tinc version 1.0pre7 hangs

[Guus Sliepen]

On Sun, May 12, 2002 at 10:19:12AM -0500, Denny Fox wrote:

[...]
> on the same subnet. Both the other two legs are on different ISP's.
> All the systems are running masquerading firewalls with IP chains, and
> are running the tincd.
> 
> The vpn seemed to act normally until there needed to be a larger data
> transfer required. Then the connection would freeze and require the
> process to be killed from the hub. I can also ssh into all the systems
[...]

Most probably the masquerading firewalls are dropping fragmented UDP
packets. You can work around this problem by lowering the MTU of the tap
device, by adding something like "ifconfig $INTERFACE mtu 1400" to
the tinc-up scripts, or by using TCP to tunnel traffic, by adding
"TCPOnly = yes" to the host config files.

-- 
Met vriendelijke groet / with kind regards,
  Guus Sliepen <guus at sliepen.warande.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20020512/b7f62dc7/attachment.pgp