OpenVpn doesn't connect from remote location

bet997 · Post by **bet997** » Sat Jan 07, 2017 4:08 pm

Hi!
I have set up an OpenVpn server on my Raspberry Pi 3 B, and it works just fine when I'm connected to the local network, but when I use it from a remote location it does not.
I set the config file to use remote 192.168.2.106 443, when I leave the local network I set it to remote 188.xx.xxx.xx 443, where 188.xx.xxx.xx is my public IP.
I portmapped the local IP Adress of the server to the Port 443 using UDP

Here's the log from my latest attempt:

Code: Select all

Sat Jan 07 16:50:53 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Sat Jan 07 16:50:53 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Sat Jan 07 16:50:53 2017 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Sat Jan 07 16:50:53 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sat Jan 07 16:50:53 2017 Need hold release from management interface, waiting...
Sat Jan 07 16:50:54 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sat Jan 07 16:50:54 2017 MANAGEMENT: CMD 'state on'
Sat Jan 07 16:50:54 2017 MANAGEMENT: CMD 'log all on'
Sat Jan 07 16:50:54 2017 MANAGEMENT: CMD 'hold off'
Sat Jan 07 16:50:54 2017 MANAGEMENT: CMD 'hold release'
Sat Jan 07 16:50:54 2017 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Jan 07 16:50:54 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]188.xx.xxx.xx:443
Sat Jan 07 16:50:54 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Jan 07 16:50:54 2017 UDP link local: (not bound)
Sat Jan 07 16:50:54 2017 UDP link remote: [AF_INET]188.xx.xxx.xx:443
Sat Jan 07 16:50:54 2017 MANAGEMENT: >STATE:1483804254,WAIT,,,,,,
Sat Jan 07 16:51:54 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Jan 07 16:51:54 2017 TLS Error: TLS handshake failed
Sat Jan 07 16:51:54 2017 SIGUSR1[soft,tls-error] received, process restarting
Sat Jan 07 16:51:54 2017 MANAGEMENT: >STATE:1483804314,RECONNECTING,tls-error,,,,,
Sat Jan 07 16:51:54 2017 Restart pause, 5 second(s)
Sat Jan 07 16:51:59 2017 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Jan 07 16:51:59 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]188.xx.xxx.xx:443
Sat Jan 07 16:51:59 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Jan 07 16:51:59 2017 UDP link local: (not bound)
Sat Jan 07 16:51:59 2017 UDP link remote: [AF_INET]188.xx.xxx.xx:443
Sat Jan 07 16:51:59 2017 MANAGEMENT: >STATE:1483804319,WAIT,,,,,,

Client Config

dev tun
client
proto udp
remote 188.xx.xxx.xx 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client2.crt
key client2.key
comp-lzo
verb 3

ServerConfig

dev tun
proto udp
port 443
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 85.214.20.141"
push "dhcp-option DNS 8.8.8.8"
log-append /var/log/openvpn
comp-lzo
cipher AES-256-CBC

Ifconfig:

Code: Select all

eth0      Link encap:Ethernet  HWaddr b8:27:eb:06:66:1e
          inet addr:192.168.2.106  Bcast:192.168.2.255  Mask:255.255.255.0
          inet6 addr: fe80::d5d2:8396:f7b:44c5/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:440775 errors:0 dropped:10 overruns:0 frame:0
          TX packets:436745 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:363591734 (346.7 MiB)  TX bytes:384444943 (366.6 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:265 errors:0 dropped:0 overruns:0 frame:0
          TX packets:265 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:28557 (27.8 KiB)  TX bytes:28557 (27.8 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:156385 errors:0 dropped:0 overruns:0 frame:0
          TX packets:279174 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:12231600 (11.6 MiB)  TX bytes:339155666 (323.4 MiB)

wlan0     Link encap:Ethernet  HWaddr b8:27:eb:53:33:4b
          inet6 addr: fe80::7c88:17b7:8a8f:9ed7/64 Scope:Link
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:3502 errors:0 dropped:3502 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1571487 (1.4 MiB)  TX bytes:0 (0.0 B)

and the iptables:

Code: Select all

>sudo iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere             state NEW udp dpt:https

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  localhost/24         localhost/24         ctstate NEW
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

I have no idea what the problem could be, since I tried also connecting with the firewall disabled and it failed aswell.
Can somebody help me out?

TinCanTech · Post by **TinCanTech** » Sat Jan 07, 2017 4:15 pm

bet997 wrote:I set the config file to use remote 192.168.2.106 443, when I leave the local network I set it to remote 188.xx.xxx.xx 443, where 188.xx.xxx.xx is my public IP.

Make sure that your public ip address is correct. If it is a dynamic IP use a dynamic DNS service.

bet997 wrote:I portmapped the local IP Adress of the server to the Port 443 using UDP

Make sure you did that correctly.

Then check your server log for connection attempts.

It is also possible that the remote network admins are blocking UDP packets or some such filtering.

bet997 · Post by **bet997** » Sat Jan 07, 2017 4:56 pm

Hi TinCanTech, thanks for your reply!
I have set my local IP to static and I've double and triple checked the public IP and its correct.
How can I check my server log?

