tinc - Mar 2015 - No connect to/from other machines on remote ethernet

Hi all,

I have finally got tinc working, but it?s only between server/client. Client can
receive broadcast packets from server ethernet, and pings between them is fine.

If I ping tinc client(192.168.88.166) from any machine in my server lan,
192.168.88.0/24, all packets timed out, and nothing received by the client. Any
ideas? Thanks!

Regards,

Quan Zhou

+------------------------+
|pub [expires 2015-09-05]|
|44D2 0307 1643 E80F 2E31|
|F081 FAFA 6643 7F9F D46F|
+------------------------+
|qzhou at live.de           |
|https://keybase.io/qzhou|
+------------------------+

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20150327/5023ae3d/attachment.sig>

On Fri, Mar 27, 2015 at 05:16:29PM +0800, Quan Zhou wrote:
> I have finally got tinc working, but it?s only between server/client.
Client can receive broadcast packets from server ethernet, and pings between
them is fine.
> 
> If I ping tinc client(192.168.88.166) from any machine in my server lan,
192.168.88.0/24, all packets timed out, and nothing received by the client. Any
ideas? Thanks!
Is forwarding of packets enabled on the server? Check that
/proc/sys/net/ipv4/ip_forward is 1 (if not, just run
echo 1 >/proc/sys/net/ipv4_ip_forward as root), and that your firewall
settings also allow traffic between eth0 and tun1 (iptables -L FORWARD).

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20150331/ab43b0a6/attachment.sig>

You are right, later that day I figured out it was due to a firewall issue, I
fixed that by ` # ufw allow from tun1` and everything's cool!

Date: Tue, 31 Mar 2015 14:45:48 +0200
From: guus at tinc-vpn.org
To: tinc at tinc-vpn.org
Subject: Re: No connect to/from other machines on remote ethernet

On Fri, Mar 27, 2015 at 05:16:29PM +0800, Quan Zhou wrote:
 
> I have finally got tinc working, but it?s only between server/client.
Client can receive broadcast packets from server ethernet, and pings between
them is fine.
> 
> If I ping tinc client(192.168.88.166) from any machine in my server lan,
192.168.88.0/24, all packets timed out, and nothing received by the client. Any
ideas? Thanks!
 
Is forwarding of packets enabled on the server? Check that
/proc/sys/net/ipv4/ip_forward is 1 (if not, just run
echo 1 >/proc/sys/net/ipv4_ip_forward as root), and that your firewall
settings also allow traffic between eth0 and tun1 (iptables -L FORWARD).
 
-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>

_______________________________________________
tinc mailing list
tinc at tinc-vpn.org
http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20150331/b931435c/attachment.html>