Hello Rafael,

Am Mon, 6 May 2019 08:28:24 -0400
schrieb Rafael Wolf <rfw...@gmail.com>:

> Lars, interesting - do you have an example of what that might look like in
> the config file?

just guessing here, but the following should work:

= preparations =
# add a new routing table:
# (use "/etc/iproute2/rt_tables" if the directory does not exist)
echo "42 foo" >>/etc/iproute2/rt_tables.d/custom.conf

# Create an empty routing table. Peers will add routes to their public IP
# address there, as soon as they connect.
ip rule add lookup foo


hosts/peer-up:

#!/bin/sh
# tinc meta traffic must use "main" instead of "foo"
ip rule add to PEER_PUBLIC_IP/32 dport 655 lookup main
# other traffic to the peer's public IP is now directed into the VPN
ip route add PEER_PUBLIC_IP/32 dev "$INTERFACE" table foo


Caveat: I am writing this down without testing.
I hope, that helps.

Cheers,
Lars
_______________________________________________
tinc mailing list
tinc@tinc-vpn.org
https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

Reply via email to