So, my server has been working fine for ages, clients can connect without any problems. In my home network, I have PC1, which is connecting to the server fine. PC2 however, which is raspbmc gives an error: WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Why does it give this conflict when none of the other computers do? My internal LAN isn't even on 172.16 it is on 192.168.0.x client.ovpn [code]client dev tun1 proto tcp remote 88.xxx.xxx.xxx 1194 resolv-retry infinite nobind persist-key persist-tun ns-cert-type server comp-lzo verb 1[/code] [i]ca, crt, key follows inline[/i] server.conf [code]port 1194 proto tcp dev tun ;crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem crl-verify /etc/openvpn/crl.pem client-config-dir /etc/openvpn/ccd ca ca.crt cert server.crt key server.key dh dh1024.pem server 172.16.0.0 255.255.255.0 push "redirect-gateway" push "dhcp-option DNS 213.171.192.249" push "dhcp-option DNS 213.171.192.245" ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group users tun-mtu 1460 persist-key persist-tun status openvpn-status.log verb 3 ;duplicate-cn # (this means several users can use the same key) log /var/log/openvpn.log [/code]

[quote="debbie10t"]Although your versions are not the most up to date I think we can still try to work with them. I notice in your server config you are using "client-config-dir" and you have commented out ";duplicate-cn", I am suspicious that you use duplicate certificates, can you confirm if you have used duplicate certs for this new machine or not ? Although this is not the error I would expect to see, it may be something we have overlooked. Does the error occur at your rasbmc ? Can you please post your full server & client log ? (use code: delimiters)[/quote] I don;t issue any duplicates, I am using duplicate-cn to stop a certificate from being copied and used by more than 1 client. For example, where a client might copy the certificate in the same network and give it to a friend to connect. The strange thing is this. I have 1 connection on tcp and 1 on udp. Both give the subnet conflict. Also, this hapens on raspbmc and also on Linux Mint (ubuntu) so it seems like it is an ubuntu problem somehow. tcp client log: [code] spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn Tue Nov 5 22:06:40 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:06:40 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:06:40 2013 LZO compression initialized Tue Nov 5 22:06:40 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock] Tue Nov 5 22:06:41 2013 TCP connection established with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:41 2013 TCPv4_CLIENT link local: [undef] Tue Nov 5 22:06:41 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:43 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504' Tue Nov 5 22:06:43 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460' Tue Nov 5 22:06:43 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:45 2013 TUN/TAP device tun1 opened Tue Nov 5 22:06:45 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:06:45 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500 Tue Nov 5 22:06:45 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Tue Nov 5 22:06:45 2013 Initialization Sequence Completed ^CTue Nov 5 22:06:59 2013 event_wait : Interrupted system call (code=4) Tue Nov 5 22:06:59 2013 /sbin/ifconfig tun1 0.0.0.0 Tue Nov 5 22:06:59 2013 SIGINT[hard,] received, process exiting spain ~ # nano /etc/openvpn/jw.jwebster_2.ovpn spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn Tue Nov 5 22:07:08 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:07:08 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:07:08 2013 LZO compression initialized Tue Nov 5 22:07:08 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock] Tue Nov 5 22:07:09 2013 TCP connection established with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:09 2013 TCPv4_CLIENT link local: [undef] Tue Nov 5 22:07:09 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:11 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504' Tue Nov 5 22:07:11 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460' Tue Nov 5 22:07:11 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:13 2013 TUN/TAP device tun1 opened Tue Nov 5 22:07:13 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:07:13 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500 Tue Nov 5 22:07:13 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Tue Nov 5 22:07:13 2013 Initialization Sequence Completed [/code] tcp server log [code] Tue Nov 5 22:10:10 2013 MULTI: multi_create_instance called Tue Nov 5 22:10:10 2013 Re-using SSL/TLS context Tue Nov 5 22:10:10 2013 LZO compression initialized Tue Nov 5 22:10:10 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1460) Tue Nov 5 22:10:10 2013 Control Channel MTU parms [ L:1504 D:140 EF:40 EB:0 ET:0 EL:0 ] Tue Nov 5 22:10:10 2013 Data Channel MTU parms [ L:1504 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ] Tue Nov 5 22:10:10 2013 Local Options hash (VER=V4): '3dc0591a' Tue Nov 5 22:10:10 2013 Expected Remote Options hash (VER=V4): '5e3b8323' Tue Nov 5 22:10:10 2013 TCP connection established with 86.15.42.109:49142 Tue Nov 5 22:10:10 2013 TCPv4_SERVER link local: [undef] Tue Nov 5 22:10:10 2013 TCPv4_SERVER link remote: 86.15.42.109:49142 Tue Nov 5 22:10:11 2013 86.15.42.109:49142 TLS: Initial packet from 86.15.42.109:49142, sid=9abbb370 e968926c Tue Nov 5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:13 2013 86.15.42.109:49142 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1504', remote='link-mtu 1544' Tue Nov 5 22:10:13 2013 86.15.42.109:49142 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1460', remote='tun-mtu 1500' Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Tue Nov 5 22:10:13 2013 86.15.42.109:49142 [jw.jwebster] Peer Connection Initiated with 86.15.42.109:49142 Tue Nov 5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: Learn: 172.16.0.86 -> jw.jwebster/86.15.42.109:49142 Tue Nov 5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: primary virtual IP for jw.jwebster/86.15.42.109:49142: 172.16.0.86 Tue Nov 5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 PUSH: Received control message: 'PUSH_REQUEST' Tue Nov 5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 SENT CONTROL [jw.jwebster]: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 172.16.0.1,topology net30,ping 10,ping-restart 120,ifconfig 172.16.0.86 172.16.0.85' (status=1) [/code] udp client log: [code] spain ~ # openvpn --config /etc/openvpn/jw.jwebster_1.ovpn Tue Nov 5 22:10:38 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:10:38 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:10:38 2013 LZO compression initialized Tue Nov 5 22:10:38 2013 UDPv4 link local: [undef] Tue Nov 5 22:10:38 2013 UDPv4 link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:10:39 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:10:41 2013 TUN/TAP device tun1 opened Tue Nov 5 22:10:41 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:10:41 2013 /sbin/ifconfig tun1 10.8.0.202 pointopoint 10.8.0.201 mtu 1500 Tue Nov 5 22:10:41 2013 WARNING: potential route subnet conflict between local LAN [10.8.0.0/255.255.255.0] and remote VPN [10.8.0.1/255.255.255.255] Tue Nov 5 22:10:41 2013 Initialization Sequence Completed [/code] udp server log: nothing...could just be that verb is set to 0.

