similar to: keeping someone out / daemon keys

On Fri, Aug 31, 2018 at 6:17 PM, Corey Boyle <coreybrett at gmail.com> wrote: > Is it possible for daemonA and daemonB to communicate without having > exchanged public keys? If only A and B are nodes, then I believe the answer is no. > If daemonA and daemonB have exchanged keys, and daemonA and daemonC > have exchanged keys, can daemonA and daemonC communicate with each >

Interesting! So if I have 5 nodes; A B C D E F... I can just configure each node with A's public key (and A with theirs), and that will allow all of them to communicate directly?

Thanks for all your help. I've been reading thru the tinc manual, but was having a hard time finding an explanation of the security/trust model. I'm interested in using tinc in a business production environment, so I just want to make sure I have it secured properly. Would spokes loose their connection we each other if the hub went offline? Also, what's the minimum required exchange

WOW! OK! The light bulb above my head just came on. I added the script to the Subnet Up Script section, and now all the routes I need have been added in to the table for me. I did have to modify the line a little since I'm using pfSense (FreeBSD). I changed it to... route add "$SUBNET" -iface "$INTERFACE" ...I also used... route del "$SUBNET" -iface

Is it possible to connect networks with different masks together? For example a 10.26.0.0/16 subnet with a 192.168.117.0/24 subnet. See this thread for more details... https://forum.netgate.com/topic/134218/tinc-initial-setup

I just found that the VPN Netmask option in the pfSense tinc GUI is related to the "netmask" option in /usr/local/etc/tinc/tinc-up ifconfig $INTERFACE 192.168.117.1 netmask 255.255.0.0 What exactly is this line doing? Is it assigning the address that my lan adapter has to the tunnel interface as well? I'm interested in using tinc in production, so I'm trying to learn as much

Is tinc able to use multiple gateways for outgoing connections? Or is it restricted to the default gateway? In other words... If I have a branch office with a cable connection and a dsl connection, could it use both in an active/hot-standby fashion?

On Fri, Aug 31, 2018 at 8:14 PM, Corey Boyle <coreybrett at gmail.com> wrote: > I can just configure each node with A's public key (and A with > theirs), and that will allow all of them to communicate directly? Yes. If you configure a hub with spokes, then Tinc will create a full mesh, on demand as needed. Assuming, of course, that any relevant firewalls can be

Hello. I've got a quartet of IBM x3630 M3 with one that is frequently hard locking under heavy NFS load. I am running 9.0-RELEASE with all the patches from freebsd-update. My problem machine has 8 16 core clients, each doing IO intensive tasks connected to it via a Procurve and the onboard igb0 interface. Mostly network reads, typically 10MB read per MB written. When the machine locks

Hi, I seem to have a problem with compiling the kernel 2.4.13 on redhat 7.2? It would compile fine but have errors about ext3 support on reboot. I download ext3-2.4-0.9.13-2413.gz to my linux machine to enable it be useful with ext3 support but when I try to gunzip it with the instructions gunzip < ~/ext3-2.4-0.9.13-2413.gz | patch -p1 i get gunzip: stdin: not in gzip format I get an

Hi guys - OpenSSH sftp (on solaris) >From man page Termination on error can be suppressed on a command by command basis by prefixing the command with a `-' character (for example, -rm /tmp/blah* ). This does not seem to work - instead the server seems to fail to recognize the command from the batchfile. Consider this batchfile mkdir tmp cd tmp put rpt.list bye We want to

I have no problems lauching asterisk from the command line . . . asterisk -vvvvc However, I'm trying to autostart on boot up, so I'm trying safe_asterisk When I do this, I get: Asterisk ended with exit status 127. Asterisk died with code 127. Aborting. I've looked through the script but can't find what the problem is. I'm running on RedHat Fedora. Thanks for your help.

Hi, I am trying to compile the kernel with ext3 support and i downloaded the 2.4.13 kernel and patched it for RH 7.2 to update from the 2.4.7 precompiled ext3fs kernel. Then i selected ext3 support and and the JBD debugging support under 'make xconfig.' Then i ran the following commands make clean make dep make bzImage make modules make modules_install cp arch/i386/boot/bzImage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, with the current (2008-05-20) repository releases of Dovecot-1.0 and antispam the plugin no longer compiles: antispam-storage-1.0.c: In function ?antispam_mail_update_keywords?: antispam-storage-1.0.c:285: error: ?idxkwd__type? undeclared (first use in this function) antispam-storage-1.0.c:285: error: (Each undeclared identifier is reported

WordofMouthConnection.com Search Awareness System This email is a website-generated message, but it is not spam. An acquaintance of yours recently conducted a search on your email address in our online community, WordofMouthConnection.com. It could be a friend, a family member, co-worker, business associate, or someone else who's interested in learning more about you. Why are we sending you

Put this in the wrong thread, sorry! UPDATE: I've realized that this seems to be an issue with the compiler flags used to build samba. I've realized that i need to define _LARGEFILE_SOURCE, _LARGEFILE64_SOURCE, and _FILE_OFFSET_BITS=64. I've done this, but still have no luck reading files larger than 4GB. Anyone have suggestions? Thanks, Matt > Hi guys, > > I'm

WordofMouthConnection.com Search Awareness System This email is a website-generated message, but it is not spam. An acquaintance of yours recently conducted a search on your email address in our online community, WordofMouthConnection.com. It could be a friend, a family member, co-worker, business associate, or someone else who's interested in learning more about you. Why are we sending you

WordofMouthConnection.com Search Awareness System This email is a website-generated message, but it is not spam. An acquaintance of yours recently conducted a search on your email address in our online community, WordofMouthConnection.com. It could be a friend, a family member, co-worker, business associate, or someone else who's interested in learning more about you. Why are we sending you

Hello, I have a T1 (not PRI) plugged into my Asterisk server. Everything is working well, except I only get the first digit of the 4 digit DID in Asterisk. The T1 provider (Eschelon) tried switching to 7 digits, and I only got the first digit of the 7. Can anybody help? We're adding another DID and I need to trap it correctly. Thanks. Here are snippets from the relevant files: --

Hi, I'm trying to install NUT on Ubuntu. All is good until I try to start the driver, then I get this error: $ sudo upsdrvctl start Network UPS Tools - UPS driver controller 2.4.3 Network UPS Tools - Generic HID driver 0.34 (2.4.3) USB communication driver 0.31 This APC device (051d:0003) is not (or perhaps not yet) supported by usbhid-ups. Please make sure you have an up-to-date version of