Routing troubles with Windows server and client

ddeeddee

Hello everyone! I will try and explain my problem:

Network situation:

I have a server running windows XP Home edition. (I know, pathetic, right?)
It is a VERY simple setup: (I have access to both machines VIA real VNC)

server:
static IP address is 192.168.0.102
Gateway is 192.168.0.1 (simple d-link router)
It takes 10.8.0.1 as its OpenVPN address
All firewalls completely turned off

client:
Client is on other side of the world, running windows 7 ultimate
assigned ipaddress is 222.40.42.13
assigned gateway is 222.40.42.1
it usually takes OpenVPN address of 10.8.0.6

Problem, I can connect just fine to the VPN server, and ping the server,
server can ping back, but the client can't access anything else, like the internet
or resolve dns names, etc... I'm almost 100% sure it's due to a routing issue. And I THINK I need to tell it to route to the 222.40.42.1 address. Although I don't know where I would add that, in the client or server config. I have posted every bit of information to make this as painless and easy as possible. I would be so grateful for your suggestions!

Cheers, and thanks!!

John

##########################################################
 Server config (windows xp home edition)########
 I know what you're thinking: Windows XP home edition????
 Yeah, well You gotta work with what you got, right?
##########################################################

local 192.168.0.102
port [PORT CENSORED]
proto udp
dev tun
dev-node MyTap

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\[CENSORED]-MCS-CA.crt"
key "C:\\Program Files\\OpenVPN\\config\\[CENSORED]-MCS-CA.key"

dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"

push "redirect-gateway def1"
#  def1 bypass-dhcp

push "dhcp-option DNS 192.168.0.1"

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 5

####################################################
client config (windows 7 ultimate operating system)
####################################################

client

dev tun
dev-node MyTap

proto udp

remote [mydomain.com] [PORT-CENSORED]

resolv-retry infinite

nobind

persist-key
persist-tun

route-method exe
route-delay 2

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca-mcs.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\gbw-mcs.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\gbw-mcs.key"

ns-cert-type server

comp-lzo

verb 5

##########################################################
client routing table (windows 7 ultimate operating system)
before connecting to OpenVPN server
##########################################################

Ethernet adapter Local Area Connection:
   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 222.40.42.13
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 222.40.42.1
                                       


C:\Users\xxx>netstat -rvn
===========================================================================
Interface List
 26...00 ff af a4 e1 70 ......TAP-Windows Adapter V9
 12...90 2b 34 30 d5 47 ......Atheros AR8151 PCI-E Gigabit Ethernet Controller (
NDIS 6.20)
 11...50 e5 49 ef a5 d6 ......Intel(R) 82579V Gigabit Network Connection
 15...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
 16...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
  1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      222.40.42.1     222.40.42.13     20
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      222.40.42.0    255.255.255.0         On-link      222.40.42.13    276
     222.40.42.13  255.255.255.255         On-link      222.40.42.13    276
    222.40.42.255  255.255.255.255         On-link      222.40.42.13    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      222.40.42.13    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      222.40.42.13    276
===========================================================================
Persistent Routes:
  None

####################################################
 Client Tap adapter after connection to Open VPN server
####################################################


Ethernet adapter MyTap:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::475:efef:7870:b1a6%26
   IPv4 Address. . . . . . . . . . . : 10.8.0.6
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Default Gateway . . . . . . . . . :

####################################################
 Client routing table after connecting to Open VPN server
####################################################

C:\Users\xxx>netstat -rvn
===========================================================================
Interface List
 26...00 ff af a4 e1 70 ......TAP-Windows Adapter V9
 12...90 2b 34 30 d5 47 ......Atheros AR8151 PCI-E Gigabit Ethernet Controller (
NDIS 6.20)
 11...50 e5 49 ef a5 d6 ......Intel(R) 82579V Gigabit Network Connection
 15...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
 16...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
  1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      222.40.42.1     222.40.42.13     20
          0.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6     31
         10.8.0.1  255.255.255.255         10.8.0.5         10.8.0.6     31
         10.8.0.4  255.255.255.252         On-link          10.8.0.6    286
         10.8.0.6  255.255.255.255         On-link          10.8.0.6    286
         10.8.0.7  255.255.255.255         On-link          10.8.0.6    286
     [69.yy.yy.xxx = my openvpn server public internet address]
     69.yy.yy.xxx  255.255.255.255      222.40.42.1     222.40.42.13     21
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6     31
      192.168.0.0    255.255.255.0         10.8.0.5         10.8.0.6     31
      222.40.42.0    255.255.255.0         On-link      222.40.42.13    276
     222.40.42.13  255.255.255.255         On-link      222.40.42.13    276
    222.40.42.255  255.255.255.255         On-link      222.40.42.13    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link          10.8.0.6    286
        224.0.0.0        240.0.0.0         On-link      222.40.42.13    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link          10.8.0.6    286
  255.255.255.255  255.255.255.255         On-link      222.40.42.13    276
===========================================================================
Persistent Routes:
  None