[quote="debbie10t"]I notice you are using "tun1" . . . do you also have "tun0" ? If you use the same config on more than one tun device they will each need separate subnets, or you can use one instance of openvpn on the server which multiple clients can connect to. At this time, this is the only explanation I can think of. If this is not the case, you could try the IRC Channel #openvpn on freenode.net[/quote] This is the serve route. I have 2 instances one running on tcp, one running on udp. However, Windows clients connect to it fine without subnet warnings so is this something that only occurs on Linux? [code] Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.8.0.2 * 255.255.255.255 UH 0 0 0 tun1 172.16.0.2 * 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun1 172.16.0.0 172.16.0.2 255.255.255.0 UG 0 0 0 tun0 [/code]

[quote="debbie10t"][quote="qwertyjjj"]I have 2 instances one running on tcp, one running on udp. However, Windows clients connect to it fine without subnet warnings so is this something that only occurs on Linux?[/quote] [quote="debbie10t"]f you use the same config on more than one tun device they will each need separate subnets, or you can use one instance of openvpn on the server which multiple clients can connect to.[/quote] ~One or the other~ As you are using UPD & TCP you need two instances and you also REQUIRE two separate subnets. Which means you [u]CANNOT[/u] use 10.x.0.0 for both instances.[/quote] There are 2 instances now tcp runs on 10.8.0.0 udp runs on 172.16.0.0 If you want me to test with 1 instance running I can but I think it will be the same result. If it was a config error, you would think the Windows client clogs would have warnings as well and they don't. :cry:

strange subnet conflict

qwertyjjj

So, my server has been working fine for ages, clients can connect without any problems.
In my home network, I have PC1, which is connecting to the server fine.
PC2 however, which is raspbmc gives an error:
WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255]

Why does it give this conflict when none of the other computers do?
My internal LAN isn't even on 172.16 it is on 192.168.0.x

client.ovpn

client
dev tun1
proto tcp
remote 88.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 1

ca, crt, key follows inline

server.conf

port 1194
proto tcp
dev tun
;crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem
crl-verify /etc/openvpn/crl.pem
client-config-dir /etc/openvpn/ccd
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 213.171.192.249"
push "dhcp-option DNS 213.171.192.245"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
tun-mtu 1460
persist-key
persist-tun
status openvpn-status.log
verb 3
;duplicate-cn # (this means several users can use the same key)
log /var/log/openvpn.log

qwertyjjj

debbie10t wroteHi, you must have an old version of openvpn as "proto tcp" has been replaced by "proto tcp-server" or "proto tcp-client", you should upgrade to version 2.3.2

This warning is probably caused by the RaspBMC default network address:
WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255]
Check the settings on your device.

qwertyjjj wroteMy internal LAN isn't even on 172.16 it is on 192.168.0.x
Your vpn subnet is 172.16.0.0, as configured here:
Server
server 172.16.0.0 255.255.255.0

settings on the device are 192.168.0.11 255.255.255.0

pi@raspbmc:~$ ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:03:b7:b1  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wlan0     Link encap:Ethernet  HWaddr 80:1f:02:a6:9d:e9  
          inet addr:192.168.0.11  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::821f:2ff:fea6:9de9/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:85220 errors:0 dropped:87261 overruns:0 frame:0
          TX packets:33596 errors:0 dropped:1 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:109248179 (104.1 MiB)  TX bytes:4354045 (4.1 MiB)

when connected to openvpn:

pi@raspbmc:~$ ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:03:b7:b1  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

tun1      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:172.16.0.86  P-t-P:172.16.0.85  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:304 (304.0 B)  TX bytes:374 (374.0 B)

wlan0     Link encap:Ethernet  HWaddr 80:1f:02:a6:9d:e9  
          inet addr:192.168.0.11  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::821f:2ff:fea6:9de9/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:85786 errors:0 dropped:87841 overruns:0 frame:0
          TX packets:34026 errors:0 dropped:1 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:109337981 (104.2 MiB)  TX bytes:4436121 (4.2 MiB)

qwertyjjj

debbie10t wroteWhat versions of openvpn are you running on each of your machines ?

server is openvpn-2.2.2-1.el5.rf
client is OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] bu

I guess the client repors are old?
If so, what repo can I use for an up to date version of openvpn on mint/ubuntu/raspbmc?

qwertyjjj

debbie10t wroteAlthough your versions are not the most up to date I think we can still try to work with them.

I notice in your server config you are using "client-config-dir" and you have commented out ";duplicate-cn", I am suspicious that you use duplicate certificates, can you confirm if you have used duplicate certs for this new machine or not ?

Although this is not the error I would expect to see, it may be something we have overlooked. Does the error occur at your rasbmc ? Can you please post your full server & client log ? (use code: delimiters)

I don;t issue any duplicates, I am using duplicate-cn to stop a certificate from being copied and used by more than 1 client.
For example, where a client might copy the certificate in the same network and give it to a friend to connect.

The strange thing is this. I have 1 connection on tcp and 1 on udp.
Both give the subnet conflict.
Also, this hapens on raspbmc and also on Linux Mint (ubuntu) so it seems like it is an ubuntu problem somehow.

tcp client log:

spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn
Tue Nov  5 22:06:40 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Tue Nov  5 22:06:40 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov  5 22:06:40 2013 LZO compression initialized
Tue Nov  5 22:06:40 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock]
Tue Nov  5 22:06:41 2013 TCP connection established with [AF_INET]88.208.237.199:1194
Tue Nov  5 22:06:41 2013 TCPv4_CLIENT link local: [undef]
Tue Nov  5 22:06:41 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194
Tue Nov  5 22:06:43 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504'
Tue Nov  5 22:06:43 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460'
Tue Nov  5 22:06:43 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Tue Nov  5 22:06:45 2013 TUN/TAP device tun1 opened
Tue Nov  5 22:06:45 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov  5 22:06:45 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500
Tue Nov  5 22:06:45 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255]
Tue Nov  5 22:06:45 2013 Initialization Sequence Completed
^CTue Nov  5 22:06:59 2013 event_wait : Interrupted system call (code=4)
Tue Nov  5 22:06:59 2013 /sbin/ifconfig tun1 0.0.0.0
Tue Nov  5 22:06:59 2013 SIGINT[hard,] received, process exiting
spain ~ # nano /etc/openvpn/jw.jwebster_2.ovpn
spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn
Tue Nov  5 22:07:08 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Tue Nov  5 22:07:08 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov  5 22:07:08 2013 LZO compression initialized
Tue Nov  5 22:07:08 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock]
Tue Nov  5 22:07:09 2013 TCP connection established with [AF_INET]88.208.237.199:1194
Tue Nov  5 22:07:09 2013 TCPv4_CLIENT link local: [undef]
Tue Nov  5 22:07:09 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194
Tue Nov  5 22:07:11 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504'
Tue Nov  5 22:07:11 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460'
Tue Nov  5 22:07:11 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Tue Nov  5 22:07:13 2013 TUN/TAP device tun1 opened
Tue Nov  5 22:07:13 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov  5 22:07:13 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500
Tue Nov  5 22:07:13 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255]
Tue Nov  5 22:07:13 2013 Initialization Sequence Completed

