Tinc Router Mode - PING RESULT is destination host unreachable

Lars Kruse lists at sumpfralle.de
Wed Feb 17 00:11:22 CET 2016


Hi Eric,


> Once I modify the firewall FORWARD rule to ACCEPT.

you should probably take a closer look at the openwrt firewall documentation
[1].
As you already noticed "ACCEPT" is surely not a good idea since it allows
traffic from the specified firewall zone to _all_ zones.
Instead you should edit the firewall zone (e.g. via the web interface) and add
the target network (your tinc vpn) as an allowed destination zone.
I assume that you already assigned a new zone to your tinc network interface.

Lars

[1] http://wiki.openwrt.org/doc/uci/firewall


More information about the tinc mailing list