DNS_PROBE_FINISHED_NO_INTERNET

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
madsere
OpenVpn Newbie
Posts: 3
Joined: Tue Jul 07, 2015 10:11 pm

DNS_PROBE_FINISHED_NO_INTERNET

Post by madsere » Tue Jul 07, 2015 10:13 pm

Trying to setup openvpn on a openvz server with centos 7/64 and connect from a Win 7/64 client. After some fiddling everything now seems ok in the sense that I don't see any errors/warnings anywhere, yet, attempting to use the vpn server cause the failure DNS_PROBE_FINISHED_NO_INTERNET. The client connects fine if vpn is stopped or i connect to one of the free vpn servers on the internet.

Can anyone give me a hint to what I am doing wrong?

x.x.208.97 - server public IP
y.y.87.151 - ISP public IP

# Server: OpenVZ vpn server with Centos 7/64, installed as per https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7
with the change of "iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0:0 -j MASQUERADE". The server in general connects fine to the internet.

# server conf - /etc/openvpn/server.conf:
port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn-status.log
log /var/log/openvpn.log
verb 6
mute 5

# server log - /var/log/openvz.log:
Tue Jul 7 15:21:39 2015 us=903986 Current Parameter Settings:
Tue Jul 7 15:21:39 2015 us=904064 config = 'server.conf'
Tue Jul 7 15:21:39 2015 us=904080 mode = 1
Tue Jul 7 15:21:39 2015 us=904092 persist_config = DISABLED
Tue Jul 7 15:21:39 2015 us=904104 persist_mode = 1
Tue Jul 7 15:21:39 2015 us=904115 NOTE: --mute triggered...
Tue Jul 7 15:21:39 2015 us=904139 277 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 15:21:39 2015 us=904151 OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 9 2015
Tue Jul 7 15:21:39 2015 us=904170 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Tue Jul 7 15:21:39 2015 us=914362 Diffie-Hellman initialized with 2048 bit key
Tue Jul 7 15:21:39 2015 us=914614 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:3 ]
Tue Jul 7 15:21:39 2015 us=914631 Socket Buffers: R=[87380->131072] S=[16384->131072]
Tue Jul 7 15:21:39 2015 us=914769 TUN/TAP device tun0 opened
Tue Jul 7 15:21:39 2015 us=914784 TUN/TAP TX queue length set to 100
Tue Jul 7 15:21:39 2015 us=914799 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jul 7 15:21:39 2015 us=914820 /usr/sbin/ip link set dev tun0 up mtu 1500
Tue Jul 7 15:21:39 2015 us=916968 /usr/sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Tue Jul 7 15:21:39 2015 us=918220 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jul 7 15:21:39 2015 us=918692 GID set to nobody
Tue Jul 7 15:21:39 2015 us=918718 UID set to nobody
Tue Jul 7 15:21:39 2015 us=918740 Listening for incoming TCP connection on [undef]
Tue Jul 7 15:21:39 2015 us=918759 TCPv4_SERVER link local (bound): [undef]
Tue Jul 7 15:21:39 2015 us=918771 TCPv4_SERVER link remote: [undef]
Tue Jul 7 15:21:39 2015 us=918792 MULTI: multi_init called, r=256 v=256
Tue Jul 7 15:21:39 2015 us=918830 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Tue Jul 7 15:21:39 2015 us=918850 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Tue Jul 7 15:21:39 2015 us=918865 succeeded -> ifconfig_pool_set()
Tue Jul 7 15:21:39 2015 us=918878 IFCONFIG POOL LIST
Tue Jul 7 15:21:39 2015 us=918890 client1,10.8.0.4
Tue Jul 7 15:21:39 2015 us=918921 MULTI: TCP INIT maxclients=1024 maxevents=1028
Tue Jul 7 15:21:39 2015 us=918959 Initialization Sequence Completed
Tue Jul 7 15:22:58 2015 us=953287 MULTI: multi_create_instance called
Tue Jul 7 15:22:58 2015 us=953375 Re-using SSL/TLS context
Tue Jul 7 15:22:58 2015 us=953605 LZO compression initialized
Tue Jul 7 15:22:58 2015 us=953772 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:3 ]
Tue Jul 7 15:22:58 2015 us=953807 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jul 7 15:22:58 2015 us=953846 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Jul 7 15:22:58 2015 us=953860 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Jul 7 15:22:58 2015 us=953891 Local Options hash (VER=V4): 'c0103fa8'
Tue Jul 7 15:22:58 2015 us=953912 Expected Remote Options hash (VER=V4): '69109d17'
Tue Jul 7 15:22:58 2015 us=953945 TCP connection established with [AF_INET]y.y.87.151:49603
Tue Jul 7 15:22:58 2015 us=953961 TCPv4_SERVER link local: [undef]
Tue Jul 7 15:22:58 2015 us=953975 TCPv4_SERVER link remote: [AF_INET]y.y.87.151:49603
Tue Jul 7 15:22:59 2015 us=926580 y.y.87.151:49603 TCPv4_SERVER READ [14] from [AF_INET]y.y.87.151:49603: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 7 15:22:59 2015 us=926621 y.y.87.151:49603 TLS: Initial packet from [AF_INET]y.y.87.151:49603, sid=87f52494 71c9c6f7
Tue Jul 7 15:22:59 2015 us=926660 y.y.87.151:49603 TCPv4_SERVER WRITE [26] to [AF_INET]y.y.87.151:49603: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Jul 7 15:22:59 2015 us=956376 y.y.87.151:49603 TCPv4_SERVER READ [22] from [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 0 ]
Tue Jul 7 15:23:00 2015 us=35382 y.y.87.151:49603 TCPv4_SERVER READ [114] from [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Tue Jul 7 15:23:00 2015 us=35507 y.y.87.151:49603 TCPv4_SERVER WRITE [22] to [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 1 ]
Tue Jul 7 15:23:00 2015 us=35557 y.y.87.151:49603 TCPv4_SERVER READ [114] from [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Tue Jul 7 15:23:00 2015 us=35577 y.y.87.151:49603 NOTE: --mute triggered...
Tue Jul 7 15:23:01 2015 us=576422 y.y.87.151:49603 128 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 15:23:01 2015 us=576447 y.y.87.151:49603 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 7 15:23:01 2015 us=576550 y.y.87.151:49603 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=client1, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 7 15:23:01 2015 us=576576 y.y.87.151:49603 TCPv4_SERVER WRITE [22] to [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 30 ]
Tue Jul 7 15:23:01 2015 us=576591 y.y.87.151:49603 TCPv4_SERVER READ [114] from [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Tue Jul 7 15:23:01 2015 us=576606 y.y.87.151:49603 TCPv4_SERVER WRITE [22] to [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 31 ]