tcp server log

Tue Nov  5 22:10:10 2013 MULTI: multi_create_instance called
Tue Nov  5 22:10:10 2013 Re-using SSL/TLS context
Tue Nov  5 22:10:10 2013 LZO compression initialized
Tue Nov  5 22:10:10 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1460)
Tue Nov  5 22:10:10 2013 Control Channel MTU parms [ L:1504 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Nov  5 22:10:10 2013 Data Channel MTU parms [ L:1504 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov  5 22:10:10 2013 Local Options hash (VER=V4): '3dc0591a'
Tue Nov  5 22:10:10 2013 Expected Remote Options hash (VER=V4): '5e3b8323'
Tue Nov  5 22:10:10 2013 TCP connection established with 86.15.42.109:49142
Tue Nov  5 22:10:10 2013 TCPv4_SERVER link local: [undef]
Tue Nov  5 22:10:10 2013 TCPv4_SERVER link remote: 86.15.42.109:49142
Tue Nov  5 22:10:11 2013 86.15.42.109:49142 TLS: Initial packet from 86.15.42.109:49142, sid=9abbb370 e968926c
Tue Nov  5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk
Tue Nov  5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk
Tue Nov  5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk
Tue Nov  5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1504', remote='link-mtu 1544'
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1460', remote='tun-mtu 1500'
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Nov  5 22:10:13 2013 86.15.42.109:49142 [jw.jwebster] Peer Connection Initiated with 86.15.42.109:49142
Tue Nov  5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: Learn: 172.16.0.86 -> jw.jwebster/86.15.42.109:49142
Tue Nov  5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: primary virtual IP for jw.jwebster/86.15.42.109:49142: 172.16.0.86
Tue Nov  5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 PUSH: Received control message: 'PUSH_REQUEST'
Tue Nov  5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 SENT CONTROL [jw.jwebster]: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 172.16.0.1,topology net30,ping 10,ping-restart 120,ifconfig 172.16.0.86 172.16.0.85' (status=1)

udp client log:

spain ~ # openvpn --config /etc/openvpn/jw.jwebster_1.ovpn
Tue Nov  5 22:10:38 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Tue Nov  5 22:10:38 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov  5 22:10:38 2013 LZO compression initialized
Tue Nov  5 22:10:38 2013 UDPv4 link local: [undef]
Tue Nov  5 22:10:38 2013 UDPv4 link remote: [AF_INET]88.208.237.199:1194
Tue Nov  5 22:10:39 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Tue Nov  5 22:10:41 2013 TUN/TAP device tun1 opened
Tue Nov  5 22:10:41 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov  5 22:10:41 2013 /sbin/ifconfig tun1 10.8.0.202 pointopoint 10.8.0.201 mtu 1500
Tue Nov  5 22:10:41 2013 WARNING: potential route subnet conflict between local LAN [10.8.0.0/255.255.255.0] and remote VPN [10.8.0.1/255.255.255.255]
Tue Nov  5 22:10:41 2013 Initialization Sequence Completed

udp server log:
nothing...could just be that verb is set to 0.

qwertyjjj

debbie10t wrote
qwertyjjj wroteI don;t issue any duplicates, I am using duplicate-cn to stop a certificate from being copied and used by more than 1 client.
For example, where a client might copy the certificate in the same network and give it to a friend to connect.
According to your reply, you are using duplicate-cn for the opposite of it's intended use.
The Manual wrote
--duplicate-cn
              Allow  multiple clients with the same common name to concurrently connect.  In the
              absence of this option, OpenVPN will disconnect a client instance upon  connection
              of a new client having the same common name.
Notice "In the absence of this option"

However, you are aware that some of your clients copy their certs and then try to connect.

There is nothing we can do to prevent the issues you are having if you are using duplicates. Your VPN is fully functional, your deployment is messy and as a result you are seeing these warnings. The only sensible advice I can offer is to disconnect all your clients and try the raspbmc, I doubt you will see any warnings if you only have one client connected.

Remember though, you will have to tear down all your current routing to ensure you do not have any stale routes causing the warnings.

But I commented out duplicate-cn (;duplicate-cn). That means: DisAllow multiple clients with the same common name to concurrently connect. I'm not sure I really understand - if that line wasn't in the conf, which it isn;t because it is commented out, then the server would just be acting by default...

I am not aware any clients copy the certificate, it could just be possible.
Besides, the certificate with the error is my certificate, which I have not copied and no-one else could have. By default, every client has a different common name. I can issue myself a new certificate if you want to test this but I suspect it will be the same error.
The question remains, how can multiple Windows clients connect without routing problems but not Linux?

qwertyjjj

killed openvpn on server
restarted
started openvpn again and connected on client:

client conf

client
dev tun1
proto udp
remote 88.208.237.199 1194
resolv-retry infinite
#route-nopull
#dhcp-option DNS 8.8.8.8
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 4
#log /etc/openvpn/client.log
<ca>
-----BEGIN CERTIFICATE-----

server conf

local 88.208.237.199
port 1194
proto udp
dev tun1
crl-verify /etc/openvpn/crl.pem
client-config-dir /etc/openvpn/ccd
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 213.171.192.249"
push "dhcp-option DNS 213.171.192.245"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status2.log
verb 4
log /var/log/openvpn2.log
tun-mtu 1500

