similar to: Node behind SonicWall Router

Dear Lance, It is not work. Any idea? Regards, Eric -----Original Message----- From: Lance Fredrickson [mailto:lancethepants at gmail.com] Sent: Wednesday, February 17, 2016 12:53 AM To: tinc at tinc-vpn.org Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable On 2/16/2016 9:04 AM, Eric Yau wrote: > Hi Lars, > > Once I modify the firewall FORWARD rule to

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

Current dev cvs install on two systems. System A is behind a SonicWall firewall, and system B is on a registered IP address. (System B has multiple iax links that are fully functional to multiple locations.) System A is correctly registering with System B, with no special firewall rules. Should System B be able to take advantage of the "registration" to send iax/gsm calls to System A

Hello Has anyone else run into a problem with dovecot pop3 and sonicwall? A week after switching to dovecot we had two local customers call and report they could no longer download emails with attachments. It turned out to be the email macro filter on the router. After the first report I thought maybe the customer had just changed something or it was a fluke, but then a day later we had the

Hi all, I currently have an Asterisk test server behind a TZ170 Sonicwall firewall / NAT box, with several DIDs. I've found that inbound IAX2 calls don't work reliably (i.e., I get a busy tone) unless I enable "Use Consistent NAT" in the Sonicwall. This feature is poorly documented by Sonicwall, so I thought I'd pass it along. Has anyone else run into this, or figured

On Mon, Jan 5, 2015 at 7:10 AM, Lance Fredrickson <lancethepants at gmail.com> wrote: > Just wanted to pop in and say I think 1.1pre11 is a really good release. > I have a couple nodes behind a work firewall (sonicwall) over which I have > no control. Previously nodes always fell back to TCP, and the connection > was unusable. Now it always connects over UDP and works like it

about tomato firmware... can I install it on a VMware virtual machine? tinc web ui is already included with the last tomato version? king regards, Cristiano. 2015-06-08 16:52 GMT-03:00 Lance Fredrickson <lancethepants at gmail.com>: > On 6/8/2015 11:55 AM, Cristiano Albiero Berni wrote: > > 2- Is there a kind of web interface to manager the server? >> > Tinc itself

Hi, I'm having an issue where some phones behind a sonicwall are auto-congesting. The status on "sip show peer" shows ping times anywhere from 80ms all the way up to 1100ms. PCs behind the same firewall have a ping time of about 30ms to the PBX itself. Does anyone know if the sonicwall is inserting delay into the SIP signaling path and lagging the OPTIONS messages for qualify?

Sonicwall now has "SIP transformations" check box in the Access section of the interface - does anyone know how to make sense of this function? Tech support is useless, and the help description is confusing. Using on office network to connect Grandstream and Cisco phones to asterisk PBX at remote location. I hate to use linksys or belkin, but they're (ironically) the only 2 that

Hi Lars, Once I modify the firewall FORWARD rule to ACCEPT. I can ping and access my company PC at home. All traffic can pass through that. But I think it is not a good practice to change the FORWARD rule to ACCEPT. Any idea to check and just allow the tinc VPN traffic only? Instead of allow everything pass through the FORWARD rule. Regards, Eric -----Original Message----- From: Lars Kruse

I've searched the archives a bit and have not really come up with a good answer to my queries. I have * running on a RH9 box behind a LinkSys NAT box. I can talk with iConnectHere outbound just fine. I am trying to configure an inbound Xten softphone from outside. I have that user set as NAT in sip.conf (seems to help), but I still cannot establish a full session. I think the problem comes

On Tue, Jan 27, 2015, Sandy McArthur Jr wrote: > I use the Tinc 1.0 series since I don't want to support my > own packages. <snip> > I wrote most of http://wiki.openwrt.org/doc/howto/vpn.tinc and that is > what I still use. Since then . . . Ok. I think I'll start with the 1.0 series packages that are already out there and get them working. and on Tue, Jan 27, 2015,

Greetings. I'm new to tinc, but have so far managed to get a couple laptops and a hosted server all connected. They're working as expected, running Tinc 1.1-pre11, which I compiled from source. Next I want to move on to adding my home router into the mix. My routers run OpenWRT. I don't have experience compiling anything from source for OpenWRT, but OpenWRT has Tinc 1.0.25

Hi, I have some questions about tinc. " *Automatic full mesh routing*Regardless of how you set up the tinc daemons to connect to each other, VPN traffic is always (if possible) sent directly to the destination, without going through intermediate hops. " 1- To have client to client direct connection and don't have traffic through the server should I have port forward at the NAT? Or

Hi all, As title, is that possible to develop a python version of tinc, that will be interesting:) Tks. Cong -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc-devel/attachments/20161213/fcd83914/attachment.html>

Hey Saverio, I'd really like the idea of a tinc-1.1-pre package for OpenWRT. I'm currently using tinc-1.1 with an Ed25519-only network, really like the new features and CLI and want to add some OpenWRT routers into the mix. How do you plan to handle things with OpenSSL? tinc-1.1 from git should be able to compile without it (but will then only support the built-in algorithms). Depending

I run tinc on a series of routers running 3rd party firmware (tomato). Since tinc is running on the gateway device, its routing table is aware of the mesh vpn. At each endpoint, any device one subnet can access any device on another subnet. I now have the situation where I need to make a new endpoint and entire subnet available on the mesh. In this situation I have a device running tinc

On Tue, Apr 10, 2018 at 03:36:08PM +0200, Hans de Groot wrote: > hosta  <--> hostb  <-->  hostc > > Hosta and hostc are not directly connected via tinc. But both are conncted > via hostb (I called my network tincnet). This works fine I can ssh from > hosta to hostc and vice versa without any problems. > > hostc is in a whitelisted iprange at some service

I've managed to compile tinc with ncurses for the top command using script. https://github.com/lancethepants/tinc-Windows/blob/master/tinc.sh I haven't had any success making a working tinc.exe with readline included. It appears to compile fine, but when I run 'tinc -n vpn' it display the shell prompt, then immediately kicks out of the shell back to the terminal. I'd be