I have a big one problem.
Code: Select all
Tue Jul 11 08:35:11 2017 us=529448 Current Parameter Settings:
Tue Jul 11 08:35:11 2017 us=529531 config = '/etc/openvpn/server.conf'
Tue Jul 11 08:35:11 2017 us=529560 mode = 1
Tue Jul 11 08:35:11 2017 us=529585 persist_config = DISABLED
Tue Jul 11 08:35:11 2017 us=529608 persist_mode = 1
Tue Jul 11 08:35:11 2017 us=529631 show_ciphers = DISABLED
Tue Jul 11 08:35:11 2017 us=529654 show_digests = DISABLED
Tue Jul 11 08:35:11 2017 us=529675 show_engines = DISABLED
Tue Jul 11 08:35:11 2017 us=529697 genkey = DISABLED
Tue Jul 11 08:35:11 2017 us=529720 key_pass_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=529740 show_tls_ciphers = DISABLED
Tue Jul 11 08:35:11 2017 us=529751 connect_retry_max = 0
Tue Jul 11 08:35:11 2017 us=529763 Connection profiles [0]:
Tue Jul 11 08:35:11 2017 us=529774 proto = udp
Tue Jul 11 08:35:11 2017 us=529785 local = '192.168.1.223'
Tue Jul 11 08:35:11 2017 us=529796 local_port = '1100'
Tue Jul 11 08:35:11 2017 us=529807 remote = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=529818 remote_port = '1100'
Tue Jul 11 08:35:11 2017 us=529841 remote_float = DISABLED
Tue Jul 11 08:35:11 2017 us=529857 bind_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=529877 bind_local = ENABLED
Tue Jul 11 08:35:11 2017 us=529900 bind_ipv6_only = DISABLED
Tue Jul 11 08:35:11 2017 us=529922 connect_retry_seconds = 5
Tue Jul 11 08:35:11 2017 us=529942 connect_timeout = 120
Tue Jul 11 08:35:11 2017 us=529961 socks_proxy_server = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=529980 socks_proxy_port = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530000 tun_mtu = 1500
Tue Jul 11 08:35:11 2017 us=530017 tun_mtu_defined = ENABLED
Tue Jul 11 08:35:11 2017 us=530033 link_mtu = 1500
Tue Jul 11 08:35:11 2017 us=530052 link_mtu_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=530072 tun_mtu_extra = 32
Tue Jul 11 08:35:11 2017 us=530094 tun_mtu_extra_defined = ENABLED
Tue Jul 11 08:35:11 2017 us=530121 mtu_discover_type = -1
Tue Jul 11 08:35:11 2017 us=530144 fragment = 0
Tue Jul 11 08:35:11 2017 us=530165 mssfix = 1450
Tue Jul 11 08:35:11 2017 us=530186 explicit_exit_notification = 0
Tue Jul 11 08:35:11 2017 us=530207 Connection profiles END
Tue Jul 11 08:35:11 2017 us=530227 remote_random = DISABLED
Tue Jul 11 08:35:11 2017 us=530246 ipchange = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530267 dev = 'tap0'
Tue Jul 11 08:35:11 2017 us=530288 dev_type = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530308 dev_node = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530329 lladdr = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530349 topology = 1
Tue Jul 11 08:35:11 2017 us=530370 ifconfig_local = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530391 ifconfig_remote_netmask = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530412 ifconfig_noexec = DISABLED
Tue Jul 11 08:35:11 2017 us=530430 ifconfig_nowarn = DISABLED
Tue Jul 11 08:35:11 2017 us=530449 ifconfig_ipv6_local = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530469 ifconfig_ipv6_netbits = 0
Tue Jul 11 08:35:11 2017 us=530488 ifconfig_ipv6_remote = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530508 shaper = 0
Tue Jul 11 08:35:11 2017 us=530526 mtu_test = 0
Tue Jul 11 08:35:11 2017 us=530546 mlock = DISABLED
Tue Jul 11 08:35:11 2017 us=530564 keepalive_ping = 10
Tue Jul 11 08:35:11 2017 us=530584 keepalive_timeout = 120
Tue Jul 11 08:35:11 2017 us=530604 inactivity_timeout = 0
Tue Jul 11 08:35:11 2017 us=530621 ping_send_timeout = 10
Tue Jul 11 08:35:11 2017 us=530640 ping_rec_timeout = 240
Tue Jul 11 08:35:11 2017 us=530659 ping_rec_timeout_action = 2
Tue Jul 11 08:35:11 2017 us=530676 ping_timer_remote = DISABLED
Tue Jul 11 08:35:11 2017 us=530692 remap_sigusr1 = 0
Tue Jul 11 08:35:11 2017 us=530712 persist_tun = ENABLED
Tue Jul 11 08:35:11 2017 us=530734 persist_local_ip = DISABLED
Tue Jul 11 08:35:11 2017 us=530754 persist_remote_ip = DISABLED
