Christian Lyra wrote:
Hi,

 >
 > I´m using switch mode, and hosts B and C has IndirectMode enabled.
 > Host A is in listen only mode (no ConnectTo set), hosts B and C
 > connects to A.  Everything works almost as expected... B and C
 > connects to A, and they can ping each other, but ONLY after each
 > other learns the other MAC thru A. What I mean is: if I start A,
 > B, C, and try to ping C from B, ping will fail, but if I send a
 > ping to A from C, then B will be able to ping C as it will learn
 > the MAC of C thru A. If there´s no traffic between the hosts for a
 > while, then the arp entries will expire from arp tables and the
 > problem will happen again.

 This is probably caused by NAT or other stateful firewall rules. Try
adding TCPOnly = yes to your host config files, that should solve the
problem.

Indeed... this solves the problem but Statefull firewall rules should be satisfied with a short "PingInterval", shouldnt it? I would like to not use tcp if possible.



What about manually adding the arp or setting up a rarp daemon (or would that be an arp proxy daemon), then you could still use udp.

Eric

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
tinc mailing list
[email protected]
http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

Reply via email to