Il 2015-05-05 13:29 Guus Sliepen ha scritto:
On Tue, May 05, 2015 at 01:18:15PM +0200, Alessandro Briosi wrote:

Now the odd thing is that when the VPN comes up they both also add the local
subnet to their routes on the tinc interface:
[...]
the subnet-up script runs this command:
ip route add $SUBNET dev $INTERFACE metric $WEIGHT

Should I filter it in the subnet-up script? I have other installations which
don't create this effect.

Tinc calls the subnet-up script for all Subnets, including those of the
local node. If you don't want the local ones added, then the following line will
help:

[ "$NAME" = "$NODE" ] && exit 0

Are you sure the other installations don't do the same thing?


Well, yes.
On some I have StrictSubnets enabled, but on others it simply does not add any subnet (i.e. on my central firewall).

I have enabled some loggin in the script and effectively it gets all the routing (dunno why it's not adding them)
I'll add the above filter.

Thanks,
Alessandro
_______________________________________________
tinc mailing list
[email protected]
http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

Reply via email to