You might be able to do this today without any changes to tinc, if you run your various tincd processes under different users, and then use something like:
# iptables -A OUTPUT -m owner --uid-owner <username> -j MARK --set-mark ... On 5 October 2016 at 18:27, Olivier Tirat <[email protected]> wrote: > I know i'm new to the list but i'd like to propose something for tincd > daemon. > > I'd like to mark all sockets established by a tincd process with a mark > passed as an argument in the command line. > > What could be the purpose of this new option? > The goal of this option is to be able to have several tincd process > running at the same time using the same port but using different ip. > In order to be able to give the right IP to outgoing packet i have to be > able to mark them and to source nat the packet according to the mark. > The advantage of this solution is to have fixed ports for traffic and > firewalls and moving ip address that are much easier to manage. > > Do you think its something interesting? > Do you think its a hard work to do? > If not i could probably try to do it and propose a patch for that if you > think it is interesting. > > > Sincerely Yours > > Olivier > > > _______________________________________________ > tinc mailing list > [email protected] > https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc >
_______________________________________________ tinc mailing list [email protected] https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
