msg="dropping outbound packet" about nebula HOT 7 CLOSED

Thanks for writing in!

If I remember properly, we check the packet and only allow UDP and TCP, currently. I think you could modify the firewall code to allow another protocol, but we've never tested this and can't speak to whether we will officially support it...

https://github.com/slackhq/nebula/blob/master/firewall.go#L24-L25 - as a quick test, depending on your needs, perhaps you could just swap out UDP for GRE as a quick test.

from nebula.

Something else is weird here. The local ip is routable and so the firewall is likely dropping the packet because it doesn't match the ip the receiving host has been assigned https://github.com/slackhq/nebula/blob/master/firewall.go#L353

from nebula.

its trying to forward a tcp packet over nebula. the gre/openvpn mention was how i had it previously running/tested

from nebula.

Ah, sorry I missed that part. That won't currently work since the firewall drops any inbound packets that don't match the ip assigned to the receiving nebula process. We have a loose spec on how to deal with this situation more securely than making this line optional but we haven't set aside time to implement it yet.

from nebula.

how would i make that line optional to test thats the issue? (i have nfi about go)

from nebula.

Comment it out and recompile

from nebula.

With #79 merged, you can now send traffic for non nebula ips over nebula. Closing, but please let us know if you run into issues.

from nebula.