tinc on phone

[Erich Eckner]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, 30 Jun 2021, Roman Mamedov wrote:

> On Wed, 30 Jun 2021 19:36:48 +0200 (CEST)
> Erich Eckner <SRS0=V1rx=LY=eckner.net=tinc at mijnuvt.nl> wrote:
>
>> Thanks for the information - With this app, I have now tinc successfully
>> running on my android phone, too :-)
>>
>> Only minor thing: It successfully connects to two tinc nodes "in the
>> internet", but fails to connect to the tinc node running on my router -
>> this one is only reachable indirectly via the other nodes.
>
> Accessing a service on the router from inside its LAN, using the router's
> public IP, will not always work. That's called NAT hairpinning or NAT loopback:
> https://en.wikipedia.org/wiki/Hairpinning
> Check if you have an option like that to enable in the router settings.

Oh, this will definitely not work - there are (at least) three nats
between the wifi and the internet: The router, the cable modem and the
upstream ISP.

But I'm also not trying this: I'm trying to access the router on its
internal ip (same subnet as the wifi itself).

>
>> This could be due to the phone using the wrong connection (it's connected
>> via cellular net and simultanously via wifi). Or it is some
>> misconfiguration on my part (firewall rules, public keys, ...)
>
> Using the cellular connection it should work as is, but via WiFi it might not,
> as described above.

There are no ports forwarded  from the outside to the router - see above
comment about NATs (at least one of them is beyond my control).

>
>
> --
> With respect,
> Roman

regards,
Erich
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE3p92iMrPBP64GmxZCu7JB1Xae1oFAmDdQ8MACgkQCu7JB1Xa
e1oK+Q/6A7XD/ZWU9Xz7rTdfRwS/sn1KrSvbZk1SZ34JNSmsaxjMs/U92GxQy0XM
sg+Z/iPEeTMQZEmYRpSndK5WQNw9/B2nMuemJjhazF8c9yMjpfNf0zJUaa8xQOPD
0ihxVQuxZQSD+cMtj8HsymugmKQOKY/DjPi1OAaSnrxIfuj9bvImREFT5BYGyFJT
fxIgS8UHaOe2+07JScMm3OytlWWtBnp6X2lvFjlKbIRFUyHHcCzS5S+KSu/s92yi
NTb83cozY+w0agTuIdQfS9T9Ln/gyHgUGFgw4wGhleZZoAbzAu9MnOTN3aMyfio0
WvLZY1yXkL7MKfKMe95EDrDVS56Dt343egfbXb59uRGWfB7cED/vZ36AL++6LNj+
5dkp0E0xVD5PBB4M6c2iC+2tjjOAJi5MAdGXKR0V65utcBuDFnBv7m7UAnQNUhy9
IcFZG2P8tjtG5gBY+QpI/fCbQr3XGjN+sqso0RuUmiXadbp1TMppbSVHL/pSFQuJ
lXj7voM6f2EeZDw1SIcdPOib8B8wBvoyJE+eTIB/kMki2WziR+wxG2wOaavcP0c4
jpEYnMe2ibmiDJRbZt31QILKXzv/UnArKHUXuIsKcL5hbftpB8UAFSVgfvxk9zW2
xE0KMayorbiWS3WJ7Ah8STyyDTz7ANvnVak5tyV+QPuivGUf/nk=
=vaY9
-----END PGP SIGNATURE-----