On Sat, Mar 17, 2012 at 10:17:32AM +0100, Joachim Breitner wrote:

> I am a happy user of tinc. But I have trouble setting it up so that it
> works always: At work, I can only use certain ports, among them 8080, so
> I moved the VPN to that port. But on the go, using my UMTS connection,
> this port is blocked. I have not yet found a ports that works on all of
> them.
> 
> It would be easiest if the Ports directive would support more than one
> value, the server would bind to all mentioned ports and the client would
> try them out in order.

On the server side, it is possible to use iptables to make it appear that tinc
listens on multiple ports. For example, if tinc listens on 8080 but you also
want it to accept conections on port 443, use:

iptables -t nat -A PREROUTING -p tcp --dport 443 -j DNAT --to-destination :8080

On the client side, you can put multiple Address statements in hosts/server,
like this:

Address = address.of.server.org 8080
Address = address.of.server.org 443

I hope this helps. In the future, it might be that I'll extend the
BindToAddress option to also allow a port number to be specified.

-- 
Met vriendelijke groet / with kind regards,
      Guus Sliepen <g...@debian.org>

Attachment: signature.asc
Description: Digital signature

Reply via email to