Tue Jul 7 15:23:01 2015 us=603930 y.y.87.151:49603 TCPv4_SERVER READ [114] from [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Tue Jul 7 15:23:01 2015 us=603985 y.y.87.151:49603 TCPv4_SERVER WRITE [22] to [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 32 ]
Tue Jul 7 15:23:01 2015 us=631840 y.y.87.151:49603 NOTE: --mute triggered...
Tue Jul 7 15:23:01 2015 us=979520 y.y.87.151:49603 15 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 15:23:01 2015 us=979563 y.y.87.151:49603 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 7 15:23:01 2015 us=979580 y.y.87.151:49603 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 7 15:23:01 2015 us=979660 y.y.87.151:49603 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 7 15:23:01 2015 us=979674 y.y.87.151:49603 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 7 15:23:01 2015 us=979709 y.y.87.151:49603 TCPv4_SERVER WRITE [126] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ 40 ] pid=40 DATA len=100
Tue Jul 7 15:23:01 2015 us=979738 y.y.87.151:49603 TCPv4_SERVER WRITE [114] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Tue Jul 7 15:23:01 2015 us=979763 y.y.87.151:49603 TCPv4_SERVER WRITE [51] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=37
Tue Jul 7 15:23:02 2015 us=238712 y.y.87.151:49603 TCPv4_SERVER READ [22] from [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 40 ]
Tue Jul 7 15:23:02 2015 us=319609 y.y.87.151:49603 TCPv4_SERVER READ [26] from [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 41 42 ]
Tue Jul 7 15:23:02 2015 us=319660 y.y.87.151:49603 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jul 7 15:23:02 2015 us=319692 y.y.87.151:49603 [client1] Peer Connection Initiated with [AF_INET]y.y.87.151:49603
Tue Jul 7 15:23:02 2015 us=319733 client1/y.y.87.151:49603 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Tue Jul 7 15:23:02 2015 us=319785 client1/y.y.87.151:49603 MULTI: Learn: 10.8.0.4 -> client1/y.y.87.151:49603
Tue Jul 7 15:23:02 2015 us=319800 client1/y.y.87.151:49603 MULTI: primary virtual IP for client1/y.y.87.151:49603: 10.8.0.4
Tue Jul 7 15:23:04 2015 us=370307 client1/y.y.87.151:49603 TCPv4_SERVER READ [56] from [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=42
Tue Jul 7 15:23:04 2015 us=370367 client1/y.y.87.151:49603 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jul 7 15:23:04 2015 us=370391 client1/y.y.87.151:49603 send_push_reply(): safe_cap=940
Tue Jul 7 15:23:04 2015 us=370415 client1/y.y.87.151:49603 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0' (status=1)
Tue Jul 7 15:23:04 2015 us=370436 client1/y.y.87.151:49603 TCPv4_SERVER WRITE [22] to [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 41 ]
Tue Jul 7 15:23:04 2015 us=370474 client1/y.y.87.151:49603 TCPv4_SERVER WRITE [114] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=43 DATA len=100
Tue Jul 7 15:23:04 2015 us=370498 client1/y.y.87.151:49603 TCPv4_SERVER WRITE [114] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=100
Tue Jul 7 15:23:04 2015 us=370527 client1/y.y.87.151:49603 TCPv4_SERVER WRITE [46] to [AF_INET]y.y.87.151:49603: P_CONTROL_V1 kid=0 [ ] pid=45 DATA len=32
Tue Jul 7 15:23:04 2015 us=719602 client1/y.y.87.151:49603 TCPv4_SERVER READ [22] from [AF_INET]y.y.87.151:49603: P_ACK_V1 kid=0 [ 43 ]
Tue Jul 7 15:23:04 2015 us=786330 client1/y.y.87.151:49603 NOTE: --mute triggered...
Tue Jul 7 15:23:05 2015 us=718429 client1/y.y.87.151:49603 8 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 15:23:05 2015 us=718479 client1/y.y.87.151:49603 MULTI: bad source address from client [::], packet dropped
Tue Jul 7 15:23:05 2015 us=718508 client1/y.y.87.151:49603 TCPv4_SERVER READ [93] from [AF_INET]y.y.87.151:49603: P_DATA_V1 kid=0 DATA len=92
Tue Jul 7 15:23:05 2015 us=718536 client1/y.y.87.151:49603 TCPv4_SERVER READ [133] from [AF_INET]y.y.87.151:49603: P_DATA_V1 kid=0 DATA len=132
Tue Jul 7 15:23:05 2015 us=718565 client1/y.y.87.151:49603 TCPv4_SERVER READ [117] from [AF_INET]y.y.87.151:49603: P_DATA_V1 kid=0 DATA len=116
Tue Jul 7 15:23:05 2015 us=718593 client1/y.y.87.151:49603 TCPv4_SERVER READ [205] from [AF_INET]y.y.87.151:49603: P_DATA_V1 kid=0 DATA len=204
Tue Jul 7 15:23:05 2015 us=746869 client1/y.y.87.151:49603 TCPv4_SERVER READ [117] from [AF_INET]y.y.87.151:49603: P_DATA_V1 kid=0 DATA len=116
Tue Jul 7 15:23:05 2015 us=805969 client1/y.y.87.151:49603 NOTE: --mute triggered...
Tue Jul 7 15:33:38 2015 us=350432 client1/y.y.87.151:49603 4071 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 15:33:38 2015 us=350484 client1/y.y.87.151:49603 Connection reset, restarting [-1]
Tue Jul 7 15:33:38 2015 us=350499 client1/y.y.87.151:49603 SIGUSR1[soft,connection-reset] received, client-instance restarting
Tue Jul 7 15:33:38 2015 us=350691 TCP/UDP: Closing socket
Tue Jul 7 17:23:34 2015 us=543821 MULTI: multi_create_instance called
Tue Jul 7 17:23:34 2015 us=543871 Re-using SSL/TLS context
Tue Jul 7 17:23:34 2015 us=543889 LZO compression initialized
Tue Jul 7 17:23:34 2015 us=543945 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:3 ]
Tue Jul 7 17:23:34 2015 us=543959 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jul 7 17:23:34 2015 us=543979 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Jul 7 17:23:34 2015 us=543985 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Jul 7 17:23:34 2015 us=543997 Local Options hash (VER=V4): 'c0103fa8'
Tue Jul 7 17:23:34 2015 us=544005 Expected Remote Options hash (VER=V4): '69109d17'
Tue Jul 7 17:23:34 2015 us=544021 TCP connection established with [AF_INET]185.37.87.48:51907
Tue Jul 7 17:23:34 2015 us=544027 TCPv4_SERVER link local: [undef]
Tue Jul 7 17:23:34 2015 us=544033 TCPv4_SERVER link remote: [AF_INET]185.37.87.48:51907
Tue Jul 7 17:23:35 2015 us=518663 185.37.87.48:51907 TCPv4_SERVER READ [14] from [AF_INET]185.37.87.48:51907: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 7 17:23:35 2015 us=518719 185.37.87.48:51907 TLS: Initial packet from [AF_INET]185.37.87.48:51907, sid=d8c380af 59226ce1