Tue Jul 11 08:35:11 2017 us=530774 persist_key = ENABLED
Tue Jul 11 08:35:11 2017 us=530792 passtos = DISABLED
Tue Jul 11 08:35:11 2017 us=530812 resolve_retry_seconds = 1000000000
Tue Jul 11 08:35:11 2017 us=530832 resolve_in_advance = DISABLED
Tue Jul 11 08:35:11 2017 us=530853 username = 'nobody'
Tue Jul 11 08:35:11 2017 us=530873 groupname = 'nogroup'
Tue Jul 11 08:35:11 2017 us=530891 chroot_dir = '/etc/openvpn/jail'
Tue Jul 11 08:35:11 2017 us=530909 cd_dir = '/etc/openvpn'
Tue Jul 11 08:35:11 2017 us=530929 writepid = '/run/openvpn/server.pid'
Tue Jul 11 08:35:11 2017 us=530948 up_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530969 down_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=530990 down_pre = DISABLED
Tue Jul 11 08:35:11 2017 us=531012 up_restart = DISABLED
Tue Jul 11 08:35:11 2017 us=531032 up_delay = DISABLED
Tue Jul 11 08:35:11 2017 us=531053 daemon = ENABLED
Tue Jul 11 08:35:11 2017 us=531075 inetd = 0
Tue Jul 11 08:35:11 2017 us=531095 log = ENABLED
Tue Jul 11 08:35:11 2017 us=531116 suppress_timestamps = DISABLED
Tue Jul 11 08:35:11 2017 us=531136 machine_readable_output = DISABLED
Tue Jul 11 08:35:11 2017 us=531156 nice = 0
Tue Jul 11 08:35:11 2017 us=531178 verbosity = 4
Tue Jul 11 08:35:11 2017 us=531201 mute = 0
Tue Jul 11 08:35:11 2017 us=531212 gremlin = 0
Tue Jul 11 08:35:11 2017 us=531223 status_file = 'openvpn-status.log'
Tue Jul 11 08:35:11 2017 us=531233 status_file_version = 1
Tue Jul 11 08:35:11 2017 us=531244 status_file_update_freq = 10
Tue Jul 11 08:35:11 2017 us=531254 occ = ENABLED
Tue Jul 11 08:35:11 2017 us=531264 rcvbuf = 0
Tue Jul 11 08:35:11 2017 us=531275 sndbuf = 0
Tue Jul 11 08:35:11 2017 us=531293 mark = 0
Tue Jul 11 08:35:11 2017 us=531314 sockflags = 0
Tue Jul 11 08:35:11 2017 us=531336 fast_io = DISABLED
Tue Jul 11 08:35:11 2017 us=531356 comp.alg = 2
Tue Jul 11 08:35:11 2017 us=531375 comp.flags = 1
Tue Jul 11 08:35:11 2017 us=531394 route_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531413 route_default_gateway = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531430 route_default_metric = 0
Tue Jul 11 08:35:11 2017 us=531452 route_noexec = DISABLED
Tue Jul 11 08:35:11 2017 us=531471 route_delay = 0
Tue Jul 11 08:35:11 2017 us=531492 route_delay_window = 30
Tue Jul 11 08:35:11 2017 us=531513 route_delay_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=531534 route_nopull = DISABLED
Tue Jul 11 08:35:11 2017 us=531555 route_gateway_via_dhcp = DISABLED
Tue Jul 11 08:35:11 2017 us=531575 allow_pull_fqdn = DISABLED
Tue Jul 11 08:35:11 2017 us=531596 management_addr = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531618 management_port = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531639 management_user_pass = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531659 management_log_history_cache = 250
Tue Jul 11 08:35:11 2017 us=531681 management_echo_buffer_size = 100
Tue Jul 11 08:35:11 2017 us=531702 management_write_peer_info_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531723 management_client_user = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531745 management_client_group = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531766 management_flags = 0
Tue Jul 11 08:35:11 2017 us=531787 shared_secret_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=531807 key_direction = 1
Tue Jul 11 08:35:11 2017 us=531826 ciphername = 'AES-256-CBC'
Tue Jul 11 08:35:11 2017 us=531845 ncp_enabled = ENABLED
Tue Jul 11 08:35:11 2017 us=531865 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Jul 11 08:35:11 2017 us=531885 authname = 'SHA1'
Tue Jul 11 08:35:11 2017 us=531904 prng_hash = 'SHA1'
Tue Jul 11 08:35:11 2017 us=531922 prng_nonce_secret_len = 16
Tue Jul 11 08:35:11 2017 us=531941 keysize = 0
Tue Jul 11 08:35:11 2017 us=531960 engine = DISABLED
Tue Jul 11 08:35:11 2017 us=531979 replay = ENABLED
Tue Jul 11 08:35:11 2017 us=531999 mute_replay_warnings = DISABLED
Tue Jul 11 08:35:11 2017 us=532018 replay_window = 64