sudo openvpn --config /etc/openvpn/jw.jwebster_1.ovpn[sudo] password for jason: 
Sat Nov  9 09:49:42 2013 us=166364 Current Parameter Settings:
Sat Nov  9 09:49:42 2013 us=166490   config = '/etc/openvpn/jw.jwebster_1.ovpn'
Sat Nov  9 09:49:42 2013 us=166530   mode = 0
Sat Nov  9 09:49:42 2013 us=166582   persist_config = DISABLED
Sat Nov  9 09:49:42 2013 us=166628   persist_mode = 1
Sat Nov  9 09:49:42 2013 us=166670   show_ciphers = DISABLED
Sat Nov  9 09:49:42 2013 us=166705   show_digests = DISABLED
Sat Nov  9 09:49:42 2013 us=166737   show_engines = DISABLED
Sat Nov  9 09:49:42 2013 us=166773   genkey = DISABLED
Sat Nov  9 09:49:42 2013 us=166806   key_pass_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=166849   show_tls_ciphers = DISABLED
Sat Nov  9 09:49:42 2013 us=166889 Connection profiles [default]:
Sat Nov  9 09:49:42 2013 us=166924   proto = udp
Sat Nov  9 09:49:42 2013 us=166960   local = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=166997   local_port = 0
Sat Nov  9 09:49:42 2013 us=167033   remote = '88.208.237.199'
Sat Nov  9 09:49:42 2013 us=167071   remote_port = 1194
Sat Nov  9 09:49:42 2013 us=167106   remote_float = DISABLED
Sat Nov  9 09:49:42 2013 us=167140   bind_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=167176   bind_local = DISABLED
Sat Nov  9 09:49:42 2013 us=167212   connect_retry_seconds = 5
Sat Nov  9 09:49:42 2013 us=167246   connect_timeout = 10
Sat Nov  9 09:49:42 2013 us=167283   connect_retry_max = 0
Sat Nov  9 09:49:42 2013 us=167318   socks_proxy_server = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167352   socks_proxy_port = 0
Sat Nov  9 09:49:42 2013 us=167387   socks_proxy_retry = DISABLED
Sat Nov  9 09:49:42 2013 us=167425 Connection profiles END
Sat Nov  9 09:49:42 2013 us=167458   remote_random = DISABLED
Sat Nov  9 09:49:42 2013 us=167492   ipchange = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167526   dev = 'tun1'
Sat Nov  9 09:49:42 2013 us=167562   dev_type = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167598   dev_node = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167632   lladdr = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167670   topology = 1
Sat Nov  9 09:49:42 2013 us=167707   tun_ipv6 = DISABLED
Sat Nov  9 09:49:42 2013 us=167746   ifconfig_local = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167781   ifconfig_remote_netmask = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167819   ifconfig_noexec = DISABLED
Sat Nov  9 09:49:42 2013 us=167853   ifconfig_nowarn = DISABLED
Sat Nov  9 09:49:42 2013 us=167888   ifconfig_ipv6_local = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167925   ifconfig_ipv6_netbits = 0
Sat Nov  9 09:49:42 2013 us=167961   ifconfig_ipv6_remote = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=167994   shaper = 0
Sat Nov  9 09:49:42 2013 us=168030   tun_mtu = 1500
Sat Nov  9 09:49:42 2013 us=168065   tun_mtu_defined = ENABLED
Sat Nov  9 09:49:42 2013 us=168099   link_mtu = 1500
Sat Nov  9 09:49:42 2013 us=168135   link_mtu_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=168170   tun_mtu_extra = 0
Sat Nov  9 09:49:42 2013 us=168203   tun_mtu_extra_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=168240   fragment = 0
Sat Nov  9 09:49:42 2013 us=168275   mtu_discover_type = -1
Sat Nov  9 09:49:42 2013 us=168309   mtu_test = 0
Sat Nov  9 09:49:42 2013 us=168346   mlock = DISABLED
Sat Nov  9 09:49:42 2013 us=168380   keepalive_ping = 0
Sat Nov  9 09:49:42 2013 us=168412   keepalive_timeout = 0
Sat Nov  9 09:49:42 2013 us=168451   inactivity_timeout = 0
Sat Nov  9 09:49:42 2013 us=168486   ping_send_timeout = 0
Sat Nov  9 09:49:42 2013 us=168519   ping_rec_timeout = 0
Sat Nov  9 09:49:42 2013 us=168557   ping_rec_timeout_action = 0
Sat Nov  9 09:49:42 2013 us=168591   ping_timer_remote = DISABLED
Sat Nov  9 09:49:42 2013 us=168624   remap_sigusr1 = 0
Sat Nov  9 09:49:42 2013 us=168663   explicit_exit_notification = 0
Sat Nov  9 09:49:42 2013 us=168697   persist_tun = ENABLED
Sat Nov  9 09:49:42 2013 us=168730   persist_local_ip = DISABLED
Sat Nov  9 09:49:42 2013 us=168767   persist_remote_ip = DISABLED
Sat Nov  9 09:49:42 2013 us=168801   persist_key = ENABLED
Sat Nov  9 09:49:42 2013 us=168835   mssfix = 1450
Sat Nov  9 09:49:42 2013 us=168871   passtos = DISABLED
Sat Nov  9 09:49:42 2013 us=168905   resolve_retry_seconds = 1000000000
Sat Nov  9 09:49:42 2013 us=168939   username = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=168966   groupname = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=168986   chroot_dir = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169007   cd_dir = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169027   writepid = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169047   up_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169067   down_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169087   down_pre = DISABLED
Sat Nov  9 09:49:42 2013 us=169107   up_restart = DISABLED
Sat Nov  9 09:49:42 2013 us=169127   up_delay = DISABLED
Sat Nov  9 09:49:42 2013 us=169163   daemon = DISABLED
Sat Nov  9 09:49:42 2013 us=169185   inetd = 0
Sat Nov  9 09:49:42 2013 us=169205   log = DISABLED
Sat Nov  9 09:49:42 2013 us=169225   suppress_timestamps = DISABLED
Sat Nov  9 09:49:42 2013 us=169249   nice = 0
Sat Nov  9 09:49:42 2013 us=169269   verbosity = 4
Sat Nov  9 09:49:42 2013 us=169289   mute = 0
Sat Nov  9 09:49:42 2013 us=169310   gremlin = 0
Sat Nov  9 09:49:42 2013 us=169329   status_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169350   status_file_version = 1
Sat Nov  9 09:49:42 2013 us=169370   status_file_update_freq = 60
Sat Nov  9 09:49:42 2013 us=169389   occ = ENABLED
Sat Nov  9 09:49:42 2013 us=169410   rcvbuf = 65536
Sat Nov  9 09:49:42 2013 us=169429   sndbuf = 65536
Sat Nov  9 09:49:42 2013 us=169449   sockflags = 0
Sat Nov  9 09:49:42 2013 us=169469   fast_io = DISABLED
Sat Nov  9 09:49:42 2013 us=169489   lzo = 7
Sat Nov  9 09:49:42 2013 us=169509   route_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169529   route_default_gateway = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169549   route_default_metric = 0
Sat Nov  9 09:49:42 2013 us=169569   route_noexec = DISABLED
Sat Nov  9 09:49:42 2013 us=169591   route_delay = 0
Sat Nov  9 09:49:42 2013 us=169612   route_delay_window = 30
Sat Nov  9 09:49:42 2013 us=169632   route_delay_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=169652   route_nopull = DISABLED
Sat Nov  9 09:49:42 2013 us=169672   route_gateway_via_dhcp = DISABLED
Sat Nov  9 09:49:42 2013 us=169693   max_routes = 100
Sat Nov  9 09:49:42 2013 us=169713   allow_pull_fqdn = DISABLED
Sat Nov  9 09:49:42 2013 us=169734   management_addr = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169754   management_port = 0
Sat Nov  9 09:49:42 2013 us=169775   management_user_pass = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169795   management_log_history_cache = 250
Sat Nov  9 09:49:42 2013 us=169815   management_echo_buffer_size = 100
