Game not working

alakin

Anyway I made a VPN server on my windows 64 machine to play game called "generals zero hour"
The guy connected to my server. We both got IPs assigned.
Yet when we go in game we can't see each other(lan lobby).

BUT we can see each other if we use hamachi. What went wrong?

alakin

server.ovpn

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher none
;comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
auth none
client-to-client

lol.ovpn

client
dev tun
proto udp
remote (my external ip) 1194
resolv-retry infinite
nobind
persist-key
persist-tun
auth none
ca ca.crt
cert lol.crt
key lol.key
ns-cert-type server
cipher none
;comp-lzo
verb 3

server.log

Thu Oct 03 19:05:51 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Thu Oct 03 19:05:51 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Oct 03 19:05:51 2013 Need hold release from management interface, waiting...
Thu Oct 03 19:05:52 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Oct 03 19:05:52 2013 MANAGEMENT: CMD 'state on'
Thu Oct 03 19:05:52 2013 MANAGEMENT: CMD 'log all on'
Thu Oct 03 19:05:52 2013 MANAGEMENT: CMD 'hold off'
Thu Oct 03 19:05:52 2013 MANAGEMENT: CMD 'hold release'
Thu Oct 03 19:05:52 2013 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Oct 03 19:05:52 2013 Diffie-Hellman initialized with 1024 bit key
Thu Oct 03 19:05:52 2013 ******* WARNING *******: null cipher specified, no encryption will be used
Thu Oct 03 19:05:52 2013 ******* WARNING *******: null MAC specified, no authentication will be used
Thu Oct 03 19:05:52 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Oct 03 19:05:52 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 03 19:05:52 2013 MANAGEMENT: >STATE:1380819952,ASSIGN_IP,,10.8.0.1,
Thu Oct 03 19:05:52 2013 open_tun, tt->ipv6=0
Thu Oct 03 19:05:52 2013 TAP-WIN32 device [ovpntap] opened: \\.\Global\{7D1CD1A9-9E3A-42F5-97C2-E5765F50D974}.tap
Thu Oct 03 19:05:52 2013 TAP-Windows Driver Version 9.9 
Thu Oct 03 19:05:52 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {7D1CD1A9-9E3A-42F5-97C2-E5765F50D974} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Thu Oct 03 19:05:52 2013 Sleeping for 10 seconds...
Thu Oct 03 19:06:02 2013 Successful ARP Flush on interface [17] {7D1CD1A9-9E3A-42F5-97C2-E5765F50D974}
Thu Oct 03 19:06:02 2013 MANAGEMENT: >STATE:1380819962,ADD_ROUTES,,,
Thu Oct 03 19:06:02 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Oct 03 19:06:02 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 03 19:06:02 2013 Route addition via IPAPI succeeded [adaptive]
Thu Oct 03 19:06:02 2013 UDPv4 link local (bound): [undef]
Thu Oct 03 19:06:02 2013 UDPv4 link remote: [undef]
Thu Oct 03 19:06:02 2013 MULTI: multi_init called, r=256 v=256
Thu Oct 03 19:06:02 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Oct 03 19:06:02 2013 IFCONFIG POOL LIST
Thu Oct 03 19:06:02 2013 Initialization Sequence Completed
Thu Oct 03 19:06:02 2013 MANAGEMENT: >STATE:1380819962,CONNECTED,SUCCESS,10.8.0.1,
Thu Oct 03 19:07:06 2013 (his ip):56441 TLS: Initial packet from [AF_INET](his ip):56441, sid=045e8924 e16e8eb6
Thu Oct 03 19:07:08 2013 (his ip):56441 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=ovpn, OU=changeme, CN=ovpn-ca, name=changeme, emailAddress=admin@localhost
Thu Oct 03 19:07:08 2013 (his ip):56441 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=ovpn, OU=changeme, CN=lol, name=changeme, emailAddress=admin@localhost
Thu Oct 03 19:07:08 2013 (his ip):56441 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Oct 03 19:07:08 2013 (his ip):56441 [lol] Peer Connection Initiated with [AF_INET](his ip):56441
Thu Oct 03 19:07:08 2013 lol/(his ip):56441 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Oct 03 19:07:08 2013 lol/(his ip):56441 MULTI: Learn: 10.8.0.6 -> lol/(his ip):56441
Thu Oct 03 19:07:08 2013 lol/(his ip):56441 MULTI: primary virtual IP for lol/(his ip):56441: 10.8.0.6
Thu Oct 03 19:07:10 2013 lol/(his ip):56441 PUSH: Received control message: 'PUSH_REQUEST'
Thu Oct 03 19:07:10 2013 lol/(his ip):56441 send_push_reply(): safe_cap=940
Thu Oct 03 19:07:10 2013 lol/(his ip):56441 SENT CONTROL [lol]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Oct 03 19:10:47 2013 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Oct 03 19:10:47 2013 Route deletion via IPAPI succeeded [adaptive]
Thu Oct 03 19:10:47 2013 Closing TUN/TAP interface
Thu Oct 03 19:10:47 2013 SIGTERM[hard,] received, process exiting
Thu Oct 03 19:10:47 2013 MANAGEMENT: >STATE:1380820247,EXITING,SIGTERM,,

I replaced actual IPs with (my ip) and (his ip).
I also wonder if disabling compression worked. Should I write comp-lzo no or just ;comp-lzo?

Also I wonder if instead of making several files for every client possible to make just 1 for all clients? like vpnbook does.

alakin

My goal is to make a server with no auth no compression and no encryption. Just pure simple transparent channel.
Give all clients one same .ovpn file so they can all connect and we play in lan.
Very simple and no hassle kind of thing.

alakin

debbie10t wroteYou will require a minimum level of security, like a shared key.

This is better for games, due to broadcast packets:
http://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html

Follow the instructions and you should have no trouble.

Some other things:
https://forums.openvpn.net/post33633.html
https://forums.openvpn.net/topic13964.html

Bridge mode instead of routed mode is better?
What about the broadcast packets?

alakin

So will I be able to give ONE file to all clients and they all will connect and play? Or I need to make different files for each person?

alakin

Also the way to disable compression is by not having comp-lzo in the config file?

alakin

debbie10t wrote
alakin wroteSo will I be able to give ONE file to all clients and they all will connect and play? Or I need to make different files for each person?
Much better to have certs for each machine.

Well I wouldn't be so sure that it's best in my case. How do I make it with just 1 configuration file for all clients?
If it's not possible with 1 file for all clients then how do I make 1 file for each client but only 1 file and not 4 (.key, cert, ,ca etc).

alakin

debbie10t wroteFor a very simple setup, that you seem to require, you can use one cert/key file set by issuing this directive in your server config:

duplicate-cn

The Manual wrote

--duplicate-cn
              Allow  multiple clients with the same common name to concurrently connect.  In the
              absence of this option, OpenVPN will disconnect a client instance upon  connection
              of a new client having the same common name.

All your clients will be able to connect concurrently using one set of certs and keys. It is not recommended, it will save you time but you could experience problems in the long run. You choose, it is your security.

That's cool but how do I make it with only one file instead of several? The vpnbook had it. One .ovpn file. I want to be able to have just one .ovpn file for all clients instead of many.

alakin

As for security I make server we play and then I close it so that's kind of obsolete 😛

alakin

I get that but how do I make it so that I must give only 1 file to the client instead of several?
I don't want to generate .cer files etc I just want to give one .ovpn file and thats it. How do I make it so?

DaleByrd

Everyone can click disini to download the latest games now.

DaleByrd

Everyone can click disini to download the latest games now.