Tue Jul 7 17:23:35 2015 us=518764 185.37.87.48:51907 TCPv4_SERVER WRITE [26] to [AF_INET]185.37.87.48:51907: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Jul 7 17:23:35 2015 us=545120 185.37.87.48:51907 TCPv4_SERVER READ [22] from [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 0 ]
Tue Jul 7 17:23:35 2015 us=617096 185.37.87.48:51907 TCPv4_SERVER READ [114] from [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Tue Jul 7 17:23:35 2015 us=617184 185.37.87.48:51907 TCPv4_SERVER WRITE [22] to [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 1 ]
Tue Jul 7 17:23:35 2015 us=617218 185.37.87.48:51907 TCPv4_SERVER READ [114] from [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Tue Jul 7 17:23:35 2015 us=617284 185.37.87.48:51907 NOTE: --mute triggered...
Tue Jul 7 17:23:37 2015 us=91828 185.37.87.48:51907 128 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 17:23:37 2015 us=91878 185.37.87.48:51907 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 7 17:23:37 2015 us=92286 185.37.87.48:51907 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=client1, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 7 17:23:37 2015 us=92360 185.37.87.48:51907 TCPv4_SERVER WRITE [22] to [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 30 ]
Tue Jul 7 17:23:37 2015 us=92413 185.37.87.48:51907 TCPv4_SERVER READ [114] from [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Tue Jul 7 17:23:37 2015 us=92467 185.37.87.48:51907 TCPv4_SERVER WRITE [22] to [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 31 ]
Tue Jul 7 17:23:37 2015 us=117211 185.37.87.48:51907 TCPv4_SERVER READ [114] from [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Tue Jul 7 17:23:37 2015 us=117296 185.37.87.48:51907 TCPv4_SERVER WRITE [22] to [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 32 ]
Tue Jul 7 17:23:37 2015 us=143824 185.37.87.48:51907 NOTE: --mute triggered...
Tue Jul 7 17:23:37 2015 us=473571 185.37.87.48:51907 15 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 17:23:37 2015 us=473607 185.37.87.48:51907 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 7 17:23:37 2015 us=473623 185.37.87.48:51907 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 7 17:23:37 2015 us=473702 185.37.87.48:51907 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 7 17:23:37 2015 us=473716 185.37.87.48:51907 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 7 17:23:37 2015 us=473749 185.37.87.48:51907 TCPv4_SERVER WRITE [126] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ 40 ] pid=40 DATA len=100
Tue Jul 7 17:23:37 2015 us=473778 185.37.87.48:51907 TCPv4_SERVER WRITE [114] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Tue Jul 7 17:23:37 2015 us=473803 185.37.87.48:51907 TCPv4_SERVER WRITE [51] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=37
Tue Jul 7 17:23:37 2015 us=726863 185.37.87.48:51907 TCPv4_SERVER READ [22] from [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 40 ]
Tue Jul 7 17:23:37 2015 us=792139 185.37.87.48:51907 TCPv4_SERVER READ [26] from [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 41 42 ]
Tue Jul 7 17:23:37 2015 us=792187 185.37.87.48:51907 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jul 7 17:23:37 2015 us=792212 185.37.87.48:51907 [client1] Peer Connection Initiated with [AF_INET]185.37.87.48:51907
Tue Jul 7 17:23:37 2015 us=792239 client1/185.37.87.48:51907 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Tue Jul 7 17:23:37 2015 us=792291 client1/185.37.87.48:51907 MULTI: Learn: 10.8.0.4 -> client1/185.37.87.48:51907
Tue Jul 7 17:23:37 2015 us=792302 client1/185.37.87.48:51907 MULTI: primary virtual IP for client1/185.37.87.48:51907: 10.8.0.4
Tue Jul 7 17:23:40 2015 us=230757 client1/185.37.87.48:51907 TCPv4_SERVER READ [56] from [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=42
Tue Jul 7 17:23:40 2015 us=230847 client1/185.37.87.48:51907 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jul 7 17:23:40 2015 us=230878 client1/185.37.87.48:51907 send_push_reply(): safe_cap=940
Tue Jul 7 17:23:40 2015 us=230926 client1/185.37.87.48:51907 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0' (status=1)
Tue Jul 7 17:23:40 2015 us=230972 client1/185.37.87.48:51907 TCPv4_SERVER WRITE [22] to [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 41 ]
Tue Jul 7 17:23:40 2015 us=231055 client1/185.37.87.48:51907 TCPv4_SERVER WRITE [114] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=43 DATA len=100
Tue Jul 7 17:23:40 2015 us=231110 client1/185.37.87.48:51907 TCPv4_SERVER WRITE [114] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=100
Tue Jul 7 17:23:40 2015 us=231157 client1/185.37.87.48:51907 TCPv4_SERVER WRITE [46] to [AF_INET]185.37.87.48:51907: P_CONTROL_V1 kid=0 [ ] pid=45 DATA len=32
Tue Jul 7 17:23:40 2015 us=518772 client1/185.37.87.48:51907 TCPv4_SERVER READ [22] from [AF_INET]185.37.87.48:51907: P_ACK_V1 kid=0 [ 43 ]
Tue Jul 7 17:23:40 2015 us=585860 client1/185.37.87.48:51907 NOTE: --mute triggered...
Tue Jul 7 17:23:40 2015 us=830830 client1/185.37.87.48:51907 12 variation(s) on previous 5 message(s) suppressed by --mute
Tue Jul 7 17:23:40 2015 us=830862 client1/185.37.87.48:51907 MULTI: bad source address from client [::], packet dropped
Tue Jul 7 17:23:40 2015 us=830880 client1/185.37.87.48:51907 TCPv4_SERVER READ [93] from [AF_INET]185.37.87.48:51907: P_DATA_V1 kid=0 DATA len=92
Tue Jul 7 17:23:40 2015 us=830894 client1/185.37.87.48:51907 TCPv4_SERVER READ [117] from [AF_INET]185.37.87.48:51907: P_DATA_V1 kid=0 DATA len=116
Tue Jul 7 17:23:40 2015 us=830907 client1/185.37.87.48:51907 TCPv4_SERVER READ [197] from [AF_INET]185.37.87.48:51907: P_DATA_V1 kid=0 DATA len=196
Tue Jul 7 17:23:40 2015 us=857168 client1/185.37.87.48:51907 TCPv4_SERVER READ [117] from [AF_INET]185.37.87.48:51907: P_DATA_V1 kid=0 DATA len=116
Tue Jul 7 17:23:40 2015 us=857205 client1/185.37.87.48:51907 TCPv4_SERVER READ [109] from [AF_INET]185.37.87.48:51907: P_DATA_V1 kid=0 DATA len=108
Tue Jul 7 17:23:41 2015 us=247149 client1/185.37.87.48:51907 NOTE: --mute triggered...

