OpenVPN Over Port 80

jtanjung

Hi,

I'm new here. I have a server with OpenVPN installed and work over port 110. I don't have any problem so far. But for some reason I want to change the port number to 80.
I've set my openvpn to work over port 80. When I try to connect from client, I got an error message said "SIGUSR1[soft,connection-reset] received, process restarting".

You can see the connection log here:

Wed Sep 05 22:02:53 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Sep 05 22:02:58 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Sep 05 22:02:58 2012 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Wed Sep 05 22:02:59 2012 LZO compression initialized
Wed Sep 05 22:02:59 2012 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Sep 05 22:02:59 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Sep 05 22:02:59 2012 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Sep 05 22:02:59 2012 Local Options hash (VER=V4): 'bc07730e'
Wed Sep 05 22:02:59 2012 Expected Remote Options hash (VER=V4): 'b695cb4a'
Wed Sep 05 22:02:59 2012 Attempting to establish TCP connection with 1.2.3.4:80
Wed Sep 05 22:03:00 2012 TCP connection established with 1.2.3.4:80
Wed Sep 05 22:03:00 2012 TCPv4_CLIENT link local: [undef]
Wed Sep 05 22:03:00 2012 TCPv4_CLIENT link remote: 1.2.3.4:80
Wed Sep 05 22:03:04 2012 Connection reset, restarting [0]
Wed Sep 05 22:03:04 2012 TCP/UDP: Closing socket
Wed Sep 05 22:03:04 2012 SIGUSR1[soft,connection-reset] received, process restarting
Wed Sep 05 22:03:04 2012 Restart pause, 5 second(s)

Do you think the error above had to do with my firewall setting?

I don't want to use any port other than port 80. I will appreciate if you have any idea to solve that problem.

Regards,
Julian

maikcat

port 80 is used for WWW traffic

are you sure that your ISP doesnt proxy www traffic?

Michael.

jtanjung

Michael, thanks for reply!

I'm not pretty sure if my ISP using proxy for www traffic. Perhaps openvpn server log below can help you to analyze what is causing the error.

