similar to: Persistent tun/tap

I read tinc documentation part: " For Branch A BranchA would be configured like this: In /etc/tinc/company/tinc-up: # Real interface of internal network: # ifconfig eth0 10.1.54.1 netmask 255.255.0.0 ifconfig $INTERFACE 10.1.54.1 netmask 255.0.0.0 ... Note that the IP addresses of eth0 and tap0 are the same. This is quite possible, if you make sure that the netmasks of the

Hi, I have HA firewalls configuration (keepalived) on one site. Each firewall has its own IP and a Virtual IP (VIP) that keepalived activate on one of the firewall (active/passive HA configuration). I think I can set all two firewalls with same configuration, generating key pairs on one firewall and copying that to the second, so the remote host can see always one of the other firewall as the

Hi Saverio, I found conflict: 172.16.1.10 00:50:56:1b:ba:5e VMware, Inc. 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 2) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 3) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 4) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 5) So my assumptions were wrong ! :D Probably Virtual

I get this error starting tincd: tincd -n vpndr -d5 -D tincd 1.0.26 (Jan 22 2016 19:28:17) starting, debug level 5 /dev/net/tun is a Linux tun/tap device (tun mode) Executing script tinc-up System call `getaddrinfo' failed: Name or service not known Terminating Also keepalived return an error when tincd start. Starting as a daemon. Joutnalctl show this: Jan 22 23:14:49 systemd[1]:

I think it should work at least for TUN virtual interface as TUn works at IP level. This is a sample configuration. firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - "Physical Network Interface" - system config as ifcfg-... 172.16.1.10/19 (VIP Keepalived Make active) - Active/Passive configuration with firewall2 firewall1 vpndr1

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right ? so one firewall be active, the other is passive. With this

I need a second tinc vpn server (physical machine) to be up and running, so if first tinc vpn server (virtual machine) goes down we can connect to remote site to do management (remote site is not isolated). If I use 2 different tinc vpn servers on the remote sites all two connected to primary tinc sites (HQ Site), can I have a robust solution, using some route prioritization with ip route ? so I

Lastest Modifications: HOST A: Removed 2 route add as you suggested, and it's still working. HOST B: This host has a openwrt as gateway and I added few days ago as you suggested on freenode and this is HOST B Gateway route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.1.1 0.0.0.0 UG 10 0

Hi, after trying for days I ended up with a working tinc configurazion of 2 subnets, now my goal is to add 2 more subnets and comunicate. I might seem dumb at this point but honestly I don't work in IT or Networking stuff, and so I dont have that deep knowledge. A little explanation of my configuration is HOST A (VPN server) Public IP: 1.2.3.4 tun0 Subnet = 192.168.10.0/24 tun0 IP =

It would be nice if in a next tinc release you'll add some service variables tinc propagates to its scripts. So for example you can define in tinc.conf env variables like: SERVICE1= ... SERVICEn= and tinc will propagates all SERVICEx Variables found in tinc.conf to all scripts it calls. One can use theoretically infinite Env Var for custom behavior (like custom debug messages, conditional

So we can configure a persistent tun and tinc on startup recognize this, tinc uses just present tun without problems ? Can you point me to Tinc-RedHat best practice method to do that please ? Thank you in advance Best Regards Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: domenica 24 gennaio 2016 09.53 To: tinc at

On 26/01/16 09:13, Guus Sliepen wrote: > On Tue, Jan 26, 2016 at 07:25:55AM +0000, mlist wrote: I will not > add this feature to tinc. You can easily do this yourself by adding > these environment variables to a separate file, and sourcing it in > the scripts that tinc calls. For example: Does tinc clear the environment before calling the scripts? Or can you just define the

Ok. I'm configuring my iptables scripts so that specific iptables rules for virtual network interfaces used for tinc go on tinc-up-fw and tinc-down-fw custom scripts. When I reload iptables rules manually to apply changes iptables scripts flush all chains and reapply rules and now also search in /etc/tinc/<netname>/ directories if the related virtual network interface is up and running

Yes, I know it is possible to insert iptables rule also without interface presence, but I never tested. If you tell this I trust your experience, but I prefer to have clean system configuration, so all is linked to something, without leaving unused system configuration, mainly for security components, also our firewalls have complex configuration, but using this dynamic management leave persistent

Hi, Thank you Guus, I think the /16 solution is the easier to apply so I modified my tinc-up in host A to be like #!/bin/sh ifconfig $INTERFACE 192.168.10.1 netmask 255.255.0.0 a route -a from HOST A shows: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 178.62.128.1 0.0.0.0 UG 0 0 0 eth0 10.129.0.0

This is not the best method as one have to change all present and future scripts tinc run, but ok. Thank you Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: marted? 26 gennaio 2016 10.13 To: tinc at tinc-vpn.org Subject: Re: Persistent tun/tap On Tue, Jan 26, 2016 at 07:25:55AM +0000, mlist wrote: > It would be nice if

On Tue, Jan 26, 2016 at 07:25:55AM +0000, mlist wrote: > It would be nice if in a next tinc release you'll add some service variables tinc propagates to its scripts. > So for example you can define in tinc.conf env variables like: > > SERVICE1= > ... > SERVICEn= > > and tinc will propagates all SERVICEx Variables found in tinc.conf to all scripts it calls. One can

Norton AntiVirus ha trovato un virus in un allegato inviato da (samba@samba.org) a Segreteria Direzione. Per garantire che i destinatari possano utilizzare i file inviati, eseguire una scansione dei virus, ripulire eventuali file infetti e inviare di nuovo l'allegato. Allegato: documento.pif Nome virus: W32.Netsky.X@mm Azione intrapresa: Ripulisci non riuscito : Elimina riuscito : Stato

Symantec AntiVirus ha trovato un virus in un allegato inviato da (r-bugs@r-project.org <r-bugs@r-project.org>) a info@nuovaedart.it. Per garantire che i destinatari possano utilizzare i file inviati, eseguire una scansione dei virus, ripulire eventuali file infetti e inviare di nuovo l'allegato. Allegato: talk.zip Nome virus: W32.Netsky.B@mm Azione intrapresa: Ripulisci non riuscito

? stato filtrato un testo allegato il cui set di caratteri non era indicato... Nome: non disponibile Url: https://stat.ethz.ch/pipermail/r-help/attachments/20070326/3e379677/attachment.pl