Hi
I cannot get openVpn (routed) to run properly on an ARM DreamPlug running Fedora 12
I have the DP on a small home network. I want to be able to access the Samba shares on it from the internets (as well as the LAN). My internet comes in over 3g (tre.se) to a router on the LAN
I have a NO-IP redirect to the DP which seems to work as I can ping the name from the DP:-
[root@fedora-arm ~]# ping serverxxxxxxx.no-ip.org
PING serverxxxxxxx.no-ip.org (95.209.xxx.xxx) 56(84) bytes of data.
64 bytes from 95.209.xxx.xxx.bredband.tre.se (95.209.119.xxx): icmp_seq=1 ttl=64 time=0.865 ms
...
I have setup forwarding of port 1194 to the DP in the router which I can test once the VPN is stable.
I get the folowing error every 2 minutes and the openVPN connection resets.
tail -f /var/log/messages
Nov 23 16:54:51 fedora-arm openvpn[15854]: event_wait : Interrupted system call (code=4)
There doesnt appear to be a more detailed error which is surprising.
Here is a section from syslog:-
Nov 23 16:52:54 fedora-arm openvpn[15854]: Initialization Sequence Completed
Nov 23 16:52:55 fedora-arm ntpd[6440]: Listening on interface #61 tun0, 10.8.0.1#123 Enabled
2 minutes pass...
Nov 23 16:54:51 fedora-arm openvpn[15854]: [color=#FF0000]event_wait : Interrupted system call (code=4)[/color]
Nov 23 16:54:51 fedora-arm openvpn[15854]: TCP/UDP: Closing socket
Nov 23 16:54:51 fedora-arm openvpn[15854]: /sbin/ip route del 10.8.0.0/24
Nov 23 16:54:51 fedora-arm openvpn[15854]: Closing TUN/TAP interface
Nov 23 16:54:51 fedora-arm openvpn[15854]: /sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2
Nov 23 16:54:52 fedora-arm openvpn[15854]: SIGTERM[hard,] received, process exiting
Nov 23 16:54:53 fedora-arm ntpd[6440]: Deleting interface #61 tun0, 10.8.0.1#123, interface stats: received=0, sent=0, dropped=0, active_time=118 secs
Nov 23 16:54:54 fedora-arm openvpn[16006]: OpenVPN 2.1_rc20 armv5tel-redhat-linux-gnueabi [SSL] [LZO2] [EPOLL] [PKCS11] built on Nov 6 2009
Nov 23 16:54:54 fedora-arm openvpn[16006]: NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Nov 23 16:54:54 fedora-arm openvpn[16006]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 23 16:54:54 fedora-arm openvpn[16006]: Diffie-Hellman initialized with 1024 bit key
Nov 23 16:54:54 fedora-arm openvpn[16006]: TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Nov 23 16:54:54 fedora-arm openvpn[16006]: ROUTE default_gateway=192.168.0.1
Nov 23 16:54:54 fedora-arm openvpn[16006]: TUN/TAP device tun0 opened
Nov 23 16:54:54 fedora-arm openvpn[16006]: TUN/TAP TX queue length set to 100
Nov 23 16:54:54 fedora-arm openvpn[16006]: /sbin/ip link set dev tun0 up mtu 1500
Nov 23 16:54:54 fedora-arm openvpn[16006]: /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Nov 23 16:54:54 fedora-arm openvpn[16006]: /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Nov 23 16:54:54 fedora-arm openvpn[16006]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Nov 23 16:54:54 fedora-arm openvpn[16014]: Socket Buffers: R=[112640->131072] S=[112640->131072]
Nov 23 16:54:54 fedora-arm openvpn[16014]: UDPv4 link local (bound): [undef]:1194
Nov 23 16:54:54 fedora-arm openvpn[16014]: UDPv4 link remote: [undef]
Nov 23 16:54:54 fedora-arm openvpn[16014]: MULTI: multi_init called, r=256 v=256
Nov 23 16:54:54 fedora-arm openvpn[16014]: IFCONFIG POOL: base=10.8.0.4 size=62
Nov 23 16:54:54 fedora-arm openvpn[16014]: IFCONFIG POOL LIST
Nov 23 16:54:54 fedora-arm openvpn[16014]: Initialization Sequence Completed
Nov 23 16:54:55 fedora-arm ntpd[6440]: Listening on interface #62 tun0, 10.8.0.1#123 Enabled
I think the NTPD lines are a follow on error (and therefore not important) of openVPN resetting the connection.
I wouldnt be surprised if the problem is related to the firewall as I doubt this is properly configured. Also doing iptables shows a steadily growing list of stuff which I dont understand. I think the list is appended every time the connection restarts so after a few hours it is getting pretty long
iptables -L -v -t nat
....
0 0 MASQUERADE all -- any eth0 10.8.0.0/24 anywhere
0 0 MASQUERADE all -- any eth0 10.8.0.0/24 anywhere
/etc/openvpn/server.conf :-
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
Can anyone help me get this working?
Peter