firewalling / netfilter / iptables / tcpdump on the vpn

xavier list.tinc at natch.dyndns.org
Mon Sep 18 17:28:25 CEST 2006


On Fri, Jun 02, 2006 at 06:13:28PM +0200, Guus Sliepen wrote:
> On Wed, May 31, 2006 at 11:34:14AM -0400, xavier wrote:
> 
> > > Without the return you duplicate each packet, one going to the local
> > > interface and one is directly forwarded to the destination by tinc. But
> > > I guess that with the return it is not sending packets out anymore...
> > > I'll see if I can create a working patch.
> > 
> > thanks, waiting for news from you.
> 
> Attached is a patch that adds the option "RouteIncoming". Set it
> to "no" in tinc.conf, and tinc will hand packets received from other
> nodes directly to the tun device.


cool, works great on debian stable (1.0.3 tinc release)
(i guess the patch was for 1.0.4 ?)

thanks for your good work !


bye
-- 
xavier


More information about the tinc mailing list