A few days ago everything worked fine, so I dont think the remote network admins are blocking UDP packets.
Then I upgraded the cipher encryption but it didnt work remotely, so I changed everything the way it was before, but suddenly the remote connection started failing.

Any thoughts?

(I just saw that in the server config the cipher encryption is not updated, changed that (deleted the last line) but its still not working)

TinCanTech · Post by **TinCanTech** » Sat Jan 07, 2017 6:11 pm

bet997 wrote:How can I check my server log?

Probably the most important thing to check .. look for connection attempts from remote clients.

See --log & --verb in The Manual v24x

I presume you are using 2.4.0 for server & client ?

bet997 · Post by **bet997** » Sat Jan 07, 2017 7:32 pm

Ok, I checked the log and there are no connection attempts from remote clients, only from local ones.

Client is on 2.4.0 and server on 2.3.4 (read from the log files)
Any idea how to solve the problem?

Thanks for your time

TinCanTech · Post by **TinCanTech** » Sat Jan 07, 2017 8:23 pm

bet997 wrote:I checked the log and there are no connection attempts from remote clients, only from local ones.

Any idea how to solve the problem?

Double check your network setup.

bet997 wrote:Client is on 2.4.0 and server on 2.3.4 (read from the log files)

I would update the server .. You may be able to use the Openvpn repo

bet997 · Post by **bet997** » Sat Jan 07, 2017 9:28 pm

TinCanTech wrote:Double check your network setup.

What exactly do you mean by that? I've again checked the public IP Adress and it is correct, also the port (443) is the one that I've portmapped on the router to the local IP Adress of the server, which I've also checked and is also correct.

I have no idea where the problem could be :/

bet997 · Post by **bet997** » Sun Jan 08, 2017 12:03 am

I'm checking if the Port-forwarding is working.
I went to http://canyouseeme.org/ and it says it's closed, does that mean the port-forwarding isnt working?
Would that be the problem?

mwandelaar · Post by **mwandelaar** » Sun Jan 08, 2017 12:47 pm

As far as i see, canyouseemee.org checks TCP-ports and you are using UDP, so the result may not be correct.
Can you try to connect from outside with the verbose option to 5 on both client and server?

bet997 · Post by **bet997** » Sun Jan 08, 2017 1:12 pm

Hey mwandelaar, thanks for your reply!

Ok, here's the Client Log:

