Tinc Router Mode - PING RESULT is destination host unreachable

[Eric Yau]

Dear Lance,

It is not work. Any idea?

Regards,
Eric

-----Original Message-----
From: Lance Fredrickson [mailto:lancethepants at gmail.com] 
Sent: Wednesday, February 17, 2016 12:53 AM
To: tinc at tinc-vpn.org
Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable

On 2/16/2016 9:04 AM, Eric Yau wrote:
> Hi Lars,
>
> Once I modify the firewall FORWARD rule to ACCEPT. I can ping and 
> access my company PC at home. All traffic can pass through that. But I 
> think it is not a good practice to change the FORWARD rule to ACCEPT. 
> Any idea to check and just allow the tinc VPN traffic only? Instead of 
> allow everything pass through the FORWARD rule.

Here's an example of firewall rules I run in my home router.  I've named the
interface 'tinc' in my case.

iptables -I INPUT -p udp --dport 655 -j ACCEPT iptables -I INPUT -p tcp
--dport 655 -j ACCEPT iptables -I INPUT -i tinc -j ACCEPT iptables -I
FORWARD -i tinc -j ACCEPT

Cheers,
Lance