tinc - Feb 2016 - Tinc Router Mode - PING RESULT is destination host unreachable

Dear Lance,

It is not work. Any idea?

Regards,
Eric

-----Original Message-----
From: Lance Fredrickson [mailto:lancethepants at gmail.com] 
Sent: Wednesday, February 17, 2016 12:53 AM
To: tinc at tinc-vpn.org
Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable

On 2/16/2016 9:04 AM, Eric Yau wrote:
> Hi Lars,
>
> Once I modify the firewall FORWARD rule to ACCEPT. I can ping and 
> access my company PC at home. All traffic can pass through that. But I 
> think it is not a good practice to change the FORWARD rule to ACCEPT. 
> Any idea to check and just allow the tinc VPN traffic only? Instead of 
> allow everything pass through the FORWARD rule.
Here's an example of firewall rules I run in my home router.  I've named
the
interface 'tinc' in my case.

iptables -I INPUT -p udp --dport 655 -j ACCEPT iptables -I INPUT -p tcp
--dport 655 -j ACCEPT iptables -I INPUT -i tinc -j ACCEPT iptables -I
FORWARD -i tinc -j ACCEPT

Cheers,
Lance

On 2/17/2016 9:52 AM, Eric Yau wrote:
> Dear Lance,
>
> It is not work. Any idea?
>
> Regards,
> Eric
What is the name of the tun/tap interface created on the device. Did you 
modify the firewall rules to match that?
I use tinc on tomato firmware which may differ a bit from OpenWRT.

Cheers,
Lance

Modified already. Still not work. 

tinc0     Link encap:UNSPEC  HWaddr
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.0.0.1  P-t-P:10.0.0.1  Mask:255.255.255.0
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:178182 errors:0 dropped:0 overruns:0 frame:0
          TX packets:110768 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:79774321 (76.0 MiB)  TX bytes:11907004 (11.3 MiB)


My OpenWRT version: BARRIER BREAKER (14.07, r42625)

-----Original Message-----
From: Lance Fredrickson [mailto:lancethepants at gmail.com] 
Sent: Thursday, February 18, 2016 11:12 PM
To: tinc at tinc-vpn.org
Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable

On 2/17/2016 9:52 AM, Eric Yau wrote:
> Dear Lance,
>
> It is not work. Any idea?
>
> Regards,
> Eric
What is the name of the tun/tap interface created on the device. Did you
modify the firewall rules to match that?
I use tinc on tomato firmware which may differ a bit from OpenWRT.

Cheers,
Lance