Code: Select all

Sun Jan 08 13:59:44 2017 us=154429 Current Parameter Settings:
Sun Jan 08 13:59:44 2017 us=154429   config = 'client2.ovpn'
Sun Jan 08 13:59:44 2017 us=154429   mode = 0
Sun Jan 08 13:59:44 2017 us=154429   show_ciphers = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   show_digests = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   show_engines = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   genkey = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   key_pass_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   show_tls_ciphers = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   connect_retry_max = 0
Sun Jan 08 13:59:44 2017 us=154429 Connection profiles [0]:
Sun Jan 08 13:59:44 2017 us=154429   proto = udp
Sun Jan 08 13:59:44 2017 us=154429   local = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   local_port = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   remote = '188.99.183.51'
Sun Jan 08 13:59:44 2017 us=154429   remote_port = '1194'
Sun Jan 08 13:59:44 2017 us=154429   remote_float = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   bind_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   bind_local = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   bind_ipv6_only = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   connect_retry_seconds = 5
Sun Jan 08 13:59:44 2017 us=154429   connect_timeout = 120
Sun Jan 08 13:59:44 2017 us=154429   socks_proxy_server = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   socks_proxy_port = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   tun_mtu = 1500
Sun Jan 08 13:59:44 2017 us=154429   tun_mtu_defined = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   link_mtu = 1500
Sun Jan 08 13:59:44 2017 us=154429   link_mtu_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tun_mtu_extra = 0
Sun Jan 08 13:59:44 2017 us=154429   tun_mtu_extra_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   mtu_discover_type = -1
Sun Jan 08 13:59:44 2017 us=154429   fragment = 0
Sun Jan 08 13:59:44 2017 us=154429   mssfix = 1450
Sun Jan 08 13:59:44 2017 us=154429   explicit_exit_notification = 0
Sun Jan 08 13:59:44 2017 us=154429 Connection profiles END
Sun Jan 08 13:59:44 2017 us=154429   remote_random = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ipchange = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   dev = 'tun'
Sun Jan 08 13:59:44 2017 us=154429   dev_type = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   dev_node = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   lladdr = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   topology = 1
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_local = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_noexec = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_nowarn = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_local = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_netbits = 0
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_remote = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   shaper = 0
Sun Jan 08 13:59:44 2017 us=154429   mtu_test = 0
Sun Jan 08 13:59:44 2017 us=154429   mlock = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   keepalive_ping = 0
Sun Jan 08 13:59:44 2017 us=154429   keepalive_timeout = 0
Sun Jan 08 13:59:44 2017 us=154429   inactivity_timeout = 0
Sun Jan 08 13:59:44 2017 us=154429   ping_send_timeout = 0
Sun Jan 08 13:59:44 2017 us=154429   ping_rec_timeout = 0
Sun Jan 08 13:59:44 2017 us=154429   ping_rec_timeout_action = 0
Sun Jan 08 13:59:44 2017 us=154429   ping_timer_remote = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   remap_sigusr1 = 0
Sun Jan 08 13:59:44 2017 us=154429   persist_tun = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   persist_local_ip = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   persist_remote_ip = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   persist_key = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   passtos = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   resolve_retry_seconds = 1000000000
Sun Jan 08 13:59:44 2017 us=154429   resolve_in_advance = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   username = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   groupname = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   chroot_dir = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   cd_dir = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   writepid = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   up_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   down_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   down_pre = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   up_restart = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   up_delay = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   daemon = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   inetd = 0
Sun Jan 08 13:59:44 2017 us=154429   log = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   suppress_timestamps = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   machine_readable_output = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   nice = 0
Sun Jan 08 13:59:44 2017 us=154429   verbosity = 5
Sun Jan 08 13:59:44 2017 us=154429   mute = 0
Sun Jan 08 13:59:44 2017 us=154429   gremlin = 0
Sun Jan 08 13:59:44 2017 us=154429   status_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   status_file_version = 1
Sun Jan 08 13:59:44 2017 us=154429   status_file_update_freq = 60
Sun Jan 08 13:59:44 2017 us=154429   occ = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   rcvbuf = 0
Sun Jan 08 13:59:44 2017 us=154429   sndbuf = 0
Sun Jan 08 13:59:44 2017 us=154429   sockflags = 0
Sun Jan 08 13:59:44 2017 us=154429   fast_io = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   comp.alg = 2
Sun Jan 08 13:59:44 2017 us=154429   comp.flags = 1
Sun Jan 08 13:59:44 2017 us=154429   route_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   route_default_gateway = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   route_default_metric = 0
Sun Jan 08 13:59:44 2017 us=154429   route_noexec = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   route_delay = 5
Sun Jan 08 13:59:44 2017 us=154429   route_delay_window = 30
Sun Jan 08 13:59:44 2017 us=154429   route_delay_defined = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   route_nopull = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   route_gateway_via_dhcp = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   allow_pull_fqdn = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   management_addr = '127.0.0.1'
Sun Jan 08 13:59:44 2017 us=154429   management_port = '25341'
Sun Jan 08 13:59:44 2017 us=154429   management_user_pass = 'stdin'
Sun Jan 08 13:59:44 2017 us=154429   management_log_history_cache = 250
Sun Jan 08 13:59:44 2017 us=154429   management_echo_buffer_size = 100
Sun Jan 08 13:59:44 2017 us=154429   management_write_peer_info_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   management_client_user = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   management_client_group = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   management_flags = 6
Sun Jan 08 13:59:44 2017 us=154429   shared_secret_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   key_direction = 0
Sun Jan 08 13:59:44 2017 us=154429   ciphername = 'BF-CBC'
Sun Jan 08 13:59:44 2017 us=154429   ncp_enabled = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Jan 08 13:59:44 2017 us=154429   authname = 'SHA1'
Sun Jan 08 13:59:44 2017 us=154429   prng_hash = 'SHA1'
Sun Jan 08 13:59:44 2017 us=154429   prng_nonce_secret_len = 16
Sun Jan 08 13:59:44 2017 us=154429   keysize = 0
Sun Jan 08 13:59:44 2017 us=154429   engine = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   replay = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   mute_replay_warnings = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   replay_window = 64
Sun Jan 08 13:59:44 2017 us=154429   replay_time = 15
Sun Jan 08 13:59:44 2017 us=154429   packet_id_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   use_iv = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   test_crypto = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tls_server = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tls_client = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   key_method = 2
Sun Jan 08 13:59:44 2017 us=154429   ca_file = 'ca.crt'
Sun Jan 08 13:59:44 2017 us=154429   ca_path = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   dh_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   cert_file = 'client2.crt'
Sun Jan 08 13:59:44 2017 us=154429   extra_certs_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   priv_key_file = 'client2.key'