Thu Sep  6 22:44:11 2012 us=372974 Current Parameter Settings:
Thu Sep  6 22:44:11 2012 us=373035   config = '/etc/openvpn/server.conf'
Thu Sep  6 22:44:11 2012 us=373045   mode = 1
Thu Sep  6 22:44:11 2012 us=373054   persist_config = DISABLED
Thu Sep  6 22:44:11 2012 us=373062   persist_mode = 1
Thu Sep  6 22:44:11 2012 us=373069   show_ciphers = DISABLED
Thu Sep  6 22:44:11 2012 us=373076   show_digests = DISABLED
Thu Sep  6 22:44:11 2012 us=373084   show_engines = DISABLED
Thu Sep  6 22:44:11 2012 us=373091   genkey = DISABLED
Thu Sep  6 22:44:11 2012 us=373098   key_pass_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373106   show_tls_ciphers = DISABLED
Thu Sep  6 22:44:11 2012 us=373113 Connection profiles [default]:
Thu Sep  6 22:44:11 2012 us=373121   proto = tcp-server
Thu Sep  6 22:44:11 2012 us=373128   local = '1.2.3.4'
Thu Sep  6 22:44:11 2012 us=373136   local_port = 80
Thu Sep  6 22:44:11 2012 us=373143   remote = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373150   remote_port = 80
Thu Sep  6 22:44:11 2012 us=373157   remote_float = DISABLED
Thu Sep  6 22:44:11 2012 us=373165   bind_defined = DISABLED
Thu Sep  6 22:44:11 2012 us=373172   bind_local = ENABLED
Thu Sep  6 22:44:11 2012 us=373179   connect_retry_seconds = 5
Thu Sep  6 22:44:11 2012 us=373186   connect_timeout = 10
Thu Sep  6 22:44:11 2012 us=373193   connect_retry_max = 0
Thu Sep  6 22:44:11 2012 us=373201   socks_proxy_server = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373208   socks_proxy_port = 0
Thu Sep  6 22:44:11 2012 us=373215   socks_proxy_retry = DISABLED
Thu Sep  6 22:44:11 2012 us=373223 Connection profiles END
Thu Sep  6 22:44:11 2012 us=373231   remote_random = DISABLED
Thu Sep  6 22:44:11 2012 us=373238   ipchange = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373245   dev = 'tun'
Thu Sep  6 22:44:11 2012 us=373252   dev_type = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373269   dev_node = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373276   lladdr = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373283   topology = 1
Thu Sep  6 22:44:11 2012 us=373290   tun_ipv6 = DISABLED
Thu Sep  6 22:44:11 2012 us=373298   ifconfig_local = '10.10.11.1'
Thu Sep  6 22:44:11 2012 us=373305   ifconfig_remote_netmask = '10.10.11.2'
Thu Sep  6 22:44:11 2012 us=373312   ifconfig_noexec = DISABLED
Thu Sep  6 22:44:11 2012 us=373320   ifconfig_nowarn = DISABLED
Thu Sep  6 22:44:11 2012 us=373327   shaper = 0
Thu Sep  6 22:44:11 2012 us=373334   tun_mtu = 1500
Thu Sep  6 22:44:11 2012 us=373341   tun_mtu_defined = ENABLED
Thu Sep  6 22:44:11 2012 us=373348   link_mtu = 1500
Thu Sep  6 22:44:11 2012 us=373356   link_mtu_defined = DISABLED
Thu Sep  6 22:44:11 2012 us=373363   tun_mtu_extra = 32
Thu Sep  6 22:44:11 2012 us=373370   tun_mtu_extra_defined = ENABLED
Thu Sep  6 22:44:11 2012 us=373377   fragment = 0
Thu Sep  6 22:44:11 2012 us=373385   mtu_discover_type = -1
Thu Sep  6 22:44:11 2012 us=373392   mtu_test = 0
Thu Sep  6 22:44:11 2012 us=373400   mlock = DISABLED
Thu Sep  6 22:44:11 2012 us=373407   keepalive_ping = 10
Thu Sep  6 22:44:11 2012 us=373414   keepalive_timeout = 600
Thu Sep  6 22:44:11 2012 us=373421   inactivity_timeout = 0
Thu Sep  6 22:44:11 2012 us=373428   ping_send_timeout = 10
Thu Sep  6 22:44:11 2012 us=373436   ping_rec_timeout = 1200
Thu Sep  6 22:44:11 2012 us=373443   ping_rec_timeout_action = 2
Thu Sep  6 22:44:11 2012 us=373450   ping_timer_remote = DISABLED
Thu Sep  6 22:44:11 2012 us=373457   remap_sigusr1 = 0
Thu Sep  6 22:44:11 2012 us=373464   explicit_exit_notification = 0
Thu Sep  6 22:44:11 2012 us=373472   persist_tun = ENABLED
Thu Sep  6 22:44:11 2012 us=373479   persist_local_ip = DISABLED
Thu Sep  6 22:44:11 2012 us=373486   persist_remote_ip = DISABLED
Thu Sep  6 22:44:11 2012 us=373493   persist_key = ENABLED
Thu Sep  6 22:44:11 2012 us=373500   mssfix = 1450
Thu Sep  6 22:44:11 2012 us=373507   passtos = DISABLED
Thu Sep  6 22:44:11 2012 us=373515   resolve_retry_seconds = 1000000000
Thu Sep  6 22:44:11 2012 us=373522   username = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373529   groupname = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373536   chroot_dir = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373548   cd_dir = '/etc/openvpn'
Thu Sep  6 22:44:11 2012 us=373556   writepid = '/var/run/openvpn.server.pid'
Thu Sep  6 22:44:11 2012 us=373563   up_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373570   down_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373577   down_pre = DISABLED
