SR-88 wroteHello guys,
i need your help.
I try to ping my clients from the server and it doesnt work. Ping client->client works fine. Ping client->Server also. Only the way Server->Client will not work.
Here my configs
server.conf
local xxxx
port xxx
proto udp
dev tun0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/vps.crt
key /etc/openvpn/keys/vps.key
dh /etc/openvpn/keys/dh1024.pem
tls-auth /etc/openvpn/keys/ta.key 0
client-to-client
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
#auth none
cipher AES-256-CBC
Server route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.8.0.2 * 255.255.255.255 UH 0 0 0 tun0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
default * 0.0.0.0 U 0 0 0 venet0
Client.config
client
dev tun
proto udp
remote-cert-tls server
remote xxxx xxx
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert computer4.crt
key computer4.key
tls-auth ta.key 1
verb 3
cipher AES-256-CBC
comp-lzo
Client route
Kernel-IP-Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
default 10.8.0.25 128.0.0.0 UG 0 0 0 tun0
default OpenWrt.lan 0.0.0.0 UG 0 0 0 eth0
10.8.0.0 10.8.0.25 255.255.255.0 UG 0 0 0 tun0
10.8.0.25 * 255.255.255.255 UH 0 0 0 tun0
hosted-by.hosth OpenWrt.lan 255.255.255.255 UGH 0 0 0 eth0
128.0.0.0 10.8.0.25 128.0.0.0 UG 0 0 0 tun0
link-local * 255.255.0.0 U 1000 0 0 eth0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
I??m a newbie on this stuff:-)
Thank you
greeting
SR-88
Server Log
/etc/openvpn# openvpn udp-server.conf
Mon Sep 30 15:50:40 2013 OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS 11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 6 2013
Mon Sep 30 15:50:40 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or hig her to call user-defined scripts or executables
Mon Sep 30 15:50:40 2013 Diffie-Hellman initialized with 2048 bit key
Mon Sep 30 15:50:40 2013 WARNING: file '/etc/openvpn/keys/vps.key' is group or o thers accessible
Mon Sep 30 15:50:40 2013 Control Channel Authentication: using '/etc/openvpn/key s/ta.key' as a OpenVPN static key file
Mon Sep 30 15:50:40 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:50:40 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:50:40 2013 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 15:50:40 2013 Socket Buffers: R=[245760->131072] S=[245760->131072]
Mon Sep 30 15:50:40 2013 ROUTE: default_gateway=UNDEF
Mon Sep 30 15:50:40 2013 TUN/TAP device tun0 opened
Mon Sep 30 15:50:40 2013 TUN/TAP TX queue length set to 100
Mon Sep 30 15:50:40 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Sep 30 15:50:40 2013 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1 500
Mon Sep 30 15:50:40 2013 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Mon Sep 30 15:50:40 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET: 0 EL:0 AF:3/1 ]
Mon Sep 30 15:50:40 2013 UDPv4 link local (bound): [AF_INET]31.220.42.14:1024
Mon Sep 30 15:50:40 2013 UDPv4 link remote: [undef]
Mon Sep 30 15:50:40 2013 MULTI: multi_init called, r=256 v=256
Mon Sep 30 15:50:40 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='computer1,10.8.0.4', TODO: IP v6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='router1,10.8.0.8', TODO: IPv6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='computer2,10.8.0.12', TODO: I Pv6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='router2,10.8.0.16', TODO: IPv 6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='computer3,10.8.0.20', TODO: I Pv6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 ifconfig_pool_read(), in='computer4,10.8.0.24', TODO: I Pv6
Mon Sep 30 15:50:40 2013 succeeded -> ifconfig_pool_set()
Mon Sep 30 15:50:40 2013 IFCONFIG POOL LIST
Mon Sep 30 15:50:40 2013 computer1,10.8.0.4
Mon Sep 30 15:50:40 2013 router1,10.8.0.8
Mon Sep 30 15:50:40 2013 computer2,10.8.0.12
Mon Sep 30 15:50:40 2013 router2,10.8.0.16
Mon Sep 30 15:50:40 2013 computer3,10.8.0.20
Mon Sep 30 15:50:40 2013 computer4,10.8.0.24
Mon Sep 30 15:50:40 2013 Initialization Sequence Completed
Mon Sep 30 15:51:05 2013 MULTI: multi_create_instance called
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 Re-using SSL/TLS context
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 LZO compression initialized
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 Local Options hash (VER=V4): '162b04de'
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 Expected Remote Options hash (VER=V4): '9e7066d2'
Mon Sep 30 15:51:05 2013 78.94.244.148:38835 TLS: Initial packet from [AF_INET]78.94.244.148:38835, sid=03f8a763 6b216f9c
Mon Sep 30 15:51:05 2013 MULTI: multi_create_instance called
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 Re-using SSL/TLS context
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 LZO compression initialized
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 Local Options hash (VER=V4): '162b04de'