Sun Jan 08 13:59:44 2017 us=154429   pkcs12_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   cryptoapi_cert = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   cipher_list = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   tls_verify = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   tls_export_cert = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   verify_x509_type = 0
Sun Jan 08 13:59:44 2017 us=154429   verify_x509_name = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   crl_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ns_cert_type = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_ku[i] = 0
Sun Jan 08 13:59:44 2017 us=154429   remote_cert_eku = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ssl_flags = 0
Sun Jan 08 13:59:44 2017 us=154429   tls_timeout = 2
Sun Jan 08 13:59:44 2017 us=154429   renegotiate_bytes = -1
Sun Jan 08 13:59:44 2017 us=154429   renegotiate_packets = 0
Sun Jan 08 13:59:44 2017 us=154429   renegotiate_seconds = 3600
Sun Jan 08 13:59:44 2017 us=154429   handshake_window = 60
Sun Jan 08 13:59:44 2017 us=154429   transition_window = 3600
Sun Jan 08 13:59:44 2017 us=154429   single_session = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   push_peer_info = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tls_exit = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tls_auth_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   tls_crypt_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_protected_authentication = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_private_mode = 00000000
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_cert_private = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_pin_cache_period = -1
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_id = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   pkcs11_id_management = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   server_network = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   server_netmask = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   server_network_ipv6 = ::
Sun Jan 08 13:59:44 2017 us=154429   server_netbits_ipv6 = 0
Sun Jan 08 13:59:44 2017 us=154429   server_bridge_ip = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   server_bridge_netmask = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   server_bridge_pool_start = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   server_bridge_pool_end = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_start = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_end = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_netmask = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_pool_persist_refresh_freq = 600
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_pool_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_pool_base = ::
Sun Jan 08 13:59:44 2017 us=154429   ifconfig_ipv6_pool_netbits = 0
Sun Jan 08 13:59:44 2017 us=154429   n_bcast_buf = 256
Sun Jan 08 13:59:44 2017 us=154429   tcp_queue_limit = 64
Sun Jan 08 13:59:44 2017 us=154429   real_hash_size = 256
Sun Jan 08 13:59:44 2017 us=154429   virtual_hash_size = 256
Sun Jan 08 13:59:44 2017 us=154429   client_connect_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   learn_address_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   client_disconnect_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   client_config_dir = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   ccd_exclusive = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   tmp_dir = 'C:\Users\Beto\AppData\Local\Temp\'
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_local = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_ipv6_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_ipv6_local = ::/0
Sun Jan 08 13:59:44 2017 us=154429   push_ifconfig_ipv6_remote = ::
Sun Jan 08 13:59:44 2017 us=154429   enable_c2c = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   duplicate_cn = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   cf_max = 0
Sun Jan 08 13:59:44 2017 us=154429   cf_per = 0
Sun Jan 08 13:59:44 2017 us=154429   max_clients = 1024
Sun Jan 08 13:59:44 2017 us=154429   max_routes_per_client = 256
Sun Jan 08 13:59:44 2017 us=154429   auth_user_pass_verify_script = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   auth_user_pass_verify_script_via_file = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   auth_token_generate = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   auth_token_lifetime = 0
Sun Jan 08 13:59:44 2017 us=154429   client = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   pull = ENABLED
Sun Jan 08 13:59:44 2017 us=154429   auth_user_pass_file = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   show_net_up = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   route_method = 3
Sun Jan 08 13:59:44 2017 us=154429   block_outside_dns = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ip_win32_defined = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   ip_win32_type = 3
Sun Jan 08 13:59:44 2017 us=154429   dhcp_masq_offset = 0
Sun Jan 08 13:59:44 2017 us=154429   dhcp_lease_time = 31536000
Sun Jan 08 13:59:44 2017 us=154429   tap_sleep = 0
Sun Jan 08 13:59:44 2017 us=154429   dhcp_options = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   dhcp_renew = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   dhcp_pre_release = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   dhcp_release = DISABLED
Sun Jan 08 13:59:44 2017 us=154429   domain = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   netbios_scope = '[UNDEF]'
Sun Jan 08 13:59:44 2017 us=154429   netbios_node_type = 0
Sun Jan 08 13:59:44 2017 us=154429   disable_nbt = DISABLED
Sun Jan 08 13:59:44 2017 us=154429 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Sun Jan 08 13:59:44 2017 us=154429 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Jan 08 13:59:44 2017 us=154429 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Sun Jan 08 13:59:44 2017 us=154429 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sun Jan 08 13:59:44 2017 us=154429 Need hold release from management interface, waiting...
Sun Jan 08 13:59:44 2017 us=628834 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sun Jan 08 13:59:44 2017 us=738210 MANAGEMENT: CMD 'state on'
Sun Jan 08 13:59:44 2017 us=738210 MANAGEMENT: CMD 'log all on'
Sun Jan 08 13:59:44 2017 us=988094 MANAGEMENT: CMD 'hold off'
Sun Jan 08 13:59:44 2017 us=988094 MANAGEMENT: CMD 'hold release'
Sun Jan 08 13:59:44 2017 us=988094 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Jan 08 13:59:45 2017 us=97470 LZO compression initializing
Sun Jan 08 13:59:45 2017 us=97470 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 08 13:59:45 2017 us=97470 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun Jan 08 13:59:45 2017 us=97470 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Jan 08 13:59:45 2017 us=97470 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Jan 08 13:59:45 2017 us=97470 TCP/UDP: Preserving recently used remote address: [AF_INET]188.xx.xxx.xx:1194
Sun Jan 08 13:59:45 2017 us=97470 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Jan 08 13:59:45 2017 us=97470 UDP link local: (not bound)
Sun Jan 08 13:59:45 2017 us=97470 UDP link remote: [AF_INET]188.xx.xxx.xx:1194
Sun Jan 08 13:59:45 2017 us=97470 MANAGEMENT: >STATE:1483880385,WAIT,,,,,,
Sun Jan 08 14:00:45 2017 us=737835 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Jan 08 14:00:45 2017 us=737835 TLS Error: TLS handshake failed
Sun Jan 08 14:00:45 2017 us=737835 TCP/UDP: Closing socket
Sun Jan 08 14:00:45 2017 us=737835 SIGUSR1[soft,tls-error] received, process restarting
Sun Jan 08 14:00:45 2017 us=737835 MANAGEMENT: >STATE:1483880445,RECONNECTING,tls-error,,,,,
Sun Jan 08 14:00:45 2017 us=737835 Restart pause, 5 second(s)
Sun Jan 08 14:00:50 2017 us=750758 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Jan 08 14:00:50 2017 us=750758 Re-using SSL/TLS context
Sun Jan 08 14:00:50 2017 us=750758 LZO compression initializing
Sun Jan 08 14:00:50 2017 us=750758 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 08 14:00:50 2017 us=750758 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun Jan 08 14:00:50 2017 us=750758 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Jan 08 14:00:50 2017 us=750758 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Jan 08 14:00:50 2017 us=750758 TCP/UDP: Preserving recently used remote address: [AF_INET]188.xx.xxx.xx:1194
Sun Jan 08 14:00:50 2017 us=750758 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Jan 08 14:00:50 2017 us=754678 UDP link local: (not bound)
Sun Jan 08 14:00:50 2017 us=754678 UDP link remote: [AF_INET]188.xx.xxx.xx:1194
Sun Jan 08 14:00:50 2017 us=754678 MANAGEMENT: >STATE:1483880450,WAIT,,,,,,

