similar to: How does tinc server handle the case one client's key file is removed after connection

Hi guys, Second question for me today:), really appreciate the help. I have been using tinc in a linux environment, due to our need, I kept it running all the time.(i.e. several months) Recently I found out the system's memory usage is gradually going higher and higher, and eventually triggering oom-killer in the system. After disabling process one by one, I identified tinc is the reason for

Thanks Guus for the quick answer, I will give a try now. Рысь, In my case we don't want to restart tinc "server" at all, therefore what might happen is that the client is still connected to server while its public key was already removed from server. I will try the signal approach. Heng On Mon, Jul 25, 2016 at 12:42 PM, <tinc-request at tinc-vpn.org> wrote: > Send tinc

On Mon, 25 Jul 2016 12:16:36 -0400 Heng Wang <jason.wangh at gmail.com> wrote: > Hi Guys, > > Say when tinc is running all good, the "server" contains all the key > files of clients. > If we remove the key file for client A during run, how long before > does server find out the key > file is gone? I see a "KeyExpire" option in the conf file, is this

Suppose tinc is installed on 100 routers in 100 sites. How to automate site-site vpn management across 100 sites? Some kind of vpn management solution? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20180329/90f0198d/attachment.html>

For some weeks I've been trying to devise a way to connect multiple users in various parts of the city and state, and I found out that most likely Tinc is the only daemon that does the kind of meshing I want. I was successful in connecting some servers of mine around in switch mode, but now comes the hard part: How can I authenticate clients on my network? I would also need to direct static

Hello dear Tincers! I recently developed an extension to tinc 1.0.x protocol which introduces automatic and decentralized hosts update subsystem. The idea is to provide stable protocol extension to tinc which will do all the dirty work of spreading information about new hosts in network across all nodes by powers of tinc itself. If you're interested, you can take a look at the diff made for

On Sat, 17 Oct 2015 14:54:17 +0200 Guus Sliepen <guus at tinc-vpn.org> wrote: > On Sat, Oct 17, 2015 at 02:54:01PM +0700, ???? wrote: > > > The problem starts with Windows itself. We have tap-win{32,64} > > directories. Inside them, there is a few batch files and > > tapinstall.exe binary. It actually performs installation process of > > TAP driver and new

Hi all, I'm currently happily using tinc in my networks. I also use OpenVPN based on the customer requirements. I though have some questions which I could not find a clear answer. What I'd like to know is: 1. How to revoke a "node", simply removing the host file on the servers is enough? And one created by invitation? 2. Is there a way to let tinc ask for a username/password

On Tue, Apr 10, 2018 at 03:36:08PM +0200, Hans de Groot wrote: > hosta  <--> hostb  <-->  hostc > > Hosta and hostc are not directly connected via tinc. But both are conncted > via hostb (I called my network tincnet). This works fine I can ssh from > hosta to hostc and vice versa without any problems. > > hostc is in a whitelisted iprange at some service

I have been having some problems setting up tinc on 2 masquerading linux slackware boxes. routerA is a NAT router to the internet, for two networks on two interfaces. This are the two networks: eth1 Link encap:Ethernet HWaddr 00:E0:4C:6C:6D:86 inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX

We run tinc in a linux environment in which it sits there waiting for connections from the clients. All clients are configured to only have one ConnectTo which points to this server. We're seeing in the server log that as soon as a client's connection is activated, a whole bunch of "Flushing x bytes to that host would block" is logged and the whole vpn is bogged down and has

Does anyone had an experience with automating Windows installation process? I am planning (after my extension programming) to implement the following inside it: User runs installer, goes through usual pages and then installer asks for a name of his/her future node. It's not a problem to embed our network bootstrap configuration inside installer. The problem starts with Windows itself. We

Hi All, I am trying to setup the site-to-site VPN with TINC for connect my home network to company network. Here is the IP allocation and configuration for your reference. Home PC (192.168.1.2) ?-----? Home (OPENWRT Router, 192.168.1.1, 10.0.0.1) ?----------------? INTERNET ?-------------? COMPANY (Windows 7 PC,192.168.2.1, 10.0.0.2) ?------------? COMPANY (SERVER ZONE) ?----? SERVER A

On Wed, Apr 27, 2016 at 05:15:57PM +0800, hshh wrote: > >Updated support for BSD tun/tap devices. > It is broken on FreeBSD tun. > > tcpdump on tun, > 09:05:07.458988 IP0 bad-hlen 0 Can you show me your tinc.conf and tinc-up script? Also, which version of FreeBSD are you using? -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org>

Hi, At my provider (xs4all) I've got an ipv6 tunnel working. Now I would like to distribute ipv6 via the tinc tunnel. My tinc.conf: ------------ Name=server AddressFamily=ipv4 Device=/dev/net/tun PrivateKeyFile=/etc/tinc/fvhglobalnet/rsa_key.priv GraphDumpFile=|/usr/bin/dot -Tpng -o /var/www/htdocs.keetweej.vanheusden.com/stats/tinc-fvh-network-graph.png Mode=switch KeyExpire=299

Hi Guys, I have been using tinc in a linux environment, which has always been working fine. Recently I encountered an issue that tinc process exits(or crash?) when internet is down. What could be the cause of it? Is there a timeout mechanism inside tinc code that it will exit after failing to bring up tun/tap interface for a long period? The internet has been down for several days. I am trying

Hello, I have send the message below this message before. I guess nobody is familiar with my problem. So the next step is "use the source". The thing is I'm a windows developer. I have tried to build tinc before, a few years ago. And I know the linux developers think it is easy. And it always is, once you know what to do. But I got so many errors last time, I just gave up. I

i'm using pre4 at the moment, i have a multiple machines connecting to one central one (ya i know, central point of failure, but its working), all of the ones connecting to the main one can only see the main one. the main one can see everyone, how can i get the others to see eachother? the route for 192.168.0.0 mask 255.255.0.0 is the tun device on each of the machines. my iptables rules

mksmbpasswd.sh does not create accounts with the X flag in the password flags field. Does this X matter, and if so, what does it mean? It's not in the man page. ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$&| |__| | | |__/ | \| _| | novosirj@umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical

Hi All, I'm sure this has been discussed many times but since I do not have a internet connection, I have to ask this question.. [ow_mh@hmweb Dump]$ sudo mount -t smbfs //129.253.110.160/Dump $HOME/Dump 708: session request to 129.253.110.160 failed (Called name not present) 708: session request to 129 failed (Called name not present) Password: Anonymous login successful 708: tree connect