OpenVPN not listening on port 1194

Big Dave

Got OpenVPN installed on CentOS 6. Everything seems to be working except OpenVPN picks a random port to listen to. The server.conf file specifies port 1194, but a random port number is selected on every start. This is regardless of calling it as a service or directly from the command line invoking the server.conf file in /etc/openvpn.

I can connect to the server if I use the port it's listening on, but obviously I'll need it to listen on the expected port.

Additionally, this was a compiled install. Being that I'm green on this, there may be something missing. The following files are in /etc/openvpn: ca.crt, dh1024.pem, firewall.sh, ipp.txt, openvpn-status.log, server.conf, server.crt, and server.key.

Config file:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

Thanks for the assistance, it's greatly appreciated.

maikcat

hi there,

i was reading about your problem and went..uuhhh????

openvpn chooses port at random???

can you start openvpn by using

openvpn --config pathtoyourconfigfile

and post the log here please?

also ,sestatus what reports back?

Michael.

Big Dave

Thanks for getting back with me. As requested, here's the startup with my config file:

# openvpn --config /etc/openvpn/server.conf
Mon Jul 30 03:11:30 2012 OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Jul 30 2012
Mon Jul 30 03:11:30 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 30 03:11:30 2012 Diffie-Hellman initialized with 1024 bit key
Mon Jul 30 03:11:30 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 30 03:11:30 2012 Socket Buffers: R=[124928->131072] S=[124928->131072]
Mon Jul 30 03:11:30 2012 ROUTE default_gateway=10.50.83.1
Mon Jul 30 03:11:30 2012 TUN/TAP device tun0 opened
Mon Jul 30 03:11:30 2012 TUN/TAP TX queue length set to 100
Mon Jul 30 03:11:30 2012 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Mon Jul 30 03:11:30 2012 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Mon Jul 30 03:11:30 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 30 03:11:30 2012 UDPv4 link local (bound): [undef]:1194
Mon Jul 30 03:11:30 2012 UDPv4 link remote: [undef]
Mon Jul 30 03:11:30 2012 MULTI: multi_init called, r=256 v=256
Mon Jul 30 03:11:30 2012 IFCONFIG POOL: base=10.8.0.4 size=62
Mon Jul 30 03:11:30 2012 IFCONFIG POOL LIST
Mon Jul 30 03:11:30 2012 Initialization Sequence Completed

This morning I rebuilt the rpm and reinstalled. Same problem:

# netstat -uap|grep openvpn
udp        0      0 *:openvpn                   *:*                                     26750/openvpn

Here's the sestatus:

# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted

Thanks again,

maikcat

hi there,

problem?

# netstat -uap|grep openvpn
udp 0 0 *:openvpn *:* 26750/openvpn

the 26750 is the PID... 8-)

try netstat -uapn | grep openvpn

if you see inside /etc/services there should be port 1194 registered to openvpn...

Michael.

Big Dave

Argh, at the top of the netstat is the "PID/Program Name"... :oops: Wish I'd been paying more attention.

Your suggestion shows it is indeed listening on 1194. You, sir, are the man. I'll try it from here.

Thanks so much.

maikcat

glad to helped you out.

Closing topic

Michael.