I want to create a VPN Service so that all my traffic at a public hotspot is sent securely to my home router and from there it is forwarded in the clear out to the public internet.
I installed OpenVPN on my Assus RT-N16 router using
Shibby's VPN (AIO ver 102) modification to TomatoUSB.
Shibby uses a GUI for the OpenVPN configuration and divides it among several tabs. My configurations for server and client as well as the Tunnelblick log are below.
Tunnelblick starts but OpenDNS.com reports that my IP address is NOT my home router but my hotspot's router.
Can anyone help me get the configuration(s) correct?
Thank you for reading this post.
- nello
OpenVPN Configuration: Server
Basic Tab
Start with WAN: (checked)
Interface Type: TAP
Protocol: UDP
Port: xxx
Firewall: Automatic
Authorization Mode: TLS
Extra HMAC authorization (tls-auth): Disabled
Client address pool DHCP: (checked)
Advanced Tab
Pool Interval (in Minutes, 0 to disable): 0
Direct clients to redirect Internet traffic: (unchecked)
Respond to DNS: (unchecked)
Encryption cipher: User Default
Compression: Adaptive
TLS Renegotiation Time (in seconds, -1 default): -1
Manage Client-Specific Options: (checked)
Allow Client<->Client: (checked)
Allow Only These Clients: (unchecked)
Custom Configuration: push "redirect-gateway def1"
OpenVPN Configuration: Client
client
dev tap
proto udp
remote ddnsFQDN xxx
resolv-retry infinite
nobind
# Should these be uncommented for TomatoUSB?
;user nobody
;group nobody
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert nello.crt
key nello.key
ns-cert-type server
# Do I need one of these?
;tls-auth ta.key 1
# Is this enabled on TomatoUSB?
comp-lzo
verb 3
Tunnelblick Log
2013-01-27 +10:07:10 OpenVPN 2.2.1 i386-apple-darwin10.8.0 [SSL] [LZO2]
[PKCS11] [eurephia] built on +Oct 20 2012
2013-01-27 +10:07:10 MANAGEMENT: TCP Socket listening on 127.0.0.1:1337
2013-01-27 +10:07:10 Need hold release from management interface, waiting...
2013-01-27 +10:07:10 MANAGEMENT: Client connected from 127.0.0.1:1337
2013-01-27 +10:07:10 MANAGEMENT: CMD 'pid'
2013-01-27 +10:07:10 MANAGEMENT: CMD 'state on'
2013-01-27 +10:07:10 MANAGEMENT: CMD 'state'
2013-01-27 +10:07:10 MANAGEMENT: CMD 'bytecount 1'
2013-01-27 +10:07:10 MANAGEMENT: CMD 'hold release'
2013-01-27 +10:07:10 NOTE: the current --script-security setting may
allow this configuration to call user-defined scripts
2013-01-27 +10:07:10 *Tunnelblick: openvpnstart starting OpenVPN:
*
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn
--cd /Library/Application Support/Tunnelblick/Users/nello/VPN Client
Config.tblk/Contents/Resources --daemon --management 127.0.0.1 1337
--config /Library/Application Support/Tunnelblick/Users/nello/VPN
Client Config.tblk/Contents/Resources/config.ovpn --log
/Library/Application
Support/Tunnelblick/Logs/-SUsers-Snello-SLibrary-SApplication
Support-STunnelblick-SConfigurations-SVPN Client
Config.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_370.1337.openvpn.log
--management-query-passwords --management-hold --script-security 2
--up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh
-m -w -d -a -f -atADGNWradsgnw --down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh
-m -w -d -a -f -atADGNWradsgnw --up-restart
2013-01-27 +10:07:10 *Tunnelblick: Established communication with OpenVPN
2013-01-27 +10:07:10 LZO compression initialized
2013-01-27 +10:07:10 Control Channel MTU parms [ L:1574 D:138 EF:38
EB:0 ET:0 EL:0 ]
2013-01-27 +10:07:10 Socket Buffers: R=[196724->65536] S=[9216->65536]
2013-01-27 +10:07:10 MANAGEMENT: >STATE:1359302830,RESOLVE,,,
2013-01-27 +10:07:11 Data Channel MTU parms [ L:1574 D:1450 EF:42
EB:135 ET:32 EL:0 AF:3/1 ]
2013-01-27 +10:07:11 Local Options hash (VER=V4): 'd79ca330'
2013-01-27 +10:07:11 Expected Remote Options hash (VER=V4): 'f7df56b8'
2013-01-27 +10:07:11 UDPv4 link local: [undef]
2013-01-27 +10:07:11 UDPv4 link remote: 76.239.29.152:443
2013-01-27 +10:07:11 MANAGEMENT: >STATE:1359302831,WAIT,,,
2013-01-27 +10:07:11 MANAGEMENT: >STATE:1359302831,AUTH,,,
2013-01-27 +10:07:11 TLS: Initial packet from 76.239.29.152:443,
sid=67910672 4211b320
2013-01-27 10:07:13 VERIFY OK: depth=1,
/C=US/ST=IL/L=Glencoe/O=The_October_Group__Ltd./OU=HQ/CN=October-Group-VPN/name=October-Group-VPN-Key/emailAddress=nello@OctoberGroup.com
