ZeroTier point-to-point for all hosts excluding one

[xRef98]

Hello everyone! Let’s say I have a network with a subnet of 10.32.64.0/24. I want all hosts in my network to be able to connect only to 10.32.64.1, but I want 10.32.64.1 to be able to communicate to all other hosts. I tried setting up a static route in the ZeroTier config 10.32.64.1/32, but then ZeroTier doesn’t give out an IP address to anyone. Is there a way to achieve this?

[AndrewZ]

Rules Engine | ZeroTier Documentation

Im stuck using tags

Hi forum. Im stuck with some tag-rules. Servers should be able to initialize connection with other servers and non-servers (aka. everyone). Non-servers should not be able to initialize connection to anyone at all. Simplified version: tag server id 1000 enum 10 No enum 20 Yes default No ; drop chr tcp_syn and not chr tcp_ack and not ipsrc 10.144.0.1/32 ; accept; The above is working, since my test-server is located at 10.144.0.1/32, but I need it to work with the tag ‘server’, …

and probably a few other mentions in the forum

[xRef98]

Thanks! That’s what I was looking for. Question number two: is there a way to ‘bypass’ flow rules on client side, without having access to network settings?
Let’s say some unkind client wants to ignore “drop” rules

[AndrewZ]

I don’t think that will be possible as technically speaking the rules apply on the destination side.