Please Help me i want to connect my android with the OpenVPN

[deleted]

Dear all ,
i did follow this step by step tutorial
http://nikinuryadin.wordpress.com/2010/04/16/step-by-step-setting-up-openvpn-in-debian-with-routing-tun-connection/

to install an connect to VPN
the connection form windows 7 pc is work fine to the server but there is no traffic ! while i did set the
redirect-gateway in the client conf

My server conf is

port 443
proto udp
dev tun

ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem

ifconfig-pool-persist ipp.txt
server 10.1.0.0 255.255.255.0
client-config-dir ccd

route 192.168.1.0 255.255.255.0
route 192.168.2.0 255.255.255.0

client-to-client

push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"

keepalive 10 120
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
push "redirect-gateway local def1"

and my client sonf is

client
dev tun
proto udp
remote 174.142.XXX.XXX 443 # (replace with your server IP)
resolv-retry infinite
nobind
pkcs12 client1.p12 # (replace with the client name)
ns-cert-type server
comp-lzo
verb 3
redirect-gateway

and the log in the windows clients is ""

Tue Dec 25 15:53:03 2012 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Tue Dec 25 15:53:03 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Dec 25 15:53:08 2012 LZO compression initialized
Tue Dec 25 15:53:08 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Dec 25 15:53:08 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 25 15:53:08 2012 Local Options hash (VER=V4): '41690919'
Tue Dec 25 15:53:08 2012 Expected Remote Options hash (VER=V4): '530fdded'
Tue Dec 25 15:53:08 2012 UDPv4 link local: [undef]
Tue Dec 25 15:53:08 2012 UDPv4 link remote: 174.142.214.49:443
Tue Dec 25 15:53:08 2012 TLS: Initial packet from 174.142.214.49:443, sid=bd28fc91 49f973d7
Tue Dec 25 15:53:09 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=me@myhost.mydomain
Tue Dec 25 15:53:09 2012 VERIFY OK: nsCertType=SERVER
Tue Dec 25 15:53:09 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=me@myhost.mydomain
Tue Dec 25 15:53:10 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 25 15:53:10 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 25 15:53:10 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 25 15:53:10 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 25 15:53:10 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Dec 25 15:53:10 2012 [server] Peer Connection Initiated with 174.142.214.49:443
Tue Dec 25 15:53:11 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Dec 25 15:53:11 2012 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.2.0 255.255.255.0,redirect-gateway local def1,route 10.1.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.1.0.6 10.1.0.5'
Tue Dec 25 15:53:11 2012 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:5: topology (2.0.9)
Tue Dec 25 15:53:11 2012 OPTIONS IMPORT: timers and/or timeouts modified
Tue Dec 25 15:53:11 2012 OPTIONS IMPORT: --ifconfig/up options modified
Tue Dec 25 15:53:11 2012 OPTIONS IMPORT: route options modified
Tue Dec 25 15:53:11 2012 TAP-WIN32 device [Local Area Connection 4] opened: \\.\Global\{D4640EB4-0B6D-41C6-9DBF-5BBAED5A6D64}.tap
Tue Dec 25 15:53:11 2012 TAP-Win32 Driver Version 8.4
Tue Dec 25 15:53:11 2012 TAP-Win32 MTU=1500
Tue Dec 25 15:53:11 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.1.0.6/255.255.255.252 on interface {D4640EB4-0B6D-41C6-9DBF-5BBAED5A6D64} [DHCP-serv: 10.1.0.5, lease-time: 31536000]
Tue Dec 25 15:53:11 2012 Successful ARP Flush on interface [18] {D4640EB4-0B6D-41C6-9DBF-5BBAED5A6D64}
Tue Dec 25 15:53:11 2012 TEST ROUTES: 4/4 succeeded len=3 ret=1 a=0 u/d=up
Tue Dec 25 15:53:11 2012 route ADD 0.0.0.0 MASK 128.0.0.0 10.1.0.5
Tue Dec 25 15:53:11 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=18]
Tue Dec 25 15:53:11 2012 Route addition via IPAPI failed
Tue Dec 25 15:53:11 2012 route ADD 128.0.0.0 MASK 128.0.0.0 10.1.0.5
Tue Dec 25 15:53:11 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=18]
Tue Dec 25 15:53:11 2012 Route addition via IPAPI failed
Tue Dec 25 15:53:11 2012 route ADD 192.168.1.0 MASK 255.255.255.0 10.1.0.5
Tue Dec 25 15:53:11 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=18]
Tue Dec 25 15:53:11 2012 Route addition via IPAPI failed
Tue Dec 25 15:53:11 2012 route ADD 192.168.2.0 MASK 255.255.255.0 10.1.0.5
Tue Dec 25 15:53:11 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=18]
Tue Dec 25 15:53:11 2012 Route addition via IPAPI failed
Tue Dec 25 15:53:11 2012 route ADD 10.1.0.0 MASK 255.255.255.0 10.1.0.5
Tue Dec 25 15:53:11 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=18]
Tue Dec 25 15:53:11 2012 Route addition via IPAPI failed
Tue Dec 25 15:53:11 2012 Initialization Sequence Completed

