Local routes passed to subnet-up

Alessandro Briosi tsdogs at briosix.org
Tue May 5 15:18:53 CEST 2015


Il 2015-05-05 13:29 Guus Sliepen ha scritto:
> On Tue, May 05, 2015 at 01:18:15PM +0200, Alessandro Briosi wrote:
> 
>> Now the odd thing is that when the VPN comes up they both also add the 
>> local
>> subnet to their routes on the tinc interface:
> [...]
>> the subnet-up script runs this command:
>> ip route add $SUBNET dev $INTERFACE metric $WEIGHT
>> 
>> Should I filter it in the subnet-up script? I have other installations 
>> which
>> don't create this effect.
> 
> Tinc calls the subnet-up script for all Subnets, including those of the
> local node. If you don't want the local ones added, then the following 
> line will
> help:
> 
> [ "$NAME" = "$NODE" ] && exit 0
> 
> Are you sure the other installations don't do the same thing?
> 

Well, yes.
On some I have StrictSubnets enabled, but on others it simply does not 
add any subnet (i.e. on my central firewall).

I have enabled some loggin in the script and effectively it gets all the 
routing (dunno why it's not adding them)
I'll add the above filter.

Thanks,
Alessandro


More information about the tinc mailing list