825071750290210916 #general

powerful-hydrogen-97244

03/12/2022, 11:22 AM

I got a router, and a node within it's LAN. This node is a egress node for the local lan and other nodes can access the lan, np. Anyone got any hint's whatever rules the router needs so workstations within the lan can access the mesh? A route does not seem to be enough 🤔

powerful-hydrogen-97244

03/12/2022, 11:26 AM

wait, nevermind - a route is enough but I think some ipsec shenanigangs are blocking things a bit

powerful-hydrogen-97244

03/12/2022, 11:27 AM

yeah nevermind, it was my old ipsec config I replaced 😮‍💨

powerful-hydrogen-97244

03/12/2022, 9:28 PM

another question :D Does anyone have an idea why when coming from a external client or when accessing from a relayed server, servers within refuse to accept SSH port 22?

powerful-hydrogen-97244

03/12/2022, 9:29 PM

is there like some internal port22 blockage?

powerful-hydrogen-97244

03/12/2022, 9:29 PM

if the ssh port is on another port, it works just fine

powerful-hydrogen-97244

03/12/2022, 9:32 PM

Is this potentially related to

PORT_FORWARD_SERVICES: "mq,dns,ssh"

powerful-hydrogen-97244

03/12/2022, 9:38 PM

ah indeed it was...

powerful-hydrogen-97244

03/12/2022, 9:38 PM

I removed the dns and ssh service and suddenly my pihole as well as ssh works : )

jolly-london-20127

03/12/2022, 9:46 PM

ooooh interesting, this is good to hear...was just about to investigate the SSH issues...i noticed several people are having issues with SSH'ing into machines via ingress gateway

jolly-london-20127

03/12/2022, 9:46 PM

so removing the "dns,ssh" sections solved that for you?

powerful-hydrogen-97244

03/12/2022, 9:55 PM

well, just ssh really

powerful-hydrogen-97244

03/12/2022, 9:55 PM

I removed dns as well since I got a pihole that does DNS for me

powerful-hydrogen-97244

03/12/2022, 9:56 PM

so having dns there actually caused my pihole not to work

powerful-hydrogen-97244

03/12/2022, 9:59 PM

also, stopping netclient via `systemctl stop netclient`does not clean up the tunnels, it leaves them running :P

powerful-hydrogen-97244

03/12/2022, 9:59 PM

is that intended or a bug?

jolly-london-20127

03/12/2022, 10:07 PM

hmmm ok, maybe we should just pull that out in the next release, I'll do some testing

jolly-london-20127

03/12/2022, 10:08 PM

and no it will not remove the tunnels unless you leave the network (netclient leave -n network)

jolly-london-20127

03/12/2022, 10:08 PM

that might be a good feature suggestion though, was just never built in

powerful-hydrogen-97244

03/12/2022, 10:10 PM

checkin the code - the shutdown functionality is there just not in the shutdown routine

jolly-london-20127

03/12/2022, 10:12 PM

I don't believe we have any built in functionality to remove the tunnels w/o leaving the network currently. Would be good though (netclient stop -n network, netclient start -n network)

powerful-hydrogen-97244

03/12/2022, 10:12 PM

my specific usecase is that my remote/lte node may not be that secure. Thus, as services can only be started by a root user

powerful-hydrogen-97244

03/12/2022, 10:12 PM

// RemoveWGQuickConf - calls wg-quick down
func RemoveWGQuickConf(confPath string, printlog bool) error {
    _, err := ncutils.RunCmd(fmt.Sprintf("wg-quick down %s", confPath), printlog)
    return err
}

powerful-hydrogen-97244

03/12/2022, 10:13 PM

couldn't this simply be called?

powerful-hydrogen-97244

03/12/2022, 10:14 PM

and yes, this functionality would be amazing, actually!

jolly-london-20127

03/12/2022, 10:16 PM

any chance you'd be willing to write a PR for this? We're pretty stretched for time but I think it would be great actually

jolly-london-20127

03/12/2022, 10:16 PM

hmmm actually it might be a little more complex than that for a stop/start function

jolly-london-20127

03/12/2022, 10:16 PM

bc the daemon would just re-start it whenever it receives a server update

powerful-hydrogen-97244

03/12/2022, 10:17 PM

fair, I think you would just need to stop the daemon

jolly-london-20127

03/12/2022, 10:18 PM

h/e it's an open question whether most users actually want the tunnels to get deleted when the service stops