[Resolved] Yet another can't ping my clients post

honk

local network is 192.168.64.0/24

Ubuntu Server behind a FritzBox is 192.168.64.7

ip_forward for ipv4 is enabled

wrote static route into FritzBox 10.8.0.0 255.255.255.0 192.168.64.7

my server.conf

port 1194
proto udp
dev tun
ca Erde_CA.crt
cert Igor.crt
key Igor.key
dh dh4096.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.175.0 255.255.255.0"
push "route 192.168.64.0 255.255.255.0"
push "route 192.168.34.0 255.255.255.0"
client-config-dir ccd
route 192.168.175.0 255.255.255.0
route 192.168.34.0 255.255.255.0
client-to-client
keepalive 10 120
tls-auth ta.key 0
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 4
mute 20

resulting server routing table is

0.0.0.0         192.168.64.1    0.0.0.0         UG    100    0        0 eth0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
10.8.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.34.0    10.8.0.2        255.255.255.0   UG    0      0        0 tun0
192.168.64.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.175.0   10.8.0.2        255.255.255.0   UG    0      0        0 tun0

clients network is 192.168.34.0/24 behind another FritzBox

the client.ovpn

client
dev tun
proto udp
remote mydnsat.dyndns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca Erde_CA.crt
cert moinmoin.crt
key moinmoin.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 3
mute 20

client is able to reach whole net behind server but i'm not able to ping the client from the server or any other machine in it's local network.

what did I miss in the configs?