####################################################
 Open VPN Server, before starting the server
and taking any connections
####################################################


C:\Documents and Settings\xxx>netstat -rvn

Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 f2 7a 8e 87 ...... Microsoft(R) PCI Adapter MN-130 - Packet Schedul
er Miniport
0x3 ...00 ff 88 06 12 35 ...... TAP-Windows Adapter V9 - Packet Scheduler Minipo
rt
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.102       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.0.0    255.255.255.0    192.168.0.102   192.168.0.102       20
    192.168.0.102  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.0.255  255.255.255.255    192.168.0.102   192.168.0.102       20
        224.0.0.0        240.0.0.0    192.168.0.102   192.168.0.102       20
  255.255.255.255  255.255.255.255    192.168.0.102   192.168.0.102       1
  255.255.255.255  255.255.255.255    192.168.0.102               3       1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None

####################################################
Open VPN Server Log - after starting server
and before taking any connections
####################################################

Fri Jan 25 23:37:11 2013 us=442305 OpenVPN 2.3.0 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jan 8 2013
Enter Management Password:
Fri Jan 25 23:37:11 2013 us=502392 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Jan 25 23:37:11 2013 us=502392 Need hold release from management interface, waiting...
Fri Jan 25 23:37:11 2013 us=832867 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Jan 25 23:37:11 2013 us=933011 MANAGEMENT: CMD 'state on'
Fri Jan 25 23:37:11 2013 us=933011 MANAGEMENT: CMD 'log all on'
Fri Jan 25 23:37:11 2013 us=983083 MANAGEMENT: CMD 'hold off'
Fri Jan 25 23:37:11 2013 us=993097 MANAGEMENT: CMD 'hold release'
Fri Jan 25 23:37:12 2013 us=103256 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Fri Jan 25 23:37:12 2013 us=113270 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Jan 25 23:37:12 2013 us=694105 Diffie-Hellman initialized with 1024 bit key
Fri Jan 25 23:37:12 2013 us=804264 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Jan 25 23:37:12 2013 us=804264 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jan 25 23:37:12 2013 us=914422 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Jan 25 23:37:12 2013 us=914422 MANAGEMENT: >STATE:1359175032,ASSIGN_IP,,10.8.0.1,
Fri Jan 25 23:37:12 2013 us=924436 open_tun, tt->ipv6=0
Fri Jan 25 23:37:12 2013 us=934451 TAP-WIN32 device [MyTap] opened: \\.\Global\{88061235-32C6-40CC-B148-502D3696F8BE}.tap
Fri Jan 25 23:37:12 2013 us=944465 TAP-Windows Driver Version 9.9
Fri Jan 25 23:37:12 2013 us=944465 TAP-Windows MTU=1500
Fri Jan 25 23:37:12 2013 us=964494 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {88061235-32C6-40CC-B148-502D3696F8BE} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Fri Jan 25 23:37:12 2013 us=964494 Sleeping for 10 seconds...
Fri Jan 25 23:37:22 2013 us=47555 Successful ARP Flush on interface [3] {88061235-32C6-40CC-B148-502D3696F8BE}
Fri Jan 25 23:37:22 2013 us=57569 MANAGEMENT: >STATE:1359175042,ADD_ROUTES,,,
Fri Jan 25 23:37:22 2013 us=57569 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Fri Jan 25 23:37:22 2013 us=67584 Route addition via IPAPI succeeded [adaptive]
Fri Jan 25 23:37:22 2013 us=77598 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 25 23:37:22 2013 us=77598 UDPv4 link local (bound): [AF_INET]192.168.0.102:219
Fri Jan 25 23:37:22 2013 us=87612 UDPv4 link remote: [undef]
Fri Jan 25 23:37:22 2013 us=87612 MULTI: multi_init called, r=256 v=256
Fri Jan 25 23:37:22 2013 us=97627 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Fri Jan 25 23:37:22 2013 us=97627 ifconfig_pool_read(), in='[censored]-MCS-CA,10.8.0.4', TODO: IPv6
Fri Jan 25 23:37:22 2013 us=107641 succeeded -> ifconfig_pool_set()
Fri Jan 25 23:37:22 2013 us=107641 IFCONFIG POOL LIST
Fri Jan 25 23:37:22 2013 us=117656 [censored]-MCS-CA,10.8.0.4
Fri Jan 25 23:37:22 2013 us=117656 Initialization Sequence Completed
Fri Jan 25 23:37:22 2013 us=117656 MANAGEMENT: >STATE:1359175042,CONNECTED,SUCCESS,10.8.0.1,