Thu Sep  6 22:44:11 2012 us=373585   up_restart = DISABLED
Thu Sep  6 22:44:11 2012 us=373592   up_delay = DISABLED
Thu Sep  6 22:44:11 2012 us=373599   daemon = ENABLED
Thu Sep  6 22:44:11 2012 us=373606   inetd = 0
Thu Sep  6 22:44:11 2012 us=373613   log = ENABLED
Thu Sep  6 22:44:11 2012 us=373620   suppress_timestamps = DISABLED
Thu Sep  6 22:44:11 2012 us=373628   nice = 0
Thu Sep  6 22:44:11 2012 us=373635   verbosity = 5
Thu Sep  6 22:44:11 2012 us=373642   mute = 0
Thu Sep  6 22:44:11 2012 us=373649   gremlin = 0
Thu Sep  6 22:44:11 2012 us=373656   status_file = 'openvpn-status.log'
Thu Sep  6 22:44:11 2012 us=373663   status_file_version = 1
Thu Sep  6 22:44:11 2012 us=373671   status_file_update_freq = 60
Thu Sep  6 22:44:11 2012 us=373678   occ = ENABLED
Thu Sep  6 22:44:11 2012 us=373685   rcvbuf = 65536
Thu Sep  6 22:44:11 2012 us=373692   sndbuf = 65536
Thu Sep  6 22:44:11 2012 us=373699   sockflags = 0
Thu Sep  6 22:44:11 2012 us=373706   fast_io = DISABLED
Thu Sep  6 22:44:11 2012 us=373714   lzo = 7
Thu Sep  6 22:44:11 2012 us=373721   route_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373728   route_default_gateway = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373735   route_default_metric = 0
Thu Sep  6 22:44:11 2012 us=373742   route_noexec = DISABLED
Thu Sep  6 22:44:11 2012 us=373749   route_delay = 0
Thu Sep  6 22:44:11 2012 us=373758   route_delay_window = 30
Thu Sep  6 22:44:11 2012 us=373766   route_delay_defined = DISABLED
Thu Sep  6 22:44:11 2012 us=373773   route_nopull = DISABLED
Thu Sep  6 22:44:11 2012 us=373780   route_gateway_via_dhcp = DISABLED
Thu Sep  6 22:44:11 2012 us=373788   max_routes = 100
Thu Sep  6 22:44:11 2012 us=373795   allow_pull_fqdn = DISABLED
Thu Sep  6 22:44:11 2012 us=373803   route 10.10.11.0/255.255.255.0/nil/nil
Thu Sep  6 22:44:11 2012 us=373810   management_addr = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373818   management_port = 0
Thu Sep  6 22:44:11 2012 us=373825   management_user_pass = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373832   management_log_history_cache = 250
Thu Sep  6 22:44:11 2012 us=373840   management_echo_buffer_size = 100
Thu Sep  6 22:44:11 2012 us=373847   management_write_peer_info_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373855   management_client_user = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373862   management_client_group = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373869   management_flags = 0
Thu Sep  6 22:44:11 2012 us=373880   plugin[0] /usr/lib/openvpn/openvpn-auth-pam.so '[/usr/lib/openvpn/openvpn-auth-pam.so] [/etc/pam.d/login]'
Thu Sep  6 22:44:11 2012 us=373888   shared_secret_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373896   key_direction = 0
Thu Sep  6 22:44:11 2012 us=373903   ciphername_defined = ENABLED
Thu Sep  6 22:44:11 2012 us=373910   ciphername = 'AES-128-CBC'
Thu Sep  6 22:44:11 2012 us=373918   authname_defined = ENABLED
Thu Sep  6 22:44:11 2012 us=373925   authname = 'SHA1'
Thu Sep  6 22:44:11 2012 us=373932   prng_hash = 'SHA1'
Thu Sep  6 22:44:11 2012 us=373940   prng_nonce_secret_len = 16
Thu Sep  6 22:44:11 2012 us=373947   keysize = 0
Thu Sep  6 22:44:11 2012 us=373954   engine = DISABLED
Thu Sep  6 22:44:11 2012 us=373961   replay = ENABLED
Thu Sep  6 22:44:11 2012 us=373968   mute_replay_warnings = DISABLED
Thu Sep  6 22:44:11 2012 us=373976   replay_window = 64
Thu Sep  6 22:44:11 2012 us=373983   replay_time = 15
Thu Sep  6 22:44:11 2012 us=373990   packet_id_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=373997   use_iv = ENABLED
Thu Sep  6 22:44:11 2012 us=374004   test_crypto = DISABLED
Thu Sep  6 22:44:11 2012 us=374011   tls_server = ENABLED
Thu Sep  6 22:44:11 2012 us=374019   tls_client = DISABLED
Thu Sep  6 22:44:11 2012 us=374026   key_method = 2
Thu Sep  6 22:44:11 2012 us=374033   ca_file = '/etc/openvpn/ca.crt'
Thu Sep  6 22:44:11 2012 us=374045   ca_path = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374052   dh_file = '/etc/openvpn/dh1024.pem'
Thu Sep  6 22:44:11 2012 us=374060   cert_file = '/etc/openvpn/server.crt'
Thu Sep  6 22:44:11 2012 us=374067   priv_key_file = '/etc/openvpn/server.key'
Thu Sep  6 22:44:11 2012 us=374074   pkcs12_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374081   cipher_list = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374089   tls_verify = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374096   tls_remote = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374103   crl_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374110   ns_cert_type = 0
