search for: zioproto

Hi, Here is my goal. Can I do this with tinc? I have a mobile broadband card, and my machine runs a webserver, email server, and a public vcs. But I have four problems: 1. Port 25 is blocked so I have to use an elaborate convulsion to allow me to send mails. 2. It has a dynamic IP address so I have to use dynamic DNS. 3. There's no way for me to set up reverse DNS (that I know of). 4. They

Hello Maxim, did you send the pull request ? Please send an email to the list when you do thank you Saverio 2016-11-05 10:09 GMT+01:00 Saverio Proto <zioproto at gmail.com>: > Hello Maxim, > thanks for stepping in ! > > so, I am not even sure how it works for commit rights, because the > people I was in touch with now forked the project to LEDE. > > Also, I always committed to OpenWrt packages but I see my commits are > there a...

> Currently, i have nodes with PMTUDiscovery =yes and ClampMSS = yes. Hello, these features were introduced in 1.0.13 correct ?? I also understand that the two settings are by default "yes" if not explictly set to "no" in the config file. what may happen if I have a network with mixed versions from 1.0.11 and 1.0.13, where the older daemons do not implement that feature

For tinc users on OpenWRT: https://dev.openwrt.org/changeset/29137 ciao :) Saverio

Hello, I'm upgrading to 1.0.14 I did some manual tricks in my Gentoo Portage because seems that upstream Gentoo did not update the portage yet, does anybody know how to Contact Gentoo Linux to have the package updated ? Question 1: I notice in my log file I had many entries like this with 1.0.13: 1307284053 tinc.ninux[15152]: Lost 251 packets from GREG1 (151.28.100.141 port 655)

Hi all, I'm new to this list so I don't know if this topic was recently discussed. Here in Rome with other friends of mine we extensively used tinc-vpn as backend layer of our network, now we need a clever key management of the keys to meet our goals. Now ZioProto (that Guus meet at FOSDEM) says to me that something is going to be developed in this area, so I like to know what kind of ideas are on the roadmap. Thanks

Let me start with what I'm trying to accomplish. I use tinc mainly to get to subnets behind the daemons and I don't control those subnets and can't guarantee overlap. I was using routing mode and reconfiguring tinc every time i needed to get to a subnet behind a specific daemon. Then I came across switch mode that allowed me to simply add routes based on the IP address of the tinc

Hi, we are using Tinc in our Freifunk Network in Oldenburg for internode connections over the internet. So Tinc is running on OpenWrt 10.03 on Dlink Dir-300 Routers. We all have enough internet bandwith (1,6 MB/sec and more) but we only get a maximum speed of ~350KB/sec between two tinc nodes because then tinc uses 99% of the cpu. Is it possible to get more Speed with tinc on this machines?

Saverio, it looks I'm using tinc on OpenWRT packaged by you) Thank you for it Is something there in that task, what is harder than https://wiki.openwrt.org/doc/devel/packages ? Anyway, I want to try On Thu, Nov 3, 2016 at 5:57 PM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Thu, Nov 03, 2016 at 03:43:42PM +0100, Saverio Proto wrote: > > > I am not using OpenWrt a

...g Product: iptables Version: unspecified Platform: x86_64 OS/Version: Gentoo Status: NEW Severity: normal Priority: P1 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: zioproto at gmail.com CC: zioproto at gmail.com Adding a rule with a wrong protocol name makes iptables segmentation fault iptables -A INPUT -p udddp --dport 655 -j ACCEPT tested on gentoo with net-firewall/iptables-1.4.3.2 -- Configure bugmail: http://bugzilla.netfilter.org/userprefs...

Hello, today I was trying to do something easy I did with openvpn before. I have a server, and a few clients will connect to the server and route their internet traffic into the tunnel. The server then makes NAT. To configure clients in OpenVPN there was this directive called: --redirect-gateway that basically (copy and paste from OpenVPN man): 1) Create a static route for the --remote address

Hi, I upgraded some of my Tinc nodes from 1.0.8 recently and found something strange. All of a sudden, the vpn would not work as a full-mesh. Certain nodes were not contactable. I re-generated my rsa-keys, and checked my configuration. My vpn uses the following in tinc.conf, as I am routing both ipv4 and v6. === name = node1 mode = switch AddressFamily = any PMTU = 1280 PMTUDiscovery = yes

...is possible for daemons to > only accept traffic from specific daemons in switch mode. If so, what am I > doing wrong with my subnet configurations that won't let me even ping from > one daemon to the server when TunnelMode is yes? check if this patch still applies: https://github.com/zioproto/fairvpn/blob/master/tarballs-patches/tinc/tinc-1.0.13-fairvpn.patch it should work. By default tinc will try to have a full mesh of connection between the nodes of the VPN. With this patch and TunnelServer yes you will have the data connections only where you have a explicit ConnectTo statement....

Hello, to start could you tell us what version of OpenWrt are you using ? Is it a stable release ? and what version of tinc you are trying to install ? if it is just a problem with the tun/tap module, on OpenWrt you have not modprobe, so you should use insmod insmod tun Saverio

...75% once I throw something at it. I think it might be the compute resources (memory,cpu) that is causing the metaROUTER VM to suffer. Has anyone played around with metaROUTER and Openwrt ? Regards Yazeed Fataar <yazeedfataar at hotmail.com> On Sun, Jan 24, 2016 at 9:56 AM, Saverio Proto <zioproto at gmail.com> wrote: > Hello, > > to start could you tell us what version of OpenWrt are you using ? Is > it a stable release ? > and what version of tinc you are trying to install ? > > if it is just a problem with the tun/tap module, on OpenWrt you have > not modprobe,...

I received this PR for the tinc package on OpenWrt. https://github.com/openwrt/packages/pull/7646/files Not sure if this is something that is better going upstream instead. Moreover, from a security point of view, is it okay to merge this patch ? thank you Saverio

any feedback on this ? thank you Saverio Il giorno gio 13 dic 2018, 11:49 Saverio Proto <zioproto at gmail.com> ha scritto: > I received this PR for the tinc package on OpenWrt. > > https://github.com/openwrt/packages/pull/7646/files > > Not sure if this is something that is better going upstream instead. > > Moreover, from a security point of view, is it okay to merge...

Hi, My CentOS has upgrade the openssl to 1.1.1a, and I thought my tinc(1.0.35) installed by yum will use the new openssl, but it looks not the fact. So is tinc(1.0.35) support openssl 1.1.1a? If so, how can I make it running in this version of openssl?

...compared with previous version, I doubt tinc doesn’t use the new OpenSSL. Also, I doubted about whether tinc 1.0.35 support OpenSSL 1.1.1a as well, should I use the lastest tinc 1.1pre7 to qualify the support of openssl 1.1.1a. The reason I’m trying this is to achieve TLS 1.3. Saverio Proto <zioproto at gmail.com>于2019年2月19日 周二下午4:39写道： > Hello, > > why it does not look like that ? Could you please explain what you mean ? > > thank you > > Saverio > > Il giorno lun 18 feb 2019 alle ore 15:02 Bright Zhao > <startryst at gmail.com> ha scritto: > > &gt...

There is a way to update the dot file more frequently than once a minute ? thanks :) Saverio