even on my mobile i did made the connection but can not open any website ..... loading then time out
I want to open the internet and check my emails with VPN ... but still can not do it , any advice

maikcat

hi there,

if you use win7 for your clients you MUST use
openvpn version 2.1.1 and above...2.0.9 has several issues.

did you enabled ip forwarding on your openvpn server?

can you post the output of:

iptables -L -v
iptables -L -t nat -v

on your server.

what exactly are you trying to accomplish?
do you want to redirect internet traffic through your vpn?
i already see a lan-to-lan scenario in your config...

Michael.

[deleted]

Thank you in advanced for your reply ....
I like to bring to your attention that my target is to view internet on oy Mobile via OpenVPN.. my mobile is Samsung Galaxy S3

And if i can run it on my PC it will be more than wonderful

Now regarding your questions
Here we go !

iptables -L -v

Chain INPUT (policy ACCEPT 238M packets, 110G bytes)
pkts bytes target prot opt in out source destination
238M 110G acctboth all -- any any anywhere anywhere
5 226 ACCEPT tcp -- any any anywhere anywhere tcp dpt:pptp
5 300 ACCEPT tcp -- any any anywhere anywhere tcp dpt:isakmp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ipsec-nat-t
2128 841K ACCEPT udp -- any any anywhere anywhere udp dpt:isakmp
0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:ipsec-nat-t
0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:isakmp
0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:ipsec-nat-t
18 1487 ACCEPT udp -- any any anywhere anywhere udp dpt:l2tp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:isakmp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ipsec-nat-t
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:l2tp
17 1292 ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere
0 0 ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere

Chain FORWARD (policy ACCEPT 5559K packets, 361M bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
0 0 ACCEPT all -- tun0 eth0 10.8.0.0/24 192.168.0.0/24 ctstate NEW
0 0 ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
0 0 ACCEPT all -- eth0 eth1 192.168.0.0/24 anywhere ctstate NEW
0 0 ACCEPT all -- tun0 eth1 10.8.0.0/24 anywhere ctstate NEW
0 0 ACCEPT all -- tun0 eth0 10.8.0.0/24 192.168.0.0/24 ctstate NEW
1139 71209 ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere
0 0 ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere

Chain OUTPUT (policy ACCEPT 274M packets, 266G bytes)
pkts bytes target prot opt in out source destination
274M 266G acctboth all -- any any anywhere anywhere

Chain acctboth (2 references)
pkts bytes target prot opt in out source destination
258 51638 tcp -- !lo any server.xxxxx.com anywhere tcp dpt:http
208 176K tcp -- !lo any anywhere server.xxxxx.com tcp spt:http
29 10529 tcp -- !lo any server.xxxxx.com anywhere tcp dpt:smtp
18 3360 tcp -- !lo any anywhere server.xxxxx.com tcp spt:smtp
0 0 tcp -- !lo any server.xxxxx.com anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere server.xxxxx.com tcp spt:pop3
495 46254 icmp -- !lo any server.xxxxx.com anywhere
5 420 icmp -- !lo any anywhere server.xxxxx.com
25406 25M tcp -- !lo any server.xxxxx.com anywhere
20185 3511K tcp -- !lo any anywhere server.xxxxx.com
396 50589 udp -- !lo any server.xxxxx.com anywhere
410 35210 udp -- !lo any anywhere server.xxxxx.com
26297 25M all -- !lo any server.xxxxx.com anywhere
20600 3547K all -- !lo any anywhere server.xxxxx.com
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:http
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:http
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:smtp
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx tcp spt:pop3
0 0 icmp -- !lo any 174.142.xxx.xxx anywhere
0 0 icmp -- !lo any anywhere 174.142.xxx.xxx
0 0 tcp -- !lo any 174.142.xxx.xxx anywhere
0 0 tcp -- !lo any anywhere 174.142.xxx.xxx
0 0 udp -- !lo any 174.142.xxx.xxx anywhere
0 0 udp -- !lo any anywhere 174.142.xxx.xxx
0 0 all -- !lo any 174.142.xxx.xxx anywhere
0 0 all -- !lo any anywhere 174.142.xxx.xxx
44300 28M all -- !lo any anywhere anywhere

root@server [~]# iptables -L -t nat -v
Chain PREROUTING (policy ACCEPT 382K packets, 23M bytes)
pkts bytes target prot opt in out source destination