ping rule in (windows7) clients firewall is enabled

I'm clueless atm

appreciate any hint

honk

thank you for quick response

root@igor:/etc/openvpn# cat ccd/moinmoin
iroute 192.168.34.0 255.255.255.0

will collect logs on both sides with verb 6 asap

honk

clients log at verb 6 is

Thu Oct 24 10:53:28 2013 us=371000 Current Parameter Settings:
Thu Oct 24 10:53:28 2013 us=374000 config = 'erde.ovpn'
Thu Oct 24 10:53:28 2013 us=374000 mode = 0
Thu Oct 24 10:53:28 2013 us=374000 show_ciphers = DISABLED
Thu Oct 24 10:53:28 2013 us=374000 show_digests = DISABLED
Thu Oct 24 10:53:28 2013 us=375000 show_engines = DISABLED
Thu Oct 24 10:53:28 2013 us=375000 genkey = DISABLED
Thu Oct 24 10:53:28 2013 us=375000 key_pass_file = '[UNDEF]'
Thu Oct 24 10:53:28 2013 us=375000 show_tls_ciphers = DISABLED
Thu Oct 24 10:53:28 2013 us=375000 Connection profiles [default]:
Thu Oct 24 10:53:28 2013 us=376000 proto = udp
Thu Oct 24 10:53:28 2013 us=376000 local = '[UNDEF]'
Thu Oct 24 10:53:28 2013 us=376000 local_port = 0
Thu Oct 24 10:53:28 2013 us=376000 remote = 'mydnsat.dyndns.org'
Thu Oct 24 10:53:28 2013 us=376000 remote_port = 1194
Thu Oct 24 10:53:28 2013 us=376000 remote_float = DISABLED
Thu Oct 24 10:53:28 2013 us=376000 bind_defined = DISABLED
Thu Oct 24 10:53:28 2013 us=376000 bind_local = DISABLED
Thu Oct 24 10:53:28 2013 us=376000 connect_retry_seconds = 5
Thu Oct 24 10:53:28 2013 us=376000 connect_timeout = 10
Thu Oct 24 10:53:28 2013 us=376000 NOTE: --mute triggered...
Thu Oct 24 10:53:28 2013 us=376000 265 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:28 2013 us=376000 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Thu Oct 24 10:53:28 2013 us=398000 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Thu Oct 24 10:53:28 2013 us=398000 Need hold release from management interface, waiting...
Thu Oct 24 10:53:28 2013 us=711000 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Thu Oct 24 10:53:28 2013 us=812000 MANAGEMENT: CMD 'state on'
Thu Oct 24 10:53:28 2013 us=812000 MANAGEMENT: CMD 'log all on'
Thu Oct 24 10:53:28 2013 us=890000 MANAGEMENT: CMD 'hold off'
Thu Oct 24 10:53:28 2013 us=896000 MANAGEMENT: CMD 'hold release'
Thu Oct 24 10:53:30 2013 us=122000 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu Oct 24 10:53:30 2013 us=126000 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:30 2013 us=127000 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:30 2013 us=127000 LZO compression initialized
Thu Oct 24 10:53:30 2013 us=127000 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Oct 24 10:53:30 2013 us=128000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Oct 24 10:53:30 2013 us=128000 MANAGEMENT: >STATE:1382604810,RESOLVE,,,
Thu Oct 24 10:53:30 2013 us=278000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Oct 24 10:53:30 2013 us=278000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Oct 24 10:53:30 2013 us=278000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Oct 24 10:53:30 2013 us=278000 Local Options hash (VER=V4): '504e774e'
Thu Oct 24 10:53:30 2013 us=278000 Expected Remote Options hash (VER=V4): '14168603'
Thu Oct 24 10:53:30 2013 us=278000 UDPv4 link local: [undef]
Thu Oct 24 10:53:30 2013 us=278000 UDPv4 link remote: [AF_INET]XXX181.54.212:1194
Thu Oct 24 10:53:30 2013 us=278000 MANAGEMENT: >STATE:1382604810,WAIT,,,
Thu Oct 24 10:53:30 2013 us=279000 UDPv4 WRITE [42] to [AF_INET]XXX181.54.212:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Thu Oct 24 10:53:30 2013 us=280000 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Thu Oct 24 10:53:32 2013 us=452000 UDPv4 WRITE [42] to [AF_INET]XXX181.54.212:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
Thu Oct 24 10:53:32 2013 us=678000 UDPv4 READ [54] from [AF_INET]XXX181.54.212:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #2 ] [ 0 ] pid=0 DATA len=0
Thu Oct 24 10:53:32 2013 us=678000 MANAGEMENT: >STATE:1382604812,AUTH,,,
Thu Oct 24 10:53:32 2013 us=678000 TLS: Initial packet from [AF_INET]XXX181.54.212:1194, sid=bc16f7d5 3429f1e4
Thu Oct 24 10:53:32 2013 us=678000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #3 ] [ 0 ]
Thu Oct 24 10:53:32 2013 us=679000 UDPv4 WRITE [142] to [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=1 DATA len=100
Thu Oct 24 10:53:32 2013 us=680000 UDPv4 WRITE [142] to [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=2 DATA len=100
Thu Oct 24 10:53:32 2013 us=680000 UDPv4 WRITE [69] to [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=3 DATA len=27
Thu Oct 24 10:53:33 2013 us=12000 UDPv4 READ [50] from [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #3 ] [ 1 ]
Thu Oct 24 10:53:33 2013 us=15000 UDPv4 READ [50] from [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #4 ] [ 2 ]
Thu Oct 24 10:53:33 2013 us=123000 UDPv4 READ [154] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ 3 ] pid=1 DATA len=100
Thu Oct 24 10:53:33 2013 us=124000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 1 ]
Thu Oct 24 10:53:33 2013 us=127000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=2 DATA len=100
Thu Oct 24 10:53:33 2013 us=128000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 2 ]
Thu Oct 24 10:53:33 2013 us=128000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=3 DATA len=100