####################################################
 Open VPN Server, after starting the server
 and before taking any connections
####################################################

C:\Documents and Settings\aunitadmin>netstat -rvn

Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 f2 7a 8e 87 ...... Microsoft(R) PCI Adapter MN-130 - Packet Schedul
er Miniport
0x3 ...00 ff 88 06 12 35 ...... TAP-Windows Adapter V9 - Packet Scheduler Minipo
rt
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.102       20
         10.8.0.0  255.255.255.252         10.8.0.1        10.8.0.1       30
         10.8.0.0    255.255.255.0         10.8.0.2        10.8.0.1       1
         10.8.0.1  255.255.255.255        127.0.0.1       127.0.0.1       30
   10.255.255.255  255.255.255.255         10.8.0.1        10.8.0.1       30
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.0.0    255.255.255.0    192.168.0.102   192.168.0.102       20
    192.168.0.102  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.0.255  255.255.255.255    192.168.0.102   192.168.0.102       20
        224.0.0.0        240.0.0.0         10.8.0.1        10.8.0.1       30
        224.0.0.0        240.0.0.0    192.168.0.102   192.168.0.102       20
  255.255.255.255  255.255.255.255         10.8.0.1        10.8.0.1       1
  255.255.255.255  255.255.255.255    192.168.0.102   192.168.0.102       1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None

####################################################
Open VPN Server log, after successfully accepting
client (10.8.0.6) and then having it disconnect
####################################################

