Hi All,
Apologies for the long description, but I've got a strange problem. I am trying to use OpenVPN to connect my home and office networks. The connection initially works fine and I am able to access machines on the remote network from either side, but after any inactivity, traffic seems to stop and eventually the client restarts the connection on ping timeout.
The openvpn connection is from router to router (ASUS-RT-n16 on office side and Linksys E3000 on home side). Both are running Tomato 1.28 firmware which includes OpenVPN v2.1.1 ("mipsel-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Mar 23 2012").
The office network is 192.168.2.0/24 and home is 192.168.1.0/24. The internet connection between the two routers is stable with no detectable packet loss (same network provider, ~6-9ms pings).
The ping/keepalive is set to ping every 10 seconds and restart after 180 seconds. If I check the logs with verbose logging,
As far as I can tell, this is what happens:
1) client connects successfully
2) client starts sending pings every 10 seconds and receives response from server. At this point, the connection works fine.
3) after about 60-90 seconds, the client stops receiving a response to the ping (checked with verb 7) and the server log shows "read UDPv4 [ECONNREFUSED]: Connection refused (code=146)" for each packet send from the client
4) after ~180 seconds, the client reconnects
5) during reconnection, the server still sees the existing connection, so drops it before accepting the new connection
The strange thing is that if after step 1, I set a continuous ping from a computer on the office (client) side to a machine on the home (server) side, then everything keeps working (i.e. the keepalive pings being sent by the client keep getting responses, no connection refused messages come up in the server log, and the connection works). As soon as I stop that ping however, then after a minute or two, the keepalive pings will start getting refused again and I'm back at step 3 again.
I have confirmed that the routing table doesn't change between step 2 and step 3. I have some understanding of networking in general, but know very little about openvpn so perhaps I'm doing something silly. Any advice from the community would be greatly appreciated. My config information is below. Note: XXX.XX.... and YYY.YY... are public IPs of home router and office router's router respectively.
Client config
daemon
client
dev tun11
proto udp
remote private.dyndns.org 1194
resolv-retry 30
nobind
persist-key
persist-tun
comp-lzo yes
cipher AES-128-CBC
verb 3
ca ca.crt
cert client.crt
key client.key
status-version 2
status status
verb 5
Server config
daemon
server 10.8.0.0 255.255.255.0
proto udp
port 1194
dev tun21
cipher AES-128-CBC
comp-lzo yes
keepalive 15 60
verb 3
push "route 192.168.1.0 255.255.255.0"
client-config-dir ccd
ccd-exclusive
route 192.168.2.0 255.255.255.0
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status
keepalive 10 180
verb 5
Client Log
Jun 7 17:58:50 unknown user.info kernel: tun: Universal TUN/TAP device driver, 1.6
Jun 7 17:58:50 unknown daemon.notice openvpn[6255]: OpenVPN 2.1.1 mipsel-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Mar 23 2012
Jun 7 17:58:50 unknown daemon.warn openvpn[6255]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Jun 7 17:58:50 unknown daemon.warn openvpn[6255]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jun 7 17:58:50 unknown user.info kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Jun 7 17:58:50 unknown daemon.notice openvpn[6255]: LZO compression initialized
Jun 7 17:58:50 unknown daemon.notice openvpn[6255]: Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jun 7 17:58:50 unknown daemon.notice openvpn[6255]: Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: Socket Buffers: R=[114688->131072] S=[114688->131072]
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: UDPv4 link local: [undef]
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: UDPv4 link remote: XXX.XXX.XXX.XXX:1194
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: TLS: Initial packet from XXX.XXX.XXX.XXX:1194, sid=f4c4ef11 35338174
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: VERIFY OK: depth=1, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=ThreePegs/name=changeme/emailAddress=info@threepegs.com
Jun 7 17:58:50 unknown daemon.notice openvpn[6262]: VERIFY OK: depth=0, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=home_router_server/name=changeme/emailAddress=info@threepegs.com
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 7 17:58:51 unknown daemon.notice openvpn[6262]: [home_router_server] Peer Connection Initiated with XXX.XXX.XXX.XXX:1194
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: SENT CONTROL [home_router_server]: 'PUSH_REQUEST' (status=1)
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5'
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: timers and/or timeouts modified
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: --ifconfig/up options modified
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: route options modified
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: TUN/TAP device tun11 opened
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: TUN/TAP TX queue length set to 100
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: /sbin/ifconfig tun11 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.8.0.5
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Jun 7 17:58:53 unknown daemon.notice openvpn[6262]: Initialization Sequence Completed
Jun 7 18:00:01 unknown syslog.info root: -- MARK --
Jun 7 18:01:54 unknown daemon.notice openvpn[6262]: [home_router_server] Inactivity timeout (--ping-restart), restarting
Jun 7 18:01:54 unknown daemon.notice openvpn[6262]: TCP/UDP: Closing socket
Jun 7 18:01:54 unknown daemon.notice openvpn[6262]: SIGUSR1[soft,ping-restart] received, process restarting
Jun 7 18:01:54 unknown daemon.notice openvpn[6262]: Restart pause, 2 second(s)
Jun 7 18:01:56 unknown daemon.warn openvpn[6262]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Jun 7 18:01:56 unknown daemon.warn openvpn[6262]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Re-using SSL/TLS context
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: LZO compression initialized
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Socket Buffers: R=[114688->131072] S=[114688->131072]
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: UDPv4 link local: [undef]
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: UDPv4 link remote: XXX.XXX.XXX.XXX:1194