And here the server log, as far as I see there are no attempts from remote clients:

Code: Select all

Sun Jan  8 12:59:28 2017 us=81563 Current Parameter Settings:
Sun Jan  8 12:59:28 2017 us=81822   config = '/etc/openvpn/openvpn.conf'
Sun Jan  8 12:59:28 2017 us=81872   mode = 1
Sun Jan  8 12:59:28 2017 us=81902   persist_config = DISABLED
Sun Jan  8 12:59:28 2017 us=81932   persist_mode = 1
Sun Jan  8 12:59:28 2017 us=81961   show_ciphers = DISABLED
Sun Jan  8 12:59:28 2017 us=81991   show_digests = DISABLED
Sun Jan  8 12:59:28 2017 us=82019   show_engines = DISABLED
Sun Jan  8 12:59:28 2017 us=82047   genkey = DISABLED
Sun Jan  8 12:59:28 2017 us=82077   key_pass_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=82108   show_tls_ciphers = DISABLED
Sun Jan  8 12:59:28 2017 us=82140 Connection profiles [default]:
Sun Jan  8 12:59:28 2017 us=82176   proto = udp
Sun Jan  8 12:59:28 2017 us=82214   local = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=82255   local_port = 1194
Sun Jan  8 12:59:28 2017 us=82286   remote = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=82314   remote_port = 1194
Sun Jan  8 12:59:28 2017 us=82342   remote_float = DISABLED
Sun Jan  8 12:59:28 2017 us=82371   bind_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=82404   bind_local = ENABLED
Sun Jan  8 12:59:28 2017 us=82436   connect_retry_seconds = 5
Sun Jan  8 12:59:28 2017 us=82464   connect_timeout = 10
Sun Jan  8 12:59:28 2017 us=82495   connect_retry_max = 0
Sun Jan  8 12:59:28 2017 us=82525   socks_proxy_server = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=82559   socks_proxy_port = 0
Sun Jan  8 12:59:28 2017 us=82597   socks_proxy_retry = DISABLED
Sun Jan  8 12:59:28 2017 us=82627   tun_mtu = 1500
Sun Jan  8 12:59:28 2017 us=82655   tun_mtu_defined = ENABLED
Sun Jan  8 12:59:28 2017 us=82683   link_mtu = 1500
Sun Jan  8 12:59:28 2017 us=82711   link_mtu_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=82743   tun_mtu_extra = 0
Sun Jan  8 12:59:28 2017 us=82775   tun_mtu_extra_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=82809   mtu_discover_type = -1
Sun Jan  8 12:59:28 2017 us=82856   fragment = 0
Sun Jan  8 12:59:28 2017 us=82899   mssfix = 1450
Sun Jan  8 12:59:28 2017 us=82940   explicit_exit_notification = 0
Sun Jan  8 12:59:28 2017 us=82985 Connection profiles END
Sun Jan  8 12:59:28 2017 us=83026   remote_random = DISABLED
Sun Jan  8 12:59:28 2017 us=83055   ipchange = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83086   dev = 'tun'
Sun Jan  8 12:59:28 2017 us=83121   dev_type = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83166   dev_node = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83202   lladdr = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83234   topology = 1
Sun Jan  8 12:59:28 2017 us=83263   tun_ipv6 = DISABLED
Sun Jan  8 12:59:28 2017 us=83291   ifconfig_local = '10.8.0.1'
Sun Jan  8 12:59:28 2017 us=83320   ifconfig_remote_netmask = '10.8.0.2'
Sun Jan  8 12:59:28 2017 us=83348   ifconfig_noexec = DISABLED
Sun Jan  8 12:59:28 2017 us=83388   ifconfig_nowarn = DISABLED
Sun Jan  8 12:59:28 2017 us=83417   ifconfig_ipv6_local = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83452   ifconfig_ipv6_netbits = 0
Sun Jan  8 12:59:28 2017 us=83481   ifconfig_ipv6_remote = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=83510   shaper = 0
Sun Jan  8 12:59:28 2017 us=83538   mtu_test = 0
Sun Jan  8 12:59:28 2017 us=83566   mlock = DISABLED
Sun Jan  8 12:59:28 2017 us=83594   keepalive_ping = 0
Sun Jan  8 12:59:28 2017 us=83622   keepalive_timeout = 0
Sun Jan  8 12:59:28 2017 us=83650   inactivity_timeout = 0
Sun Jan  8 12:59:28 2017 us=83678   ping_send_timeout = 0
Sun Jan  8 12:59:28 2017 us=83706   ping_rec_timeout = 0
Sun Jan  8 12:59:28 2017 us=83734   ping_rec_timeout_action = 0
Sun Jan  8 12:59:28 2017 us=83763   ping_timer_remote = DISABLED
Sun Jan  8 12:59:28 2017 us=83797   remap_sigusr1 = 0
Sun Jan  8 12:59:28 2017 us=83825   persist_tun = ENABLED
Sun Jan  8 12:59:28 2017 us=83853   persist_local_ip = DISABLED
Sun Jan  8 12:59:28 2017 us=83882   persist_remote_ip = DISABLED
Sun Jan  8 12:59:28 2017 us=83910   persist_key = ENABLED
Sun Jan  8 12:59:28 2017 us=83940   passtos = DISABLED
Sun Jan  8 12:59:28 2017 us=83969   resolve_retry_seconds = 1000000000
Sun Jan  8 12:59:28 2017 us=83999   username = 'nobody'
Sun Jan  8 12:59:28 2017 us=84059   groupname = 'nogroup'
Sun Jan  8 12:59:28 2017 us=84089   chroot_dir = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84118   cd_dir = '/etc/openvpn'
Sun Jan  8 12:59:28 2017 us=84145   writepid = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84174   up_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84202   down_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84229   down_pre = DISABLED
Sun Jan  8 12:59:28 2017 us=84258   up_restart = DISABLED
Sun Jan  8 12:59:28 2017 us=84286   up_delay = DISABLED
Sun Jan  8 12:59:28 2017 us=84314   daemon = ENABLED
Sun Jan  8 12:59:28 2017 us=84343   inetd = 0
Sun Jan  8 12:59:28 2017 us=84372   log = ENABLED
Sun Jan  8 12:59:28 2017 us=84400   suppress_timestamps = DISABLED
Sun Jan  8 12:59:28 2017 us=84429   nice = 0
Sun Jan  8 12:59:28 2017 us=84456   verbosity = 5
Sun Jan  8 12:59:28 2017 us=84484   mute = 0
Sun Jan  8 12:59:28 2017 us=84515   gremlin = 0
Sun Jan  8 12:59:28 2017 us=84547   status_file = '/var/log/openvpn-status.log'
Sun Jan  8 12:59:28 2017 us=84577   status_file_version = 1
Sun Jan  8 12:59:28 2017 us=84617   status_file_update_freq = 10
Sun Jan  8 12:59:28 2017 us=84662   occ = ENABLED
Sun Jan  8 12:59:28 2017 us=84693   rcvbuf = 65536
Sun Jan  8 12:59:28 2017 us=84721   sndbuf = 65536
Sun Jan  8 12:59:28 2017 us=84750   mark = 0
Sun Jan  8 12:59:28 2017 us=84778   sockflags = 0
Sun Jan  8 12:59:28 2017 us=84810   fast_io = DISABLED
Sun Jan  8 12:59:28 2017 us=84844   lzo = 7
Sun Jan  8 12:59:28 2017 us=84873   route_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84902   route_default_gateway = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=84932   route_default_metric = 0
Sun Jan  8 12:59:28 2017 us=84965   route_noexec = DISABLED
Sun Jan  8 12:59:28 2017 us=85008   route_delay = 0
Sun Jan  8 12:59:28 2017 us=85038   route_delay_window = 30
Sun Jan  8 12:59:28 2017 us=85066   route_delay_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=85095   route_nopull = DISABLED
Sun Jan  8 12:59:28 2017 us=85124   route_gateway_via_dhcp = DISABLED
Sun Jan  8 12:59:28 2017 us=85156   max_routes = 100