Thu Sep  6 22:44:11 2012 us=374117   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374124   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374132   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374139   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374146   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374153   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374160   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374167   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374174   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374181   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374189   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374196   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374203   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374210   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374217   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374224   remote_cert_ku[i] = 0
Thu Sep  6 22:44:11 2012 us=374232   remote_cert_eku = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374239   tls_timeout = 2
Thu Sep  6 22:44:11 2012 us=374246   renegotiate_bytes = 0
Thu Sep  6 22:44:11 2012 us=374257   renegotiate_packets = 0
Thu Sep  6 22:44:11 2012 us=374266   renegotiate_seconds = 3600
Thu Sep  6 22:44:11 2012 us=374273   handshake_window = 60
Thu Sep  6 22:44:11 2012 us=374280   transition_window = 3600
Thu Sep  6 22:44:11 2012 us=374287   single_session = DISABLED
Thu Sep  6 22:44:11 2012 us=374294   push_peer_info = DISABLED
Thu Sep  6 22:44:11 2012 us=374302   tls_exit = DISABLED
Thu Sep  6 22:44:11 2012 us=374309   tls_auth_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374316   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374323   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374331   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374338   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374345   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374352   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374359   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374367   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374374   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374381   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374388   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374395   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374403   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374410   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374417   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374424   pkcs11_protected_authentication = DISABLED
Thu Sep  6 22:44:11 2012 us=374432   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374440   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374447   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374455   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374462   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374469   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374477   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374484   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374496   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374503   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374510   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374518   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374525   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374532   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374539   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374547   pkcs11_private_mode = 00000000
Thu Sep  6 22:44:11 2012 us=374554   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374561   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374568   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374576   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374583   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374590   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374597   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374604   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374612   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374619   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374626   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374633   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374640   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374647   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374655   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374662   pkcs11_cert_private = DISABLED
