Patch for tunnelserver mode in protocol_subnet.c

[Guus Sliepen]

On Wed, Apr 13, 2005 at 03:25:05PM +0200, Thomas NOEL wrote:

> Another question about tunnelserver : I see a lot of lines like these :
> 
>  	if(tunnelserver && owner != myself && owner != c->node)
>  		return false;
> 
> But with a "return false" the meta-connection will be closed. Wouldn't 
> it be better to answer "true" ? I.e. don't handle the request, but dont' 
> close the connection ?

Tinc relies on the fact that every node in the VPN has the view of the
VPN, ie. they all know the same list of nodes, subnets and edges.
If some nodes have a different view, then the graph algorithms can't
guarantee correct routing anymore. So it is never good to ignore faulty
data from other nodes.

-- 
Met vriendelijke groet / with kind regards,
    Guus Sliepen <guus at sliepen.eu.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://brouwer.uvt.nl/pipermail/tinc-devel/attachments/20050413/6bf1e044/attachment.pgp