Hi, Am Samstag, den 26.09.2015, 15:45 +0200 schrieb Marcus Schopen: > Hi, > > Am Samstag, den 26.09.2015, 12:20 +0200 schrieb Marcus Schopen: > > Last Problem seems to be the local UFW Firewall on the clients whichs > > seems to block the Broadcast for LocalDiscovery = yes. Need to check the > > logs here. > > Puzzeling around with UFW firewall. What ports need to be open on the > clients to get "LocalDiscovery = yes" working? I don't see any blocked > packages in kern.log. If I disable the UFW firewall, the clients are > able to talk directly.
UFW firewall is dropping broadcast traffic without noisy logging. After changing this line in /etc/ufw/before.rules broadcast packages are accepted and local tinc clients behind the NAT can connect directly (LocalDiscovery): # if BROADCAST, RETURN ###-A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN -A ufw-not-local -m addrtype --dst-type BROADCAST -j ACCEPT Ciao Marcus _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