Sun Jan  8 12:59:28 2017 us=85188   allow_pull_fqdn = DISABLED
Sun Jan  8 12:59:28 2017 us=85219   route 10.8.0.0/255.255.255.0/nil/nil
Sun Jan  8 12:59:28 2017 us=85267   management_addr = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85310   management_port = 0
Sun Jan  8 12:59:28 2017 us=85350   management_user_pass = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85396   management_log_history_cache = 250
Sun Jan  8 12:59:28 2017 us=85429   management_echo_buffer_size = 100
Sun Jan  8 12:59:28 2017 us=85458   management_write_peer_info_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85498   management_client_user = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85532   management_client_group = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85578   management_flags = 0
Sun Jan  8 12:59:28 2017 us=85623   shared_secret_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=85654   key_direction = 0
Sun Jan  8 12:59:28 2017 us=85683   ciphername_defined = ENABLED
Sun Jan  8 12:59:28 2017 us=85712   ciphername = 'BF-CBC'
Sun Jan  8 12:59:28 2017 us=85742   authname_defined = ENABLED
Sun Jan  8 12:59:28 2017 us=85771   authname = 'SHA1'
Sun Jan  8 12:59:28 2017 us=85807   prng_hash = 'SHA1'
Sun Jan  8 12:59:28 2017 us=85837   prng_nonce_secret_len = 16
Sun Jan  8 12:59:28 2017 us=85866   keysize = 0
Sun Jan  8 12:59:28 2017 us=85894   engine = DISABLED
Sun Jan  8 12:59:28 2017 us=85923   replay = ENABLED
Sun Jan  8 12:59:28 2017 us=85950   mute_replay_warnings = DISABLED
Sun Jan  8 12:59:28 2017 us=85979   replay_window = 64
Sun Jan  8 12:59:28 2017 us=86009   replay_time = 15
Sun Jan  8 12:59:28 2017 us=86038   packet_id_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86066   use_iv = ENABLED
Sun Jan  8 12:59:28 2017 us=86093   test_crypto = DISABLED
Sun Jan  8 12:59:28 2017 us=86124   tls_server = ENABLED
Sun Jan  8 12:59:28 2017 us=86152   tls_client = DISABLED
Sun Jan  8 12:59:28 2017 us=86181   key_method = 2
Sun Jan  8 12:59:28 2017 us=86210   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Sun Jan  8 12:59:28 2017 us=86239   ca_path = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86298   dh_file = '/etc/openvpn/easy-rsa/keys/dh2048.pem'
Sun Jan  8 12:59:28 2017 us=86329   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Sun Jan  8 12:59:28 2017 us=86369   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Sun Jan  8 12:59:28 2017 us=86400   pkcs12_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86429   cipher_list = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86457   tls_verify = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86490   tls_export_cert = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86519   verify_x509_type = 0
Sun Jan  8 12:59:28 2017 us=86548   verify_x509_name = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86576   crl_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=86604   ns_cert_type = 0
Sun Jan  8 12:59:28 2017 us=86634   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86662   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86691   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86719   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86749   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86776   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86805   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86833   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86863   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86894   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86924   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86955   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=86986   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=87021   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=87052   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=87083   remote_cert_ku[i] = 0
Sun Jan  8 12:59:28 2017 us=87114   remote_cert_eku = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=87143   ssl_flags = 0
Sun Jan  8 12:59:28 2017 us=87171   tls_timeout = 2
Sun Jan  8 12:59:28 2017 us=87207   renegotiate_bytes = 0
Sun Jan  8 12:59:28 2017 us=87237   renegotiate_packets = 0
Sun Jan  8 12:59:28 2017 us=87266   renegotiate_seconds = 3600
Sun Jan  8 12:59:28 2017 us=87295   handshake_window = 60
Sun Jan  8 12:59:28 2017 us=87322   transition_window = 3600
Sun Jan  8 12:59:28 2017 us=87349   single_session = DISABLED
Sun Jan  8 12:59:28 2017 us=87378   push_peer_info = DISABLED
Sun Jan  8 12:59:28 2017 us=87405   tls_exit = DISABLED
Sun Jan  8 12:59:28 2017 us=87433   tls_auth_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=87462   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87491   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87520   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87549   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87577   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87606   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87635   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87664   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87692   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87720   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87749   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87778   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87807   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87835   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87865   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87894   pkcs11_protected_authentication = DISABLED
Sun Jan  8 12:59:28 2017 us=87924   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=87953   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=87984   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88015   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88046   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88075   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88105   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88166   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88196   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88225   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88255   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88284   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88312   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88340   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88370   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88398   pkcs11_private_mode = 00000000
