BindToAddress: TCP connections originate from random source address.

[Guus Sliepen]

On Tue, May 26, 2009 at 06:06:37PM +0200, Florian Forster wrote:

> I've stumbled upon a problem which I can't solve easily with the
> available options in tinc - at least as far as I see. If enlightenment
> is all I need, I'll happily accept pointers ;)
[...]
> The problem is that `BindToAddress' is only used for *listening* TCP
> sockets, not for sending TCP sockets.
[...]
> On the other hand, the UDP sockets are
> bound and used for both, sending and receiving.
[...]
> The function `handle_incoming_vpn_data' then fails to look up the host
> entry belonging to this IP address and I get the error printed in
> line 559:
> 
>   Received UDP packet from unknown source 2001:780:0:1e::1
> 
> I propose to check the `BindToAddress' configuration in
> `do_outgoing_connection' and, if set, bind TCP sockets to that address,
> too.

Yes, that is a simple solution that should work. The same change should
probably also be made for BindToInterface then.

> Are there any comments, suggestions, or objections? Otherwise I'd write
> a quick patch..

A patch would be welcome! But I still wonder about the configure.in patch you
sent?

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://www.tinc-vpn.org/pipermail/tinc-devel/attachments/20090526/dc3a4c73/attachment.pgp