Thu Oct 24 10:53:33 2013 us=129000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #9 ] [ 3 ]
Thu Oct 24 10:53:33 2013 us=131000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=4 DATA len=100
Thu Oct 24 10:53:33 2013 us=131000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #10 ] [ 4 ]
Thu Oct 24 10:53:33 2013 us=430000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=5 DATA len=100
Thu Oct 24 10:53:33 2013 us=431000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #11 ] [ 5 ]
Thu Oct 24 10:53:33 2013 us=483000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=6 DATA len=100
Thu Oct 24 10:53:33 2013 us=485000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #12 ] [ 6 ]
Thu Oct 24 10:53:33 2013 us=487000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #11 ] [ ] pid=7 DATA len=100
Thu Oct 24 10:53:33 2013 us=488000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #13 ] [ 7 ]
Thu Oct 24 10:53:33 2013 us=489000 NOTE: --mute triggered...
Thu Oct 24 10:53:39 2013 us=757000 49 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:39 2013 us=757000 VERIFY OK: depth=1, C=DE, ST=Northrhine Westphalia, L=Home, O=Erde, OU=Disorder, CN=Erde_CA, emailAddress=mail@mail.de
Thu Oct 24 10:53:39 2013 us=758000 VERIFY OK: nsCertType=SERVER
Thu Oct 24 10:53:39 2013 us=758000 VERIFY OK: depth=0, C=DE, ST=Northrhine Westphalia, L=Home, O=Erde, OU=Disorder, CN=Igor, emailAddress=mail@mail.de
Thu Oct 24 10:53:39 2013 us=758000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #38 ] [ 32 ]
Thu Oct 24 10:53:39 2013 us=760000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #39 ] [ ] pid=33 DATA len=100
Thu Oct 24 10:53:39 2013 us=760000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #39 ] [ 33 ]
Thu Oct 24 10:53:39 2013 us=762000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #40 ] [ ] pid=34 DATA len=100
Thu Oct 24 10:53:39 2013 us=762000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #40 ] [ 34 ]
Thu Oct 24 10:53:39 2013 us=764000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #41 ] [ ] pid=35 DATA len=100
Thu Oct 24 10:53:39 2013 us=765000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #41 ] [ 35 ]
Thu Oct 24 10:53:39 2013 us=972000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #42 ] [ ] pid=36 DATA len=100
Thu Oct 24 10:53:39 2013 us=972000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #42 ] [ 36 ]
Thu Oct 24 10:53:39 2013 us=978000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #43 ] [ ] pid=37 DATA len=100
Thu Oct 24 10:53:39 2013 us=978000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #43 ] [ 37 ]
Thu Oct 24 10:53:39 2013 us=978000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #44 ] [ ] pid=38 DATA len=100
Thu Oct 24 10:53:39 2013 us=979000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #44 ] [ 38 ]
Thu Oct 24 10:53:39 2013 us=979000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #45 ] [ ] pid=39 DATA len=100
Thu Oct 24 10:53:39 2013 us=979000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #45 ] [ 39 ]
Thu Oct 24 10:53:40 2013 us=234000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #46 ] [ ] pid=40 DATA len=100
Thu Oct 24 10:53:40 2013 us=235000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #46 ] [ 40 ]
Thu Oct 24 10:53:40 2013 us=238000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #47 ] [ ] pid=41 DATA len=100
Thu Oct 24 10:53:40 2013 us=238000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #47 ] [ 41 ]
Thu Oct 24 10:53:40 2013 us=239000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #48 ] [ ] pid=42 DATA len=100
Thu Oct 24 10:53:40 2013 us=239000 NOTE: --mute triggered...
Thu Oct 24 10:53:47 2013 us=275000 148 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:47 2013 us=275000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 24 10:53:47 2013 us=275000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:47 2013 us=275000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 24 10:53:47 2013 us=275000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:47 2013 us=275000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #122 ] [ 71 ]
Thu Oct 24 10:53:47 2013 us=276000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Thu Oct 24 10:53:47 2013 us=276000 [Igor] Peer Connection Initiated with [AF_INET]XXX181.54.212:1194
Thu Oct 24 10:53:48 2013 us=301000 MANAGEMENT: >STATE:1382604828,GET_CONFIG,,,
Thu Oct 24 10:53:49 2013 us=326000 SENT CONTROL [Igor]: 'PUSH_REQUEST' (status=1)
Thu Oct 24 10:53:49 2013 us=326000 UDPv4 WRITE [132] to [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #123 ] [ ] pid=51 DATA len=90
Thu Oct 24 10:53:51 2013 us=461000 UDPv4 WRITE [132] to [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #124 ] [ ] pid=51 DATA len=90
Thu Oct 24 10:53:51 2013 us=715000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #128 ] [ ] pid=72 DATA len=100
Thu Oct 24 10:53:51 2013 us=716000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #125 ] [ 72 ]
Thu Oct 24 10:53:51 2013 us=822000 UDPv4 READ [50] from [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #129 ] [ 51 ]
Thu Oct 24 10:53:53 2013 us=151000 UDPv4 READ [142] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #130 ] [ ] pid=73 DATA len=100