Tue Jul 11 08:35:11 2017 us=532037 replay_time = 15
Tue Jul 11 08:35:11 2017 us=532055 packet_id_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532072 use_iv = ENABLED
Tue Jul 11 08:35:11 2017 us=532088 test_crypto = DISABLED
Tue Jul 11 08:35:11 2017 us=532107 tls_server = ENABLED
Tue Jul 11 08:35:11 2017 us=532128 tls_client = DISABLED
Tue Jul 11 08:35:11 2017 us=532147 key_method = 2
Tue Jul 11 08:35:11 2017 us=532168 ca_file = 'ca.crt'
Tue Jul 11 08:35:11 2017 us=532187 ca_path = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532206 dh_file = 'dh2048.pem'
Tue Jul 11 08:35:11 2017 us=532226 cert_file = 'ProxMaster1.crt'
Tue Jul 11 08:35:11 2017 us=532246 extra_certs_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532268 priv_key_file = 'ProxMaster1.key'
Tue Jul 11 08:35:11 2017 us=532288 pkcs12_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532306 cipher_list = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532325 tls_verify = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532344 tls_export_cert = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532397 verify_x509_type = 0
Tue Jul 11 08:35:11 2017 us=532431 verify_x509_name = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532452 crl_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532472 ns_cert_type = 0
Tue Jul 11 08:35:11 2017 us=532493 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532512 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532540 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532559 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532578 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532597 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532615 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532654 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532654 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532675 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532697 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532712 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532723 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532734 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532744 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532754 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532764 remote_cert_ku[i] = 0
Tue Jul 11 08:35:11 2017 us=532775 remote_cert_eku = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=532786 ssl_flags = 0
Tue Jul 11 08:35:11 2017 us=532799 tls_timeout = 2
Tue Jul 11 08:35:11 2017 us=532819 renegotiate_bytes = -1
Tue Jul 11 08:35:11 2017 us=532841 renegotiate_packets = 0
Tue Jul 11 08:35:11 2017 us=532862 renegotiate_seconds = 3600
Tue Jul 11 08:35:11 2017 us=532882 handshake_window = 60
Tue Jul 11 08:35:11 2017 us=532902 transition_window = 3600
Tue Jul 11 08:35:11 2017 us=532922 single_session = DISABLED
Tue Jul 11 08:35:11 2017 us=532949 push_peer_info = DISABLED
Tue Jul 11 08:35:11 2017 us=532967 tls_exit = DISABLED
Tue Jul 11 08:35:11 2017 us=532996 tls_auth_file = 'ta.key'
Tue Jul 11 08:35:11 2017 us=533069 tls_crypt_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=533110 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533130 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533149 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533170 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533199 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533219 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533239 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533260 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533279 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533301 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533322 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533343 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533364 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533386 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533407 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533428 pkcs11_protected_authentication = DISABLED