Sun Jan  8 12:59:28 2017 us=88426   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88454   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88482   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88511   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88539   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88567   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88595   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88624   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88652   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88680   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88708   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88736   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88765   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88793   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88821   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88849   pkcs11_cert_private = DISABLED
Sun Jan  8 12:59:28 2017 us=88878   pkcs11_pin_cache_period = -1
Sun Jan  8 12:59:28 2017 us=88907   pkcs11_id = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=88935   pkcs11_id_management = DISABLED
Sun Jan  8 12:59:28 2017 us=88975   server_network = 10.8.0.0
Sun Jan  8 12:59:28 2017 us=89009   server_netmask = 255.255.255.0
Sun Jan  8 12:59:28 2017 us=89042   server_network_ipv6 = ::
Sun Jan  8 12:59:28 2017 us=89071   server_netbits_ipv6 = 0
Sun Jan  8 12:59:28 2017 us=89102   server_bridge_ip = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=89134   server_bridge_netmask = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=89166   server_bridge_pool_start = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=89198   server_bridge_pool_end = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=89227   push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun Jan  8 12:59:28 2017 us=89257   push_entry = 'dhcp-option DNS 85.214.20.141'
Sun Jan  8 12:59:28 2017 us=89286   push_entry = 'dhcp-option DNS 8.8.8.8'
Sun Jan  8 12:59:28 2017 us=89316   push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Jan  8 12:59:28 2017 us=89345   push_entry = 'topology net30'
Sun Jan  8 12:59:28 2017 us=89375   ifconfig_pool_defined = ENABLED
Sun Jan  8 12:59:28 2017 us=89407   ifconfig_pool_start = 10.8.0.4
Sun Jan  8 12:59:28 2017 us=89439   ifconfig_pool_end = 10.8.0.251
Sun Jan  8 12:59:28 2017 us=89470   ifconfig_pool_netmask = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=89500   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=89530   ifconfig_pool_persist_refresh_freq = 600
Sun Jan  8 12:59:28 2017 us=89560   ifconfig_ipv6_pool_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=89591   ifconfig_ipv6_pool_base = ::
Sun Jan  8 12:59:28 2017 us=89621   ifconfig_ipv6_pool_netbits = 0
Sun Jan  8 12:59:28 2017 us=89650   n_bcast_buf = 256
Sun Jan  8 12:59:28 2017 us=89678   tcp_queue_limit = 64
Sun Jan  8 12:59:28 2017 us=89706   real_hash_size = 256
Sun Jan  8 12:59:28 2017 us=89734   virtual_hash_size = 256
Sun Jan  8 12:59:28 2017 us=89763   client_connect_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=89792   learn_address_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=89821   client_disconnect_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=89849   client_config_dir = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=89878   ccd_exclusive = DISABLED
Sun Jan  8 12:59:28 2017 us=89906   tmp_dir = '/tmp'
Sun Jan  8 12:59:28 2017 us=89934   push_ifconfig_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=89989   push_ifconfig_local = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=90023   push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan  8 12:59:28 2017 us=90052   push_ifconfig_ipv6_defined = DISABLED
Sun Jan  8 12:59:28 2017 us=90083   push_ifconfig_ipv6_local = ::/0
Sun Jan  8 12:59:28 2017 us=90115   push_ifconfig_ipv6_remote = ::
Sun Jan  8 12:59:28 2017 us=90144   enable_c2c = ENABLED
Sun Jan  8 12:59:28 2017 us=90172   duplicate_cn = DISABLED
Sun Jan  8 12:59:28 2017 us=90200   cf_max = 0
Sun Jan  8 12:59:28 2017 us=90228   cf_per = 0
Sun Jan  8 12:59:28 2017 us=90257   max_clients = 1024
Sun Jan  8 12:59:28 2017 us=90285   max_routes_per_client = 256
Sun Jan  8 12:59:28 2017 us=90313   auth_user_pass_verify_script = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=90342   auth_user_pass_verify_script_via_file = DISABLED
Sun Jan  8 12:59:28 2017 us=90371   port_share_host = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=90400   port_share_port = 0
Sun Jan  8 12:59:28 2017 us=90428   client = DISABLED
Sun Jan  8 12:59:28 2017 us=90456   pull = DISABLED
Sun Jan  8 12:59:28 2017 us=90484   auth_user_pass_file = '[UNDEF]'
Sun Jan  8 12:59:28 2017 us=90517 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [$
Sun Jan  8 12:59:28 2017 us=90561 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Sun Jan  8 12:59:28 2017 us=90919 WARNING: --keepalive option is missing from server config
Sun Jan  8 12:59:28 2017 us=92418 Diffie-Hellman initialized with 2048 bit key
Sun Jan  8 12:59:28 2017 us=94066 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Jan  8 12:59:28 2017 us=94148 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sun Jan  8 12:59:28 2017 us=94444 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:06:66:1e
Sun Jan  8 12:59:28 2017 us=96129 TUN/TAP device tun0 opened
Sun Jan  8 12:59:28 2017 us=96266 TUN/TAP TX queue length set to 100
Sun Jan  8 12:59:28 2017 us=96328 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Jan  8 12:59:28 2017 us=96420 /sbin/ip link set dev tun0 up mtu 1500
Sun Jan  8 12:59:28 2017 us=99847 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Jan  8 12:59:28 2017 us=104261 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Jan  8 12:59:28 2017 us=108225 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Jan  8 12:59:28 2017 us=110685 GID set to nogroup
Sun Jan  8 12:59:28 2017 us=110884 UID set to nobody
Sun Jan  8 12:59:28 2017 us=110948 UDPv4 link local (bound): [undef]
Sun Jan  8 12:59:28 2017 us=110992 UDPv4 link remote: [undef]
Sun Jan  8 12:59:28 2017 us=111034 MULTI: multi_init called, r=256 v=256
Sun Jan  8 12:59:28 2017 us=111401 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Jan  8 12:59:28 2017 us=111567 Initialization Sequence Completed