Sat Nov  9 09:49:42 2013 us=169835   management_write_peer_info_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169858   management_client_user = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169879   management_client_group = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169899   management_flags = 0
Sat Nov  9 09:49:42 2013 us=169919   shared_secret_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=169940   key_direction = 0
Sat Nov  9 09:49:42 2013 us=169959   ciphername_defined = ENABLED
Sat Nov  9 09:49:42 2013 us=169980   ciphername = 'BF-CBC'
Sat Nov  9 09:49:42 2013 us=170000   authname_defined = ENABLED
Sat Nov  9 09:49:42 2013 us=170020   authname = 'SHA1'
Sat Nov  9 09:49:42 2013 us=170040   prng_hash = 'SHA1'
Sat Nov  9 09:49:42 2013 us=170060   prng_nonce_secret_len = 16
Sat Nov  9 09:49:42 2013 us=170080   keysize = 0
Sat Nov  9 09:49:42 2013 us=170100   engine = DISABLED
Sat Nov  9 09:49:42 2013 us=170120   replay = ENABLED
Sat Nov  9 09:49:42 2013 us=170140   mute_replay_warnings = DISABLED
Sat Nov  9 09:49:42 2013 us=170161   replay_window = 64
Sat Nov  9 09:49:42 2013 us=170181   replay_time = 15
Sat Nov  9 09:49:42 2013 us=170201   packet_id_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170221   use_iv = ENABLED
Sat Nov  9 09:49:42 2013 us=170241   test_crypto = DISABLED
Sat Nov  9 09:49:42 2013 us=170261   tls_server = DISABLED
Sat Nov  9 09:49:42 2013 us=170281   tls_client = ENABLED
Sat Nov  9 09:49:42 2013 us=170301   key_method = 2
Sat Nov  9 09:49:42 2013 us=170321   ca_file = '[[INLINE]]'
Sat Nov  9 09:49:42 2013 us=170340   ca_path = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170360   dh_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170379   cert_file = '[[INLINE]]'
Sat Nov  9 09:49:42 2013 us=170399   priv_key_file = '[[INLINE]]'
Sat Nov  9 09:49:42 2013 us=170419   pkcs12_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170438   cipher_list = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170457   tls_verify = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170476   tls_export_cert = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170496   tls_remote = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170515   crl_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170535   ns_cert_type = 64
Sat Nov  9 09:49:42 2013 us=170555   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170574   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170593   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170613   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170632   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170652   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170671   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170690   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170709   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170729   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170748   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170768   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170787   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170806   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170826   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170845   remote_cert_ku[i] = 0
Sat Nov  9 09:49:42 2013 us=170864   remote_cert_eku = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=170884   tls_timeout = 2
Sat Nov  9 09:49:42 2013 us=170903   renegotiate_bytes = 0
Sat Nov  9 09:49:42 2013 us=170922   renegotiate_packets = 0
Sat Nov  9 09:49:42 2013 us=170941   renegotiate_seconds = 3600
Sat Nov  9 09:49:42 2013 us=170961   handshake_window = 60
Sat Nov  9 09:49:42 2013 us=170980   transition_window = 3600
Sat Nov  9 09:49:42 2013 us=170999   single_session = DISABLED
Sat Nov  9 09:49:42 2013 us=171018   push_peer_info = DISABLED
Sat Nov  9 09:49:42 2013 us=171037   tls_exit = DISABLED
Sat Nov  9 09:49:42 2013 us=171056   tls_auth_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=171076   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171095   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171115   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171135   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171155   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171174   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171194   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171214   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171233   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171252   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171272   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171291   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171311   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171330   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171350   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171369   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:42 2013 us=171389   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171409   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171430   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171450   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171469   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171489   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171509   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171529   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171548   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171569   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171588   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171607   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171627   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171646   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171666   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171686   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:42 2013 us=171705   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171724   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171746   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171766   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171785   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171805   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171824   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171849   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171868   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171887   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171907   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171929   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171948   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171968   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=171987   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=172007   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:42 2013 us=172026   pkcs11_pin_cache_period = -1
Sat Nov  9 09:49:42 2013 us=172046   pkcs11_id = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=172065   pkcs11_id_management = DISABLED
Sat Nov  9 09:49:42 2013 us=172098   server_network = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172120   server_netmask = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172146   server_network_ipv6 = ::
