setup problems

[Jan Uyttersprot]

Hi,

Although Im dutch too, Ill write this in english. I got a similar problem
then the one on the helpforum. Ill paste my setup first

server tincd.conf
----
ListenPort = 8089
MyOwnVPNIP = 192.168.100.1/24
#VpnMask = 255.255.255.0
TapDevice = /dev/tap0
Passphrases=/usr/local/etc/tinc/passphrases

server tapdev
----
tap0      Link encap:Ethernet  HWaddr FE:FD:C0:A8:6F:01  
          inet addr:192.168.100.1  Bcast:192.168.100.255
Mask:255.255.255.0
          UP BROADCAST RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:24 errors:0 dropped:0 overruns:0 frame:0
          TX packets:118 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          Interrupt:5 

client toncd.conf
----
ConnectTo = server.dns
ConnectPort=8089
MyOwnVPNIP = 192.168.100.2/24
#VpnMask = 255.255.255.0
Passphrases=/usr/local/etc/tinc/passphrases/
TapDevice=/dev/tap0

client tap dev
----
tap0      Link encap:Ethernet  HWaddr FE:FD:C0:A8:6F:02  
          inet addr:192.168.100.2  Bcast:192.168.100.255
Mask:255.255.255.0
          UP BROADCAST RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:56 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          Interrupt:5 

both machines are firewall, have masquerading enabled, and have
portforwarding enabled 8089 on the server firewall to the server daemon,
and 655 on the client firewall to the client daemon .

in the logs I get this :

server :
-------
Oct 17 00:27:23 bill tincd[6197]: tincd 0.3.3 (Oct 16 2000
23:50:21) starting, debug level 12.
Oct 17 00:27:23 bill tincd[6197]: Generating 128 bits keys.
Oct 17 00:27:23 bill tincd[6197]: Ready: listening on port 8089.
Oct 17 00:27:29 bill tincd[6197]: Connection from
dhcp-dns.stuff (xxx.xxx.xxx.xxx):61119
Oct 17 00:27:29 bill tincd[6197]: Passphrase OK
Oct 17 00:27:29 bill tincd[6197]: Connection with
dhcp-dns.stuff (xxx.xxx.xxx.xxx) activated.

and when I kill it:
Oct 17 00:31:43 bill tincd[6197]: Got TERM signal
Oct 17 00:31:43 bill tincd[6197]: Terminating.
Oct 17 00:31:43 bill tincd[6197]: Total bytes written: tap 932, socket
3864; bytes read: tap 4036, socket 888.


client
------

Oct 17 00:51:29 germaine tincd[11373]: tincd 0.3.3 starting, debug level
0.
Oct 17 00:51:29 germaine tincd[11373]: Generating 128 bits keys.
Oct 17 00:51:29 germaine tincd[11373]: Ready: listening on port 655.
Oct 17 00:51:29 germaine tincd[11373]: Connected to
dns stuff (xxx.Xxx.xxx.xxx):8089
Oct 17 00:51:29 germaine tincd[11373]: Connection with
dns stuff(xxx.XXX.XXX.XXX) activated.


now, this all looks fine, but when I ping, I get nothing.. I do have 
Oct 17 00:29:20 bill tincd[6197]: Sent 72 bytes to c0a86402
Oct 17 00:30:05 bill last message repeated 4 times
Oct 17 00:31:24 bill last message repeated 2 times

and 
Oct 17 00:53:10 germaine tincd[11383]: Sent 72 bytes to c0a86401
Oct 17 00:53:55 germaine last message repeated 4 times
Oct 17 00:56:19 germaine last message repeated 2 times

on both client and server.. but ping doesnt pass, nor anything else...

any ideas?
my setup is based on a simulation I did at work with two non firewalled
pcs, and there it worked. you reckon the masquerading is in the way?
then again I tried to install both tincs directly on the firewall and I
got same results

any help would be appreciated.
regards

-- 
Jan Uyttersprot


--- quote
Software is like sex, it's better when it's free!!
http://www.linux.org


-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://ftp.nl.linux.org/pub/linux/tinc/