similar to: MTU, PMTU & DF flag

On Tue, May 19, 2015 at 00:09:40 +0200, ?smund Rabbe wrote: > All nodes was connected both 1.1pre10 and 1.1pre11 before "tinc -n vpn > restart" at Node 1. Is there any chance some configuration file on Node 1 got changed somehow after the previous time you started up the daemon, such that when you restarted it recently it came up with a different configuration than it had before?

On Thu, Sep 10, 2015 at 19:34:21 -0400, Nathan Stratton Treadway wrote: > It seems that when the cksum is incorrect, it is always off by 1. > [...] > Am I correct in concluding that this cksum problem is a bug in Tinc? After investigating this further, I'm fairly certain that problem originates in the following lines of the clamp_mss() function in route.c: [...] csum ^=

I'm running Tinc on a Linux machine inside my home network, connecting through a NATing router to a Tinc server out on the Internet. I've noticed that fairly frequently the SSH sessions I leave open (but unused) get aborted with a "Connection reset by peer" message. When I investigated closely, I found that after a period of inactivity my router times out the UDP

We have a Zenoss server in our main office monitoring (among many other things) an Apache server in a remote network, with a Tinc link between the two networks. The monitoring simply involves making an HTTP request to a URL once every 5 minutes and confirming that a response page comes back. Most of the requests to this particular web server succeed (and similar requests to other web servers

All nodes was connected both 1.1pre10 and 1.1pre11 before "tinc -n vpn restart" at Node 1. Shouldnt at least the 1.1pre10 nodes connect again? 2015-05-18 23:39 GMT+02:00 Guus Sliepen <guus at tinc-vpn.org>: > On Mon, May 18, 2015 at 11:04:09PM +0200, ?smund Rabbe wrote: > > > One of the nodes (Node5) stopped working a while ago (2 - 3 weeks or so), > > other

http://bugzilla.mindrot.org/show_bug.cgi?id=760 Summary: GatewayPorts clarification in _config man pages Product: Portable OpenSSH Version: 3.7p1 Platform: All OS/Version: All Status: NEW Severity: minor Priority: P2 Component: Documentation AssignedTo: openssh-bugs at mindrot.org

Hi, I am triying to configure a VPN, my configuration files are: ****************** TINC.CONF: Name = nova # The internet host to connect with. ConnectTo = nova2 Device = /dev/net/tun #Device name.. Leave as is. Interface = vpn #Virtual Interface name. Give any suitable name. #Mode = "router" #use Router mode

On Thu, May 14, 2015 at 10:12:40AM +0200, Florent B wrote: > > I have no experience with Ubuntu, but I find it hard to believe it would > > block ICMP Fragmentation Needed packets out of the box. > > I can confirm you that this is the case. Ubuntu ignores those ICMP > packets... :( (rp_filter settings) > > You can see it here : https://mellowd.co.uk/ccie/?p=5662

Hello, I try to set up my Linux 2.4.x system to respond by "ICMP Destination Unreachable message" subtype 4 ("fragmentation needed and DF set") in order to support the Path MTU Discovery (RFC 1191) as a router. There is any /proc/xxx parameter to do this? Thanks Mugur _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl

https://bugzilla.netfilter.org/show_bug.cgi?id=662 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED CC| |netfilter at linuxace.com Resolution|

On Wed, May 13, 2015 at 04:41:30PM +0200, Florent B wrote: > I have MTU problems when all these conditions are true: > - a client is running Ubuntu (ICMP messages about PMTUd are ignored on > it by default) I have no experience with Ubuntu, but I find it hard to believe it would block ICMP Fragmentation Needed packets out of the box. > - a client is accessing us from a particular

Dear Guus, while improving the PMTU Discovery algorithm, I found the following behavior in the method "send_udppacket": 1) The code checks, whether the data size is smaller than the MTU, thus if it fits into a single UDP packet. If not, you send the packet via TCP. 2) The data is compressed, changing its size. (Usually, making it smaller, but that's not always

We have an issue with some customers who refuse to accept ICMP traffic to their mail servers. It seems that they have put Mordac, preventer of information services in charge of their firewall policy (http://en.wikipedia.org/wiki/List_of_minor_characters_in_Dilbert#Mordac). My mail logs are showing that customers who specifically disallow ICMP traffic have many "Connection Reset"

Hi Guus, while checking the source code, I stumbled upon PMTU Discovery. I've got a question regarding the process of sending/receiving PMTU packets. As I understand, the packet flow is like this: 1 .Tinc creates a packet with a specific payload length to send it as an PMTU probe. (The data part is just some random bytes.) 2. This packet gets compressed and sent

Hi all, I have two nodes, connected to a switch, using Tinc 1.1 from git. They connect each other with sptps, and to other nodes in the Internet with old protocol because they have Tinc 1.0. There is no problem with remote nodes, but between my 2 local nodes, they see 1518 PMTU. But local network is 1500 MTU !!! So nodes can ping each other but larger data does not go. test1=sllm1 test2=sllm2

This release of libX11 looks bigger than it is, due to a lot of spec/doc cleanup work that doesn't affect the code itself. There is still a good deal of bug fixes, code cleanup, locale improvements, and compose key table additions, including new UTF-8 compose sequences for: <Multi_key> <R> <equal> : "<U+20B9>" U20b9 # INDIAN RUPEE SIGN <Multi_key>

Hello, I'm trying to write a Vorbis decoder (just as a hobby) but I've got a problem with reading the setup header. According to the Vorbis documentation the first data that should be read after the initial 'vorbis' string is an eight bit integer which when incremented by one, contains the number of codebooks in the header. My problem is that whenever I read this number it seems

Hi -- I was very keen to download rsync and give it a whirl with the new --link-dest feature. However, I was terribly puzzled when I couldn't seem to get it working, even though --compare-dest with the same argument would work. It seemed like new files would be transferred even though files existed in the compare-dest/link-dest location; compare-dest would detect them but link-dest would

A problem here getting winbind traffic to be encrypted using Kerberos. I have set up a test environment with a pair of servers (actually lxc containers): - samba server (ubuntu 16.04, stock samba 4.3.11) - client machine (ubuntu 16.04) joined with "net ads join" and winbind The client machine has the following in /etc/samba/smb.conf: ------- [global] #netbios name = client-ad

Dear R-help list.I'm not big on programming, but I have a weird error on a couple of packages when trying to install them. I hope someone could help me :-).System: MacBook Pro (1.0) with OS X 10.6.4 R: Installed from web binaries: R version 2.11.1 (2010-05-31) > Sys.getlocale() [1] "en_GB.UTF-8/en_GB.UTF-8/C/C/en_GB.UTF-8/en_GB.UTF-8" I have been trying all day to install the