Tue Jul 11 08:35:11 2017 us=533448 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533468 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533488 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533508 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533527 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533546 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533565 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533583 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533603 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533623 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533643 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533661 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533681 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533699 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533716 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533735 pkcs11_private_mode = 00000000
Tue Jul 11 08:35:11 2017 us=533756 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533775 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533811 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533831 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533850 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533871 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533891 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533911 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533938 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533954 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533972 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=533991 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=534009 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=534030 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=534049 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=534069 pkcs11_cert_private = DISABLED
Tue Jul 11 08:35:11 2017 us=534088 pkcs11_pin_cache_period = -1
Tue Jul 11 08:35:11 2017 us=534107 pkcs11_id = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=534128 pkcs11_id_management = DISABLED
Tue Jul 11 08:35:11 2017 us=534149 server_network = 0.0.0.0
Tue Jul 11 08:35:11 2017 us=534181 server_netmask = 0.0.0.0
Tue Jul 11 08:35:11 2017 us=534203 server_network_ipv6 = ::
Tue Jul 11 08:35:11 2017 us=534238 server_netbits_ipv6 = 0
Tue Jul 11 08:35:11 2017 us=534262 server_bridge_ip = 10.0.0.1
Tue Jul 11 08:35:11 2017 us=534278 server_bridge_netmask = 255.0.0.0
Tue Jul 11 08:35:11 2017 us=534290 server_bridge_pool_start = 10.0.1.1
Tue Jul 11 08:35:11 2017 us=534301 server_bridge_pool_end = 10.0.8.254
Tue Jul 11 08:35:11 2017 us=534311 push_entry = 'route-gateway 10.0.0.1'
Tue Jul 11 08:35:11 2017 us=534321 push_entry = 'ping 10'
Tue Jul 11 08:35:11 2017 us=534331 push_entry = 'ping-restart 120'
Tue Jul 11 08:35:11 2017 us=534341 ifconfig_pool_defined = ENABLED
Tue Jul 11 08:35:11 2017 us=534356 ifconfig_pool_start = 10.0.1.1
Tue Jul 11 08:35:11 2017 us=534375 ifconfig_pool_end = 10.0.8.254
Tue Jul 11 08:35:11 2017 us=534397 ifconfig_pool_netmask = 255.0.0.0
Tue Jul 11 08:35:11 2017 us=534423 ifconfig_pool_persist_filename = 'ipp.txt'
Tue Jul 11 08:35:11 2017 us=534445 ifconfig_pool_persist_refresh_freq = 600
Tue Jul 11 08:35:11 2017 us=534464 ifconfig_ipv6_pool_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=534484 ifconfig_ipv6_pool_base = ::
Tue Jul 11 08:35:11 2017 us=534501 ifconfig_ipv6_pool_netbits = 0
Tue Jul 11 08:35:11 2017 us=534517 n_bcast_buf = 256
Tue Jul 11 08:35:11 2017 us=534533 tcp_queue_limit = 64
Tue Jul 11 08:35:11 2017 us=534552 real_hash_size = 256
Tue Jul 11 08:35:11 2017 us=534573 virtual_hash_size = 256
Tue Jul 11 08:35:11 2017 us=534593 client_connect_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=534613 learn_address_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=534633 client_disconnect_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=534652 client_config_dir = 'cdd'