# Client Windows 7/64

# client conf - client1.ovpn:
client
dev tun
proto tcp
remote x.x.208.97 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
ca ca.crt
cert client1.crt
key client1.key

# Client log:
Tue Jul 07 23:23:33 2015 OpenVPN 2.3.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 29 2015
Tue Jul 07 23:23:33 2015 library versions: OpenSSL 1.0.1o 12 Jun 2015, LZO 2.08
Tue Jul 07 23:23:33 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jul 07 23:23:33 2015 Need hold release from management interface, waiting...
Tue Jul 07 23:23:33 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jul 07 23:23:34 2015 MANAGEMENT: CMD 'state on'
Tue Jul 07 23:23:34 2015 MANAGEMENT: CMD 'log all on'
Tue Jul 07 23:23:34 2015 MANAGEMENT: CMD 'hold off'
Tue Jul 07 23:23:34 2015 MANAGEMENT: CMD 'hold release'
Tue Jul 07 23:23:34 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 07 23:23:34 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jul 07 23:23:34 2015 Attempting to establish TCP connection with [AF_INET]x.x.208.97:1194 [nonblock]
Tue Jul 07 23:23:34 2015 MANAGEMENT: >STATE:1436304214,TCP_CONNECT,,,
Tue Jul 07 23:23:35 2015 TCP connection established with [AF_INET]x.x.208.97:1194
Tue Jul 07 23:23:35 2015 TCPv4_CLIENT link local: [undef]
Tue Jul 07 23:23:35 2015 TCPv4_CLIENT link remote: [AF_INET]x.x.208.97:1194
Tue Jul 07 23:23:35 2015 MANAGEMENT: >STATE:1436304215,WAIT,,,
Tue Jul 07 23:23:35 2015 MANAGEMENT: >STATE:1436304215,AUTH,,,
Tue Jul 07 23:23:35 2015 TLS: Initial packet from [AF_INET]x.x.208.97:1194, sid=145101c6 8c754832
Tue Jul 07 23:23:36 2015 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 07 23:23:36 2015 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jul 07 23:23:37 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 07 23:23:37 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 07 23:23:37 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 07 23:23:37 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 07 23:23:37 2015 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jul 07 23:23:37 2015 [server] Peer Connection Initiated with [AF_INET]x.x.208.97:1194
Tue Jul 07 23:23:38 2015 MANAGEMENT: >STATE:1436304218,GET_CONFIG,,,
Tue Jul 07 23:23:39 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Jul 07 23:23:40 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0'
Tue Jul 07 23:23:40 2015 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jul 07 23:23:40 2015 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jul 07 23:23:40 2015 OPTIONS IMPORT: route options modified
Tue Jul 07 23:23:40 2015 OPTIONS IMPORT: route-related options modified
Tue Jul 07 23:23:40 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Jul 07 23:23:40 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jul 07 23:23:40 2015 MANAGEMENT: >STATE:1436304220,ASSIGN_IP,,10.8.0.4,
Tue Jul 07 23:23:40 2015 open_tun, tt->ipv6=0
Tue Jul 07 23:23:40 2015 TAP-WIN32 device [Local Area Connection 4] opened: \\.\Global\{978273AA-60B0-4824-A20D-052FF56967A7}.tap
Tue Jul 07 23:23:40 2015 TAP-Windows Driver Version 9.21
Tue Jul 07 23:23:40 2015 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Tue Jul 07 23:23:40 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {978273AA-60B0-4824-A20D-052FF56967A7} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Jul 07 23:23:40 2015 Successful ARP Flush on interface [29] {978273AA-60B0-4824-A20D-052FF56967A7}
Tue Jul 07 23:23:45 2015 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Tue Jul 07 23:23:45 2015 C:\Windows\system32\route.exe ADD x.x.208.97 MASK 255.255.255.255 100.80.128.1
Tue Jul 07 23:23:45 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Tue Jul 07 23:23:45 2015 Route addition via IPAPI succeeded [adaptive]
Tue Jul 07 23:23:45 2015 C:\Windows\system32\route.exe ADD 178.132.230.5 MASK 255.255.255.255 100.80.128.1
Tue Jul 07 23:23:45 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Tue Jul 07 23:23:45 2015 Route addition via IPAPI succeeded [adaptive]
Tue Jul 07 23:23:45 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Jul 07 23:23:45 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Jul 07 23:23:45 2015 Route addition via IPAPI succeeded [adaptive]
Tue Jul 07 23:23:45 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Jul 07 23:23:45 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Jul 07 23:23:45 2015 Route addition via IPAPI succeeded [adaptive]
Tue Jul 07 23:23:45 2015 Initialization Sequence Completed
Tue Jul 07 23:23:45 2015 MANAGEMENT: >STATE:1436304225,CONNECTED,SUCCESS,10.8.0.4,x.x.208.97

