release: The following signatures were invalid: KEYEXPIRED... And then the following on apt-get install: WARNING: The following packages cannot be authenticated! Investigating a little, it looks like Michael Rutter's key expired today: http://keyserver.ubuntu.com:11371/pks/lookup?op=vindex&fingerprint=on&search=0x51716619E084DAB9 I thought...

...e is > removed after connection > Hi Guys, > > Say when tinc is running all good, the "server" contains all the key files > of clients. > If we remove the key file for client A during run, how long before does > server find out the key > file is gone? I see a "KeyExpire" option in the conf file, is this the > time? > > In my own experiment, the client will still be able to connect to the tinc > network even if the key file is being removed. Of course the connection > will be gone if I restart tinc server on the client side. > > Thank you....

...rrier:0 collisions:35 RX bytes:1312249 (1.2 Mb) TX bytes:8034730 (7.6 Mb) Now I want to create a VPN between 192.168.1.0/24 on routerA and 192.168.2.0/24 on routerB. Here is what my config files look like on routerA: --- tinc.conf --- Name = routerA TapDevice = /dev/net/tun KeyExpire = 30000000 PrivateKeyFile = /etc/tinc/vpn/rsa_key.priv --------------------- --- tinc-up --- #!/bin/sh /sbin/ifconfig vpn hw ether fe:fd:0:0:0:0 /sbin/ifconfig vpn 192.168.1.1 netmask 255.255.0.0 -arp ------------------ --- hosts/routerA --- Address = 123.123.123.123 Subnet = 192.168.1.0/24 -----BE...

...========= Central Node (10.0.0.1) configurations: ============================================================================== --------------------------------------- tinc.conf --------------------------------------- Name=central Mode=router AddressFamily=any BindToInterface=eth0 MaxTimeout=333 KeyExpire=888 PingInterval=88 PingTimeout=4 #Forwarding=kernel TunnelServer=yes --------------------------------------- hosts/central --------------------------------------- Compression=10 PMTUDiscovery=yes Subnet=10.0.0.0/28 Subnet=0.0.0.0/0#10 ============================================================...

...TapDevice = /dev/tap0 PrivateKeyFile = /usr/local/etc/tinc/test-vpn/rsa_key.priv PrivateKeyFile = /usr/local/etc/tinc/test-vpn/rsa_key.priv connectTo = pc2 connectTo = pc1 Hostnames = no Hostnames = no KeyExpire = 3600 KeyExpire = 3600 PingTimeout = 60 PingTimeOut = 60 /usr/local/etc/tinc/tinc-up /usr/local/etc/tinc/tinc-up #!/bin/bash #!/bin/bash ifconfig ta...

On Tue, Apr 10, 2018 at 03:36:08PM +0200, Hans de Groot wrote: > hosta  <--> hostb  <-->  hostc > > Hosta and hostc are not directly connected via tinc. But both are conncted > via hostb (I called my network tincnet). This works fine I can ssh from > hosta to hostc and vice versa without any problems. > > hostc is in a whitelisted iprange at some service

...gateway ip using ip route? I do have a subnet 0.0.0.0 at hostb so that is probably why traffic goes out via hostb when I do not have the specific subnet/ip at hostc Regards Hans de Groot configs at hosta tinc.conf Name = hosta Device =/dev/net/tun Hostnames = No connectto = hostb Mode = Router KeyExpire = 3600 PingInterval = 10 PingTimeout = 15 PrivateKeyFile = /etc/tinc/tincnet/rsa_key.priv ProcessPriority = high PMTUDiscovery = yes tinc-up #!/bin/bash ifconfig $INTERFACE 192.168.230.21 netmask 255.255.255.0 route add -net 192.168.230.0 netmask 255.255.255.0 gw 192.168.230.1 ip route add default...

...uter) > >b. Company ? TINC:10.0.0.2/32, LAN:192.168.2.1/32 (Windows 7 PC) > > > >TINC Configuration ? Home (OpenWrt Router) > > > >Tinc.conf > >name=Home > >Interface=tinc0 > >PrivateKeyFile=/etc/tinc/Home/rsa_key.priv > >Mode=router > >KeyExpire=3600 > >AddressFamily=ipv4 > >ProcessPriority=normal > >PingTimeOut=5 > >PingInterval=60 > > > >Tinc-up > >ifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0 > >route add -net 192.168.2.0 netmask 255.255.255.0 dev tinc0 > >route add -net 192.16...

...fairly basic VPN configuration between two networks: ------- Site A: ------- --- tinc-up --- #!/bin/sh /sbin/ifconfig tap0 hs ether fe:fd:00:00:00:00 /sbin/ifconfig tap0 10.11.1.2 netmask 255.0.0.0 /sbin/ifconfig tap0 -arp ---- tinc.conf --- Name = orca Hostnames = no InterfaceIP = 63.108.71.7 KeyExpire = 30000000 PrivateKeyFile = /etc/tinc/.rsa-private TapDevice = /dev/tap0 ------- Site B: ------- ---- tinc-up ---- #!/bin/sh /sbin/ifconfig $NETNAME hs ether fe:fd:00:00:00:00 /sbin/ifconfig $NETNAME 10.11.15.1 netmask 255.0.0.0 /sbin/ifconfig $NETNAME -arp ----- tinc.conf ---- ConnectTo = o...