Sat Nov  9 09:49:42 2013 us=172166   server_netbits_ipv6 = 0
Sat Nov  9 09:49:42 2013 us=172187   server_bridge_ip = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172208   server_bridge_netmask = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172229   server_bridge_pool_start = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172250   server_bridge_pool_end = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172270   ifconfig_pool_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=172292   ifconfig_pool_start = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=172313   ifconfig_pool_end = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=177301   ifconfig_pool_netmask = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=177359   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=177393   ifconfig_pool_persist_refresh_freq = 600
Sat Nov  9 09:49:42 2013 us=177424   ifconfig_ipv6_pool_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=177458   ifconfig_ipv6_pool_base = ::
Sat Nov  9 09:49:42 2013 us=177489   ifconfig_ipv6_pool_netbits = 0
Sat Nov  9 09:49:42 2013 us=177519   n_bcast_buf = 256
Sat Nov  9 09:49:42 2013 us=177549   tcp_queue_limit = 64
Sat Nov  9 09:49:42 2013 us=177579   real_hash_size = 256
Sat Nov  9 09:49:42 2013 us=177609   virtual_hash_size = 256
Sat Nov  9 09:49:42 2013 us=177639   client_connect_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=177669   learn_address_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=177701   client_disconnect_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=177733   client_config_dir = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=177764   ccd_exclusive = DISABLED
Sat Nov  9 09:49:42 2013 us=177794   tmp_dir = '/tmp'
Sat Nov  9 09:49:42 2013 us=177825   push_ifconfig_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=177860   push_ifconfig_local = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=177893   push_ifconfig_remote_netmask = 0.0.0.0
Sat Nov  9 09:49:42 2013 us=177923   push_ifconfig_ipv6_defined = DISABLED
Sat Nov  9 09:49:42 2013 us=177955   push_ifconfig_ipv6_local = ::/0
Sat Nov  9 09:49:42 2013 us=177987   push_ifconfig_ipv6_remote = ::
Sat Nov  9 09:49:42 2013 us=178019   enable_c2c = DISABLED
Sat Nov  9 09:49:42 2013 us=178049   duplicate_cn = DISABLED
Sat Nov  9 09:49:42 2013 us=178082   cf_max = 0
Sat Nov  9 09:49:42 2013 us=178117   cf_per = 0
Sat Nov  9 09:49:42 2013 us=178152   max_clients = 1024
Sat Nov  9 09:49:42 2013 us=178186   max_routes_per_client = 256
Sat Nov  9 09:49:42 2013 us=178219   auth_user_pass_verify_script = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=178253   auth_user_pass_verify_script_via_file = DISABLED
Sat Nov  9 09:49:42 2013 us=178288   ssl_flags = 0
Sat Nov  9 09:49:42 2013 us=178320   port_share_host = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=178352   port_share_port = 0
Sat Nov  9 09:49:42 2013 us=178384   client = ENABLED
Sat Nov  9 09:49:42 2013 us=178417   pull = ENABLED
Sat Nov  9 09:49:42 2013 us=178448   auth_user_pass_file = '[UNDEF]'
Sat Nov  9 09:49:42 2013 us=178496 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Sat Nov  9 09:49:42 2013 us=178749 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Nov  9 09:49:42 2013 us=180367 LZO compression initialized
Sat Nov  9 09:49:42 2013 us=180559 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Nov  9 09:49:42 2013 us=180656 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat Nov  9 09:49:42 2013 us=180734 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov  9 09:49:42 2013 us=180791 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Nov  9 09:49:42 2013 us=180824 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Nov  9 09:49:42 2013 us=180886 Local Options hash (VER=V4): '41690919'
Sat Nov  9 09:49:42 2013 us=180933 Expected Remote Options hash (VER=V4): '530fdded'
Sat Nov  9 09:49:42 2013 us=180978 UDPv4 link local: [undef]
Sat Nov  9 09:49:42 2013 us=181017 UDPv4 link remote: [AF_INET]88.208.237.199:1194
Sat Nov  9 09:49:42 2013 us=229082 TLS: Initial packet from [AF_INET]88.208.237.199:1194, sid=cd483230 855a7e86
Sat Nov  9 09:49:42 2013 us=451492 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:49:42 2013 us=452097 VERIFY OK: nsCertType=SERVER
Sat Nov  9 09:49:42 2013 us=452131 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=server/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:49:42 2013 us=832165 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov  9 09:49:42 2013 us=832326 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov  9 09:49:42 2013 us=832586 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov  9 09:49:42 2013 us=832642 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov  9 09:49:42 2013 us=832847 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov  9 09:49:42 2013 us=832935 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Sat Nov  9 09:49:44 2013 us=939337 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Nov  9 09:49:44 2013 us=980017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat Nov  9 09:49:44 2013 us=980282 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov  9 09:49:44 2013 us=980314 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov  9 09:49:44 2013 us=980336 OPTIONS IMPORT: route options modified
Sat Nov  9 09:49:44 2013 us=980354 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov  9 09:49:44 2013 us=980726 ROUTE default_gateway=192.168.0.1
Sat Nov  9 09:49:44 2013 us=981415 TUN/TAP device tun1 opened
Sat Nov  9 09:49:44 2013 us=981487 TUN/TAP TX queue length set to 100
Sat Nov  9 09:49:44 2013 us=981546 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov  9 09:49:44 2013 us=981644 /sbin/ifconfig tun1 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Sat Nov  9 09:49:44 2013 us=986943 /sbin/route add -net 88.208.237.199 netmask 255.255.255.255 gw 192.168.0.1
Sat Nov  9 09:49:44 2013 us=989659 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Sat Nov  9 09:49:44 2013 us=991744 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.8.0.5
Sat Nov  9 09:49:44 2013 us=997299 WARNING: potential route subnet conflict between local LAN [10.8.0.0/255.255.255.0] and remote VPN [10.8.0.1/255.255.255.255]
Sat Nov  9 09:49:44 2013 us=997430 /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Sat Nov  9 09:49:44 2013 us=999461 Initialization Sequence Completed
^CSat Nov  9 09:50:51 2013 us=152143 event_wait : Interrupted system call (code=4)
Sat Nov  9 09:50:51 2013 us=152864 TCP/UDP: Closing socket
Sat Nov  9 09:50:51 2013 us=153001 /sbin/route del -net 10.8.0.1 netmask 255.255.255.255
Sat Nov  9 09:50:51 2013 us=155203 /sbin/route del -net 88.208.237.199 netmask 255.255.255.255
Sat Nov  9 09:50:51 2013 us=157257 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Sat Nov  9 09:50:51 2013 us=159197 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.0.1
Sat Nov  9 09:50:51 2013 us=161099 Closing TUN/TAP interface
Sat Nov  9 09:50:51 2013 us=161191 /sbin/ifconfig tun1 0.0.0.0
Sat Nov  9 09:50:51 2013 us=180929 SIGINT[hard,] received, process exiting