# Client route:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 100.80.128.1 100.80.133.48 10
0.0.0.0 128.0.0.0 10.8.0.1 10.8.0.4 20
x.x.208.97 255.255.255.255 100.80.128.1 100.80.133.48 10
10.8.0.0 255.255.255.0 On-link 10.8.0.4 276
10.8.0.4 255.255.255.255 On-link 10.8.0.4 276
10.8.0.255 255.255.255.255 On-link 10.8.0.4 276
100.80.128.0 255.255.128.0 On-link 100.80.133.48 266
100.80.133.48 255.255.255.255 On-link 100.80.133.48 266
100.80.255.255 255.255.255.255 On-link 100.80.133.48 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 10.8.0.1 10.8.0.4 20
169.254.0.0 255.255.0.0 On-link 169.254.40.254 276
169.254.0.0 255.255.0.0 On-link 169.254.251.149 276
169.254.0.0 255.255.0.0 On-link 169.254.86.212 276
169.254.40.254 255.255.255.255 On-link 169.254.40.254 276
169.254.86.212 255.255.255.255 On-link 169.254.86.212 276
169.254.251.149 255.255.255.255 On-link 169.254.251.149 276
169.254.255.255 255.255.255.255 On-link 169.254.40.254 276
169.254.255.255 255.255.255.255 On-link 169.254.251.149 276
169.254.255.255 255.255.255.255 On-link 169.254.86.212 276
178.132.230.5 255.255.255.255 100.80.128.1 100.80.133.48 10
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 169.254.40.254 276
224.0.0.0 240.0.0.0 On-link 100.80.133.48 266
224.0.0.0 240.0.0.0 On-link 10.8.0.4 276
224.0.0.0 240.0.0.0 On-link 169.254.86.212 276
224.0.0.0 240.0.0.0 On-link 169.254.251.149 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 169.254.40.254 276
255.255.255.255 255.255.255.255 On-link 100.80.133.48 266
255.255.255.255 255.255.255.255 On-link 10.8.0.4 276
255.255.255.255 255.255.255.255 On-link 169.254.86.212 276
255.255.255.255 255.255.255.255 On-link 169.254.251.149 276
===========================================================================
Persistent Routes:
None
Top
madsere
OpenVpn Newbie
Posts: 3
Joined: Tue Jul 07, 2015 10:11 pm

Re: DNS_PROBE_FINISHED_NO_INTERNET

Post by madsere » Wed Jul 08, 2015 5:43 am

Just noticed the suggestion to use udb and verb 4 - so here follows updated logfiles:

# server log /var/log/openvpn.log, with verb 4
Wed Jul 8 01:24:19 2015 us=741404 Current Parameter Settings:
Wed Jul 8 01:24:19 2015 us=741447 config = 'server.conf'
Wed Jul 8 01:24:19 2015 us=741454 mode = 1
Wed Jul 8 01:24:19 2015 us=741459 persist_config = DISABLED
Wed Jul 8 01:24:19 2015 us=741464 persist_mode = 1
Wed Jul 8 01:24:19 2015 us=741469 NOTE: --mute triggered...
Wed Jul 8 01:24:19 2015 us=741480 277 variation(s) on previous 5 message(s) suppressed by --mute
Wed Jul 8 01:24:19 2015 us=741486 OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 9 2015
Wed Jul 8 01:24:19 2015 us=741494 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Wed Jul 8 01:24:19 2015 us=752417 Diffie-Hellman initialized with 2048 bit key
Wed Jul 8 01:24:19 2015 us=764941 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Wed Jul 8 01:24:19 2015 us=764986 Socket Buffers: R=[133120->131072] S=[133120->131072]
Wed Jul 8 01:24:19 2015 us=765275 TUN/TAP device tun0 opened
Wed Jul 8 01:24:19 2015 us=765304 TUN/TAP TX queue length set to 100
Wed Jul 8 01:24:19 2015 us=765321 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jul 8 01:24:19 2015 us=765345 /usr/sbin/ip link set dev tun0 up mtu 1500
Wed Jul 8 01:24:19 2015 us=768060 /usr/sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Wed Jul 8 01:24:19 2015 us=768841 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Jul 8 01:24:19 2015 us=769125 GID set to nobody
Wed Jul 8 01:24:19 2015 us=769141 UID set to nobody
Wed Jul 8 01:24:19 2015 us=769154 UDPv4 link local (bound): [undef]
Wed Jul 8 01:24:19 2015 us=769163 UDPv4 link remote: [undef]
Wed Jul 8 01:24:19 2015 us=769177 MULTI: multi_init called, r=256 v=256
Wed Jul 8 01:24:19 2015 us=769208 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Wed Jul 8 01:24:19 2015 us=769222 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Wed Jul 8 01:24:19 2015 us=769233 succeeded -> ifconfig_pool_set()
Wed Jul 8 01:24:19 2015 us=769243 IFCONFIG POOL LIST
Wed Jul 8 01:24:19 2015 us=769267 client1,10.8.0.4
Wed Jul 8 01:24:19 2015 us=769298 Initialization Sequence Completed
Wed Jul 8 01:26:26 2015 us=257425 MULTI: multi_create_instance called
Wed Jul 8 01:26:26 2015 us=257525 y.y.87.151:63289 Re-using SSL/TLS context
Wed Jul 8 01:26:26 2015 us=257582 y.y.87.151:63289 LZO compression initialized
Wed Jul 8 01:26:26 2015 us=257730 y.y.87.151:63289 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Wed Jul 8 01:26:26 2015 us=257756 y.y.87.151:63289 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Jul 8 01:26:26 2015 us=257796 y.y.87.151:63289 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 8 01:26:26 2015 us=257813 y.y.87.151:63289 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 8 01:26:26 2015 us=257846 y.y.87.151:63289 Local Options hash (VER=V4): '530fdded'
Wed Jul 8 01:26:26 2015 us=257867 y.y.87.151:63289 Expected Remote Options hash (VER=V4): '41690919'
Wed Jul 8 01:26:26 2015 us=257921 y.y.87.151:63289 TLS: Initial packet from [AF_INET]y.y.87.151:63289, sid=edddaddd c7bacc0b
Wed Jul 8 01:26:26 2015 us=801496 y.y.87.151:63289 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Jul 8 01:26:26 2015 us=801782 y.y.87.151:63289 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=client1, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Jul 8 01:26:26 2015 us=888704 y.y.87.151:63289 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 8 01:26:26 2015 us=888740 y.y.87.151:63289 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 8 01:26:26 2015 us=888781 y.y.87.151:63289 NOTE: --mute triggered...
Wed Jul 8 01:26:26 2015 us=920726 y.y.87.151:63289 3 variation(s) on previous 5 message(s) suppressed by --mute
Wed Jul 8 01:26:26 2015 us=920761 y.y.87.151:63289 [client1] Peer Connection Initiated with [AF_INET]y.y.87.151:63289
Wed Jul 8 01:26:26 2015 us=920792 client1/y.y.87.151:63289 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Wed Jul 8 01:26:26 2015 us=920825 client1/y.y.87.151:63289 MULTI: Learn: 10.8.0.4 -> client1/y.y.87.151:63289
Wed Jul 8 01:26:26 2015 us=920836 client1/y.y.87.151:63289 MULTI: primary virtual IP for client1/y.y.87.151:63289: 10.8.0.4
Wed Jul 8 01:26:29 2015 us=103612 client1/y.y.87.151:63289 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jul 8 01:26:29 2015 us=103649 client1/y.y.87.151:63289 send_push_reply(): safe_cap=940
Wed Jul 8 01:26:29 2015 us=103681 client1/y.y.87.151:63289 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0' (status=1)
Wed Jul 8 01:26:29 2015 us=504790 client1/y.y.87.151:63289 MULTI: bad source address from client [::], packet dropped