...literally filled with hundreds of flush....would block messages. All hosts are running latest tinc-1.0 stable. The server is configured as a bridge and is relaying multicasts continuously. Below is the server configuration. Name = tserver AddressFamily = ipv4 BindToAddress = 192.168.21.254 30000 KeyExpire = 28800 ReplayWindow = 0 DeviceStandby = no DeviceType = tap DirectOnly = yes Mode = hub ProcessPriority = high ClampMSS = yes Cipher = none Digest = none MACLength = 0 PMTUDiscovery = yes I have taken out what I believe is performance sapping options in an effort to boost performance. All client...

...e, with dynDNS and a laptop using a dial up connection the host at home: tinc-up (works fine): #!/bin/sh ifconfig tap0 down ifconfig tap0 hw ether fe:fd:00:00:00:00 ifconfig tap0 172.16.11.254 broadcast 172.16.11.255 netmask 255.255.255.0 ifconfig tap0 -arp tinc.conf: Name = janus Hostnames = no KeyExpire = 3600 PingTimeout = 60 PrivateKeyFile = /etc/tinc/p21.net/rsa_key.priv TapDevice = /dev/tap0 /sbin/ifconfig tap0 tap0 Link encap:Ethernet HWaddr FE:FD:00:00:00:00 inet addr:172.16.11.254 Bcast:172.16.11.255 Mask:255.255.255.0 UP BROADCAST RUNNING NOARP MULTICAST MTU:15...

...ld like to distribute ipv6 via the tinc tunnel. My tinc.conf: ------------ Name=server AddressFamily=ipv4 Device=/dev/net/tun PrivateKeyFile=/etc/tinc/fvhglobalnet/rsa_key.priv GraphDumpFile=|/usr/bin/dot -Tpng -o /var/www/htdocs.keetweej.vanheusden.com/stats/tinc-fvh-network-graph.png Mode=switch KeyExpire=299 MACExpire=301 PingInterval=59 PingTimeout=6 My tinc-up is: ------------- #! /bin/sh /sbin/ifconfig $INTERFACE 172.16.0.1 netmask 255.240.0.0 /sbin/ifconfig $INTERFACE add 2001:888:13b3::1/64 /sbin/sysctl -w net.ipv6.conf.all.forwarding=1 /etc/rc2.d/S50radvd restart And my /etc/radvd.conf is:...

...? LAN (TINC Server) a. Home ? TINC:10.0.0.1/32, LAN:192.168.1.1/32 (OpenWrt Router) b. Company ? TINC:10.0.0.2/32, LAN:192.168.2.1/32 (Windows 7 PC) TINC Configuration ? Home (OpenWrt Router) Tinc.conf name=Home Interface=tinc0 PrivateKeyFile=/etc/tinc/Home/rsa_key.priv Mode=router KeyExpire=3600 AddressFamily=ipv4 ProcessPriority=normal PingTimeOut=5 PingInterval=60 Tinc-up ifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0 route add -net 192.168.2.0 netmask 255.255.255.0 dev tinc0 route add -net 192.168.3.0 netmask 255.255.255.0 dev tinc0 home/hosts/Home Address=Home...

...-- Gw1 -> tinc-up #!/bin/bash /sbin/ifconfig tap0 hw ether fe:fd:00:00:00:00 /sbin/ifconfig tap0 192.168.1.1 netmask 255.255.255.0 /sbin/ifconfig tap0 -arp /sbin/route add -net 192.168.2.0 dev tap0 netmask 255.255.255.0 Gw1 - > tinc.conf PrivateKey = xxxxxxxx Name = gwA TapDevice = /dev/tap0 KeyExpire = 30000000 -------------------------- Gw2 -> tinc-up #!/bin/bash ifconfig tap0 hw ether fe:fd:00:00:00:00 ifconfig tap0 192.168.2.1 netmask 255.255.255.0 ifconfig tap0 -arp route add -net 192.168.1.0 dev tap0 netmask 255.255.255.0 Gw2 -> tinc.conf PrivateKey = xxxxx Name = gwB ConnectTo = gw...

We run tinc in a linux environment in which it sits there waiting for connections from the clients. All clients are configured to only have one ConnectTo which points to this server. We're seeing in the server log that as soon as a client's connection is activated, a whole bunch of "Flushing x bytes to that host would block" is logged and the whole vpn is bogged down and has

...code to tinc that provides better support for that use case: https://github.com/gsliepen/tinc/pull/166 > Regards > > Hans de Groot > > > configs at hosta > tinc.conf > Name = hosta > Device =/dev/net/tun > Hostnames = No > connectto = hostb > Mode = Router > KeyExpire = 3600 > PingInterval = 10 > PingTimeout = 15 > PrivateKeyFile = /etc/tinc/tincnet/rsa_key.priv > ProcessPriority = high > PMTUDiscovery = yes > > tinc-up > #!/bin/bash > ifconfig $INTERFACE 192.168.230.21 netmask 255.255.255.0 > route add -net 192.168.230.0 netmask 25...

...that are to be connected via tinc, and each host should only have _one_ IP address (i.e. nmask is /32), would the following configuration work (in the context of the recent routing problems pointed out by users) ? foo's configuration: /etc/tinc/vpn1/tinc.conf -- Name = foo ConnectTo = bar KeyExpire = 3600 PingTimeout = 60 PrivateKeyFile = /etc/tinc/vpn1/rsa_key.priv TapDevice = /dev/tap0 /etc/tinc/vpn1/hosts/bar -- Subnet = 192.168.1.2/32 Address = a.b.c.d Port = 655 -----BEGIN RSA PUBLIC KEY----- […] -----END RSA PUBLIC KEY----- /etc/tinc/vpn1/tinc-up -- #!/bin/sh ifconfig tap0 down ifco...