Thu Oct 24 10:53:53 2013 us=151000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #126 ] [ 73 ]
Thu Oct 24 10:53:53 2013 us=486000 UDPv4 READ [92] from [AF_INET]XXX181.54.212:1194: P_CONTROL_V1 kid=0 pid=[ #131 ] [ ] pid=74 DATA len=50
Thu Oct 24 10:53:53 2013 us=486000 PUSH: Received control message: 'PUSH_REPLY,route 192.168.175.0 255.255.255.0,route 192.168.64.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Oct 24 10:53:53 2013 us=486000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Oct 24 10:53:53 2013 us=486000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Oct 24 10:53:53 2013 us=486000 OPTIONS IMPORT: route options modified
Thu Oct 24 10:53:53 2013 us=496000 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 24 10:53:53 2013 us=496000 MANAGEMENT: >STATE:1382604833,ASSIGN_IP,,10.8.0.6,
Thu Oct 24 10:53:53 2013 us=496000 open_tun, tt->ipv6=0
Thu Oct 24 10:53:53 2013 us=497000 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{C5660F7D-13C0-4C15-8928-C7CF27E9DC68}.tap
Thu Oct 24 10:53:53 2013 us=498000 TAP-Windows Driver Version 9.9
Thu Oct 24 10:53:53 2013 us=498000 TAP-Windows MTU=1500
Thu Oct 24 10:53:53 2013 us=502000 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C5660F7D-13C0-4C15-8928-C7CF27E9DC68} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Oct 24 10:53:53 2013 us=502000 Successful ARP Flush on interface [16] {C5660F7D-13C0-4C15-8928-C7CF27E9DC68}
Thu Oct 24 10:53:53 2013 us=518000 UDPv4 WRITE [50] to [AF_INET]XXX181.54.212:1194: P_ACK_V1 kid=0 pid=[ #127 ] [ 74 ]
Thu Oct 24 10:53:59 2013 us=108000 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Thu Oct 24 10:53:59 2013 us=108000 MANAGEMENT: >STATE:1382604839,ADD_ROUTES,,,
Thu Oct 24 10:53:59 2013 us=108000 C:\Windows\system32\route.exe ADD 192.168.175.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:53:59 2013 us=115000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 24 10:53:59 2013 us=115000 Route addition via IPAPI succeeded [adaptive]
Thu Oct 24 10:53:59 2013 us=115000 C:\Windows\system32\route.exe ADD 192.168.64.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:53:59 2013 us=128000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 24 10:53:59 2013 us=128000 Route addition via IPAPI succeeded [adaptive]
Thu Oct 24 10:53:59 2013 us=129000 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:53:59 2013 us=166000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 24 10:53:59 2013 us=166000 Route addition via IPAPI succeeded [adaptive]
Thu Oct 24 10:53:59 2013 us=166000 Initialization Sequence Completed
Thu Oct 24 10:53:59 2013 us=166000 MANAGEMENT: >STATE:1382604839,CONNECTED,SUCCESS,10.8.0.6,XXX181.54.212
Thu Oct 24 10:54:03 2013 us=771000 UDPv4 WRITE [53] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:03 2013 us=916000 UDPv4 READ [53] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:13 2013 us=167000 UDPv4 WRITE [53] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:13 2013 us=425000 UDPv4 READ [53] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:23 2013 us=214000 UDPv4 WRITE [53] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:23 2013 us=516000 UDPv4 READ [53] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:25 2013 us=213000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:25 2013 us=507000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:26 2013 us=220000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:26 2013 us=497000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:27 2013 us=222000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:27 2013 us=400000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:28 2013 us=225000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:28 2013 us=489000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:34 2013 us=656000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:34 2013 us=997000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:35 2013 us=670000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:36 2013 us=3000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:36 2013 us=671000 UDPv4 WRITE [101] to [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:36 2013 us=985000 UDPv4 READ [101] from [AF_INET]XXX181.54.212:1194: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:37 2013 us=673000 NOTE: --mute triggered...
Thu Oct 24 10:56:14 2013 us=226000 33 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:56:14 2013 us=226000 TCP/UDP: Closing socket
Thu Oct 24 10:56:14 2013 us=227000 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:56:14 2013 us=234000 Route deletion via IPAPI succeeded [adaptive]
Thu Oct 24 10:56:14 2013 us=235000 C:\Windows\system32\route.exe DELETE 192.168.64.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:56:14 2013 us=246000 Route deletion via IPAPI succeeded [adaptive]
Thu Oct 24 10:56:14 2013 us=246000 C:\Windows\system32\route.exe DELETE 192.168.175.0 MASK 255.255.255.0 10.8.0.5
Thu Oct 24 10:56:14 2013 us=257000 Route deletion via IPAPI succeeded [adaptive]
Thu Oct 24 10:56:14 2013 us=257000 Closing TUN/TAP interface
Thu Oct 24 10:56:14 2013 us=258000 SIGTERM[hard,] received, process exiting
Thu Oct 24 10:56:14 2013 us=258000 MANAGEMENT: >STATE:1382604974,EXITING,SIGTERM,,