PS: I have tried using port 1194, thats why its changed

mwandelaar · Post by **mwandelaar** » Sun Jan 08, 2017 3:48 pm

Hmm, indeed this does look like the server does not receive any packet.
I took the freedom to check if your server responded but i did not get any reply, not on icmp, tcp port 443, 1194. All packets are dropped way before reaching your ip-address.
Does your provider allow inbound traffic?

Can you connect localy over the lan?

bet997 · Post by **bet997** » Sun Jan 08, 2017 4:09 pm

Yes, I can connect over the lan, the openvpn service of the server works perfectly when connecting through the local adress.

I'm not sure what you mean by inbound traffic, but a few days ago it all worked perfectly, also from a remote location so I don't think my ISP is blocking anything, is it?

I now portmapped other ports on the router via TCP but they also seem closed, is it maybe a problem of the router?
Thanks for your effort

bet997 · Post by **bet997** » Mon Jan 09, 2017 10:01 pm

Does somebody know why it doesnt work? :/

mwandelaar · Post by **mwandelaar** » Tue Jan 10, 2017 4:50 am

As far as i could see, there was no inbound traffic, ie, a new session which is initiated from outside, possible to your server. Can you verify if this is possible with a simple webserver?
It's not something OpenVPN can solve for you.

bet997 · Post by **bet997** » Wed Jan 11, 2017 4:12 pm

I finally solved it!! Resetting the Router did it.
Thanks for your time!

OpenVPN Support Forum

OpenVpn doesn't connect from remote location

OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location

Re: OpenVpn doesn't connect from remote location