Hi Guus,
I am wondering why MACExpire was introduced in:
,----
| commit 14979f835df4214a7c2510852f7ffedc9e08c2c0
| Author: Guus Sliepen <guus at tinc-vpn.org>
| Date: Fri Mar 1 14:09:31 2002 +0000
|
| - Global time_t now, so that we don't have to call time() too often.
| - MAC addresses expire after a time configurable by MACExpire (default 600
| seconds)
`----
Is there a security motivation involved? Would it be possible to
disable it completely?
I am running babel routing protocol with tinc with options
Forwarding=off, DirectOnly=yes and Broadcast=direct. In this
configuration, tinc only takes care of the tunnel mesh, leaving
forwarding completely to babeld and kernel.
I find the connections getting interrupted whenever the MAC address of
the tinc interface changes. I have to set MACExpire=31536000 to
tinc.conf mitigate this.
Yours,
Benda