2013-01-27 10:07:13 VERIFY OK: nsCertType=SERVER
2013-01-27 10:07:13 VERIFY OK: depth=0,
/C=US/ST=IL/L=Glencoe/O=The_October_Group__Ltd./OU=HQ/CN=October-Group-VPN/name=October-Group-VPN-Key/emailAddress=nello@OctoberGroup.com
2013-01-27 10:07:17 Data Channel Encrypt: Cipher 'BF-CBC' initialized
with 128 bit key
2013-01-27 10:07:17 Data Channel Encrypt: Using 160 bit message hash
'SHA1' for HMAC authentication
2013-01-27 10:07:17 Data Channel Decrypt: Cipher 'BF-CBC' initialized
with 128 bit key
2013-01-27 10:07:17 Data Channel Decrypt: Using 160 bit message hash
'SHA1' for HMAC authentication
2013-01-27 10:07:17 Control Channel: TLSv1, cipher TLSv1/SSLv3
DHE-RSA-AES256-SHA, 2048 bit RSA
2013-01-27 10:07:17 [October-Group-VPN] Peer Connection Initiated with
76.239.29.152:443
2013-01-27 10:07:18 MANAGEMENT: >STATE:1359302838,GET_CONFIG,,,
2013-01-27 10:07:19 SENT CONTROL [October-Group-VPN]: 'PUSH_REQUEST' (status=1)
2013-01-27 10:07:20 PUSH: Received control message:
'PUSH_REPLY,redirect-gateway def1,route-gateway dhcp,ping
15,ping-restart 60'
2013-01-27 10:07:20 OPTIONS IMPORT: timers and/or timeouts modified
2013-01-27 10:07:20 OPTIONS IMPORT: route options modified
2013-01-27 10:07:20 OPTIONS IMPORT: route-related options modified
2013-01-27 10:07:20 ROUTE default_gateway=192.168.1.1
2013-01-27 10:07:20 TUN/TAP device /dev/tap0 opened
2013-01-27 10:07:20
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh
-m -w -d -a -f -atADGNWradsgnw tap0 1500 1574 init
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
bRouteGatewayIsDhcp is TRUE
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
About to 'ipconfig set "tap0" DHCP
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Did
'ipconfig set "tap0" DHCP
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: Configuring
tap DNS via DHCP
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
About to 'ipconfig waitall'
2013-01-27 10:07:22 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
Completed 'ipconfig waitall'
2013-01-27 10:07:25 *Tunnelblick client.up.tunnelblick.sh: Sleeping
for 0 seconds to wait for DHCP to finish setup.
2013-01-27 10:07:25 *Tunnelblick client.up.tunnelblick.sh: Sleeping
for 1 seconds to wait for DHCP to finish setup.
2013-01-27 10:07:26 *Tunnelblick client.up.tunnelblick.sh: Sleeping
for 2 seconds to wait for DHCP to finish setup.
2013-01-27 10:07:28 *Tunnelblick client.up.tunnelblick.sh: Sleeping
for 3 seconds to wait for DHCP to finish setup.
2013-01-27 10:07:31 *Tunnelblick client.up.tunnelblick.sh: Sleeping
for 4 seconds to wait for DHCP to finish setup.
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
Finished waiting for DHCP lease: test_domain_name = '',
test_name_server = ''
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
About to 'ipconfig getpacket tap0'
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
Completed 'ipconfig getpacket tap0'; sGetPacketOutput =
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
About to 'ipconfig getoption tap0 domain_name'
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
Completed 'ipconfig getoption tap0 domain_name'
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
About to 'ipconfig getoption tap0 domain_name_server'
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: DEBUG_TAP:
Completed 'ipconfig getoption tap0 domain_name_server'
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: WARNING: No
DNS information received from OpenVPN (DHCP), so no network/DNS
configuration changes need to be made.
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: Will NOT
monitor for other network configuration changes.
2013-01-27 10:07:35 *Tunnelblick client.up.tunnelblick.sh: Flushed the DNS Cache
2013-01-27 10:07:35 NOTE: unable to redirect default gateway -- VPN
gateway parameter (--route-gateway or --ifconfig) is missing
2013-01-27 10:07:35 Initialization Sequence Completed
2013-01-27 10:07:35 MANAGEMENT:
>STATE:1359302855,CONNECTED,SUCCESS,,76.239.29.152
2013-01-27 10:07:39 Extracted DHCP router address: 10.10.49.1
2013-01-27 10:07:40 *Tunnelblick: This computer's apparent public IP
address (72.54.42.170) was unchanged after the connection was made