Chain POSTROUTING (policy ACCEPT 258K packets, 17M bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- any eth1 192.168.0.0/24 anywhere
0 0 MASQUERADE all -- any eth1 10.8.0.0/24 anywhere
0 0 MASQUERADE all -- any eth1 anywhere anywhere
0 0 MASQUERADE all -- any eth1 anywhere anywhere
0 0 MASQUERADE all -- any eth1 anywhere anywhere
0 0 MASQUERADE all -- any eth1 anywhere anywhere

Chain OUTPUT (policy ACCEPT 90439 packets, 5839K bytes)
pkts bytes target prot opt in out source destination
root@server [~]#

did you enabled ip forwarding on your openvpn server?
YES

do you want to redirect internet traffic through your vpn?
If that mean to browse Internet via the VPN then YES

Thank you

[deleted]

PS: i did update the client to this one :
http://swupdate.openvpn.net/downloads/openvpn-client.msi

when i connected to the VPN via Windows 7 'As Administrator '

When i open FireFox i got server not found message !

Now , the Log file is :
C:\Program Files\OpenVPN Technologies\OpenVPN Client\etc\log

Wed Dec 26 12:41:49 2012 Note: option http-proxy-fallback ignored because no TCP-based connection profiles are defined
Wed Dec 26 12:41:49 2012 OpenVPNAS 2.1.1oOAS Win32-MSVC++ [SSL] [LZO2] built on Jul 29 2010
Wed Dec 26 12:41:49 2012 MANAGEMENT: Connected to management server at 127.0.0.1:50739
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'log on'
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'state on'
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'echo on'
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'bytecount 5'
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'hold off'
Wed Dec 26 12:41:49 2012 MANAGEMENT: CMD 'hold release'
Wed Dec 26 12:41:49 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Dec 26 12:41:49 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Dec 26 12:41:49 2012 LZO compression initialized
Wed Dec 26 12:41:49 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 26 12:41:49 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 26 12:41:49 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 26 12:41:49 2012 Local Options hash (VER=V4): '41690919'
Wed Dec 26 12:41:49 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed Dec 26 12:41:49 2012 UDPv4 link local: [undef]
Wed Dec 26 12:41:49 2012 UDPv4 link remote: 174.142.XX.XX:443
Wed Dec 26 12:41:49 2012 MANAGEMENT: >STATE:1356554509,WAIT,,,
Wed Dec 26 12:41:50 2012 MANAGEMENT: >STATE:1356554510,AUTH,,,
Wed Dec 26 12:41:50 2012 TLS: Initial packet from 174.142.XX.XX:443, sid=27dffda4 b0aca6e9
Wed Dec 26 12:41:52 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=me@myhost.mydomain
Wed Dec 26 12:41:52 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=me@myhost.mydomain
Wed Dec 26 12:42:15 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 26 12:42:15 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 26 12:42:15 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 26 12:42:15 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 26 12:42:15 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Dec 26 12:42:15 2012 [server] Peer Connection Initiated with 174.142.XX.XX:443
Wed Dec 26 12:42:16 2012 MANAGEMENT: >STATE:1356554536,GET_CONFIG,,,
Wed Dec 26 12:42:17 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Dec 26 12:42:18 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.6 10.8.0.5'
Wed Dec 26 12:42:18 2012 OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 26 12:42:18 2012 OPTIONS IMPORT: route options modified
Wed Dec 26 12:42:18 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Dec 26 12:42:18 2012 ROUTE default_gateway=192.168.1.1
Wed Dec 26 12:42:18 2012 MANAGEMENT: >STATE:1356554538,ASSIGN_IP,,10.8.0.6,
Wed Dec 26 12:42:18 2012 TAP-WIN32 device [Local Area Connection 5] opened: \\.\Global\{CAB4D019-9110-44BA-8B35-2A7108F41E72}.tap
Wed Dec 26 12:42:18 2012 TAP-Win32 Driver Version 9.7
Wed Dec 26 12:42:18 2012 TAP-Win32 MTU=1500
Wed Dec 26 12:42:18 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {CAB4D019-9110-44BA-8B35-2A7108F41E72} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Dec 26 12:42:18 2012 Successful ARP Flush on interface [50] {CAB4D019-9110-44BA-8B35-2A7108F41E72}
Wed Dec 26 12:42:23 2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Dec 26 12:42:23 2012 C:\Windows\system32\route.exe ADD 174.142.XX.XX MASK 255.255.255.255 192.168.1.1
Wed Dec 26 12:42:23 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Dec 26 12:42:23 2012 Route addition via IPAPI succeeded [adaptive]
Wed Dec 26 12:42:23 2012 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 26 12:42:23 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Dec 26 12:42:23 2012 Route addition via IPAPI succeeded [adaptive]
Wed Dec 26 12:42:23 2012 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 26 12:42:23 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Dec 26 12:42:23 2012 Route addition via IPAPI succeeded [adaptive]
Wed Dec 26 12:42:23 2012 MANAGEMENT: >STATE:1356554543,ADD_ROUTES,,,
Wed Dec 26 12:42:23 2012 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Wed Dec 26 12:42:23 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Dec 26 12:42:23 2012 Route addition via IPAPI succeeded [adaptive]
Wed Dec 26 12:42:23 2012 Initialization Sequence Completed
Wed Dec 26 12:42:23 2012 MANAGEMENT: >STATE:1356554543,CONNECTED,SUCCESS,10.8.0.6,174.142.XX.XX
Wed Dec 26 12:43:26 2012 MANAGEMENT: CMD 'exit'
Wed Dec 26 12:43:26 2012 MANAGEMENT: Client disconnected
Wed Dec 26 12:43:26 2012 MANAGEMENT: Triggering management exit
Wed Dec 26 12:43:26 2012 TCP/UDP: Closing socket
Wed Dec 26 12:43:26 2012 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Wed Dec 26 12:43:26 2012 Route deletion via IPAPI succeeded [adaptive]
Wed Dec 26 12:43:26 2012 C:\Windows\system32\route.exe DELETE 174.142.XX.XX MASK 255.255.255.255 192.168.1.1
Wed Dec 26 12:43:26 2012 Route deletion via IPAPI succeeded [adaptive]
Wed Dec 26 12:43:26 2012 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 26 12:43:26 2012 Route deletion via IPAPI succeeded [adaptive]
Wed Dec 26 12:43:26 2012 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 26 12:43:26 2012 Route deletion via IPAPI succeeded [adaptive]
Wed Dec 26 12:43:26 2012 Closing TUN/TAP interface
Wed Dec 26 12:43:26 2012 SIGTERM[soft,management-exit] received, process exiting
Wed Dec 26 12:43:26 2012 MANAGEMENT: >STATE:1356554606,EXITING,management-exit,,