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 Expected Remote Options hash (VER=V4): '9e7066d2'
Mon Sep 30 15:51:05 2013 78.94.244.148:56480 TLS: Initial packet from [AF_INET]78.94.244.148:56480, sid=fd049d44 1c99d488
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=computer3/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Sep 30 15:51:06 2013 78.94.244.148:38835 [computer3] Peer Connection Initiated with [AF_INET]78.94.244.148:38835
Mon Sep 30 15:51:06 2013 computer3/78.94.244.148:38835 MULTI_sva: pool returned IPv4=10.8.0.22, IPv6=1c0a:7cb7:34f5:e7bf:18f8:e7bf:83e:1bb9
Mon Sep 30 15:51:06 2013 computer3/78.94.244.148:38835 MULTI: Learn: 10.8.0.22 -> computer3/78.94.244.148:38835
Mon Sep 30 15:51:06 2013 computer3/78.94.244.148:38835 MULTI: primary virtual IP for computer3/78.94.244.148:38835: 10.8.0.22
Mon Sep 30 15:51:08 2013 78.94.244.148:56480 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:08 2013 78.94.244.148:56480 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=router1/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:08 2013 MULTI: multi_create_instance called
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 Re-using SSL/TLS context
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 LZO compression initialized
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 Local Options hash (VER=V4): '162b04de'
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 Expected Remote Options hash (VER=V4): '9e7066d2'
Mon Sep 30 15:51:08 2013 78.94.244.148:34594 TLS: Initial packet from [AF_INET]78.94.244.148:34594, sid=a1eda290 53df2663
Mon Sep 30 15:51:08 2013 MULTI: multi_create_instance called
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 Re-using SSL/TLS context
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 LZO compression initialized
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 Local Options hash (VER=V4): '162b04de'
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 Expected Remote Options hash (VER=V4): '9e7066d2'
Mon Sep 30 15:51:08 2013 78.94.244.148:55406 TLS: Initial packet from [AF_INET]78.94.244.148:55406, sid=34be8719 c34ab4be
Mon Sep 30 15:51:08 2013 computer3/78.94.244.148:38835 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 30 15:51:08 2013 computer3/78.94.244.148:38835 send_push_reply(): safe_cap=960
Mon Sep 30 15:51:08 2013 computer3/78.94.244.148:38835 SENT CONTROL [computer3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.22 10.8.0.21' (status=1)
Mon Sep 30 15:51:08 2013 computer3/78.94.244.148:38835 Replay-window backtrack occurred [1]
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=computer1/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Sep 30 15:51:09 2013 78.94.244.148:56480 [router1] Peer Connection Initiated with [AF_INET]78.94.244.148:56480
Mon Sep 30 15:51:09 2013 router1/78.94.244.148:56480 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=1c0a:7cb7:34f5:e7bf:18f8:e7bf:a079:1db9
Mon Sep 30 15:51:09 2013 router1/78.94.244.148:56480 MULTI: Learn: 10.8.0.10 -> router1/78.94.244.148:56480
Mon Sep 30 15:51:09 2013 router1/78.94.244.148:56480 MULTI: primary virtual IP for router1/78.94.244.148:56480: 10.8.0.10
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Replay-window backtrack occurred [2]
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Sep 30 15:51:09 2013 78.94.244.148:55406 [computer1] Peer Connection Initiated with [AF_INET]78.94.244.148:55406
Mon Sep 30 15:51:09 2013 computer1/78.94.244.148:55406 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=1c0a:7cb7:34f5:e7bf:18f8:e7bf:60:21b9
Mon Sep 30 15:51:09 2013 computer1/78.94.244.148:55406 MULTI: Learn: 10.8.0.6 -> computer1/78.94.244.148:55406
Mon Sep 30 15:51:09 2013 computer1/78.94.244.148:55406 MULTI: primary virtual IP for computer1/78.94.244.148:55406: 10.8.0.6
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=computer4/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Sep 30 15:51:09 2013 78.94.244.148:34594 [computer4] Peer Connection Initiated with [AF_INET]78.94.244.148:34594
Mon Sep 30 15:51:09 2013 computer4/78.94.244.148:34594 MULTI_sva: pool returned IPv4=10.8.0.26, IPv6=1c0a:7cb7:34f5:e7bf:18f8:e7bf:50bb:1cb9
Mon Sep 30 15:51:09 2013 computer4/78.94.244.148:34594 MULTI: Learn: 10.8.0.26 -> computer4/78.94.244.148:34594
Mon Sep 30 15:51:09 2013 computer4/78.94.244.148:34594 MULTI: primary virtual IP for computer4/78.94.244.148:34594: 10.8.0.26
Mon Sep 30 15:51:11 2013 router1/78.94.244.148:56480 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 30 15:51:11 2013 router1/78.94.244.148:56480 send_push_reply(): safe_cap=960
Mon Sep 30 15:51:11 2013 router1/78.94.244.148:56480 SENT CONTROL [router1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.10 10.8.0.9' (status=1)
