similar to: Routing

Hi I'm trying to implement a scheme in which the nodes will have a direct UDP tunnel to each other. First, all nodes make connection with one public node, and then make connections with each other. And I came across the following problem: Remotely located nodes can establish a direct UDP connection, but the nodes that are in the same local network can not, and all traffic goes through the

hi, it looks like tinc-1.0-pre4 looks for configuration files in /usr/local/etc instead of /etc ! what is the best way to change that to /etc/ so that i can keep my configuration in /etc/tinc/netname/, as described in the tutorial? from what i can see, you have a sysconfdir="$prefix/etc" in configure.in. However, i can't just change prefix to empty string because there is also a

Hi Ivo and Guus, We are writing a book on building VPNs for Linux and a part of it describes tinc. I wanted to make sure that your opinion, as tinc authors and developers, is reflected. First, let me ask a couple of technical questions. 1. If there are two hosts, foo and bar, that are to be connected via tinc, and each host should only have _one_ IP address (i.e. nmask is /32), would the

Hello, I have a bunch of questions about configuring tinc. Here we go: 1. Is the /etc/tinc/vpn/passphrases directory still used? If so, what is it for? Do we need to create it when installing tinc from source? 2. As far as I understand, MyVirtualIP is not required in tinc.conf and is only used to pass the IP to tinc-* scripts. Is that correct? If so, how can we use it? I could not find much

Hello! I use tincd to interconnect 3 LANs: A, B and C. So long, it works fine: everybody reaches everybody. But I want a different behavior: A and B should be allowed to talk, as should B and C. I tried to simply delete the host-files on the nodes that should not be allowed to talk to eachother: A has a hostfile from B B has a hostfile from A and C C has a hostfile from B But this is no

WOW! OK! The light bulb above my head just came on. I added the script to the Subnet Up Script section, and now all the routes I need have been added in to the table for me. I did have to modify the line a little since I'm using pfSense (FreeBSD). I changed it to... route add "$SUBNET" -iface "$INTERFACE" ...I also used... route del "$SUBNET" -iface

Hi, Hopefully someone can help me. I've been trying to set up a private vpn, for both internal ipv6 and ipv4 traffic. There are two Hosts involved with the vpn at the moment. I've been struggling with this but am now going round in circles - Can anyone recognise and explain what i'm doing wrong? The tinc daemons are listening on an ipv4 address, connected to the standard

Hello, I think routing could be improved in several ways, at least, there lacks some documentation describing how Tinc routes packets. In order to test Tinc, I setup the following virtual network: - tinc 1.1pre9 with ExperimentalProtocol=yes - use of network namespaces (actually python-nemu[1]) - star topology, where all nodes runs tinc except the center, which I use to filter communications,

I have 2 nodes nodeA and nodeB I'm using tinc 1.1pre11 -- nodeA(fd80:2015:2105:abcd::1) : $ ip -6 route fd80:2015:2105:abcd::1 dev tun0 proto kernel metric 256 fd80:2015:2105:adcd::/64 dev tun0 metric 1024 fe80::/64 dev eth0 proto kernel metric 256 $ ping6 fd80:2015:2105:abcd::1 PING fd80:2015:2105:abcd::1(fd80:2015:2105:abcd::1) 56 data bytes 64 bytes from fd80:2015:2105:abcd::1:

Dear tinc community, I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC. When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any

Hello, I'm trying to use tinc to establish a vpn between two linux boxes. The keys are shared and the connection gets established, but I can't seem to ping either side. One side is strictly a server for the client to connect to. It has a public IP, and the private IP subnet which it's trying to "share" to the client. It's a pretty simple and straight forward setup.

Hello everybody, I am doing some test with TINC and Windows 7 and I am having some issues with routing. (see attachment for the client configuration) The set-up I configured uses DHCP over the TINC tunnel and the Windows guests ends up with two gateways (one from its own network and one from the TINC network). The problem is that traffic when browsing the internet should go over the TINC tunnel

Hello dear tinc users, I've been looking for a while now for a solution in the mailing list and maybe I'm guiltily too lazy to learn all that there is to know about Linux routing and that's why I'm still stuck. To get right to it: I have 2 hosts connected with tinc - one of them is a VPS with a public address and static IP address and the other is my desktop machine, both run

> homeClient<br> > Network Bridge: (local Area Network and TAP-Win32) 192.168.6.107 mask 255.255.255.0 gw 192.168.6.1<br> change -> mask 255.255.0.0 > Tinc.conf<br> > Name = homeClient<br> > ConnectTo = vpnoffice<br> > Mode=switch<br> Change -> Mode=router Why everybody wants switch??? Add -> TCPonly=yes > vpnoffice: Network

Hi, I have a routing problem. When i start tinc it creates the following route in the main routing table. 192.168.2.0/24 dev nb003004 proto kernel scope link src 192.168.2.8 The problem is that i want to use extra routing tables for each tinc vpn. When i set the netmask for the tinc device to 255.255.255.255. The route is not created, how can i add it to a another route table. Setting a

Hi, I've an up and running tinc vpn between my laptop and my office computer (on which I've root access if needs be). From where I'm sitting right now, UDP packets are dropped. TcpOnly has solved the problem for the tinc part and I can still connect to my office. I'd like to access some important <cough>irc</cough> UDP-only services. Do I have a

I just found that the VPN Netmask option in the pfSense tinc GUI is related to the "netmask" option in /usr/local/etc/tinc/tinc-up ifconfig $INTERFACE 192.168.117.1 netmask 255.255.0.0 What exactly is this line doing? Is it assigning the address that my lan adapter has to the tunnel interface as well? I'm interested in using tinc in production, so I'm trying to learn as much

I've been trying out IPv6 networking with tinc and noticed that it will not route smaller segments than /48 If I try to run ip -6 route add aaaa:bbbb:cccc:dddd::/64 dev tun0 I get network unreachable However if I run ip -6 route add aaaa:bbbb:cccc::/48 dev tun0 it works fine Is this is a limitation in tinc or the kernel network stack itself? -------------- next part -------------- An HTML

We are running tinc (v. 1.0.26) in switch mode with bmx6 (another mesh protocol) running on top of the tap0 interface on about 25 devices. The asymmetric routing of UDP packets is causing my firewall and I presume others to drop some of the packets, since there are no outbound SYN packets originating from the device running tinc. Is there any way to mitigate this issue besides enabling tcponly

Hello, I am having an issue with getting tinc to route the packets between 2 Windows tinc installations. Here is what I have so far: homeClient: Physical Interface: 192.168.6.50 gateway 192.168.6.102 homeClient: Tap-Win32 192.168.10.23 no gateway homeClient file: Address:192.168.6.50 Subnet=192.168.10.0/24 vpnoffice: Physical Interface 192.168.6.102 gateway 192.168.6.1 vpnoffice: Tap-Win32