Dear Guus, just for reference, the firewall that was inbetween is an OpenBSD 4.6, and there was no difference whether we enabled or disabled scrubbing of fragmented packages, we also saw that the packages were leaving the external interface of the firewall, but they were not received by the opposite VPN endpoint which is Ubuntu ( self firewalling vpn endpoint ).
Thanks again Soeren -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Guus Sliepen Sent: Dienstag, 22. Dezember 2009 20:07 To: [email protected] Subject: Re: traffic not going through tunnel On Tue, Dec 22, 2009 at 07:00:11PM +0100, Soeren Malchow wrote: > no, we were using the latest vesion in Ubuntu Hardy, since it is the > current LTS version, we upgraded from the launchpad.net PPAs > > deb http://ppa.launchpad.net/dnjl/ppa/ubuntu YOUR_UBUNTU_VERSION_HERE > main deb-src http://ppa.launchpad.net/dnjl/ppa/ubuntu > YOUR_UBUNTU_VERSION_HERE main > > and i works immediately after that. Great! Older versions of tinc did not support PMTUDiscovery in switch mode, and would let UDP packets be fragmented. And unfortunately some firewalls drop fragments. -- Met vriendelijke groet / with kind regards, Guus Sliepen <[email protected]> _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
