similar to: Persistent tun/tap

It would be nice if in a next tinc release you'll add some service variables tinc propagates to its scripts. So for example you can define in tinc.conf env variables like: SERVICE1= ... SERVICEn= and tinc will propagates all SERVICEx Variables found in tinc.conf to all scripts it calls. One can use theoretically infinite Env Var for custom behavior (like custom debug messages, conditional

On Tue, Jan 26, 2016 at 07:25:55AM +0000, mlist wrote: > It would be nice if in a next tinc release you'll add some service variables tinc propagates to its scripts. > So for example you can define in tinc.conf env variables like: > > SERVICE1= > ... > SERVICEn= > > and tinc will propagates all SERVICEx Variables found in tinc.conf to all scripts it calls. One can

Ok. I'm configuring my iptables scripts so that specific iptables rules for virtual network interfaces used for tinc go on tinc-up-fw and tinc-down-fw custom scripts. When I reload iptables rules manually to apply changes iptables scripts flush all chains and reapply rules and now also search in /etc/tinc/<netname>/ directories if the related virtual network interface is up and running

Yes, I know it is possible to insert iptables rule also without interface presence, but I never tested. If you tell this I trust your experience, but I prefer to have clean system configuration, so all is linked to something, without leaving unused system configuration, mainly for security components, also our firewalls have complex configuration, but using this dynamic management leave persistent

So we can configure a persistent tun and tinc on startup recognize this, tinc uses just present tun without problems ? Can you point me to Tinc-RedHat best practice method to do that please ? Thank you in advance Best Regards Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: domenica 24 gennaio 2016 09.53 To: tinc at

Hi Saverio, I found conflict: 172.16.1.10 00:50:56:1b:ba:5e VMware, Inc. 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 2) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 3) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 4) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 5) So my assumptions were wrong ! :D Probably Virtual

This is what I want to avoid :D I want an active Tinc virtual interface active with ip identical of the other firewall, without ip conflict on the same network. Do you know if Tun type virtual interface on one host can have same ip address of another host in the same network without ip conflict ? ie if a tun virtual interface can work active without transmitting on real network ? or if such a

On 26/01/16 09:13, Guus Sliepen wrote: > On Tue, Jan 26, 2016 at 07:25:55AM +0000, mlist wrote: I will not > add this feature to tinc. You can easily do this yourself by adding > these environment variables to a separate file, and sourcing it in > the scripts that tinc calls. For example: Does tinc clear the environment before calling the scripts? Or can you just define the

Hi, In class parameters, things like x="x", y="y${x}" don''t always evaluate right (y="yx"), seems random. I''m using 2.7.1 class test1( $servicex = "sonar", $logfoldera = "${homex}/logs", $logfoldere = "${homey}/logs", $logfolderh = "${homez}/logs", $logfolder =

Hello, If I understand it right you want to have the same Outlook profile for the users no matter on which workstation they login? The first thing all user must have the same Version of Outlook!!!!! And use an IMAP SERVER Then you must work with prf files for outlook for eauch user in your netlogon path of samba I am working with kixstart. On sigining in each user get his pref file. You can

Hi ! I want to setup tinc 1.0 pre4 with kernel 2.4.5 I didn't find information about settings of tun/tap device I did in kernel - [*] Prompt for development and/or incomplete code/drivers Network device support <M> Universal TUN/TAP device driver support in /etc/modules.conf - alias char-major-10-200 tun mknod -m 600 /dev/tun c 10 200 chown 0.0 /dev/tun In mailing list archive I

This is a vpn for Disater Recovery sites, so it is not necessary to have a seamless failover, strictly speaking. Encryption instead is mandatory. Testing we found that on Keepalived failover remote Tinc take few seconds to reset the connection and correctly re-connect to the new active firewall (probably new firewall resetting the connection + PingTimeout + some seconds to reconnect). This is

It is possible for tinc to made a persistent tun/tap or can I configure a persistent tun/tap by hand and tell to tinc to use that virtual interface device without starting up/shutting down tun/tap at every tincd start/stop ? Roberto -------------- parte successiva -------------- Un allegato HTML ? stato rimosso... URL:

Hi all, I would like to reference a resource twice, with different configurations. At the moment I do this: service { "service1": ensure => running, enable => true, require => Exec["some stuff"] } exec { "some stuff": command => "/etc/init.d/service1 stop; do some stuff required for service1", unless => "find out if already

So, just as recap: I connect USB A (female) to USB B (male) adapter -> HUB -> 2 USB wires male to male, one to raspberry and another one to my device. Thanks a lot. I hope that it works fine :) Maurizio -----Messaggio originale----- Da: Charles Lepple [mailto:clepple at gmail.com] Inviato: marted? 20 gennaio 2015 13:38 A: Maurizio Cc: NUT List Oggetto: Re: [Nut-upsuser] NUT and relay

Hi there! I´ve started looking into puppet for about one week now, I have to say that I am NOT a developer, i occasionally write a shellscript or another but thats about it, so maybe my problem is that i dont see the whole picture yet.. I kind of know what i want to do, but at the moment i don´t realy see how i can accomplish that.. :/ thing is, I have (for now "just") about 100

Ok, I think synching 2 firewalls are best solution with keepalived active/passive HA, too. I'll try this solution to see if all goes straitforward between failover/failback and tinc communications. Thank you Guus. Best regards Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: venerd? 22 gennaio 2016 10.24 To: tinc at

I tested a little more... tincd does not create virtual interface device correctly on CentOS 7, I don't know where tincd stop, probably on " System call `getaddrinfo' failed: Name or service not known" I sent you before. Keepalived return that error I shown on every ip command but this is not a problem now, I'll see this as soon as possible. If I execute these commands tun

I think it should work at least for TUN virtual interface as TUn works at IP level. This is a sample configuration. firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - "Physical Network Interface" - system config as ifcfg-... 172.16.1.10/19 (VIP Keepalived Make active) - Active/Passive configuration with firewall2 firewall1 vpndr1

Executing: ip tuntap add vpndrif mode tun return Keepalived errors show when tincd start: Jan 22 23:41:19 Keepalived_vrrp[1999]: Netlink: filter function error Jan 22 23:41:19 Keepalived_healthcheckers[1998]: Netlink: filter function error Jan 22 23:41:19 systemd-sysctl[23246]: Overwriting earlier assignment of kernel/shmmax in file '/etc/sysctl.d/99-sysctl.conf'. Jan 22 23:41:19