On Sat, Nov 17, 2018 at 3:20 PM Jonny Tyers <jtyers at gmail.com> wrote: > I want tinc to listen locally on loopback, so that port 655 is not > exposed on any system interfaces. Did you consider or try "ListenAddress"? https://tinc-vpn.org/documentation-1.1/Main-configuration-variables.html#Main-configuration-variables -Parke