<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Verdana">Thanks, now it works perfectly.<br>
<br>
I still need to figure out why BACKUP firewall didn't logged anything,
it should have done.<br>
<br>
<br>
Thanks once again for your help.<br>
<br>
<br>
Regards Natanael<br>
Sweden<br>
<br>
<br>
</font></font><br>
Guus Sliepen skrev 2009-10-27 18:05:
<blockquote cite="mid:20091027170556.GM16142@sliepen.org" type="cite">
<pre wrap="">On Tue, Oct 27, 2009 at 05:27:22PM +0100, Natanael Yngvesson wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Okay, so tincd on MASTER can handle more than one connection to the same
server.
I though that you must have a seperate VPN tunnel for each new 2 computers
that you connect.
VPN = tunnel between 2 computers I thought.
So that means i could connect all 3 computers to the same "vpn"/"btun" VPN
tunnel?
</pre>
</blockquote>
<pre wrap="">
Yes. The idea behind tinc is that you do not set up tunnels, but rather specify
some endpoints and let tinc figure out how to get packets from one node to the
other.
</pre>
<blockquote type="cite">
<pre wrap="">here is the requested output from my iptables.
</pre>
</blockquote>
<pre wrap="">[...]
Hm. All your VPN traffic is handled by RULE_12 it seems. However, on BACKUP, in
the INPUT chain, only packets with source addresses in the 192.168.3.0/24
subnet are allowed. If MASTER tries to ping BACKUP, it will send packets with
192.168.0.1 as the source address, so they are blocked by BACKUP's firewall (in
RULE_13). If BACKUP connects MASTER, then reply packets are allowed by the
state RELATED,ESTABLISHED rule of course.
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
tinc mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tinc@tinc-vpn.org">tinc@tinc-vpn.org</a>
<a class="moz-txt-link-freetext" href="http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc">http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc</a>
</pre>
</blockquote>
</body>
</html>