Hi all,
First port.
I'm setting up OpenVPN on my router with DD-WRT.
I used the instructions on this page:
http://www.dd-wrt.com/wiki/index.php/VPN_(the_easy_way)_v24%2B#Sample_Setup_with_Routing
Everything seems functional, but the tunnel is not working properly.
On Windows, using dnsleaktest.com, my path does not change when I connect. It shows the NIC connection as the tunneled port with the wi-fi connection being unchanged from before the connection. I do not have an ethernet cable connected to the NIC.
On my Android tablet with the OpenDNS app installed and connected, DNS' don't resolve. Looking at the network info, the DNS address listed after connection is the same as before connection.
I'm using my Android phone with a Wi-Fi app to connect through to test OpenVPN. I've also tested this at a local market with open wi-fi with the same results.
my setup is as follows:
Config
push "route 192.168.2.0 255.255.255.0"
push "dhcp-option DNS 192.168.1.1"
server 192.168.1.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001
With DD-WRT firewall commands set to:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.1.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
My client configuration is set as:
remote XXX.XXX.org 1194
client
remote-cert-tls server
dev tun0
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca ca.crt
cert xxx.crt
key xxx.key
The OpenVPN log in DD-WRT shows the following:
20130326 16:52:36 I OpenVPN 2.1.1 mipsel-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Aug 12 2010
20130326 16:52:36 W IMPORTANT: OpenVPN's default port number is now 1194 based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
20130326 16:52:36 W WARNING: file '/tmp/openvpn/key.pem' is group or others accessible
20130326 16:52:36 I TUN/TAP device tun0 opened
20130326 16:52:36 I /sbin/ifconfig tun0 192.168.1.1 pointopoint 192.168.1.2 mtu 1500
20130326 16:52:36 I UDPv4 link local (bound): [undef]:1194
20130326 16:52:36 I UDPv4 link remote: [undef]
20130326 16:52:36 I Initialization Sequence Completed
20130326 16:52:56 I 208.54.35.179:11227 Re-using SSL/TLS context
20130326 16:52:57 I 208.54.35.179:11227 [Xoom] Peer Connection Initiated with xxx.xxx.xxx.xxx:11227
20130326 16:55:33 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 16:55:43 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 16:59:26 I Xoom/208.54.35.179:11227 [Xoom] Inactivity timeout (--ping-restart) restarting
20130326 17:03:16 I 208.54.35.179:30411 Re-using SSL/TLS context
20130326 17:03:17 I 208.54.35.179:30411 [Xoom] Peer Connection Initiated with xxx.xxx.xxx.xxx:30411
20130326 17:03:29 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:03:30 I 208.54.35.179:15103 Re-using SSL/TLS context
20130326 17:03:31 I 208.54.35.179:15103 [Xoom] Peer Connection Initiated with xxx.xxx.xxx.xxx:15103
20130326 17:11:05 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:11:05 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:11:39 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:14:20 N read UDPv4 [ECONNREFUSED|ECONNREFUSED]: Connection refused (code=146)
20130326 17:14:20 N read UDPv4 [ECONNREFUSED|ECONNREFUSED]: Connection refused (code=146)
20130326 17:14:20 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:14:20 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:14:41 I Xoom/208.54.35.179:15103 [Xoom] Inactivity timeout (--ping-restart) restarting
20130326 17:15:45 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
20130326 17:15:45 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
19700101 00:00:00
It's obvious that something isn't right, but I have no idea what.
I changed from udp to tcp. The functionality hasn't changed, but the log message is quite different
20130326 17:32:49 I OpenVPN 2.1.1 mipsel-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Aug 12 2010
20130326 17:32:49 W IMPORTANT: OpenVPN's default port number is now 1194 based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
20130326 17:32:49 W WARNING: file '/tmp/openvpn/key.pem' is group or others accessible
20130326 17:32:49 I TUN/TAP device tun0 opened
20130326 17:32:49 I /sbin/ifconfig tun0 192.168.1.1 pointopoint 192.168.1.2 mtu 1500
20130326 17:32:49 I Listening for incoming TCP connection on [undef]:1194
20130326 17:32:49 I TCPv4_SERVER link local (bound): [undef]:1194
20130326 17:32:49 I TCPv4_SERVER link remote: [undef]
20130326 17:32:49 W Note: sys_epoll API is unavailable falling back to poll/select API
20130326 17:32:49 I Initialization Sequence Completed
20130326 17:33:03 I Re-using SSL/TLS context
20130326 17:33:03 I TCP connection established with 208.54.35.179:40163
20130326 17:33:03 I TCPv4_SERVER link local: [undef]
20130326 17:33:03 I TCPv4_SERVER link remote: 208.54.35.179:40163
20130326 17:33:05 I 208.54.35.179:40163 [Xoom] Peer Connection Initiated with xxx.xxx.xxx.xxx:40163
19700101 00:00:00
Any ideas would be greatly appreciated.
cheers
thanks