[deleted]

i think i solve the problem by add this line :



    iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

But i am totaly lost i add a lot of "iptables" lines base on the net tutorial
Please kindly may you tell me what the list of iptables modification that i have to make it in fresh install !

[deleted]

The redirection is not global in my PC , eg : when log in via SSH to my server it still show my original ip address not the openVPN Server Ip address

[deleted]

I note some thing strange after while.
While i am using openvpn connect app on my android phone . The small key in the notefecation bar disappeared after 4 or 8 min.

I dont know why. If there is a disconnection i think the app has to reconnect not close the vpn connection .

I dont have any task manager app

Android 4.1.2 / TuchWiz rooted
Samsung sgs3
Pleass advice

maikcat

hi there,

to enable NAT on your openvpn server you will only need this:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

also delete from your client config the redirect-gateway statement,

btw

Wed Dec 26 12:41:49 2012 OpenVPNAS 2.1.1oOAS Win32-MSVC++ [SSL] [LZO2] built on Jul 29 2010

this is the client for AS version , simply download openvpn open source edition for
your win 7 pc and make sure you run GUI with admin rights,

The redirection is not global in my PC , eg : when log in via SSH to my server it still show my original ip address not the openVPN Server Ip address

i am not sure i got this...
can you explain it a little bit more?
you are trying to ssh to where?to vpn server tun interface?to vpn server public ip?

regards,

Michael.

[deleted]

still can not find the link to the windows client download link ? is it
http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe ?

or it is just the openvpn server !

maikcat

the SAME binary can be used for server or client
it is configured via option --client...

simply install openvpn open source 😉

Michael.

[deleted]

ok , Thank You very much

All things is going just fine . the only problem is "On windows 7 it work as charm ", when i run open VPN on my android , "which is my main target !" it kips disconnect ...

i think it is "OpenVPN connect " problem , it close it self ! i dont know why and how !
do i have to install other program ?

++++++++++++++++++++++
Please advice !

maikcat

unfortunately my android based knowledge/experience is very limited..

maybe another forum member can help?

Michael.