similar to: Windows CE / Windows Mobile 6 /

Currently, i have nodes with PMTUDiscovery =yes and ClampMSS = yes. When the server does not receive a PMTU request back from one of the clients even when the packet size is very small (say 164), then it reverts to TCP. Should i turn off PMTUDiscovery or should it be ok to leave on? It takes a very long time to do simple pings (1 second or so), so i wonder what else i can do?

i have a switched and bridged tincd node with two addresses, each with a different port. Address = 37.70.156.168 28655 Address = 192.168.2.228 655 i was having trouble reliably connecting to it / thru it and noticed that a log from a remote tincd node indicated it may have mixed up the ports. It doesn't appear to use the 28655 port that would be needed for remote access. Before i

[This email is either empty or too large to be displayed at this time]

c:\APPS\TINC\tincd.exe --mlock --net=mynet --config=C:\APPS\tinc\mynet Without --mlock, the service starts OK. With --mlock, the service fails to start.

Since Fedora is pushing NSS SSL instead of OpenSSL, has someone tested tinc-vpn against NSS? As i recall, a single machine can not have OpenSSL and mod_nss installed at the same time anymore. So if you have apache running, you _may_ have problems running tinc? The nss api is supposed to mostly similar to openssl api, but there are some things openssl supports and somethings nss supports. Is

Would it be extremely difficult to do multicast over tinc? How about reliable multicast over tinc? This would be more traffic than multicast dns, but not _necessarily_ a great deal more. It would be for syncing some information among freeipa domain controllers. Would the tinc nodes need to be in all in switch or maybe even hub mode? EthernetOverIP over tinc?

Hello, I have tried for days on end with no success on this, so I thought I would post it here and see if someone can help me at all. *Here's the scenario:* I have 1 PC with a Static IP/Domain (a dyndns.org account - myserver.homeip.net) connected to a router, which in turn is the gateway to the internet. It also has a static local IP (192.168.1.2). I will call this the "server"

ping times to ConnectTo machine are often over a second or at least 300 milliseconds. Hundreds or thousands of times slower than other nodes from same physical location.

The documentation is very clear that multicast over tinc does not work in router mode. Why?

IPsec Pre Shared Key for enterprise wireless is worse than PPTP according to https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/ . Make sure IPsec is used with certificates instead. tinc is an educational project sponsored by a university aiming to grow awareness of encryption over the public internet. It does not have a marketing department. Criticism is welcome. Think of

> > It was essentially my own mistake. After the Embedded C++ IDE crashed unexpectedly, > the .lib file was no longer present in the project settings (the project had not been saved) > so all the errors I got were caused by a missing .lib reference in the link stage! > I had to change my cross compiler target to "arm-wince-pe" because otherwise the > object/.lib files

Guus, Just thoguht I'd let you know -- Tinc works fine under 64-bit Vista! Obtaining a 64-bit signed TAP/TUN driver was a bit of an ordeal. It appears that the OpenVPN guys have forked out the money to get the TAP-win64 driver signed for kernel modules. I installed OpenVPN, then installed Tinc -- no problems whatsoever. The OpenVPN installer does a check to see if it's running on

On Wed, Jun 19, 2019 at 3:41 PM Jeremy Allison <jra at samba.org> wrote: > Weren't you getting a NT_STATUS_NOT_IMPLEMENTED level > error return ? > > Look for the specific error return you see on the WinCE > client in the trace. Figured out the issue... After comparing a good vs bad file copy in wireshark for a while, I have found where it goes wrong. On the good copy I

Hi to everybody, Can anybody tell me what packages I need to install Tinc 1.1pre2 in a server that it had installed a previous version installed? I tried to install it and when I execute the "make" it give me a lot of errors. Best regards, Ramses

On Fedora 11 (yes, with SELINUX enabled and enforcing) setting tinc.conf's ProcessPriority=high prevents tincd from starting. Anybody have an answer? tinc was compiled by me, didn't come from Fedora's rpm repo.

*You should repeat this for all nodes you ConnectTo, or which ConnectTo you. However, remember that you do not need to ConnectTo all nodes in the VPN; it is only necessary to create one or a few meta-connections, after the connections are made tinc will learn about all the other nodes in the VPN, and will automatically make other connections as necessary. * The above is from the docs. Assuming

Hi, I upgraded some of my Tinc nodes from 1.0.8 recently and found something strange. All of a sudden, the vpn would not work as a full-mesh. Certain nodes were not contactable. I re-generated my rsa-keys, and checked my configuration. My vpn uses the following in tinc.conf, as I am routing both ipv4 and v6. === name = node1 mode = switch AddressFamily = any PMTU = 1280 PMTUDiscovery = yes

Something tells me this was covered recently, but i didn't find it again in gmail. The nodes see each other but if i have something misconfigured that is decreasing my speed. All my nodes are behind NATs. i have a remote node that connects to a central node via port forwarding from public port 7777 to hp821 running on port 655. remoteNode ----> public ip 1.2.3.4:7777 ---->

I have the habit of putting the name of the host within the host file as a comment usually on the first line. Helps when files are renamed and tracking. The new version exports Name = victor and so the old comment style is not necessary. I would think the new version should still simply ignore lines that begin with the '#' character. For example, a normal host file named victor that

i use Fedora to build for Fedora and to build for Windows. These are some of my notes. README.git includes some additional packages. i added gcc-c++ but not sure OO actually is needed for any of the additional packages. There were many more mingw packages i installed having to do with development, but not sure all were necessary. Even though i yum installed some of these, openssl and lzo