similar to: a few problems/questions with tinc

Hi , I've added one node to my tinc mesh , with forwarding off , and the network got splitted into several pieces !!, the thing is that , the node with forwarding off is connected to all hosts , directly with connect to , and seems like that for some nodes the shortest path , that the tinc network can find is through the node with forwarding off , here are the results of my first ping to all

ofcourse there is no freepbx, and there is no difference between the version of asterisk , ATM we are using asterisk 1.6.2.19 , i've also tried it on asterisk 1.10 , which resulted in the same way , does anyone have any ideas , why is it happening like this . thank you. On 9 January 2012 14:30, <tinc-request at tinc-vpn.org> wrote: > Send tinc mailing list submissions to >

actually at the moment the setup is like this , it has the same ip address , both lan and tinc , but iax doesn't work at all , moreover , i want to be able to make an IAX trunk to the rest of the machines from different networks together . what happens is that , asterisk says that the request is sent , but nothing will be received . if you want i can try to make a tcpdump tomorrow , and send

i need forwarding off , cause i need a central node , which is connected directly to all the network , directly , so it can usually upload content directly , without slowing down other nodes in the network , i also don't want it to act as a forwarder , since ,it only has 2mbps of bandwidth , and i don't want it for that purpose , is there any other way to fix this problem ? On 16 March

Hey everyone , I'm using tinc from iran , and i've been using tinc with tcponly for a few years now , to bypass the filtering , and have access to the free internet , but recently , our government started to apply some sort of exotic filtering scheme , they've completely blocked outgoing and incoming ssh requests , and ssl encrypted packets , and the only thing allowed is https !! ,

Hi everyone , i have a large network , connected together by tinc , and the whole network is connected so that i can access all the devices through out the networks simply and easily , but when i try to interconnect my asterisk servers usin iax , it doesn't work , if i try to register to my server using the tinc's interface it's ok, the registry is done ok , and the connection works

Hi , today i was trying to connect my windows 7 client to my tinc server and i ran into a strange problem :) my tinc server is running tinc 1.0.11 on ubuntu 10.04 in switch mode , and the windows client is running tinc 1.0.13, there is a very strange problem , i tried to connect the windows system , i configured it , and it didn't work , so i ran it in debug mode -D -d5 , and it told me: Got

Hi , at the moment i'm managing a distributed network country wide , which i want to use tinc on all the machines so we can have direct access to all the servers (including those behind firewall) . the problem arises with the fact that , my firewalls are connect to two separate networks , one is actually a country wide network , and the other is internet access , is there a way , that tinc

Hello everyone, I'm actually using tinc mostly to route all my traffic to another server , and my internet provider does all sorts of shaping and packet inspection to the outgoing packets, including but not limited to shaping encrypted TCP sessions , and re-routing UDP connections every few minutes and even blocking IP addresses in case too many users are connected with a traffic other than

Hi, I have HA firewalls configuration (keepalived) on one site. Each firewall has its own IP and a Virtual IP (VIP) that keepalived activate on one of the firewall (active/passive HA configuration). I think I can set all two firewalls with same configuration, generating key pairs on one firewall and copying that to the second, so the remote host can see always one of the other firewall as the

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right ? so one firewall be active, the other is passive. With this

Hi, I have successfully setup a tinc network between five hosts (in switch mode). Two of the hosts have static and known IP addresses (S1 and S2). Other hosts (H3-H5) connect one (or both) of them. The traffic flows nicely between all hosts. The initial edges (ConnectTo configuration directives) in my test network are: S1<->S2 H3 -> S1 and S2 H4 -> S1 H5 -> S2 As far as I have

We have a handful of nodes set up. Some are NAT'd but a few have direct access to the Internet. Sample confs: HostA: Name = HostA AddressFamily = any Interface = tap0 Mode = switch Connectto = HostB GraphDumpFile = /tmp/mesh HostB: Name = HostB AddressFamily = any Interface = tap0 Mode = switch Connectto = HostA GraphDumpFile = /tmp/mesh And so on. If I use HostA as the main meta sever.

Hi, we are using Tinc in our Freifunk Network in Oldenburg for internode connections over the internet. So Tinc is running on OpenWrt 10.03 on Dlink Dir-300 Routers. We all have enough internet bandwith (1,6 MB/sec and more) but we only get a maximum speed of ~350KB/sec between two tinc nodes because then tinc uses 99% of the cpu. Is it possible to get more Speed with tinc on this machines?

Hi, Tinc experts I’m on-boarding for Tinc for just quite a few days, and trying to setup the connection between one client to multiple server, where multiple vpn tunnels from the client to different server. From the documentation, it indicate the tinc.conf can support multiple ConnecTo, also the tinc can support multiple netname, like /etc/tinc/net1, /etc/tinc/net2. My question is, for my above

Hi, Etienne Thanks for your clarification, and this helped a lot. And in order to get a better understanding for the mechanism of Tinc and the purpose of ConnectTo statement, can I think the ConnectTo is the way to get the node into the Tinc VPN domain, instead of establish VPN connection between nodes. Once any node ConnectTo the Tinc VPN domain, it learns all other nodes, subnets, and

Hi, I upgraded some of my Tinc nodes from 1.0.8 recently and found something strange. All of a sudden, the vpn would not work as a full-mesh. Certain nodes were not contactable. I re-generated my rsa-keys, and checked my configuration. My vpn uses the following in tinc.conf, as I am routing both ipv4 and v6. === name = node1 mode = switch AddressFamily = any PMTU = 1280 PMTUDiscovery = yes

H, Narcissus Quick one for the below case, if node A have a direct connection to node B, and node B have a connection to node X, then I found node A will be able to talk to node X, but the communication path is go through node B, instead of build direct connection between A and X, is that right? I tested this in my environment. A >> B >> X > On 1 May 2017, at 3:07 PM, Narcissus

Hi, Tinc Expert in my tinc.conf, the ConnectTo to host X is commented, like below: #ConnectTo = X and there is a script: /etc/tinc/netname/hosts/X-up, I thought commented the ConnectTo X wouldn’t trigger the X-up, but it did. Why? What’s the logic behind to trigger host-up? How can I avoid this except remove the host-up file? Bright Zhao

Dear all, I have 3 nodes: A, B and C. C has external IP and A and B are behind NAT. It turns out A and B route their traffic via the C, which they ConnectTo with; this instead of getting connection details from one another and contacting eachother directly (mesh style). The reason is, as I conclude from tincd debug output, is that they see the peer as having a minimum MTU of 0. I suspect this is