Routing problems?

[Guus Sliepen]

On Fri, Sep 20, 2002 at 12:54:03PM +0100, Jim Chapman wrote:

> However, the loss of connectivity is only one way;  B2 cannot ping
> B1, but B1 can ping B2.  Moreover, doing a ping from B1 to B2 will
> restore connectivity between B2 and B1.

This sounds like there is a masquerading firewall or a firewall that
only allows outgoing connections somewhere. These might drop UDP packets
in one direction if there were no UDP packets going the other direction
for more than a certain amount of time.

You have three options:

- Allow UDP packets to/from port 655 unconditionally in your firewall
  rules.

- Send ping packets at regular intervals over the tunnel.

- Add "TCPOnly = yes" to the host config files so that tinc won't use
  UDP to send packets.

The first option is the best.

-- 
Met vriendelijke groet / with kind regards,
    Guus Sliepen <guus at sliepen.eu.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20020920/0e402111/attachment.pgp