Tue Jul 11 08:35:11 2017 us=534671 ccd_exclusive = DISABLED
Tue Jul 11 08:35:11 2017 us=534691 tmp_dir = '/tmp'
Tue Jul 11 08:35:11 2017 us=534710 push_ifconfig_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=534731 push_ifconfig_local = 0.0.0.0
Tue Jul 11 08:35:11 2017 us=534753 push_ifconfig_remote_netmask = 0.0.0.0
Tue Jul 11 08:35:11 2017 us=534774 push_ifconfig_ipv6_defined = DISABLED
Tue Jul 11 08:35:11 2017 us=534796 push_ifconfig_ipv6_local = ::/0
Tue Jul 11 08:35:11 2017 us=534818 push_ifconfig_ipv6_remote = ::
Tue Jul 11 08:35:11 2017 us=534839 enable_c2c = ENABLED
Tue Jul 11 08:35:11 2017 us=534859 duplicate_cn = DISABLED
Tue Jul 11 08:35:11 2017 us=534879 cf_max = 0
Tue Jul 11 08:35:11 2017 us=534898 cf_per = 0
Tue Jul 11 08:35:11 2017 us=534917 max_clients = 1024
Tue Jul 11 08:35:11 2017 us=534936 max_routes_per_client = 256
Tue Jul 11 08:35:11 2017 us=534954 auth_user_pass_verify_script = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=534972 auth_user_pass_verify_script_via_file = DISABLED
Tue Jul 11 08:35:11 2017 us=535002 auth_token_generate = DISABLED
Tue Jul 11 08:35:11 2017 us=535021 auth_token_lifetime = 0
Tue Jul 11 08:35:11 2017 us=535040 port_share_host = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=535058 port_share_port = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=535076 client = DISABLED
Tue Jul 11 08:35:11 2017 us=535094 pull = DISABLED
Tue Jul 11 08:35:11 2017 us=535112 auth_user_pass_file = '[UNDEF]'
Tue Jul 11 08:35:11 2017 us=535130 OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 22 2017
Tue Jul 11 08:35:11 2017 us=535157 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
Tue Jul 11 08:35:11 2017 us=535929 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Jul 11 08:35:11 2017 us=536058 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such a$
Tue Jul 11 08:35:11 2017 us=536463 Diffie-Hellman initialized with 2048 bit key
Tue Jul 11 08:35:11 2017 us=537118 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 08:35:11 2017 us=537144 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 08:35:11 2017 us=537161 TLS-Auth MTU parms [ L:1654 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jul 11 08:35:11 2017 us=537504 TUN/TAP device tap0 opened
Tue Jul 11 08:35:11 2017 us=537535 TUN/TAP TX queue length set to 100
Tue Jul 11 08:35:11 2017 us=537571 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Tue Jul 11 08:35:11 2017 us=538037 Could not determine IPv4/IPv6 protocol. Using AF_INET
Tue Jul 11 08:35:11 2017 us=538074 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Jul 11 08:35:11 2017 us=538101 TCP/UDP: Socket bind failed on local address [AF_INET]192.168.1.223:1100: Cannot assign requested address
Tue Jul 11 08:35:11 2017 us=538118 Exiting due to fatal error
Tue Jul 11 08:35:11 2017 us=538145 Closing TUN/TAP interface
Code: Select all
Tue Jul 11 08:36:19 2017 us=995943 OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 22 2017
Tue Jul 11 08:36:19 2017 us=995960 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
Tue Jul 11 08:36:19 2017 us=996739 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Jul 11 08:36:19 2017 us=996922 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such a$
Tue Jul 11 08:36:19 2017 us=997600 Diffie-Hellman initialized with 2048 bit key
Tue Jul 11 08:36:19 2017 us=998397 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 08:36:19 2017 us=998431 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 08:36:19 2017 us=998459 TLS-Auth MTU parms [ L:1654 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jul 11 08:36:19 2017 us=998908 TUN/TAP device tap0 opened
Tue Jul 11 08:36:19 2017 us=998946 TUN/TAP TX queue length set to 100
Tue Jul 11 08:36:19 2017 us=998998 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Tue Jul 11 08:36:19 2017 us=999571 Could not determine IPv4/IPv6 protocol. Using AF_INET