...
2013 us=47555 Successful ARP Flush on interface [3] {88061235-32C6-40CC-B148-502D3696F8BE}
Fri Jan 25 23:37:22 2013 us=57569 MANAGEMENT: >STATE:1359175042,ADD_ROUTES,,,
Fri Jan 25 23:37:22 2013 us=57569 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Fri Jan 25 23:37:22 2013 us=67584 Route addition via IPAPI succeeded [adaptive]
Fri Jan 25 23:37:22 2013 us=77598 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 25 23:37:22 2013 us=77598 UDPv4 link local (bound): [AF_INET]192.168.0.102:219
Fri Jan 25 23:37:22 2013 us=87612 UDPv4 link remote: [undef]
Fri Jan 25 23:37:22 2013 us=87612 MULTI: multi_init called, r=256 v=256
Fri Jan 25 23:37:22 2013 us=97627 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Fri Jan 25 23:37:22 2013 us=97627 ifconfig_pool_read(), in='[censored]-MCS-CA,10.8.0.4', TODO: IPv6
Fri Jan 25 23:37:22 2013 us=107641 succeeded -> ifconfig_pool_set()
Fri Jan 25 23:37:22 2013 us=107641 IFCONFIG POOL LIST
Fri Jan 25 23:37:22 2013 us=117656 [censored]-MCS-CA,10.8.0.4
Fri Jan 25 23:37:22 2013 us=117656 Initialization Sequence Completed
Fri Jan 25 23:37:22 2013 us=117656 MANAGEMENT: >STATE:1359175042,CONNECTED,SUCCESS,10.8.0.1,
Fri Jan 25 23:57:26 2013 us=659702 MULTI: multi_create_instance called
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 Re-using SSL/TLS context
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 LZO compression initialized
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 25 23:57:26 2013 us=659702 106.120.119.123:39074 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 25 23:57:26 2013 us=689745 106.120.119.123:39074 Local Options hash (VER=V4): '530fdded'
Fri Jan 25 23:57:26 2013 us=689745 106.120.119.123:39074 Expected Remote Options hash (VER=V4): '41690919'
Fri Jan 25 23:57:26 2013 us=689745 106.120.119.123:39074 TLS: Initial packet from [AF_INET]106.120.119.123:39074, sid=6da231e4 11b69d76
Fri Jan 25 23:57:31 2013 us=696945 106.120.119.123:39074 VERIFY OK: depth=1, C=xxx, L=xxx, O=[censored], OU=[censored]-Unit, CN=[censored]-MCS-CA, name=[censored]-Name, emailAddress=info@[censored].com
Fri Jan 25 23:57:31 2013 us=706960 106.120.119.123:39074 VERIFY OK: depth=0, xxxx, L=Yxxx, O=[censored], OU=[censored]-Unit, CN=[censored]-MCS-CA, name=[censored]-Name, emailAddress=info@[censored].com
Fri Jan 25 23:57:33 2013 us=469494 106.120.119.123:39074 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jan 25 23:57:33 2013 us=469494 106.120.119.123:39074 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 25 23:57:33 2013 us=469494 106.120.119.123:39074 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jan 25 23:57:33 2013 us=469494 106.120.119.123:39074 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 25 23:57:33 2013 us=840027 106.120.119.123:39074 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Jan 25 23:57:33 2013 us=840027 106.120.119.123:39074 [[censored]-MCS-CA] Peer Connection Initiated with [AF_INET]106.120.119.123:39074
Fri Jan 25 23:57:33 2013 us=840027 [censored]-MCS-CA/106.120.119.123:39074 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Jan 25 23:57:33 2013 us=840027 [censored]-MCS-CA/106.120.119.123:39074 MULTI: Learn: 10.8.0.6 -> [censored]-MCS-CA/106.120.119.123:39074
Fri Jan 25 23:57:33 2013 us=840027 [censored]-MCS-CA/106.120.119.123:39074 MULTI: primary virtual IP for [censored]-MCS-CA/106.120.119.123:39074: 10.8.0.6
Fri Jan 25 23:57:38 2013 us=626910 [censored]-MCS-CA/106.120.119.123:39074 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jan 25 23:57:38 2013 us=626910 [censored]-MCS-CA/106.120.119.123:39074 send_push_reply(): safe_cap=940
Fri Jan 25 23:57:38 2013 us=626910 [censored]-MCS-CA/106.120.119.123:39074 SENT CONTROL [[censored]-MCS-CA]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 192.168.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Fri Jan 25 23:57:39 2013 us=57529 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [X], packet dropped
Fri Jan 25 23:57:39 2013 us=938796 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [X], packet dropped
Fri Jan 25 23:57:40 2013 us=279286 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [°], packet dropped
Fri Jan 25 23:58:41 2013 us=126780 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:58:44 2013 us=121086 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:58:48 2013 us=126846 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:58:51 2013 us=141180 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:58:54 2013 us=145500 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:58:54 2013 us=726336 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [], packet dropped
Fri Jan 25 23:58:58 2013 us=141246 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:59:01 2013 us=145566 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:59:04 2013 us=159900 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:59:08 2013 us=155646 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:59:10 2013 us=939649 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped
Fri Jan 25 23:59:13 2013 us=953984 [censored]-MCS-CA/106.120.119.123:39074 MULTI: bad source address from client [È], packet dropped

*** the rest of the log is filled with these "bad source" messages
what IP is 106.120.119.123??? is it an ip address? where is it coming from?

####################################################
Client OpenVPN log after a successful connection
and disconnection
####################################################