honk

servers log at verb 6 is

Thu Oct 24 10:53:19 2013 us=858508 Current Parameter Settings:
Thu Oct 24 10:53:19 2013 us=858606 config = '/etc/openvpn/server.conf'
Thu Oct 24 10:53:19 2013 us=858622 mode = 1
Thu Oct 24 10:53:19 2013 us=858636 persist_config = DISABLED
Thu Oct 24 10:53:19 2013 us=858649 persist_mode = 1
Thu Oct 24 10:53:19 2013 us=858661 show_ciphers = DISABLED
Thu Oct 24 10:53:19 2013 us=858673 show_digests = DISABLED
Thu Oct 24 10:53:19 2013 us=858684 show_engines = DISABLED
Thu Oct 24 10:53:19 2013 us=858695 genkey = DISABLED
Thu Oct 24 10:53:19 2013 us=858707 key_pass_file = '[UNDEF]'
Thu Oct 24 10:53:19 2013 us=858718 show_tls_ciphers = DISABLED
Thu Oct 24 10:53:19 2013 us=858732 Connection profiles [default]:
Thu Oct 24 10:53:19 2013 us=858745 proto = udp
Thu Oct 24 10:53:19 2013 us=858757 local = '[UNDEF]'
Thu Oct 24 10:53:19 2013 us=858769 local_port = 1194
Thu Oct 24 10:53:19 2013 us=858780 remote = '[UNDEF]'
Thu Oct 24 10:53:19 2013 us=858792 remote_port = 1194
Thu Oct 24 10:53:19 2013 us=858803 remote_float = DISABLED
Thu Oct 24 10:53:19 2013 us=858815 bind_defined = DISABLED
Thu Oct 24 10:53:19 2013 us=858826 bind_local = ENABLED
Thu Oct 24 10:53:19 2013 us=858837 NOTE: --mute triggered...
Thu Oct 24 10:53:19 2013 us=858864 263 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:19 2013 us=858878 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Oct 24 10:53:19 2013 us=859108 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Oct 24 10:53:19 2013 us=917822 Diffie-Hellman initialized with 4096 bit key
Thu Oct 24 10:53:19 2013 us=918538 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu Oct 24 10:53:19 2013 us=918552 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:19 2013 us=918561 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:19 2013 us=918576 TLS-Auth MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Oct 24 10:53:19 2013 us=918599 Socket Buffers: R=[229376->131072] S=[229376->131072]
Thu Oct 24 10:53:19 2013 us=918717 ROUTE default_gateway=192.168.64.1
Thu Oct 24 10:53:19 2013 us=919304 TUN/TAP device tun0 opened
Thu Oct 24 10:53:19 2013 us=919327 TUN/TAP TX queue length set to 100
Thu Oct 24 10:53:19 2013 us=919343 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 24 10:53:19 2013 us=919363 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Thu Oct 24 10:53:19 2013 us=922440 /sbin/route add -net 192.168.175.0 netmask 255.255.255.0 gw 10.8.0.2
Thu Oct 24 10:53:19 2013 us=923224 /sbin/route add -net 192.168.34.0 netmask 255.255.255.0 gw 10.8.0.2
Thu Oct 24 10:53:19 2013 us=923885 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Thu Oct 24 10:53:19 2013 us=924477 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Oct 24 10:53:19 2013 us=925254 GID set to nogroup
Thu Oct 24 10:53:19 2013 us=925297 UID set to nobody
Thu Oct 24 10:53:19 2013 us=925317 UDPv4 link local (bound): [undef]
Thu Oct 24 10:53:19 2013 us=925324 UDPv4 link remote: [undef]
Thu Oct 24 10:53:19 2013 us=925334 MULTI: multi_init called, r=256 v=256
Thu Oct 24 10:53:19 2013 us=925380 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Oct 24 10:53:19 2013 us=925397 ifconfig_pool_read(), in='moinmoin,10.8.0.4', TODO: IPv6
Thu Oct 24 10:53:19 2013 us=925417 succeeded -> ifconfig_pool_set()
Thu Oct 24 10:53:19 2013 us=925425 ifconfig_pool_read(), in='edu,10.8.0.8', TODO: IPv6
Thu Oct 24 10:53:19 2013 us=925432 succeeded -> ifconfig_pool_set()
Thu Oct 24 10:53:19 2013 us=925440 IFCONFIG POOL LIST
Thu Oct 24 10:53:19 2013 us=925448 moinmoin,10.8.0.4
Thu Oct 24 10:53:19 2013 us=925454 edu,10.8.0.8
Thu Oct 24 10:53:19 2013 us=925481 Initialization Sequence Completed
Thu Oct 24 10:53:30 2013 us=186075 MULTI: multi_create_instance called
Thu Oct 24 10:53:30 2013 us=186173 XXX71.35.44:51920 Re-using SSL/TLS context
Thu Oct 24 10:53:30 2013 us=186203 XXX71.35.44:51920 LZO compression initialized
Thu Oct 24 10:53:30 2013 us=186356 XXX71.35.44:51920 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Oct 24 10:53:30 2013 us=186366 XXX71.35.44:51920 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Oct 24 10:53:30 2013 us=186401 XXX71.35.44:51920 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Oct 24 10:53:30 2013 us=186408 XXX71.35.44:51920 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Oct 24 10:53:30 2013 us=186425 XXX71.35.44:51920 Local Options hash (VER=V4): '14168603'
Thu Oct 24 10:53:30 2013 us=186440 XXX71.35.44:51920 Expected Remote Options hash (VER=V4): '504e774e'
Thu Oct 24 10:53:30 2013 us=186473 XXX71.35.44:51920 UDPv4 READ [42] from [AF_INET]XXX71.35.44:51920: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Thu Oct 24 10:53:30 2013 us=186487 XXX71.35.44:51920 TLS: Initial packet from [AF_INET]XXX71.35.44:51920, sid=98a2c666 56b52ebd
