similar to: tinc SECURITY INFORMATION - Unauthorized access to VPN

On Sun, 11 Jun 2000, David Summers wrote: > Thanks for the great software package! The question I have is this: Thank you :) > My goal is to set up a triangle topology VPN between three sites and run > OSPF routing on all the sites so that if a link goes down between any two > sites the OSPF routing will reroute the packets that used to go between > the sites A <-> B to A

Hello all, I've been playing with tinc to setup a wan between two offices of the company that I work for. I'm partially there but having a slight problem. tinc comes up between the 2 machines (both 2.2.14 debian woody machines), and I can ping from the vpn machine at office a, and get a response from office b. However, if I ping any other machine across the wan I can't get a

I recently couldn't connect to a windowXP domain share from a winXP client.(Samba is the PDC) When I attempted to mount the share from the samba server this is the error I got. colin@Alfalfa:~/oakwood$ smbmount //buckwheat/share buckwheat/ Password: 6586: tree connect failed: ERRDOS - ERRnomem (Insufficient server memory to perform the requested function.) colin@Alfalfa:~/oakwood$ smbmount

Hello, I'm trying to set up a vpn using tinc, so I installed tinc with the rpm version on my firewall as a listener. Setting up the tap device is no problem. The file /etc/tinc/tinc.conf looks like: TapDevice = /dev/tap0 MyVirtualIP = 192.168.2.1/24 Vpnmask = 255.255.255.0 When I start the script /etc/rc.d/init.d/tinc start it says something about missing /etc/tinc/nets.boot

> - Indirectdata finally REALLY REALLY works now! > - More precise debug messages Hmmm ... I can't prove that using the CVS code I checked out this morning. Everything works like yesterday: I can ping the peer but I canot go beyond: *** SERVER *** Jun 27 09:04:56 lemon tinc.9[10186]: tincd 1.0pre3 (Jun 27 2000 08:53:56) startin g, debug level 4 Jun 27 09:04:56 lemon tinc.9[10186]:

Hello Mads, In case you never saw any mail from me, I'm tinc's co-author. It would be helpful if you'd subscribe to the tinc developpers mailing list. It's not high volume, but it eases communication. There's a problem with tinc's boot scripts (at least the debian one, but that's fixed now). The netmask of the tap devices should be larger than the one specified with

Hi, Although Im dutch too, Ill write this in english. I got a similar problem then the one on the helpforum. Ill paste my setup first server tincd.conf ---- ListenPort = 8089 MyOwnVPNIP = 192.168.100.1/24 #VpnMask = 255.255.255.0 TapDevice = /dev/tap0 Passphrases=/usr/local/etc/tinc/passphrases server tapdev ---- tap0 Link encap:Ethernet HWaddr FE:FD:C0:A8:6F:01 inet

Hi all, I have used tinc to get a vpn up and running I am almost there but have some problems at the end. My config: Building A Network 10.0.0.0 netmask 255.255.255.0 gateway 10.0.0.30 tap0 device on gateway machine 10.0.0.31 Building B Network 10.2.0.0 netmask 255.255.255.0 gateway 10.2.0.154 tap0 device on gateway machine 10.2.0.155 from network A I can ping 10.2.0.154 but not the other

Whens the point and click GUI coming out? All kidding aside, I seem to be confused about some of the network settings. Essentially all I want is a secure tunnel from machine A to B on two different physical networks, but I can't seem to get there. Just to get things figured out I've got two machines on the same physical network, mach A: 192.168.0.1, mach B: 192.168.0.3. bcast is

Hi Ivo and Guus, We are writing a book on building VPNs for Linux and a part of it describes tinc. I wanted to make sure that your opinion, as tinc authors and developers, is reflected. First, let me ask a couple of technical questions. 1. If there are two hosts, foo and bar, that are to be connected via tinc, and each host should only have _one_ IP address (i.e. nmask is /32), would the