Tue Jul 11 08:36:19 2017 us=999610 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Jul 11 08:36:19 2017 us=999647 TCP/UDP: Socket bind failed on local address [AF_INET]192.168.1.223:2001: Cannot assign requested address
Tue Jul 11 08:36:19 2017 us=999673 Exiting due to fatal error
Tue Jul 11 08:36:19 2017 us=999707 Closing TUN/TAP interface
I search a solution. I control the open port :
Code: Select all
root@ProxMaster1.local:/etc/openvpn# netstat -nltp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:31337 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:6667 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:11 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:5742 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:79 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:15 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 723/rpcbind
tcp 0 0 0.0.0.0:54320 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:27665 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:1524 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 127.0.0.1:85 0.0.0.0:* LISTEN 1351/pvedaemon
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1036/sshd
tcp 0 0 0.0.0.0:119 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:3128 0.0.0.0:* LISTEN 1369/spiceproxy
tcp 0 0 0.0.0.0:1080 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1280/master
tcp 0 0 0.0.0.0:12345 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:12346 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:635 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:49724 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:540 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:1 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:20034 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:32771 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:32772 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:40421 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:32773 0.0.0.0:* LISTEN 1168/portsentry
tcp 0 0 0.0.0.0:8006 0.0.0.0:* LISTEN 1361/pveproxy
tcp 0 0 0.0.0.0:32774 0.0.0.0:* LISTEN 1168/portsentry
tcp6 0 0 :::111 :::* LISTEN 723/rpcbind
tcp6 0 0 :::22 :::* LISTEN 1036/sshd
tcp6 0 0 ::1:25 :::* LISTEN 1280/master
Code: Select all
root@ProxMaster1.local:/etc/openvpn# netstat -nlup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 0.0.0.0:34555 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:31335 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:31337 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:1 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:32770 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:32771 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:32772 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:32773 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:32774 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:7 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:9 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:69 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:111 0.0.0.0:* 723/rpcbind
udp 0 0 0.0.0.0:161 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:162 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:513 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:37444 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:635 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:640 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:641 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:700 0.0.0.0:* 1180/portsentry
udp 0 0 0.0.0.0:899 0.0.0.0:* 723/rpcbind
udp 0 0 0.0.0.0:54321 0.0.0.0:* 1180/portsentry
udp6 0 0 :::111 :::* 723/rpcbind
udp6 0 0 :::899 :::* 723/rpcbind
Code: Select all
root@ProxMaster1.local:/etc/openvpn# lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
rpcbind 723 root 6u IPv4 20029 0t0 UDP *:sunrpc
rpcbind 723 root 7u IPv4 20030 0t0 UDP *:899
rpcbind 723 root 8u IPv4 20031 0t0 TCP *:sunrpc (LISTEN)
rpcbind 723 root 9u IPv6 20032 0t0 UDP *:sunrpc
rpcbind 723 root 10u IPv6 20033 0t0 UDP *:899
