tinc from exposed to hidden computer

[Guus Sliepen]

On Mon, Nov 13, 2000 at 03:19:16PM -0500, Steve Horne wrote:

> First, please forgive me if the answer to my question is accessible somewhere

That's all right.

> I want to set up a vpn between a computer with a standard IP address (HOME),
> and one hidden behind a firewall, without an externally accessible IP address
> (WORK).  I can reach HOME from WORK via TCP/IP but not the other way.
> 
> Can I set up Tinc to connect  between HOME and WORK, so that I can
> access resourcess accessible to the WORK network from HOME?
> If so, are there any specifics I should keep in mind as I proceed?

Yes you can. You can set up a tinc daemon at HOME without a ConnectTo line (this
means it just listens for incoming connections) and a tinc daemon at WORK with a
ConnectTo line pointing to your HOME tinc. If at HOME you have a dynamic IP
address, but you have a static hostname or a dyndns hostname, you can specify
that to the tinc daemon at WORK.

tinc 1.0pre3 requires that after setting up the TCP connections you can also
send UDP packets from and to port 655. If that is not an option, please use tinc
1.0pre2 for the moment, with the TCPonly configuration option set (the TCPonly
option will return in later tinc daemons though).

Good luck. If you have any more questions, please ask.

-------------------------------------------
Met vriendelijke groet / with kind regards,
  Guus Sliepen <guus at sliepen.warande.net>
-------------------------------------------
See also: http://tinc.nl.linux.org/
          http://www.kernelbench.org/
-------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20001114/12d95d64/attachment.pgp