Thu Oct 24 10:53:30 2013 us=186521 XXX71.35.44:51920 UDPv4 WRITE [54] to [AF_INET]XXX71.35.44:51920: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Thu Oct 24 10:53:32 2013 us=358876 XXX71.35.44:51920 UDPv4 READ [42] from [AF_INET]XXX71.35.44:51920: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
Thu Oct 24 10:53:32 2013 us=358983 XXX71.35.44:51920 UDPv4 WRITE [54] to [AF_INET]XXX71.35.44:51920: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #2 ] [ 0 ] pid=0 DATA len=0
Thu Oct 24 10:53:32 2013 us=682907 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #3 ] [ 0 ]
Thu Oct 24 10:53:32 2013 us=684260 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=1 DATA len=100
Thu Oct 24 10:53:32 2013 us=684418 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #3 ] [ 1 ]
Thu Oct 24 10:53:32 2013 us=686683 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=2 DATA len=100
Thu Oct 24 10:53:32 2013 us=686729 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #4 ] [ 2 ]
Thu Oct 24 10:53:32 2013 us=687295 XXX71.35.44:51920 UDPv4 READ [69] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=3 DATA len=27
Thu Oct 24 10:53:32 2013 us=755688 XXX71.35.44:51920 UDPv4 WRITE [154] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #5 ] [ 3 ] pid=1 DATA len=100
Thu Oct 24 10:53:32 2013 us=755745 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=2 DATA len=100
Thu Oct 24 10:53:32 2013 us=755771 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=3 DATA len=100
Thu Oct 24 10:53:32 2013 us=755798 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=4 DATA len=100
Thu Oct 24 10:53:33 2013 us=51219 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #7 ] [ 1 ]
Thu Oct 24 10:53:33 2013 us=51321 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=5 DATA len=100
Thu Oct 24 10:53:33 2013 us=51933 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #8 ] [ 2 ]
Thu Oct 24 10:53:33 2013 us=78117 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=6 DATA len=100
Thu Oct 24 10:53:33 2013 us=78182 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #9 ] [ 3 ]
Thu Oct 24 10:53:33 2013 us=78203 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #11 ] [ ] pid=7 DATA len=100
Thu Oct 24 10:53:33 2013 us=78242 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #10 ] [ 4 ]
Thu Oct 24 10:53:33 2013 us=78261 XXX71.35.44:51920 NOTE: --mute triggered...
Thu Oct 24 10:53:44 2013 us=747346 XXX71.35.44:51920 154 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:44 2013 us=747407 XXX71.35.44:51920 VERIFY OK: depth=1, /C=DE/ST=Northrhine_Westphalia/L=Home/O=Erde/OU=Disorder/CN=Erde_CA/emailAddress=mail@mail.de
Thu Oct 24 10:53:44 2013 us=747978 XXX71.35.44:51920 VERIFY OK: depth=0, /C=DE/ST=Northrine_Westphalia/L=Home/O=Erde/OU=Disorder/CN=moinmoin/emailAddress=mail@mail.de
Thu Oct 24 10:53:44 2013 us=748066 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #89 ] [ 35 ]
Thu Oct 24 10:53:44 2013 us=960916 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #88 ] [ ] pid=36 DATA len=100
Thu Oct 24 10:53:44 2013 us=961051 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #90 ] [ 36 ]
Thu Oct 24 10:53:44 2013 us=963331 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #89 ] [ ] pid=37 DATA len=100
Thu Oct 24 10:53:44 2013 us=963378 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #91 ] [ 37 ]
Thu Oct 24 10:53:44 2013 us=964060 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #90 ] [ ] pid=38 DATA len=100
Thu Oct 24 10:53:44 2013 us=964102 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #92 ] [ 38 ]
Thu Oct 24 10:53:44 2013 us=966330 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #91 ] [ ] pid=39 DATA len=100
Thu Oct 24 10:53:44 2013 us=966398 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #93 ] [ 39 ]
Thu Oct 24 10:53:45 2013 us=296978 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #92 ] [ ] pid=40 DATA len=100
Thu Oct 24 10:53:45 2013 us=351408 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #94 ] [ 40 ]
Thu Oct 24 10:53:45 2013 us=351463 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #93 ] [ ] pid=41 DATA len=100
Thu Oct 24 10:53:45 2013 us=351489 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #95 ] [ 41 ]
Thu Oct 24 10:53:45 2013 us=351513 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #94 ] [ ] pid=42 DATA len=100
Thu Oct 24 10:53:45 2013 us=351533 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #96 ] [ 42 ]
Thu Oct 24 10:53:45 2013 us=351558 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #95 ] [ ] pid=43 DATA len=100
Thu Oct 24 10:53:45 2013 us=351577 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #97 ] [ 43 ]
Thu Oct 24 10:53:45 2013 us=643121 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #96 ] [ ] pid=44 DATA len=100
Thu Oct 24 10:53:45 2013 us=643249 XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #98 ] [ 44 ]