server log

Sat Nov  9 09:49:04 2013 us=682185 Current Parameter Settings:
Sat Nov  9 09:49:04 2013 us=682281   config = 'openvpn2.conf'
Sat Nov  9 09:49:04 2013 us=682298   mode = 1
Sat Nov  9 09:49:04 2013 us=682313   persist_config = DISABLED
Sat Nov  9 09:49:04 2013 us=682328   persist_mode = 1
Sat Nov  9 09:49:04 2013 us=682342   show_ciphers = DISABLED
Sat Nov  9 09:49:04 2013 us=682356   show_digests = DISABLED
Sat Nov  9 09:49:04 2013 us=682370   show_engines = DISABLED
Sat Nov  9 09:49:04 2013 us=682384   genkey = DISABLED
Sat Nov  9 09:49:04 2013 us=682398   key_pass_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682413   show_tls_ciphers = DISABLED
Sat Nov  9 09:49:04 2013 us=682428 Connection profiles [default]:
Sat Nov  9 09:49:04 2013 us=682442   proto = udp
Sat Nov  9 09:49:04 2013 us=682457   local = '88.208.237.199'
Sat Nov  9 09:49:04 2013 us=682471   local_port = 1194
Sat Nov  9 09:49:04 2013 us=682485   remote = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682500   remote_port = 1194
Sat Nov  9 09:49:04 2013 us=682514   remote_float = DISABLED
Sat Nov  9 09:49:04 2013 us=682528   bind_defined = DISABLED
Sat Nov  9 09:49:04 2013 us=682542   bind_local = ENABLED
Sat Nov  9 09:49:04 2013 us=682556   connect_retry_seconds = 5
Sat Nov  9 09:49:04 2013 us=682570   connect_timeout = 10
Sat Nov  9 09:49:04 2013 us=682585   connect_retry_max = 0
Sat Nov  9 09:49:04 2013 us=682599   socks_proxy_server = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682624   socks_proxy_port = 0
Sat Nov  9 09:49:04 2013 us=682638   socks_proxy_retry = DISABLED
Sat Nov  9 09:49:04 2013 us=682655 Connection profiles END
Sat Nov  9 09:49:04 2013 us=682670   remote_random = DISABLED
Sat Nov  9 09:49:04 2013 us=682684   ipchange = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682698   dev = 'tun1'
Sat Nov  9 09:49:04 2013 us=682712   dev_type = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682726   dev_node = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682740   lladdr = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=682754   topology = 1
Sat Nov  9 09:49:04 2013 us=682768   tun_ipv6 = DISABLED
Sat Nov  9 09:49:04 2013 us=682782   ifconfig_local = '10.8.0.1'
Sat Nov  9 09:49:04 2013 us=682797   ifconfig_remote_netmask = '10.8.0.2'
Sat Nov  9 09:49:04 2013 us=682811   ifconfig_noexec = DISABLED
Sat Nov  9 09:49:04 2013 us=682825   ifconfig_nowarn = DISABLED
Sat Nov  9 09:49:04 2013 us=682839   shaper = 0
Sat Nov  9 09:49:04 2013 us=682853   tun_mtu = 1500
Sat Nov  9 09:49:04 2013 us=682867   tun_mtu_defined = ENABLED
Sat Nov  9 09:49:04 2013 us=682881   link_mtu = 1500
Sat Nov  9 09:49:04 2013 us=682895   link_mtu_defined = DISABLED
Sat Nov  9 09:49:04 2013 us=682910   tun_mtu_extra = 0
Sat Nov  9 09:49:04 2013 us=682924   tun_mtu_extra_defined = DISABLED
Sat Nov  9 09:49:04 2013 us=682938   fragment = 0
Sat Nov  9 09:49:04 2013 us=682953   mtu_discover_type = -1
Sat Nov  9 09:49:04 2013 us=682967   mtu_test = 0
Sat Nov  9 09:49:04 2013 us=682981   mlock = DISABLED
Sat Nov  9 09:49:04 2013 us=682995   keepalive_ping = 10
Sat Nov  9 09:49:04 2013 us=683009   keepalive_timeout = 120
Sat Nov  9 09:49:04 2013 us=683024   inactivity_timeout = 0
Sat Nov  9 09:49:04 2013 us=683038   ping_send_timeout = 10
Sat Nov  9 09:49:04 2013 us=683052   ping_rec_timeout = 240
Sat Nov  9 09:49:04 2013 us=683066   ping_rec_timeout_action = 2
Sat Nov  9 09:49:04 2013 us=683080   ping_timer_remote = DISABLED
Sat Nov  9 09:49:04 2013 us=683095   remap_sigusr1 = 0
Sat Nov  9 09:49:04 2013 us=683109   explicit_exit_notification = 0
Sat Nov  9 09:49:04 2013 us=683123   persist_tun = ENABLED
Sat Nov  9 09:49:04 2013 us=683137   persist_local_ip = DISABLED
Sat Nov  9 09:49:04 2013 us=683152   persist_remote_ip = DISABLED
Sat Nov  9 09:49:04 2013 us=683166   persist_key = ENABLED
Sat Nov  9 09:49:04 2013 us=683180   mssfix = 1450
Sat Nov  9 09:49:04 2013 us=683195   passtos = DISABLED
Sat Nov  9 09:49:04 2013 us=683209   resolve_retry_seconds = 1000000000
Sat Nov  9 09:49:04 2013 us=683223   username = 'nobody'
Sat Nov  9 09:49:04 2013 us=683237   groupname = 'users'
Sat Nov  9 09:49:04 2013 us=683251   chroot_dir = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683281   cd_dir = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683296   selinux_context = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683310   writepid = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683325   up_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683339   down_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683353   down_pre = DISABLED
Sat Nov  9 09:49:04 2013 us=683367   up_restart = DISABLED
Sat Nov  9 09:49:04 2013 us=683381   up_delay = DISABLED
Sat Nov  9 09:49:04 2013 us=683395   daemon = DISABLED
Sat Nov  9 09:49:04 2013 us=683409   inetd = 0
Sat Nov  9 09:49:04 2013 us=683423   log = ENABLED
Sat Nov  9 09:49:04 2013 us=683438   suppress_timestamps = DISABLED
Sat Nov  9 09:49:04 2013 us=683452   nice = 0
Sat Nov  9 09:49:04 2013 us=683466   verbosity = 4
Sat Nov  9 09:49:04 2013 us=683480   mute = 0
Sat Nov  9 09:49:04 2013 us=683494   gremlin = 0
Sat Nov  9 09:49:04 2013 us=683508   status_file = 'openvpn-status2.log'
Sat Nov  9 09:49:04 2013 us=683522   status_file_version = 1
Sat Nov  9 09:49:04 2013 us=683537   status_file_update_freq = 60
Sat Nov  9 09:49:04 2013 us=683551   occ = ENABLED
Sat Nov  9 09:49:04 2013 us=683565   rcvbuf = 65536
Sat Nov  9 09:49:04 2013 us=683579   sndbuf = 65536
Sat Nov  9 09:49:04 2013 us=683593   sockflags = 0
Sat Nov  9 09:49:04 2013 us=683615   fast_io = DISABLED
Sat Nov  9 09:49:04 2013 us=683630   lzo = 7
Sat Nov  9 09:49:04 2013 us=683644   route_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683658   route_default_gateway = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683673   route_default_metric = 0
Sat Nov  9 09:49:04 2013 us=683686   route_noexec = DISABLED
Sat Nov  9 09:49:04 2013 us=683700   route_delay = 0
Sat Nov  9 09:49:04 2013 us=683714   route_delay_window = 30
Sat Nov  9 09:49:04 2013 us=683728   route_delay_defined = DISABLED
Sat Nov  9 09:49:04 2013 us=683743   route_nopull = DISABLED
Sat Nov  9 09:49:04 2013 us=683758   route_gateway_via_dhcp = DISABLED
Sat Nov  9 09:49:04 2013 us=683773   max_routes = 100
Sat Nov  9 09:49:04 2013 us=683787   allow_pull_fqdn = DISABLED
Sat Nov  9 09:49:04 2013 us=683802   route 10.8.0.0/255.255.255.0/nil/nil
Sat Nov  9 09:49:04 2013 us=683817   management_addr = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683831   management_port = 0
Sat Nov  9 09:49:04 2013 us=683846   management_user_pass = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683860   management_log_history_cache = 250
Sat Nov  9 09:49:04 2013 us=683875   management_echo_buffer_size = 100
Sat Nov  9 09:49:04 2013 us=683889   management_write_peer_info_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683903   management_client_user = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683918   management_client_group = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683932   management_flags = 0
Sat Nov  9 09:49:04 2013 us=683946   shared_secret_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=683961   key_direction = 0
Sat Nov  9 09:49:04 2013 us=683975   ciphername_defined = ENABLED
Sat Nov  9 09:49:04 2013 us=683990   ciphername = 'BF-CBC'
Sat Nov  9 09:49:04 2013 us=684004   authname_defined = ENABLED
Sat Nov  9 09:49:04 2013 us=684018   authname = 'SHA1'
Sat Nov  9 09:49:04 2013 us=684033   prng_hash = 'SHA1'
Sat Nov  9 09:49:04 2013 us=684047   prng_nonce_secret_len = 16
Sat Nov  9 09:49:04 2013 us=684061   keysize = 0
Sat Nov  9 09:49:04 2013 us=684075   engine = DISABLED
Sat Nov  9 09:49:04 2013 us=684089   replay = ENABLED
Sat Nov  9 09:49:04 2013 us=684104   mute_replay_warnings = DISABLED
Sat Nov  9 09:49:04 2013 us=684118   replay_window = 64
Sat Nov  9 09:49:04 2013 us=684132   replay_time = 15
Sat Nov  9 09:49:04 2013 us=684147   packet_id_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684161   use_iv = ENABLED
Sat Nov  9 09:49:04 2013 us=684175   test_crypto = DISABLED
Sat Nov  9 09:49:04 2013 us=684189   tls_server = ENABLED
Sat Nov  9 09:49:04 2013 us=684203   tls_client = DISABLED
Sat Nov  9 09:49:04 2013 us=684217   key_method = 2
Sat Nov  9 09:49:04 2013 us=684232   ca_file = 'ca.crt'