# client log with verb 4
Wed Jul 08 07:26:23 2015 us=22134 Current Parameter Settings:
Wed Jul 08 07:26:23 2015 us=24134 config = 'client1.ovpn'
Wed Jul 08 07:26:23 2015 us=24134 mode = 0
Wed Jul 08 07:26:23 2015 us=24134 show_ciphers = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 show_digests = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 show_engines = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 genkey = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 key_pass_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 show_tls_ciphers = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 Connection profiles [default]:
Wed Jul 08 07:26:23 2015 us=24134 proto = udp
Wed Jul 08 07:26:23 2015 us=24134 local = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 local_port = 0
Wed Jul 08 07:26:23 2015 us=24134 remote = 'x.x.208.97'
Wed Jul 08 07:26:23 2015 us=24134 remote_port = 1194
Wed Jul 08 07:26:23 2015 us=24134 remote_float = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 bind_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 bind_local = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 connect_retry_seconds = 5
Wed Jul 08 07:26:23 2015 us=24134 connect_timeout = 10
Wed Jul 08 07:26:23 2015 us=24134 connect_retry_max = 0
Wed Jul 08 07:26:23 2015 us=24134 socks_proxy_server = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 socks_proxy_port = 0
Wed Jul 08 07:26:23 2015 us=24134 socks_proxy_retry = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 tun_mtu = 1500
Wed Jul 08 07:26:23 2015 us=24134 tun_mtu_defined = ENABLED
Wed Jul 08 07:26:23 2015 us=24134 link_mtu = 1500
Wed Jul 08 07:26:23 2015 us=24134 link_mtu_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 tun_mtu_extra = 0
Wed Jul 08 07:26:23 2015 us=24134 tun_mtu_extra_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 mtu_discover_type = -1
Wed Jul 08 07:26:23 2015 us=24134 fragment = 0
Wed Jul 08 07:26:23 2015 us=24134 mssfix = 1450
Wed Jul 08 07:26:23 2015 us=24134 explicit_exit_notification = 0
Wed Jul 08 07:26:23 2015 us=24134 Connection profiles END
Wed Jul 08 07:26:23 2015 us=24134 remote_random = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 ipchange = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 dev = 'tun'
Wed Jul 08 07:26:23 2015 us=24134 dev_type = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 dev_node = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 lladdr = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 topology = 1
Wed Jul 08 07:26:23 2015 us=24134 tun_ipv6 = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_local = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_remote_netmask = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_noexec = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_nowarn = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_ipv6_local = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_ipv6_netbits = 0
Wed Jul 08 07:26:23 2015 us=24134 ifconfig_ipv6_remote = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=24134 shaper = 0
Wed Jul 08 07:26:23 2015 us=24134 mtu_test = 0
Wed Jul 08 07:26:23 2015 us=24134 mlock = DISABLED
Wed Jul 08 07:26:23 2015 us=24134 keepalive_ping = 0
Wed Jul 08 07:26:23 2015 us=25134 keepalive_timeout = 0
Wed Jul 08 07:26:23 2015 us=25134 inactivity_timeout = 0
Wed Jul 08 07:26:23 2015 us=25134 ping_send_timeout = 0
Wed Jul 08 07:26:23 2015 us=25134 ping_rec_timeout = 0
Wed Jul 08 07:26:23 2015 us=25134 ping_rec_timeout_action = 0
Wed Jul 08 07:26:23 2015 us=25134 ping_timer_remote = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 remap_sigusr1 = 0
Wed Jul 08 07:26:23 2015 us=25134 persist_tun = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 persist_local_ip = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 persist_remote_ip = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 persist_key = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 passtos = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 resolve_retry_seconds = 1000000000
Wed Jul 08 07:26:23 2015 us=25134 username = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 groupname = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 chroot_dir = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 cd_dir = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 writepid = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 up_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 down_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 down_pre = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 up_restart = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 up_delay = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 daemon = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 inetd = 0
Wed Jul 08 07:26:23 2015 us=25134 log = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 suppress_timestamps = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 nice = 0
Wed Jul 08 07:26:23 2015 us=25134 verbosity = 4
Wed Jul 08 07:26:23 2015 us=25134 mute = 0
Wed Jul 08 07:26:23 2015 us=25134 status_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 status_file_version = 1
Wed Jul 08 07:26:23 2015 us=25134 status_file_update_freq = 60
Wed Jul 08 07:26:23 2015 us=25134 occ = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 rcvbuf = 0
Wed Jul 08 07:26:23 2015 us=25134 sndbuf = 0
Wed Jul 08 07:26:23 2015 us=25134 sockflags = 0
Wed Jul 08 07:26:23 2015 us=25134 fast_io = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 lzo = 7
Wed Jul 08 07:26:23 2015 us=25134 route_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 route_default_gateway = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 route_default_metric = 0
Wed Jul 08 07:26:23 2015 us=25134 route_noexec = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 route_delay = 5
Wed Jul 08 07:26:23 2015 us=25134 route_delay_window = 30
Wed Jul 08 07:26:23 2015 us=25134 route_delay_defined = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 route_nopull = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 route_gateway_via_dhcp = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 max_routes = 100
Wed Jul 08 07:26:23 2015 us=25134 allow_pull_fqdn = DISABLED
Wed Jul 08 07:26:23 2015 us=25134 management_addr = '127.0.0.1'
Wed Jul 08 07:26:23 2015 us=25134 management_port = 25340
Wed Jul 08 07:26:23 2015 us=25134 management_user_pass = 'stdin'
Wed Jul 08 07:26:23 2015 us=25134 management_log_history_cache = 250
Wed Jul 08 07:26:23 2015 us=25134 management_echo_buffer_size = 100
Wed Jul 08 07:26:23 2015 us=25134 management_write_peer_info_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 management_client_user = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 management_client_group = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 management_flags = 6