Thu Oct 24 10:53:45 2013 us=644575 XXX71.35.44:51920 UDPv4 READ [142] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #97 ] [ ] pid=45 DATA len=100
Thu Oct 24 10:53:45 2013 us=645399 XXX71.35.44:51920 NOTE: --mute triggered...
Thu Oct 24 10:53:46 2013 us=886386 XXX71.35.44:51920 44 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:53:46 2013 us=886449 XXX71.35.44:51920 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 24 10:53:46 2013 us=886467 XXX71.35.44:51920 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:46 2013 us=886565 XXX71.35.44:51920 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 24 10:53:46 2013 us=886581 XXX71.35.44:51920 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 24 10:53:46 2013 us=886648 XXX71.35.44:51920 UDPv4 WRITE [154] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #121 ] [ 50 ] pid=69 DATA len=100
Thu Oct 24 10:53:46 2013 us=886696 XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #122 ] [ ] pid=70 DATA len=100
Thu Oct 24 10:53:46 2013 us=886736 XXX71.35.44:51920 UDPv4 WRITE [124] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #123 ] [ ] pid=71 DATA len=82
Thu Oct 24 10:53:47 2013 us=176501 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #120 ] [ 69 ]
Thu Oct 24 10:53:47 2013 us=178410 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #121 ] [ 70 ]
Thu Oct 24 10:53:47 2013 us=180643 XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #122 ] [ 71 ]
Thu Oct 24 10:53:47 2013 us=180666 XXX71.35.44:51920 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Thu Oct 24 10:53:47 2013 us=180686 XXX71.35.44:51920 [moinmoin] Peer Connection Initiated with [AF_INET]XXX71.35.44:51920
Thu Oct 24 10:53:47 2013 us=180724 moinmoin/XXX71.35.44:51920 OPTIONS IMPORT: reading client specific options from: ccd/moinmoin
Thu Oct 24 10:53:47 2013 us=180821 moinmoin/XXX71.35.44:51920 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=b061:3d8e:e07f:0:15c8:918b:e07f:0
Thu Oct 24 10:53:47 2013 us=180857 moinmoin/XXX71.35.44:51920 MULTI: Learn: 10.8.0.6 -> moinmoin/XXX71.35.44:51920
Thu Oct 24 10:53:47 2013 us=180867 moinmoin/XXX71.35.44:51920 MULTI: primary virtual IP for moinmoin/XXX71.35.44:51920: 10.8.0.6
Thu Oct 24 10:53:47 2013 us=180876 moinmoin/XXX71.35.44:51920 MULTI: internal route 192.168.34.0/24 -> moinmoin/XXX71.35.44:51920
Thu Oct 24 10:53:47 2013 us=180886 moinmoin/XXX71.35.44:51920 MULTI: Learn: 192.168.34.0/24 -> moinmoin/XXX71.35.44:51920
Thu Oct 24 10:53:47 2013 us=180899 moinmoin/XXX71.35.44:51920 REMOVE PUSH ROUTE: 'route 192.168.34.0 255.255.255.0'
Thu Oct 24 10:53:49 2013 us=231937 moinmoin/XXX71.35.44:51920 UDPv4 READ [132] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #123 ] [ ] pid=51 DATA len=90
Thu Oct 24 10:53:49 2013 us=232103 moinmoin/XXX71.35.44:51920 PUSH: Received control message: 'PUSH_REQUEST'
Thu Oct 24 10:53:49 2013 us=232121 moinmoin/XXX71.35.44:51920 send_push_reply(): safe_cap=960
Thu Oct 24 10:53:49 2013 us=232173 moinmoin/XXX71.35.44:51920 SENT CONTROL [moinmoin]: 'PUSH_REPLY,route 192.168.175.0 255.255.255.0,route 192.168.64.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Oct 24 10:53:49 2013 us=232203 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #124 ] [ 51 ]
Thu Oct 24 10:53:49 2013 us=232264 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #125 ] [ ] pid=72 DATA len=100
Thu Oct 24 10:53:49 2013 us=232308 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #126 ] [ ] pid=73 DATA len=100
Thu Oct 24 10:53:49 2013 us=232350 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [92] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #127 ] [ ] pid=74 DATA len=50
Thu Oct 24 10:53:51 2013 us=267491 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #128 ] [ ] pid=72 DATA len=100
Thu Oct 24 10:53:51 2013 us=366798 moinmoin/XXX71.35.44:51920 UDPv4 READ [132] from [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #124 ] [ ] pid=51 DATA len=90
Thu Oct 24 10:53:51 2013 us=366884 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [50] to [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #129 ] [ 51 ]
Thu Oct 24 10:53:51 2013 us=701749 moinmoin/XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #125 ] [ 72 ]
Thu Oct 24 10:53:52 2013 us=730064 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [142] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #130 ] [ ] pid=73 DATA len=100
Thu Oct 24 10:53:53 2013 us=61293 moinmoin/XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #126 ] [ 73 ]
Thu Oct 24 10:53:53 2013 us=61399 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [92] to [AF_INET]XXX71.35.44:51920: P_CONTROL_V1 kid=0 pid=[ #131 ] [ ] pid=74 DATA len=50
Thu Oct 24 10:53:53 2013 us=445412 moinmoin/XXX71.35.44:51920 UDPv4 READ [50] from [AF_INET]XXX71.35.44:51920: P_ACK_V1 kid=0 pid=[ #127 ] [ 74 ]