Hello, I have 2 hosts HostA and HostB HostA - 10.38.9.2, kernel 2.4.16, tincd from Debian package HostB - 10.38.9.223, kernel 2.2.17-21mdk, tincd from tarball package. HostA: ------------------------------ /etc/tinc/test4/tinc.conf Name = HostA ConnectTo = HostB TapDevice = /dev/misc/net/tun PrivateKeyFile = /etc/tinc/test4/rsa_key.priv /etc/tinc/test4/hosts/HostA Subnet = 10.0.0.0/8 Port =

G'day, I've just downloaded the tinc-1.0pre3 and compiled it - it seems to work fine. I tried your tinc start script in the redhat directory, first adding the MyOwnVPNIP = 10.1.3.1/16 VpnMask = 255.255.0.0 to my tinc.conf file as suggested. But now when TINC is invoked, tinc exits with the following error. [root@platypus tinc-1.0pre3]# /usr/local/sbin/tincd -n wurley.vpn Failed to

I am using tinc1.0pre1 pre2 is not yet available on the tinc site. The Var. VpnMask is unknown in version pre1. Netmask is 255.0.0.0 on tap0 on both gateways. Still the problem that you can ping the gateway on the other network but not the machines behind it. I've used the rpm download. -----Original Message----- From: Guus Sliepen [mailto:guus@warande3094.warande.uu.nl] Sent: Wednesday, May

OK, further to my previous message I've configured BIND, but when I try to run samba_dnsupdate I get the following: Nov 18 16:19:23 sles-shire named[6112]: samba b9_putrr: unhandled record type 0 Nov 18 16:19:24 sles-shire named[6112]: samba_dlz: starting transaction on zone _msdcs.main.adlab.netdirect.ca Nov 18 16:19:24 sles-shire named[6112]: samba_dlz: disallowing update of

Hello all. I am currently working on setting an S4 domain to replace our aging samba 3 setup. We have found many answers on the net, in various documentation, but when it comes to setting up beyond one node documentation becomes a little thinner. We are setting up a Primary DC with AD, using BIND9_DLZ, also serving dhcp from Primary, and we want to setup a Secondary that is both a

Hi ! I want to setup tinc 1.0 pre4 with kernel 2.4.5 I didn't find information about settings of tun/tap device I did in kernel - [*] Prompt for development and/or incomplete code/drivers Network device support <M> Universal TUN/TAP device driver support in /etc/modules.conf - alias char-major-10-200 tun mknod -m 600 /dev/tun c 10 200 chown 0.0 /dev/tun In mailing list archive I

I was hoping this would be simpler. I'd like to prepopulate an RODC with all users accounts that are permitted. But I can only pre-populate one at a time: samba-tool rodc preload (<SID>|<DN>|<accountname>) sles-shire:~ # samba-tool group listmembers 'Allowed RODC Password Replication Group - Shire' Allowed RODC Password Replication Group - Global WIN7-SHIRE$ bilbo

OK, I am running (for many years now) an existing courier_imap maildir ++ setup with exim as the MTA. Has been fine. I have my own custom ldap schema for user account definition and authorization. I installed dovecot 1.0 beta 7 as a test and have it listening on a different port. I would like, if possible, to set things up so that a user could use either dovecot or courier. Having to

I have my own custom schema for email that I have been using for years with courier_imap and exim. I am experimenting with dovecot and trying to set up my conf so that it logs in using the ldap database. In the dovecot-ldap.conf there is a section # Filter for user lookup. Some variables can be used (see # http://wiki.dovecot.org/Variables for full list): # %u - username # %n - user

Finally biting the bullet and upgrading home machines to Windows 7 but experiencing many problems. Server is a Debian Lenny, old Samba 3.2.5, new Samba 4.1.4 built from source. My setup has been doing roaming profiles for XP since 2003 or so with almost no changes. I want to keep roaming profiles going plus do some folder redirection (Desktop (my wife doesn't believe in file shares for