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: TLS: Initial packet from XXX.XXX.XXX.XXX:1194, sid=d964dfb0 b94f4c14
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: VERIFY OK: depth=1, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=ThreePegs/name=changeme/emailAddress=info@threepegs.com
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: VERIFY OK: depth=0, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=home_router_server/name=changeme/emailAddress=info@threepegs.com
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 7 18:01:56 unknown daemon.notice openvpn[6262]: [home_router_server] Peer Connection Initiated with XXX.XXX.XXX.XXX:1194
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: SENT CONTROL [home_router_server]: 'PUSH_REQUEST' (status=1)
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5'
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: timers and/or timeouts modified
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: --ifconfig/up options modified
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: OPTIONS IMPORT: route options modified
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: Preserving previous TUN/TAP instance: tun11
Jun 7 18:01:59 unknown daemon.notice openvpn[6262]: Initialization Sequence Completed
Server Log
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: MULTI: multi_create_instance called
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Re-using SSL/TLS context
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 LZO compression initialized
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 TLS: Initial packet from YYY.YYY.YYY.YYY:5701, sid=8781b554 95305a86
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 VERIFY OK: depth=1, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=ThreePegs/name=changeme/emailAddress=info@threepegs.com
Jun 7 17:58:50 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 VERIFY OK: depth=0, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=office_router/name=changeme/emailAddress=info@threepegs.com
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:5701 [office_router] Peer Connection Initiated with YYY.YYY.YYY.YYY:5701
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: MULTI: new connection by client 'office_router' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: OPTIONS IMPORT: reading client specific options from: ccd/office_router
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: MULTI: Learn: 10.8.0.6 -> office_router/YYY.YYY.YYY.YYY:5701
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: MULTI: primary virtual IP for office_router/YYY.YYY.YYY.YYY:5701: 10.8.0.6
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: MULTI: internal route 192.168.2.0/24 -> office_router/YYY.YYY.YYY.YYY:5701
Jun 7 17:58:51 unknown daemon.notice openvpn[2486]: MULTI: Learn: 192.168.2.0/24 -> office_router/YYY.YYY.YYY.YYY:5701
Jun 7 17:58:53 unknown daemon.notice openvpn[2486]: office_router/YYY.YYY.YYY.YYY:5701 PUSH: Received control message: 'PUSH_REQUEST'
Jun 7 17:58:53 unknown daemon.notice openvpn[2486]: office_router/YYY.YYY.YYY.YYY:5701 SENT CONTROL [office_router]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Jun 7 17:59:03 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 17:59:13 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 17:59:23 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 17:59:33 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 17:59:43 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 17:59:53 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:01 unknown syslog.info root: -- MARK --
Jun 7 18:00:03 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:13 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:23 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:33 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:43 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:00:53 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:03 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:13 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:23 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:34 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:44 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:54 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: MULTI: multi_create_instance called
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Re-using SSL/TLS context
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 LZO compression initialized
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Jun 7 18:01:55 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 TLS: Initial packet from YYY.YYY.YYY.YYY:63466, sid=87ed5f1d 2928c2ef
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 VERIFY OK: depth=1, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=ThreePegs/name=changeme/emailAddress=info@threepegs.com
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 VERIFY OK: depth=0, /C=HK/ST=HongKong/L=Central/O=ThreePegs/OU=ThreePegs/CN=office_router/name=changeme/emailAddress=info@threepegs.com
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: YYY.YYY.YYY.YYY:63466 [office_router] Peer Connection Initiated with YYY.YYY.YYY.YYY:63466
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: MULTI: new connection by client 'office_router' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: OPTIONS IMPORT: reading client specific options from: ccd/office_router
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: MULTI: Learn: 10.8.0.6 -> office_router/YYY.YYY.YYY.YYY:63466
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: MULTI: primary virtual IP for office_router/YYY.YYY.YYY.YYY:63466: 10.8.0.6
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: MULTI: internal route 192.168.2.0/24 -> office_router/YYY.YYY.YYY.YYY:63466
Jun 7 18:01:56 unknown daemon.notice openvpn[2486]: MULTI: Learn: 192.168.2.0/24 -> office_router/YYY.YYY.YYY.YYY:63466
Jun 7 18:01:58 unknown daemon.notice openvpn[2486]: office_router/YYY.YYY.YYY.YYY:63466 PUSH: Received control message: 'PUSH_REQUEST'
Jun 7 18:01:58 unknown daemon.notice openvpn[2486]: office_router/YYY.YYY.YYY.YYY:63466 SENT CONTROL [office_router]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Jun 7 18:02:29 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:02:40 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Jun 7 18:02:50 unknown daemon.err openvpn[2486]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
