Dear Lance, It is not work. Any idea?
Regards, Eric -----Original Message----- From: Lance Fredrickson [mailto:[email protected]] Sent: Wednesday, February 17, 2016 12:53 AM To: [email protected] Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable On 2/16/2016 9:04 AM, Eric Yau wrote: > Hi Lars, > > Once I modify the firewall FORWARD rule to ACCEPT. I can ping and > access my company PC at home. All traffic can pass through that. But I > think it is not a good practice to change the FORWARD rule to ACCEPT. > Any idea to check and just allow the tinc VPN traffic only? Instead of > allow everything pass through the FORWARD rule. Here's an example of firewall rules I run in my home router. I've named the interface 'tinc' in my case. iptables -I INPUT -p udp --dport 655 -j ACCEPT iptables -I INPUT -p tcp --dport 655 -j ACCEPT iptables -I INPUT -i tinc -j ACCEPT iptables -I FORWARD -i tinc -j ACCEPT Cheers, Lance _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