Thu Sep  6 22:44:11 2012 us=374669   pkcs11_pin_cache_period = -1
Thu Sep  6 22:44:11 2012 us=374676   pkcs11_id = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374684   pkcs11_id_management = DISABLED
Thu Sep  6 22:44:11 2012 us=374692   server_network = 10.10.11.0
Thu Sep  6 22:44:11 2012 us=374701   server_netmask = 255.255.255.0
Thu Sep  6 22:44:11 2012 us=374709   server_bridge_ip = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374717   server_bridge_netmask = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374725   server_bridge_pool_start = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374733   server_bridge_pool_end = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374741   push_entry = 'redirect-gateway def1'
Thu Sep  6 22:44:11 2012 us=374748   push_entry = 'dhcp-option DNS 111.221.40.1'
Thu Sep  6 22:44:11 2012 us=374755   push_entry = 'dhcp-option DNS 111.221.40.2'
Thu Sep  6 22:44:11 2012 us=374762   push_entry = 'route 10.10.11.1'
Thu Sep  6 22:44:11 2012 us=374770   push_entry = 'topology net30'
Thu Sep  6 22:44:11 2012 us=374777   push_entry = 'ping 10'
Thu Sep  6 22:44:11 2012 us=374784   push_entry = 'ping-restart 600'
Thu Sep  6 22:44:11 2012 us=374791   ifconfig_pool_defined = ENABLED
Thu Sep  6 22:44:11 2012 us=374799   ifconfig_pool_start = 10.10.11.4
Thu Sep  6 22:44:11 2012 us=374808   ifconfig_pool_end = 10.10.11.251
Thu Sep  6 22:44:11 2012 us=374816   ifconfig_pool_netmask = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374823   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374830   ifconfig_pool_persist_refresh_freq = 600
Thu Sep  6 22:44:11 2012 us=374837   n_bcast_buf = 256
Thu Sep  6 22:44:11 2012 us=374844   tcp_queue_limit = 1024
Thu Sep  6 22:44:11 2012 us=374852   real_hash_size = 256
Thu Sep  6 22:44:11 2012 us=374859   virtual_hash_size = 256
Thu Sep  6 22:44:11 2012 us=374866   client_connect_script = '/etc/mrbindata/clientconnect.sh'
Thu Sep  6 22:44:11 2012 us=374873   learn_address_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374881   client_disconnect_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374888   client_config_dir = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374895   ccd_exclusive = DISABLED
Thu Sep  6 22:44:11 2012 us=374902   tmp_dir = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374910   push_ifconfig_defined = DISABLED
Thu Sep  6 22:44:11 2012 us=374918   push_ifconfig_local = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374926   push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep  6 22:44:11 2012 us=374933   enable_c2c = DISABLED
Thu Sep  6 22:44:11 2012 us=374945   duplicate_cn = DISABLED
Thu Sep  6 22:44:11 2012 us=374952   cf_max = 0
Thu Sep  6 22:44:11 2012 us=374959   cf_per = 0
Thu Sep  6 22:44:11 2012 us=374966   max_clients = 20
Thu Sep  6 22:44:11 2012 us=374974   max_routes_per_client = 256
Thu Sep  6 22:44:11 2012 us=374981   auth_user_pass_verify_script = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=374989   auth_user_pass_verify_script_via_file = DISABLED
Thu Sep  6 22:44:11 2012 us=374996   ssl_flags = 3
Thu Sep  6 22:44:11 2012 us=375003   port_share_host = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=375010   port_share_port = 0
Thu Sep  6 22:44:11 2012 us=375017   client = DISABLED
Thu Sep  6 22:44:11 2012 us=375025   pull = DISABLED
Thu Sep  6 22:44:11 2012 us=375032   auth_user_pass_file = '[UNDEF]'
Thu Sep  6 22:44:11 2012 us=375041 OpenVPN 2.1.3 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Feb 20 2012
Thu Sep  6 22:44:11 2012 us=375166 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Sep  6 22:44:11 2012 us=375178 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
AUTH-PAM: BACKGROUND: INIT service='/etc/pam.d/login'
Thu Sep  6 22:44:11 2012 us=375413 PLUGIN_INIT: POST /usr/lib/openvpn/openvpn-auth-pam.so '[/usr/lib/openvpn/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY 
Thu Sep  6 22:44:11 2012 us=380632 Diffie-Hellman initialized with 1024 bit key
