"Communication prohibited" error when pinging

[August Johansson]

Hi,
I installed tinc on two of my server and it runs fine. But I have two
problems:
* if I try to ping my server via its tinc address I get a "Communication
prohibited" error even though I know that the goal server should be open to
communication. also, I would like to use ssh with the others in my vpn  (
right now only my NeetBSD server ) but nmap says the port is filtrered. I
made sure to unblock the port in iptables. below are some config files.
apelsin are my Devuan server, citron is the name of the NetBSD server and
citrus is the name of the virtual network.

my /etc/init.d/tinc on my Devuan server:
https://pastebin.com/Gc8YSdhD

tinc-up script on my Devuan server:

#!/bin/sh
ip link set $INTERFACE up
ip addr add 172.23.22.2 dev $INTERFACE
ip route add 172.23.22.0/32 dev $INTERFACE

tinc-up script on my NetBSD server:

#!/bin/sh

ifconfig "$INTERFACE" up
ifconfig bridge0 addm "$INTERFACE" stp "$INTERFACE"

tinc.conf on my NetBSD server:

Name = citron
Device = /dev/tun0
AddressFamily = ipv4
Mode=switch
ProccessPriority=high
ConnectTo=apelsin

I have the same config file my Devuan file except the lines Name and
ConnectTo.

* NetBSD doesnt seem to have a /etc/rc.d/ file for tinc. how do I start
tinc on boot on NetBSD?

thanks for your help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20180809/94d87f6c/attachment.html>