similar to: Tinc node is crashing after some days or weeks. How to debug?

On 13/2/19 12:28 am, Tomasz Chmielewski wrote: > On 2019-02-12 22:12, Håvard Rabbe wrote: >> Hi >> Im running tinc 1.1pre17. My problem is that my tinc nodes >> occasionally crashes. When it crashes the tinc node is not running >> anymore. Time between failure can be sometimes days or weeks. >> >> Do anyone here have a proposal for how to debug and get this

Hi I have not tried systemd-coredump yet but I found something strange in my syslog file. Like this message in the en of the log file: tincd[10322]: segfault at 7fffb3180000 ip 00007ff7937f11c2 sp 00007fffb317dd68 error 4 in libc-2.23.so[7ff7936a3000+1c0000] There is more in the attached syslog file. Any clues? Best Regards, Håvard Rabbe > On 14 Feb 2019, at 02:27, Hamish Moffatt

hi It was not working when i applied the rules on the vpn card. But I wondered if maybe bridging of vpn and eth0 was messing this up. I thought it was enough to only apply it to the vpn card root at JOTVPN:~# brctl show bridge name bridge id STP enabled    interfaces bridge 8000.000c29638a7e no           eth0                                                                   vpn so I tried the

On 2019-02-12 22:12, Håvard Rabbe wrote: > Hi > Im running tinc 1.1pre17. My problem is that my tinc nodes > occasionally crashes. When it crashes the tinc node is not running > anymore. Time between failure can be sometimes days or weeks. > > Do anyone here have a proposal for how to debug and get this problem > solved? I assume it doesn't produce anything in the log?

Hi thank you for looking in to this. I haven't tried it before now. I cant get it to work. after running the commands you suggest I get this when I run ip6tables --list-rules root at JOTVPN:~# ip6tables --list-rules -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A FORWARD -i vpn -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j DROP -A FORWARD -o vpn -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j

Hi Im using tinc to bridge networks together. And im using ebtables to block dhcp traffic for ipv4 on each node in tinc. One of my nodes have recently began using ipv6. The isp is using auto configuration to give out ipv6 addresses. The problem is that every computer in my bridged network is getting ipv6 addresses from that node. The other computers behind the other nodes have no use for ipv6

Just search online why in general that is insecure via CLI vs programmatic for first class automation.. there is a reason why snmp, rest, ... exist. On Thu, Mar 29, 2018 at 3:50 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > You've mentioned security issues in your previous email, but now you're > hopping to management issues. > > Have you tried Ansible, Chef or

Programmatic management with first class APIs is preferred for larger deployments.. On Mon, Mar 26, 2018 at 12:28 PM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > Could you elaborate on why CLI (SSH) managing is insecure? > > > Tomasz Chmielewski > https://lxadm.com > > > On 2018-03-27 04:23, al so wrote: > >> So, for remote manageability of Tinc, we

There is a reason most NMS systems used SNMP in the past and REST apis past 7+ years. They don't use CLIs except toy Expect type scripts.. Not just security but better error handling and more. Good luck learning! On Thu, Mar 29, 2018 at 9:03 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > SNMP is mainly used for monitoring, not _server_ automation. > > Also, it's

Al like any open-source or free sofware you need to put the leg work into what you want it to be. My company is actually creating something using TINC and we believe in it. If successful we'll be giving back to TINC monetarily in a big way to make TINC even better so if TINC isn't for you keep an eye on further developments in the future. Thanks, Rafael On Thu, Mar 29, 2018 at 12:03

I have the following tinc setup: client -- tinc DC1 -- tinc DC2 -- 10.1.2.0/24 subnet It generally works well, however, there is one issue I'm not able to solve: *sometimes*, connectivity to *some* destinations does not work for the first few seconds. To demonstrate: $ mongo mongo.example.com:27017 MongoDB shell version: 3.2.12 connecting to: mongo.example.com:27017/test

Hi! Is there a way to download the NUT client for ESXI 5.0 (offsite, Ren? Garcia)? NUT client for ESXI 5.0 (offsite, Ren? Garcia) blog entry (French) VIB package The web site is not working. Best regards, H?vard Rabbe -------------- next part -------------- An HTML attachment was scrubbed... URL:

On 2017-02-21 16:39, Tomasz Chmielewski wrote: > tshark shows "TCP Spurious Retransmission" for cases where curl is not > able to fetch any data. > > > Both tinc servers are running Ubuntu 16.04 (64 bit) with tinc 1.0.26. > > DC1 is Europe (Hetzner); DC2 is in USA (Amazon AWS). > > > > What's interesting, I don't have these timeouts when I

So, for remote manageability of Tinc, we don't have any SNMP or REST like programmatic ways? If it is going to be CLI only, it is definitely not secure to manage and also not very convenient to manage programmatically. On Sun, Mar 25, 2018 at 1:44 AM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Sat, Mar 24, 2018 at 02:16:20PM -0700, al so wrote: > > > > Is there

On Sat, Aug 27, 2016 at 11:41:12PM +0000, Håvard Rabbe wrote: > Im using tinc to bridge networks together. And im using ebtables to block dhcp traffic for ipv4 on each node in tinc. One of my nodes have recently began using ipv6. The isp is using auto configuration to give out ipv6 addresses. The problem is that every computer in my bridged network is getting ipv6 addresses from that node.

On Wed, Feb 22, 2017 at 08:51:49PM +0000, Håvard Rabbe wrote: > thank you for looking in to this. I haven't tried it before now. I cant get it to work. > > after running the commands you suggest I get this when I run ip6tables --list-rules > > root at JOTVPN:~# ip6tables --list-rules > -P INPUT ACCEPT > -P FORWARD ACCEPT > -P OUTPUT ACCEPT > -A FORWARD -i vpn -p

Hi, this seems like a strange question, but in R is there a function that can handle vectors containing factors inside lists/tuples? Or is there some other approach/functions I can use? Like for example V1 "{"Harry","Brown")" "{"Brown","Harry")" I want to use these variables in a machine learning setting, And don't want to convert

All nodes was connected both 1.1pre10 and 1.1pre11 before "tinc -n vpn restart" at Node 1. Shouldnt at least the 1.1pre10 nodes connect again? 2015-05-18 23:39 GMT+02:00 Guus Sliepen <guus at tinc-vpn.org>: > On Mon, May 18, 2015 at 11:04:09PM +0200, ?smund Rabbe wrote: > > > One of the nodes (Node5) stopped working a while ago (2 - 3 weeks or so), > > other

Hi guys! I'm trying to setup private network inside TOR using "proxy = socks5" variable in tinc.conf, but I found that tinc trying to resolve .onion domain with system resolver first, leaking peer's tor hostname to ISP. So is there any way to disable such behavior and resolve hostname with proxy?

Hello. I am using tinc for some years now. Since I migrated my OVH VPS from Strassbourg to Limburg with Debian 9 tinc don`t start as Service. Because of the VPS i use systemctl commands, but it uses the init scripts instead I copied the same config. But it doesn`t start as service. If I start tinc with "-n <netname>" from console it all works like it should be. The problem