Sat Jan 26 12:59:31 2013 us=853460 MANAGEMENT: >STATE:1359176371,GET_CONFIG,,,
Sat Jan 26 12:59:32 2013 us=929862 SENT CONTROL [censored-MCS-CA]: 'PUSH_REQUEST' (status=1)
Sat Jan 26 12:59:33 2013 us=288662 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 192.168.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat Jan 26 12:59:33 2013 us=288662 OPTIONS IMPORT: timers and/or timeouts modified
Sat Jan 26 12:59:33 2013 us=288662 OPTIONS IMPORT: --ifconfig/up options modified
Sat Jan 26 12:59:33 2013 us=288662 OPTIONS IMPORT: route options modified
Sat Jan 26 12:59:33 2013 us=288662 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Jan 26 12:59:33 2013 us=319863 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Jan 26 12:59:33 2013 us=319863 MANAGEMENT: >STATE:1359176373,ASSIGN_IP,,10.8.0.6,
Sat Jan 26 12:59:33 2013 us=319863 open_tun, tt->ipv6=0
Sat Jan 26 12:59:33 2013 us=319863 TAP-WIN32 device [MyTap] opened: \\.\Global\{AFA4E170-21D2-4C6B-8AC2-652B8CB7FB3B}.tap
Sat Jan 26 12:59:33 2013 us=319863 TAP-Windows Driver Version 9.9
Sat Jan 26 12:59:33 2013 us=319863 TAP-Windows MTU=1500
Sat Jan 26 12:59:33 2013 us=319863 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {AFA4E170-21D2-4C6B-8AC2-652B8CB7FB3B} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Jan 26 12:59:33 2013 us=319863 DHCP option string: 0604c0a8 0001
Sat Jan 26 12:59:33 2013 us=319863 Successful ARP Flush on interface [26] {AFA4E170-21D2-4C6B-8AC2-652B8CB7FB3B}
Sat Jan 26 12:59:35 2013 us=98266 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Sat Jan 26 12:59:35 2013 us=98266 C:\Windows\system32\route.exe ADD 69.246.9.234 MASK 255.255.255.255 222.40.42.1
Sat Jan 26 12:59:35 2013 us=98266 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 12:59:35 2013 us=129466 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jan 26 12:59:35 2013 us=129466 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 12:59:35 2013 us=160666 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jan 26 12:59:35 2013 us=160666 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 12:59:35 2013 us=191866 MANAGEMENT: >STATE:1359176375,ADD_ROUTES,,,
Sat Jan 26 12:59:35 2013 us=191866 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.8.0.5
Sat Jan 26 12:59:35 2013 us=191866 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 12:59:35 2013 us=223066 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat Jan 26 12:59:35 2013 us=223066 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 12:59:35 2013 us=254266 Initialization Sequence Completed
Sat Jan 26 12:59:35 2013 us=254266 MANAGEMENT: >STATE:1359176375,CONNECTED,SUCCESS,10.8.0.6,69.246.9.234
Sat Jan 26 13:09:56 2013 us=57356 TCP/UDP: Closing socket
Sat Jan 26 13:09:56 2013 us=57356 C:\Windows\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat Jan 26 13:09:56 2013 us=57356 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 13:09:56 2013 us=88556 C:\Windows\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.8.0.5
Sat Jan 26 13:09:56 2013 us=88556 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 13:09:56 2013 us=119756 C:\Windows\system32\route.exe DELETE 69.246.9.234 MASK 255.255.255.255 222.40.42.1
Sat Jan 26 13:09:56 2013 us=119756 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 13:09:56 2013 us=135356 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jan 26 13:09:56 2013 us=135356 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 13:09:56 2013 us=166557 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jan 26 13:09:56 2013 us=166557 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
OK!
Sat Jan 26 13:09:56 2013 us=182157 Closing TUN/TAP interface
Sat Jan 26 13:09:56 2013 us=182157 SIGTERM[hard,] received, process exiting
Sat Jan 26 13:09:56 2013 us=182157 MANAGEMENT: >STATE:1359176996,EXITING,SIGTERM,,

####################################################
Ping stuff
####################################################

Windows 7 Ultimate Open VPN client (10.8.0.6) can Ping:
10.8.0.1
192.168.0.102

Windows 7 Ultimate Open VPN client (10.8.0.6) CAN'T Ping:
10.8.0.5
192.168.0.1
google.com
8.8.8.8

OpenVPN server can ping:
everything including 10.8.0.6 (the vpn client)

ryzajr

Thought I'd bump this topic as I'm having the exact same issue.

I can connect just fine to my OpenVPN server (Windows 7 x64) from my client (Nexus 7 tablet) using OpenVPN connect. Both can ping eachother while the VPN is up, but the client can't connect to the internet.

I also get these messages in the server.log saying:

MULTI: bad source address from client [192.168.0.XX], packet dropped

XX being the the client lan IP, though it's VPN IP address is displayed as 10.8.0.6

Any help or suggestions for me and the OP would be appreciated. 🙁