Thu Sep  6 22:44:11 2012 us=381164 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Thu Sep  6 22:44:11 2012 us=381223 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Thu Sep  6 22:44:11 2012 us=464136 TLS-Auth MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Sep  6 22:44:11 2012 us=464227 Socket Buffers: R=[87380->131072] S=[87380->131072]
Thu Sep  6 22:44:11 2012 us=464369 ROUTE default_gateway=111.221.42.9
Thu Sep  6 22:44:11 2012 us=465190 TUN/TAP device tun0 opened
Thu Sep  6 22:44:11 2012 us=465220 TUN/TAP TX queue length set to 100
Thu Sep  6 22:44:11 2012 us=465246 /sbin/ifconfig tun0 10.10.11.1 pointopoint 10.10.11.2 mtu 1500
Thu Sep  6 22:44:11 2012 us=467340 /sbin/route add -net 10.10.11.0 netmask 255.255.255.0 gw 10.10.11.2
Thu Sep  6 22:44:11 2012 us=473344 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Sep  6 22:44:11 2012 us=474399 Listening for incoming TCP connection on [AF_INET]1.2.3.4:80
Thu Sep  6 22:44:11 2012 us=474457 TCPv4_SERVER link local (bound): [AF_INET]1.2.3.4:80
Thu Sep  6 22:44:11 2012 us=474470 TCPv4_SERVER link remote: [undef]
Thu Sep  6 22:44:11 2012 us=474483 MULTI: multi_init called, r=256 v=256
Thu Sep  6 22:44:11 2012 us=474547 IFCONFIG POOL: base=10.10.11.4 size=62
Thu Sep  6 22:44:11 2012 us=474568 MULTI: TCP INIT maxclients=20 maxevents=24
Thu Sep  6 22:44:11 2012 us=474597 Initialization Sequence Completed
Thu Sep  6 22:45:30 2012 us=476447 MULTI: multi_create_instance called
Thu Sep  6 22:45:30 2012 us=476531 Re-using SSL/TLS context
Thu Sep  6 22:45:30 2012 us=476569 LZO compression initialized
Thu Sep  6 22:45:30 2012 us=476726 Control Channel MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Sep  6 22:45:30 2012 us=476770 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Sep  6 22:45:30 2012 us=476817 Local Options String: 'V4,dev-type tun,link-mtu 1592,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Sep  6 22:45:30 2012 us=476826 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1592,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Sep  6 22:45:30 2012 us=476855 Local Options hash (VER=V4): 'b93029ce'
Thu Sep  6 22:45:30 2012 us=476872 Expected Remote Options hash (VER=V4): 'e4cf4bf0'
Thu Sep  6 22:45:30 2012 us=476898 TCP connection established with [AF_INET]5.6.7.8:33852
Thu Sep  6 22:45:30 2012 us=476921 TCPv4_SERVER link local: [undef]
Thu Sep  6 22:45:30 2012 us=476930 TCPv4_SERVER link remote: [AF_INET]5.6.7.8:33852
Thu Sep  6 22:45:30 2012 us=477766 5.6.7.8:33852 Connection reset, restarting [0]
Thu Sep  6 22:45:30 2012 us=477790 5.6.7.8:33852 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Sep  6 22:45:30 2012 us=477846 TCP/UDP: Closing socket
Thu Sep  6 22:47:24 2012 us=769588 MULTI: multi_create_instance called
Thu Sep  6 22:47:24 2012 us=769671 Re-using SSL/TLS context
Thu Sep  6 22:47:24 2012 us=769694 LZO compression initialized
Thu Sep  6 22:47:24 2012 us=769771 Control Channel MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Sep  6 22:47:24 2012 us=769791 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Sep  6 22:47:24 2012 us=769819 Local Options String: 'V4,dev-type tun,link-mtu 1592,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Sep  6 22:47:24 2012 us=769826 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1592,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Sep  6 22:47:24 2012 us=769842 Local Options hash (VER=V4): 'b93029ce'
Thu Sep  6 22:47:24 2012 us=769854 Expected Remote Options hash (VER=V4): 'e4cf4bf0'
Thu Sep  6 22:47:24 2012 us=769874 TCP connection established with [AF_INET]5.6.7.8:50503
Thu Sep  6 22:47:24 2012 us=769884 TCPv4_SERVER link local: [undef]
Thu Sep  6 22:47:24 2012 us=769893 TCPv4_SERVER link remote: [AF_INET]5.6.7.8:50503
Thu Sep  6 22:47:24 2012 us=770531 5.6.7.8:50503 Connection reset, restarting [0]
Thu Sep  6 22:47:24 2012 us=770550 5.6.7.8:50503 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Sep  6 22:47:24 2012 us=770590 TCP/UDP: Closing socket

If you see the log above, a client has successfully make TCP connection to server through port 80, but suddenly the connection was dropped.

Thu Sep  6 22:47:24 2012 us=770531 5.6.7.8:50503 Connection reset, restarting [0]

maikcat

the problem is to find who or what resets the connection..

if you move the client to another location can he connect?

is your client runs any antivirus/antimalware software? can you disable them for testing?

Michael.

jtanjung

Michael, I have tried both ways you've suggest, unfortunately that didn't solve the problem.

I've found some of http services (apache) running on port 80, and I also have tried to terminate the services but the problem still there.

Thanks!