Mon Sep 30 15:51:11 2013 computer1/78.94.244.148:55406 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 30 15:51:11 2013 computer1/78.94.244.148:55406 send_push_reply(): safe_cap=960
Mon Sep 30 15:51:11 2013 computer1/78.94.244.148:55406 SENT CONTROL [computer1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Sep 30 15:51:11 2013 computer4/78.94.244.148:34594 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 30 15:51:11 2013 computer4/78.94.244.148:34594 send_push_reply(): safe_cap=960
Mon Sep 30 15:51:11 2013 computer4/78.94.244.148:34594 SENT CONTROL [computer4]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.26 10.8.0.25' (status=1)
^CMon Sep 30 15:52:33 2013 event_wait : Interrupted system call (code=4)
Mon Sep 30 15:52:33 2013 TCP/UDP: Closing socket
Mon Sep 30 15:52:33 2013 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Mon Sep 30 15:52:33 2013 Closing TUN/TAP interface
Mon Sep 30 15:52:33 2013 /sbin/ifconfig tun0 0.0.0.0
Mon Sep 30 15:52:33 2013 SIGINT[hard,] received, process exiting
Client Log
openvpn HPThinClient.conf
Mon Sep 30 16:01:38 2013 OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 19 2013
Mon Sep 30 16:01:38 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Sep 30 16:01:38 2013 WARNING: file 'computer4.key' is group or others accessible
Mon Sep 30 16:01:38 2013 WARNING: file 'ta.key' is group or others accessible
Mon Sep 30 16:01:38 2013 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon Sep 30 16:01:38 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 16:01:38 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 16:01:38 2013 LZO compression initialized
Mon Sep 30 16:01:38 2013 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Sep 30 16:01:38 2013 Socket Buffers: R=[163840->131072] S=[163840->131072]
Mon Sep 30 16:01:38 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 30 16:01:38 2013 Local Options hash (VER=V4): '9e7066d2'
Mon Sep 30 16:01:38 2013 Expected Remote Options hash (VER=V4): '162b04de'
Mon Sep 30 16:01:38 2013 UDPv4 link local: [undef]
Mon Sep 30 16:01:38 2013 UDPv4 link remote: [AF_INET]xxxx:xxxx
Mon Sep 30 16:01:38 2013 TLS: Initial packet from [AF_INET]xxxxx:xxx, sid=f3737171 cf120956
Mon Sep 30 16:01:39 2013 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 16:01:39 2013 Validating certificate key usage
Mon Sep 30 16:01:39 2013 ++ Certificate has key usage 00a0, expects 00a0
Mon Sep 30 16:01:39 2013 VERIFY KU OK
Mon Sep 30 16:01:39 2013 Validating certificate extended key usage
Mon Sep 30 16:01:39 2013 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Sep 30 16:01:39 2013 VERIFY EKU OK
Mon Sep 30 16:01:39 2013 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=vps/name=changeme/emailAddress=mail@host.domain
Mon Sep 30 16:01:39 2013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 16:01:39 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 16:01:39 2013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Sep 30 16:01:39 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 30 16:01:39 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, xxx bit RSA
Mon Sep 30 16:01:39 2013 [vps] Peer Connection Initiated with [AF_INET]xxxxx:xxx
Mon Sep 30 16:01:42 2013 SENT CONTROL [vps]: 'PUSH_REQUEST' (status=1)
Mon Sep 30 16:01:42 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.26 10.8.0.25'
Mon Sep 30 16:01:42 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Sep 30 16:01:42 2013 OPTIONS IMPORT: --ifconfig/up options modified
Mon Sep 30 16:01:42 2013 OPTIONS IMPORT: route options modified
Mon Sep 30 16:01:42 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Sep 30 16:01:42 2013 ROUTE default_gateway=192.168.1.1
Mon Sep 30 16:01:42 2013 TUN/TAP device tun0 opened
Mon Sep 30 16:01:42 2013 TUN/TAP TX queue length set to 100
Mon Sep 30 16:01:42 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Sep 30 16:01:42 2013 /sbin/ifconfig tun0 10.8.0.26 pointopoint 10.8.0.25 mtu 1500
Mon Sep 30 16:01:42 2013 /sbin/route add -net xxxxx netmask 255.255.255.255 gw 192.168.1.1
Mon Sep 30 16:01:42 2013 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.25
Mon Sep 30 16:01:42 2013 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.25
Mon Sep 30 16:01:42 2013 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.25
Mon Sep 30 16:01:42 2013 Initialization Sequence Completed
^CMon Sep 30 16:01:50 2013 event_wait : Interrupted system call (code=4)
Mon Sep 30 16:01:50 2013 TCP/UDP: Closing socket
Mon Sep 30 16:01:50 2013 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Mon Sep 30 16:01:50 2013 /sbin/route del -net xxxxx netmask 255.255.255.255
Mon Sep 30 16:01:50 2013 /sbin/route del -net 0.0.0.0 netmask 128.0.0.0
Mon Sep 30 16:01:50 2013 /sbin/route del -net 128.0.0.0 netmask 128.0.0.0
Mon Sep 30 16:01:50 2013 Closing TUN/TAP interface
Mon Sep 30 16:01:50 2013 /sbin/ifconfig tun0 0.0.0.0
Mon Sep 30 16:01:50 2013 SIGINT[hard,] received, process exiting