rpcbind 723 root 11u IPv6 20034 0t0 TCP *:sunrpc (LISTEN)
sshd 1036 root 3u IPv4 23829 0t0 TCP *:ssh (LISTEN)
sshd 1036 root 4u IPv6 23831 0t0 TCP *:ssh (LISTEN)
portsentr 1168 root 0u IPv4 23222 0t0 TCP *:tcpmux (LISTEN)
portsentr 1168 root 1u IPv4 23224 0t0 TCP *:systat (LISTEN)
portsentr 1168 root 2u IPv4 23226 0t0 TCP *:netstat (LISTEN)
portsentr 1168 root 3u IPv4 23228 0t0 TCP *:finger (LISTEN)
portsentr 1168 root 5u IPv4 23233 0t0 TCP *:nntp (LISTEN)
portsentr 1168 root 6u IPv4 23235 0t0 TCP *:imap2 (LISTEN)
portsentr 1168 root 7u IPv4 23237 0t0 TCP *:uucp (LISTEN)
portsentr 1168 root 8u IPv4 23239 0t0 TCP *:635 (LISTEN)
portsentr 1168 root 9u IPv4 23241 0t0 TCP *:socks (LISTEN)
portsentr 1168 root 10u IPv4 23243 0t0 TCP *:ingreslock (LISTEN)
portsentr 1168 root 11u IPv4 23245 0t0 TCP *:cisco-sccp (LISTEN)
portsentr 1168 root 12u IPv4 23247 0t0 TCP *:5742 (LISTEN)
portsentr 1168 root 13u IPv4 23249 0t0 TCP *:ircd (LISTEN)
portsentr 1168 root 14u IPv4 23251 0t0 TCP *:12345 (LISTEN)
portsentr 1168 root 15u IPv4 23253 0t0 TCP *:12346 (LISTEN)
portsentr 1168 root 16u IPv4 23255 0t0 TCP *:20034 (LISTEN)
portsentr 1168 root 17u IPv4 23257 0t0 TCP *:27665 (LISTEN)
portsentr 1168 root 18u IPv4 23259 0t0 TCP *:31337 (LISTEN)
portsentr 1168 root 19u IPv4 23261 0t0 TCP *:32771 (LISTEN)
portsentr 1168 root 20u IPv4 23263 0t0 TCP *:32772 (LISTEN)
portsentr 1168 root 21u IPv4 23265 0t0 TCP *:32773 (LISTEN)
portsentr 1168 root 22u IPv4 23267 0t0 TCP *:32774 (LISTEN)
portsentr 1168 root 23u IPv4 23269 0t0 TCP *:40421 (LISTEN)
portsentr 1168 root 24u IPv4 23271 0t0 TCP *:49724 (LISTEN)
portsentr 1168 root 25u IPv4 23273 0t0 TCP *:54320 (LISTEN)
portsentr 1180 root 0u IPv4 22299 0t0 UDP *:1
portsentr 1180 root 1u IPv4 22301 0t0 UDP *:echo
portsentr 1180 root 2u IPv4 22303 0t0 UDP *:discard
portsentr 1180 root 3u IPv4 22305 0t0 UDP *:tftp
portsentr 1180 root 4u IPv4 22307 0t0 UDP *:snmp
portsentr 1180 root 5u IPv4 22309 0t0 UDP *:snmp-trap
portsentr 1180 root 6u IPv4 22311 0t0 UDP *:who
portsentr 1180 root 7u IPv4 22313 0t0 UDP *:635
portsentr 1180 root 8u IPv4 22315 0t0 UDP *:640
portsentr 1180 root 9u IPv4 22317 0t0 UDP *:641
portsentr 1180 root 10u IPv4 22319 0t0 UDP *:700
portsentr 1180 root 11u IPv4 22321 0t0 UDP *:37444
portsentr 1180 root 12u IPv4 22323 0t0 UDP *:34555
portsentr 1180 root 13u IPv4 22325 0t0 UDP *:31335
portsentr 1180 root 14u IPv4 22327 0t0 UDP *:32770
portsentr 1180 root 15u IPv4 22329 0t0 UDP *:32771
portsentr 1180 root 16u IPv4 22331 0t0 UDP *:32772
portsentr 1180 root 17u IPv4 22333 0t0 UDP *:32773
portsentr 1180 root 18u IPv4 22335 0t0 UDP *:32774
portsentr 1180 root 19u IPv4 22337 0t0 UDP *:31337
portsentr 1180 root 20u IPv4 22339 0t0 UDP *:54321
master 1280 root 13u IPv4 21408 0t0 TCP localhost.localdomain:smtp (LISTEN)
master 1280 root 14u IPv6 21409 0t0 TCP ip6-localhost:smtp (LISTEN)
pvedaemon 1351 root 6u IPv4 23981 0t0 TCP localhost.localdomain:85 (LISTEN)
pvedaemon 1352 root 6u IPv4 23981 0t0 TCP localhost.localdomain:85 (LISTEN)
pvedaemon 1353 root 6u IPv4 23981 0t0 TCP localhost.localdomain:85 (LISTEN)
pvedaemon 1354 root 6u IPv4 23981 0t0 TCP localhost.localdomain:85 (LISTEN)
pveproxy 1361 www-data 6u IPv4 23998 0t0 TCP *:8006 (LISTEN)
pveproxy 1362 www-data 6u IPv4 23998 0t0 TCP *:8006 (LISTEN)
pveproxy 1363 www-data 6u IPv4 23998 0t0 TCP *:8006 (LISTEN)
pveproxy 1364 www-data 6u IPv4 23998 0t0 TCP *:8006 (LISTEN)
spiceprox 1369 www-data 6u IPv4 24077 0t0 TCP *:3128 (LISTEN)
spiceprox 1370 www-data 6u IPv4 24077 0t0 TCP *:3128 (LISTEN)
Code: Select all
local 192.168.1.223
port 2001
proto udp
dev tap0
ca ca.crt
cert ProxMaster1.crt
key ProxMaster1.key
dh dh2048.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.0.0.1 255.0.0.0 10.0.1.1 10.0.8.254
client-config-dir cdd
client-to-client
keepalive 10 120
tls-auth ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4
mode server
tls-server
script-security 2
chroot /etc/openvpn/jailDo you have any suggestion for my problem ?
Thank's !