Config error - please help-continue

[Kostadin Galabov]

It didn't help :(
When I did ping to 192.168.1.1 from client machine I got the following in
syslog:
May  8 08:55:54 ns tinc.vpn_net[726]: Sending packet of 100 bytes to US_VPN
(x.x.x.x - inetIP)
May  8 08:55:55 ns tinc.vpn_net[726]: Incoming data socket error: Connection
refused
tcpdump -i tap0 gives this:
08:49:13.919331 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:14.919323 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:15.919327 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:16.919334 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:17.919323 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:18.919335 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:19.919327 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:20.919329 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:21.919327 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:22.919327 ns.iris.bg > 192.168.1.1: icmp: echo request
08:49:23.919337 ns.iris.bg > 192.168.1.1: icmp: echo request

It seems the other host responds, but packets are not sent vrom tap0 to
eth0.

On server host, when I ping 192.168.0.1, there is no info in syslog, but
tcpdump -i vpn_net gives me this:

09:46:28.134738 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:29.131001 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:30.130997 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:31.131159 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:32.130997 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:33.130996 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:34.131130 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:35.131000 arp who-has 192.168.0.1 tell rtr-us.iris.bg
09:46:36.131000 arp who-has 192.168.0.1 tell rtr-us.iris.bg

I wonder if it is because the client mashine is masqueraded and behind
firewall. And I portmapped 655 port (TCP and UDP) on the firewall to point
to respective ports on the client mashine, but maybe this is not right ?


-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://ftp.nl.linux.org/pub/linux/tinc/