similar to: a miracle..

Dear Tinc Experts, I have been struggling for some time now, with Tinc pre3, and firewall rulesets and routing. I did once manage to get Tinc to work okay in a test-bed environment. I then tried to set it up for a 'real-life' setup and cannot get it to work properly. My real-life setup looks like this: Network A: 192.168.1.0 / 255.255.255.0 192.168.1.7 tap1 device gateway >

Hi Tinc Mailing-Group, I am a bit stuck with firewalling rules at the moment. Maybe someone could please advise me a good rc.firewall script to use on my setup. If anyone runs an ipchains firewall script on their linux box which is ALSO running tinc, could they please mail it to me, for my perusal. I have tinc pre3 set up and working on my systems, however I can only get it to work if I set the

Just responding in case this may be of help to somebody with firewalling issues. Not sure if this is off on a tangent to the original question... Here are three different forms of common firewall scripts and ways of getting SIP to work behind them. The third one has some additional stuff beyond just SIP although I can't remember why I wrote it that way. I've been having no fun using

To all those that wanted to know how I was filtering particular ICMP packets here is a few snippets from my firewall script which is based on one by Ian Hall-Beyer. I hope this helps you get started. Also note the output of the command: ipchains -h icmp Shawn Mitchell mentioned blocking all ICMP echos and especially broadcast echos. Perhaps he''d care to elaborate with a similar

Dear R colleagues, I am trying to create a new column in a data frame, which converts values and NA's from another column into binary format. Essentially I need the NA's to become 1 and the rest to be 0. The code I wrote is returning the following error message: Error in if (mort[i, 4] != NA) mort[i, 8] <- 0 else if (mort[i, 4] == : missing value where TRUE/FALSE needed

I have followed the instructions on how to build a Windows package and everything seems to work EXCEPT that I can't see the data files that I have loaded into the data directory. I have placed the appropriate data in the data directory (as in the instructions). There are 3 data sets, which I can see when I use the command in R. Details below. I have searched everywhere to try to fix this, but

I've played around with the config some more after finding and reading through the mailing list archives. I think I'm being tripped up by my ipchains ruleset, so I'm going to play with it when I get home tonight and can set up a private network. If I have any further problems, I'll subscribe to, then send a message to the mailing list. Thanks for your patience and a VPN that's

Hi Tinc Mailing Group, I've got Tinc-1.0pre3 set up on two Redhat Linux 6.2 / kernel 2.2.18 servers. It compiles okay, it reads the configuration files okay, it makes a valid connection between the two tincd daemons. However, it does not route data from one subnet to the other subnet. I will describe my setup below, and if anyone can suggest why it is not working, can they please reply to put

Hello gillian, You can try adding these options to the kernel commandline and it might help: noapic iommu=off The 2.4/2.6 hybrid kernel that RedHat supplies with RHEL3 has some issues with some AMD64 motherboards AFAIK, and the above options made the CentOS 3's kernel bootable for me on one of our systems. BTW - I've moved this to the CentOS mailing list, that is a more appropriate forum

Hi Tinc Mailing Group, I've been trying for some days now, to get tinc up and running. Could someone please suggest what I could do to get it working. I've installed Redhat 6.2 onto a pc, and then installed the latest 2.2 kernel: 2.2.18 from source code (The usual make menuconfig ; make dep ; make bzImage , etc). I've followed the tinc instructions for adding the

Hi All, born out of frustration with conflicting info on the net, I thought I'd share a simple guide to set up the port forwarding side of masquerading... this presumes you already have basic ipchains setup and simple masquerading of internal machines installed. PORT FORWARDING USING IPMASQADM. “Ipmasqadm” supercedes the “ipportfw” feature. 1 - Upgrade to Kernel 2.2.12-20 if not already

Hi, I have a problem with asterisks on Linux. Looks like it is a iptables problem. My external client (eyebeam, on a different computer) cannot register to the asterisk server, but the asterisk server itself *looks* working. If I dial one of the incoming phone numbers for the server, I can see the call arriving in Asterisk (using asterisk -r). I tried nmap on my server, and this is the result:

We work on a secure stand-alone server with no internet access, for security reasons. We are running Windows XP. SInce version 2.11 the R help files point straight to the internet. Is there any way we could have a local help that we could access on our server. Thanks in advance for any solutions Gillian Raab

Hey :) I have recently set up VPN links between 3 subnets. I can ping back and forth between all of the computers just fine, and samba works on all but one subnet. The problem is that I am unable to use the VPN to browse computers on the office network. I can browse them locally from the office, and I can browse other subnets from them (ie. at home, etc), but when I get on another subnet and try

I just recently installed OpenSSH 2.5.1p1 on a RH6.2 box (kernel 2.2.17). I run ipchains to do packet filtering, allowing incoming connections only to 22 and 80 (and some other ports for specific machines). I was able to run prior versions of openssh in this fashion (I've run it from the first release, I think). Upon installing 2.5.1p1 I found that my attempts to connect hang, here is ssh

Hello David, After some experiments and discussions I came to the following result concerning private NT-Box connecting to a LAN via ipchains and using all NETBIOS services (incl. domain-logon): Cross-subnet browsing with NETBIOS could only be done by a local master browser in the private net. I first thought of using Samba on the Linux router for that. But the Samba service would have to use

Hi all! I try to make port based routing, because a have two connections to the internet. My router is a "one disk floppy router for linux". It is a big router project www.fli4l.de. I try also to make a opt, it is like a plugin for this router. This project uses Kernel 2.2.19 compiled with libc5 (because it is small and you can use one floppy disk). At the moment, iproute2 is not

For some time, I have been working half-heartedly on a document that details how Shorewall uses Netfilter. I have finally come to terms with the fact that I am changing Shorewall at a much faster rate than I am writing the paper with the result that the paper will never be finished. To try to help people understand the structure of a Shorewall-generated ruleset, I have therefore written a brief

I figured this out -- looks like 2.5.1p1 is now using ports < 1024 on the client side (wasn't before?). I had a ipchains rule to allow ACK packets to 1024:65535, which was good enough for <= 2.3.0p1 : #allow only ACK tcp packed ipchains -A input -j ACCEPT -i eth0 -s any/0 --dport 1024:65535 -p tcp ! -y So I added the following : #allow return from ssh connections ipchains -A input -j

Hi Raymond, I also struggled 3 days to set up a direct connection between a RH7.3 box and a WinME box with a crossover cable for experiment and met with frustration. The setup of WinME box has no problem and it can connect to other Win boxes for file sharing. IP Address RH7.3 192.168.0.1 WinME 192.168.0.2 Ping started connecting but both boxes can't see each another. I also doubt