Hi Eric,
> Once I modify the firewall FORWARD rule to ACCEPT. you should probably take a closer look at the openwrt firewall documentation [1]. As you already noticed "ACCEPT" is surely not a good idea since it allows traffic from the specified firewall zone to _all_ zones. Instead you should edit the firewall zone (e.g. via the web interface) and add the target network (your tinc vpn) as an allowed destination zone. I assume that you already assigned a new zone to your tinc network interface. Lars [1] http://wiki.openwrt.org/doc/uci/firewall _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