Wed Jul 08 07:26:23 2015 us=25134 shared_secret_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=25134 key_direction = 0
Wed Jul 08 07:26:23 2015 us=25134 ciphername_defined = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 ciphername = 'BF-CBC'
Wed Jul 08 07:26:23 2015 us=25134 authname_defined = ENABLED
Wed Jul 08 07:26:23 2015 us=25134 authname = 'SHA1'
Wed Jul 08 07:26:23 2015 us=25134 prng_hash = 'SHA1'
Wed Jul 08 07:26:23 2015 us=25134 prng_nonce_secret_len = 16
Wed Jul 08 07:26:23 2015 us=25134 keysize = 0
Wed Jul 08 07:26:23 2015 us=25134 engine = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 replay = ENABLED
Wed Jul 08 07:26:23 2015 us=26134 mute_replay_warnings = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 replay_window = 64
Wed Jul 08 07:26:23 2015 us=26134 replay_time = 15
Wed Jul 08 07:26:23 2015 us=26134 packet_id_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 use_iv = ENABLED
Wed Jul 08 07:26:23 2015 us=26134 test_crypto = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 tls_server = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 tls_client = ENABLED
Wed Jul 08 07:26:23 2015 us=26134 key_method = 2
Wed Jul 08 07:26:23 2015 us=26134 ca_file = 'd:\rcd\openvpn\ca.crt'
Wed Jul 08 07:26:23 2015 us=26134 ca_path = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 dh_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 cert_file = 'd:\rcd\openvpn\client1.crt'
Wed Jul 08 07:26:23 2015 us=26134 priv_key_file = 'd:\rcd\openvpn\client1.key'
Wed Jul 08 07:26:23 2015 us=26134 pkcs12_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 cryptoapi_cert = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 cipher_list = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 tls_verify = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 tls_export_cert = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 verify_x509_type = 0
Wed Jul 08 07:26:23 2015 us=26134 verify_x509_name = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 crl_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 ns_cert_type = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_ku[i] = 0
Wed Jul 08 07:26:23 2015 us=26134 remote_cert_eku = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 ssl_flags = 0
Wed Jul 08 07:26:23 2015 us=26134 tls_timeout = 2
Wed Jul 08 07:26:23 2015 us=26134 renegotiate_bytes = 0
Wed Jul 08 07:26:23 2015 us=26134 renegotiate_packets = 0
Wed Jul 08 07:26:23 2015 us=26134 renegotiate_seconds = 3600
Wed Jul 08 07:26:23 2015 us=26134 handshake_window = 60
Wed Jul 08 07:26:23 2015 us=26134 transition_window = 3600
Wed Jul 08 07:26:23 2015 us=26134 single_session = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 push_peer_info = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 tls_exit = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 tls_auth_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_protected_authentication = DISABLED
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=26134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_private_mode = 00000000
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_cert_private = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_pin_cache_period = -1
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_id = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=27134 pkcs11_id_management = DISABLED
Wed Jul 08 07:26:23 2015 us=27134 server_network = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=27134 server_netmask = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 server_network_ipv6 = ::
Wed Jul 08 07:26:23 2015 us=28134 server_netbits_ipv6 = 0
Wed Jul 08 07:26:23 2015 us=28134 server_bridge_ip = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 server_bridge_netmask = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 server_bridge_pool_start = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 server_bridge_pool_end = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_start = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_end = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_netmask = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_pool_persist_refresh_freq = 600
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_ipv6_pool_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_ipv6_pool_base = ::
Wed Jul 08 07:26:23 2015 us=28134 ifconfig_ipv6_pool_netbits = 0
Wed Jul 08 07:26:23 2015 us=28134 n_bcast_buf = 256
Wed Jul 08 07:26:23 2015 us=28134 tcp_queue_limit = 64
Wed Jul 08 07:26:23 2015 us=28134 real_hash_size = 256
Wed Jul 08 07:26:23 2015 us=28134 virtual_hash_size = 256
Wed Jul 08 07:26:23 2015 us=28134 client_connect_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 learn_address_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 client_disconnect_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 client_config_dir = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 ccd_exclusive = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 tmp_dir = 'C:\Users\rcd\AppData\Local\Temp\'
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_local = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_remote_netmask = 0.0.0.0
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_ipv6_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_ipv6_local = ::/0
Wed Jul 08 07:26:23 2015 us=28134 push_ifconfig_ipv6_remote = ::
Wed Jul 08 07:26:23 2015 us=28134 enable_c2c = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 duplicate_cn = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 cf_max = 0
Wed Jul 08 07:26:23 2015 us=28134 cf_per = 0
Wed Jul 08 07:26:23 2015 us=28134 max_clients = 1024
Wed Jul 08 07:26:23 2015 us=28134 max_routes_per_client = 256
Wed Jul 08 07:26:23 2015 us=28134 auth_user_pass_verify_script = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 auth_user_pass_verify_script_via_file = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 client = ENABLED
Wed Jul 08 07:26:23 2015 us=28134 pull = ENABLED
Wed Jul 08 07:26:23 2015 us=28134 auth_user_pass_file = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=28134 show_net_up = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 route_method = 0
Wed Jul 08 07:26:23 2015 us=28134 ip_win32_defined = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 ip_win32_type = 3
Wed Jul 08 07:26:23 2015 us=28134 dhcp_masq_offset = 0
Wed Jul 08 07:26:23 2015 us=28134 dhcp_lease_time = 31536000
Wed Jul 08 07:26:23 2015 us=28134 tap_sleep = 0