Thu Oct 24 10:54:03 2013 us=505462 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:03 2013 us=675664 moinmoin/XXX71.35.44:51920 UDPv4 READ [53] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:13 2013 us=73584 moinmoin/XXX71.35.44:51920 UDPv4 READ [53] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:13 2013 us=73705 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:23 2013 us=118320 moinmoin/XXX71.35.44:51920 UDPv4 READ [53] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:23 2013 us=118457 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:54:25 2013 us=117027 moinmoin/XXX71.35.44:51920 UDPv4 READ [101] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=100
Thu Oct 24 10:54:25 2013 us=117111 moinmoin/XXX71.35.44:51920 TUN WRITE [60]
Thu Oct 24 10:54:25 2013 us=117167 moinmoin/XXX71.35.44:51920 NOTE: --mute triggered...
Thu Oct 24 10:55:50 2013 us=338113 66 variation(s) on previous 20 message(s) suppressed by --mute
Thu Oct 24 10:55:50 2013 us=338164 MULTI: Learn: 192.168.34.20 -> moinmoin/XXX71.35.44:51920
Thu Oct 24 10:55:50 2013 us=338173 moinmoin/XXX71.35.44:51920 TUN READ [84]
Thu Oct 24 10:55:50 2013 us=338208 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [125] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=124
Thu Oct 24 10:55:51 2013 us=346923 moinmoin/XXX71.35.44:51920 TUN READ [84]
Thu Oct 24 10:55:51 2013 us=347032 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [125] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=124
Thu Oct 24 10:55:52 2013 us=354949 moinmoin/XXX71.35.44:51920 TUN READ [84]
Thu Oct 24 10:55:52 2013 us=355055 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [125] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=124
Thu Oct 24 10:55:53 2013 us=362925 moinmoin/XXX71.35.44:51920 TUN READ [84]
Thu Oct 24 10:55:53 2013 us=363041 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [125] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=124
Thu Oct 24 10:55:54 2013 us=370925 moinmoin/XXX71.35.44:51920 TUN READ [84]
Thu Oct 24 10:55:54 2013 us=371036 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [125] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=124
Thu Oct 24 10:56:00 2013 us=570322 moinmoin/XXX71.35.44:51920 UDPv4 READ [53] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:56:04 2013 us=693605 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:56:09 2013 us=920263 moinmoin/XXX71.35.44:51920 UDPv4 READ [53] from [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:56:15 2013 us=41072 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:56:25 2013 us=65292 moinmoin/XXX71.35.44:51920 UDPv4 WRITE [53] to [AF_INET]XXX71.35.44:51920: P_DATA_V1 kid=0 DATA len=52
Thu Oct 24 10:56:26 2013 us=732861 event_wait : Interrupted system call (code=4)
Thu Oct 24 10:56:26 2013 us=733245 TCP/UDP: Closing socket
Thu Oct 24 10:56:26 2013 us=733303 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
SIOCDELRT: Operation not permitted
Thu Oct 24 10:56:26 2013 us=734557 ERROR: Linux route delete command failed: external program exited with error status: 7
Thu Oct 24 10:56:26 2013 us=734613 /sbin/route del -net 192.168.34.0 netmask 255.255.255.0
SIOCDELRT: Operation not permitted
Thu Oct 24 10:56:26 2013 us=735749 ERROR: Linux route delete command failed: external program exited with error status: 7
Thu Oct 24 10:56:26 2013 us=735817 /sbin/route del -net 192.168.175.0 netmask 255.255.255.0
SIOCDELRT: Operation not permitted
Thu Oct 24 10:56:26 2013 us=742313 ERROR: Linux route delete command failed: external program exited with error status: 7
Thu Oct 24 10:56:26 2013 us=742369 Closing TUN/TAP interface
Thu Oct 24 10:56:26 2013 us=742394 /sbin/ifconfig tun0 0.0.0.0
SIOCSIFADDR: Permission denied
SIOCSIFFLAGS: Permission denied
Thu Oct 24 10:56:26 2013 us=743959 Linux ip addr del failed: external program exited with error status: 255
Thu Oct 24 10:56:26 2013 us=768934 SIGTERM[hard,] received, process exiting

honk

update: maybe I missed something, enabling the ping rule in clients firewall. I'm not a windows native.

Switching FW off enables me to ping the client. But only the tunnel-ip, not the local network ip.

root@igor:/etc/openvpn# ls -ld ccd
drwxr-xr-x 2 root root 4096 Okt 23 08:47 ccd

root@igor:/etc/openvpn# ls -l ccd
insgesamt 8
-rw-r--r-- 1 root root 35 Okt 23 08:47 edu
-rw-r--r-- 1 root root 34 Okt 22 19:24 moinmoin

read access should be good enough

edit: removing user, group change doesn't change behaviour

honk

sound plausible.

Will check, how to enable forwarding on a windows client and how to perforate windows fw the right way.

Thank you.

deguler

After several hours of frustration...
I don't know about XP or 7, but on Windows 8, after enabling IPEnableRouter you must reboot for it to take effect!
One good way to know if IP forwarding is on or not is to run

ipconfig /all

and see "IP Routing Enabled" under "Windows IP Configuration".