From: Guus Sliepen <guus@tinc-vpn.org>
Date: Fri, 23 Mar 2012 12:18:36 +0000 (+0100)
Subject: Set default value of DecrementTTL to "no".
X-Git-Tag: release-1.0.18~9
X-Git-Url: https://www.tinc-vpn.org/git/browse?a=commitdiff_plain;ds=inline;h=b5e3bf1a85462f0c41638c11305d28f87af24395;hp=c373de2e9812700c0568640727ad917b6fc7d758;p=tinc

Set default value of DecrementTTL to "no".

Decrementing the TTL causes IPv6 to fail when Mode = switch, and there may be
other unforeseen side-effects.
---

diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in
index d5757c82..fa621533 100644
--- a/doc/tinc.conf.5.in
+++ b/doc/tinc.conf.5.in
@@ -180,13 +180,15 @@ If you don't specify a host with
 won't try to connect to other daemons at all,
 and will instead just listen for incoming connections.
 
-.It Va DecrementTTL Li = yes | no Po yes Pc
+.It Va DecrementTTL Li = yes | no Po no Pc
 When enabled,
 .Nm tinc
 will decrement the Time To Live field in IPv4 packets, or the Hop Limit field in IPv6 packets,
 before forwarding a received packet to the virtual network device or to another node,
 and will drop packets that have a TTL value of zero,
 in which case it will send an ICMP Time Exceeded packet back.
+.Pp
+Do not use this option if you use switch mode and want to use IPv6.
 
 .It Va Device Li = Ar device Po Pa /dev/tap0 , Pa /dev/net/tun No or other depending on platform Pc
 The virtual network device to use.
diff --git a/doc/tinc.texi b/doc/tinc.texi
index 9e8929b0..bddc39a0 100644
--- a/doc/tinc.texi
+++ b/doc/tinc.texi
@@ -794,12 +794,14 @@ tinc won't try to connect to other daemons at all,
 and will instead just listen for incoming connections.
 
 @cindex DecrementTTL
-@item DecrementTTL = <yes | no> (yes)
+@item DecrementTTL = <yes | no> (no)
 When enabled, tinc will decrement the Time To Live field in IPv4 packets, or the Hop Limit field in IPv6 packets,
 before forwarding a received packet to the virtual network device or to another node,
 and will drop packets that have a TTL value of zero,
 in which case it will send an ICMP Time Exceeded packet back.
 
+Do not use this option if you use switch mode and want to use IPv6.
+
 @cindex Device
 @item Device = <@var{device}> (@file{/dev/tap0}, @file{/dev/net/tun} or other depending on platform)
 The virtual network device to use.
diff --git a/src/route.c b/src/route.c
index 051deffb..6eadb888 100644
--- a/src/route.c
+++ b/src/route.c
@@ -34,7 +34,7 @@
 
 rmode_t routing_mode = RMODE_ROUTER;
 fmode_t forwarding_mode = FMODE_INTERNAL;
-bool decrement_ttl = true;
+bool decrement_ttl = false;
 bool directonly = false;
 bool priorityinheritance = false;
 int macexpire = 600;