similar to: Windows tinc network no data despite tinc connection

Hallo, I have a couple of tinc hosts in the same network, some using the latest tinc 1.1 git and some using 1.0.24. It seems like traffic between 1.1 and 1.0 nodes is always transfered using TCP (and an intermediate node, if not directly connected), never with UDP. Viewed from host W (tinc 1.1): (All after successfully pinging an IP behind the remote side to trigger UDP path probing, and

Hi all, I have two nodes, connected to a switch, using Tinc 1.1 from git. They connect each other with sptps, and to other nodes in the Internet with old protocol because they have Tinc 1.0. There is no problem with remote nodes, but between my 2 local nodes, they see 1518 PMTU. But local network is 1500 MTU !!! So nodes can ping each other but larger data does not go. test1=sllm1 test2=sllm2

Hi all, I'm back again with my speed issues. The past issues where dependant of network I used. Now I run my tests in a lab, with 2 configurations linked by a Gigabit switch : node1: Intel Core i5-2400 with Debian 7.2 node2: Intel Core i5-3570 with Debian 7.2 Both have AES and PCLMULQDQ announced in /proc/cpuinfo. I use Tinc 1.1 from Git. When I run an iperf test from node2 (client) to

Hi, I am trying to set up one way interdomain trust between two domains (one is samba - samba pdc and the other windows NT 4 domain - Nt4 pdc), that are positioned on different subnets. I followed the instructions on the web site: http://us1.samba.org/samba/docs/man/Samba3-HOWTO/InterdomainTrusts.html#trusts1 And according to chapter "Samba as the Trusting Domain" added the account on

Hi, I propose that the "ad-hoc connections" (localdiscovery) are also displayed in the graph (graphdumpfile) as it is useful for debugging. I find the command-line tooling a bit cumbersome to find out where the problem is - maybe a web-interface can be added to tincd? Implementing a http server is trivial I found out. Folkert van Heusden -- Curious about the inner workings of your

Hello. I found that anonymous structures does not work on gcc-2.95. If you guys want to support a bit older platforms I suggest fixing it. You can check out patch I created to fix this issue. I just added 2 extra structures to remove anonymous structs inside connection_status_t and node_status_t. Patch is here: ftp://borg.uu3.net/pub/unix/tinc/tinc.patch Attaching it as well. Regards, Borg

On Thu, Sep 10, 2015 at 19:34:21 -0400, Nathan Stratton Treadway wrote: > It seems that when the cksum is incorrect, it is always off by 1. > [...] > Am I correct in concluding that this cksum problem is a bug in Tinc? After investigating this further, I'm fairly certain that problem originates in the following lines of the clamp_mss() function in route.c: [...] csum ^=

Hello tinc users, I have been trying to work out how key exchange/hosts file sharing in tinc 1.1 works. My topology is straightforward, a "super" always-online node A to which remote nodes B, C, ... (and so on) ConnectTo = A, to discover each other via AutoConnect (that's on by default in tinc 1.1pre17) Only super A has host files with Ed25519 keys for every node on the network.

Hi team, I''m a very newbie RoR user from Spain and I''m developing a blog''s CMS. Why RoR?, coz I think it''s an amazing framework with many posibilities, portable and really powerful, with a young and optimist community, and taking my project I''ve prefered his structure in front of LAMP. Another thing is that I''ve liked to surprise my masters

Fantastic, having it in the CLI would great. It is for the reason of users losing the pub key that I ask, writing some docs for an internal network. Ah interesting, I finally found openssl does not have the 25519 curve in there(and no plans to do so looks like) but I was not aware there was non standard priv key format either. Would it make sense for the tinc -n <netname> get

We have a Zenoss server in our main office monitoring (among many other things) an Apache server in a remote network, with a Tinc link between the two networks. The monitoring simply involves making an HTTP request to a URL once every 5 minutes and confirming that a response page comes back. Most of the requests to this particular web server succeed (and similar requests to other web servers

On Wed, Jan 14, 2015 at 12:28:00PM +0000, Martin wrote: > Is there any way to obtain the public key from the private key? > I know it's in host file however for the purpose of this message I need to > be able to generate it on the command line. > I tried > > openssl ec < ed25519_key.priv > > I get an error > > read EC key > unable to load Key >

On Wed, Jan 14, 2015 at 02:17:31PM +0000, Martin wrote: > Fantastic, having it in the CLI would great. It is for the reason of users > losing the pub key that I ask, writing some docs for an internal network. > Ah interesting, I finally found openssl does not have the 25519 curve in > there(and no plans to do so looks like) but I was not aware there was non > standard priv key

As per title I've noticed my tinc network was down today. After a brief investigation I discovered the process had just failed on the devices of interest. What was it changed from the day before? I've added a new host to the network. Due to a human error I copied the wrong Ed25519PublicKey into the devices in question. Checking the logs I can see an extensive attempt to connect to the

Hello all, I recently upgraded my Windows 10 installation from 1.1pre15 to 1.1pre16 and it appears that hosts with multiple address are behaving differently. My host file looks like this: -----BEGIN RSA PUBLIC KEY----- ... -----END RSA PUBLIC KEY----- Ed25519PublicKey = ... Subnet = ... Address = ...LAN_IP... Address = ...WAN_IP... In 1.1pre15 eventually my machine would

Hi, I am using Shorewall 2.0.6 on Debian with iptables 1.29. Before I was using Shorewall 2.0.3 and If work correctly, I am not sure that my problems begin after upgrade to 2.0.6, but my problem is that I can''t see some websites on the pc clients ( such as www.microsoft.com ), but some websites yes ( they are not in the pc cache ). My config is Shorewall as gateway/router of

Here is some examples of using templates for TINC configurations and settings: In your startup script, BEFORE starting TINC VPN, put a number of entries to configure your VPN: sh ./templatewriter.sh LAN LOSI101 8540 255.255.255.0 0.0.0.0 10.99.0.11 10.98.0.11 ConnectTo=LOSI102 ConnectTo= ConnectTo= **PUT MORE ENTRIES HERE FOR MORE COMPLEX VPN setups ######Templatewriter.sh #!/bin/bash

Hi tinc list members, There were some problems with Ivo's email adresses (both zarq@iname.com and zarq@spark.icicle.dhs.org) so I resent the stuff to the mailling list. ============================================= Hi Ivo, Hier is een oplossing voor een bugje in flush_queue(), en ook wat andere troepjes zoals een tincd scheduler. Dit werkt wat beter, omdat de

Hi, I have a very simple server setup, using shorewall as my firewall. I have a line like this at the top of my rules file to allow ssh connections, but limited to 3 connection per minute with a burst rate of 3: SSH/ACCEPT net $FW - - - - 3/min:3 - Now when I have that in place, and from a remote machine run scp server:/some/file ., I find