Wed Jul 08 07:26:23 2015 us=28134 dhcp_options = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 dhcp_renew = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 dhcp_pre_release = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 dhcp_release = DISABLED
Wed Jul 08 07:26:23 2015 us=28134 domain = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=29134 netbios_scope = '[UNDEF]'
Wed Jul 08 07:26:23 2015 us=29134 netbios_node_type = 0
Wed Jul 08 07:26:23 2015 us=29134 disable_nbt = DISABLED
Wed Jul 08 07:26:23 2015 us=29134 OpenVPN 2.3.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 29 2015
Wed Jul 08 07:26:23 2015 us=29134 library versions: OpenSSL 1.0.1o 12 Jun 2015, LZO 2.08
Enter Management Password:
Wed Jul 08 07:26:23 2015 us=29134 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jul 08 07:26:23 2015 us=30134 Need hold release from management interface, waiting...
Wed Jul 08 07:26:23 2015 us=376154 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jul 08 07:26:23 2015 us=476160 MANAGEMENT: CMD 'state on'
Wed Jul 08 07:26:23 2015 us=477160 MANAGEMENT: CMD 'log all on'
Wed Jul 08 07:26:23 2015 us=638169 MANAGEMENT: CMD 'hold off'
Wed Jul 08 07:26:23 2015 us=641169 MANAGEMENT: CMD 'hold release'
Wed Jul 08 07:26:23 2015 us=645169 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jul 08 07:26:23 2015 us=924185 LZO compression initialized
Wed Jul 08 07:26:23 2015 us=925185 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Wed Jul 08 07:26:23 2015 us=925185 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 08 07:26:23 2015 us=925185 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Jul 08 07:26:23 2015 us=925185 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 08 07:26:23 2015 us=925185 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 08 07:26:23 2015 us=925185 Local Options hash (VER=V4): '41690919'
Wed Jul 08 07:26:23 2015 us=925185 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jul 08 07:26:23 2015 us=925185 UDPv4 link local: [undef]
Wed Jul 08 07:26:23 2015 us=925185 UDPv4 link remote: [AF_INET]x.x.208.97:1194
Wed Jul 08 07:26:23 2015 us=925185 MANAGEMENT: >STATE:1436333183,WAIT,,,
Wed Jul 08 07:26:23 2015 us=955187 MANAGEMENT: >STATE:1436333183,AUTH,,,
Wed Jul 08 07:26:23 2015 us=955187 TLS: Initial packet from [AF_INET]x.x.208.97:1194, sid=4ea41dd6 6c664120
Wed Jul 08 07:26:24 2015 us=180200 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Jul 08 07:26:24 2015 us=182200 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Jul 08 07:26:24 2015 us=589223 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 08 07:26:24 2015 us=589223 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 08 07:26:24 2015 us=589223 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 08 07:26:24 2015 us=589223 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 08 07:26:24 2015 us=590223 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Jul 08 07:26:24 2015 us=590223 [server] Peer Connection Initiated with [AF_INET]x.x.208.97:1194
Wed Jul 08 07:26:25 2015 us=681286 MANAGEMENT: >STATE:1436333185,GET_CONFIG,,,
Wed Jul 08 07:26:26 2015 us=772348 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Jul 08 07:26:26 2015 us=801350 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0'
Wed Jul 08 07:26:26 2015 us=805350 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 08 07:26:26 2015 us=805350 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 08 07:26:26 2015 us=805350 OPTIONS IMPORT: route options modified
Wed Jul 08 07:26:26 2015 us=805350 OPTIONS IMPORT: route-related options modified
Wed Jul 08 07:26:26 2015 us=805350 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jul 08 07:26:26 2015 us=857353 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jul 08 07:26:26 2015 us=857353 MANAGEMENT: >STATE:1436333186,ASSIGN_IP,,10.8.0.4,
Wed Jul 08 07:26:26 2015 us=857353 open_tun, tt->ipv6=0
Wed Jul 08 07:26:26 2015 us=859353 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{C69AC642-4C07-4D21-B934-2F42B691E4EF}.tap
Wed Jul 08 07:26:26 2015 us=859353 TAP-Windows Driver Version 9.21
Wed Jul 08 07:26:26 2015 us=859353 TAP-Windows MTU=1500
Wed Jul 08 07:26:26 2015 us=862353 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Wed Jul 08 07:26:26 2015 us=862353 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {C69AC642-4C07-4D21-B934-2F42B691E4EF} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Jul 08 07:26:26 2015 us=862353 DHCP option string: 0608d043 deded043 dcdc
Wed Jul 08 07:26:26 2015 us=862353 Successful ARP Flush on interface [25] {C69AC642-4C07-4D21-B934-2F42B691E4EF}
Wed Jul 08 07:26:31 2015 us=90595 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Jul 08 07:26:31 2015 us=90595 C:\Windows\system32\route.exe ADD x.x.208.97 MASK 255.255.255.255 100.80.128.1
Wed Jul 08 07:26:31 2015 us=98596 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Jul 08 07:26:31 2015 us=98596 Route addition via IPAPI succeeded [adaptive]
Wed Jul 08 07:26:31 2015 us=99596 C:\Windows\system32\route.exe ADD 178.132.230.5 MASK 255.255.255.255 100.80.128.1
Wed Jul 08 07:26:31 2015 us=108596 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Jul 08 07:26:31 2015 us=108596 Route addition via IPAPI succeeded [adaptive]
Wed Jul 08 07:26:31 2015 us=108596 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Jul 08 07:26:31 2015 us=112596 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Jul 08 07:26:31 2015 us=112596 Route addition via IPAPI succeeded [adaptive]
Wed Jul 08 07:26:31 2015 us=112596 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Jul 08 07:26:31 2015 us=116597 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Jul 08 07:26:31 2015 us=116597 Route addition via IPAPI succeeded [adaptive]
Wed Jul 08 07:26:31 2015 us=116597 Initialization Sequence Completed
Wed Jul 08 07:26:31 2015 us=116597 MANAGEMENT: >STATE:1436333191,CONNECTED,SUCCESS,10.8.0.4,x.x.208.97
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: DNS_PROBE_FINISHED_NO_INTERNET

Post by Traffic » Wed Jul 08, 2015 9:53 am

madsere wrote:# Server: OpenVZ vpn server with Centos 7/64, installed as per https://www.digitalocean.com/community/ ... n-centos-7
with the change of "iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0:0 -j MASQUERADE". The server in general connects fine to the internet.
As your server is a VZ container, you may find this helps:

Code: Select all

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source YOUR SERVER IP
See this post for further details:
topic17309.html
Top
madsere
OpenVpn Newbie
Posts: 3
Joined: Tue Jul 07, 2015 10:11 pm

Re: DNS_PROBE_FINISHED_NO_INTERNET

Post by madsere » Wed Jul 08, 2015 11:46 am

That was precisely the missing bit. Case of not being able to see the forest for all the trees. :) Thanks much!
Top
Post Reply

Return to “Configuration”