Sat Nov  9 09:49:04 2013 us=684246   ca_path = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684260   dh_file = 'dh1024.pem'
Sat Nov  9 09:49:04 2013 us=684284   cert_file = 'server.crt'
Sat Nov  9 09:49:04 2013 us=684300   priv_key_file = 'server.key'
Sat Nov  9 09:49:04 2013 us=684314   pkcs12_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684328   cipher_list = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684343   tls_verify = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684357   tls_export_cert = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684372   tls_remote = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684386   crl_file = '/etc/openvpn/crl.pem'
Sat Nov  9 09:49:04 2013 us=684401   ns_cert_type = 0
Sat Nov  9 09:49:04 2013 us=684415   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684430   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684444   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684458   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684472   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684486   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684501   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684515   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684529   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684543   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684557   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684571   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684585   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684600   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684664   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684679   remote_cert_ku[i] = 0
Sat Nov  9 09:49:04 2013 us=684694   remote_cert_eku = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684709   tls_timeout = 2
Sat Nov  9 09:49:04 2013 us=684723   renegotiate_bytes = 0
Sat Nov  9 09:49:04 2013 us=684737   renegotiate_packets = 0
Sat Nov  9 09:49:04 2013 us=684752   renegotiate_seconds = 3600
Sat Nov  9 09:49:04 2013 us=684766   handshake_window = 60
Sat Nov  9 09:49:04 2013 us=684780   transition_window = 3600
Sat Nov  9 09:49:04 2013 us=684795   single_session = DISABLED
Sat Nov  9 09:49:04 2013 us=684809   push_peer_info = DISABLED
Sat Nov  9 09:49:04 2013 us=684823   tls_exit = DISABLED
Sat Nov  9 09:49:04 2013 us=684837   tls_auth_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=684853   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684869   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684883   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684897   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684911   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684926   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684940   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684955   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684969   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684983   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=684998   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685012   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685026   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685040   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685055   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685069   pkcs11_protected_authentication = DISABLED
Sat Nov  9 09:49:04 2013 us=685084   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685099   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685113   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685128   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685143   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685157   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685171   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685186   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685200   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685215   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685240   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685255   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685270   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685284   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685299   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685313   pkcs11_private_mode = 00000000
Sat Nov  9 09:49:04 2013 us=685328   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685342   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685356   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685370   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685384   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685399   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685413   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685427   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685442   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685456   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685470   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685484   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685498   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685512   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685526   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685540   pkcs11_cert_private = DISABLED
Sat Nov  9 09:49:04 2013 us=685556   pkcs11_pin_cache_period = -1
Sat Nov  9 09:49:04 2013 us=685570   pkcs11_id = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=685585   pkcs11_id_management = DISABLED
Sat Nov  9 09:49:04 2013 us=685601   server_network = 10.8.0.0
Sat Nov  9 09:49:04 2013 us=685626   server_netmask = 255.255.255.0
Sat Nov  9 09:49:04 2013 us=685646   server_bridge_ip = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=685663   server_bridge_netmask = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=685679   server_bridge_pool_start = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=685695   server_bridge_pool_end = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=685709   push_entry = 'redirect-gateway'
Sat Nov  9 09:49:04 2013 us=685724   push_entry = 'dhcp-option DNS 213.171.192.249'
Sat Nov  9 09:49:04 2013 us=685739   push_entry = 'dhcp-option DNS 213.171.192.245'
Sat Nov  9 09:49:04 2013 us=685753   push_entry = 'route 10.8.0.1'
Sat Nov  9 09:49:04 2013 us=685768   push_entry = 'topology net30'
Sat Nov  9 09:49:04 2013 us=685782   push_entry = 'ping 10'
Sat Nov  9 09:49:04 2013 us=685796   push_entry = 'ping-restart 120'
Sat Nov  9 09:49:04 2013 us=685811   ifconfig_pool_defined = ENABLED
Sat Nov  9 09:49:04 2013 us=685827   ifconfig_pool_start = 10.8.0.4
Sat Nov  9 09:49:04 2013 us=685843   ifconfig_pool_end = 10.8.0.251
Sat Nov  9 09:49:04 2013 us=685859   ifconfig_pool_netmask = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=685874   ifconfig_pool_persist_filename = 'ipp.txt'
Sat Nov  9 09:49:04 2013 us=685889   ifconfig_pool_persist_refresh_freq = 600
Sat Nov  9 09:49:04 2013 us=685903   n_bcast_buf = 256
Sat Nov  9 09:49:04 2013 us=685918   tcp_queue_limit = 64
Sat Nov  9 09:49:04 2013 us=685932   real_hash_size = 256
Sat Nov  9 09:49:04 2013 us=685946   virtual_hash_size = 256
Sat Nov  9 09:49:04 2013 us=685960   client_connect_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=685975   learn_address_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=685989   client_disconnect_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=686003   client_config_dir = '/etc/openvpn/ccd'
Sat Nov  9 09:49:04 2013 us=686018   ccd_exclusive = DISABLED
Sat Nov  9 09:49:04 2013 us=686032   tmp_dir = '/tmp'
Sat Nov  9 09:49:04 2013 us=686046   push_ifconfig_defined = DISABLED
Sat Nov  9 09:49:04 2013 us=686062   push_ifconfig_local = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=686078   push_ifconfig_remote_netmask = 0.0.0.0
Sat Nov  9 09:49:04 2013 us=686092   enable_c2c = DISABLED
Sat Nov  9 09:49:04 2013 us=686106   duplicate_cn = DISABLED
Sat Nov  9 09:49:04 2013 us=686121   cf_max = 0
Sat Nov  9 09:49:04 2013 us=686145   cf_per = 0
Sat Nov  9 09:49:04 2013 us=686160   max_clients = 1024
Sat Nov  9 09:49:04 2013 us=686175   max_routes_per_client = 256
Sat Nov  9 09:49:04 2013 us=686189   auth_user_pass_verify_script = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=686204   auth_user_pass_verify_script_via_file = DISABLED
Sat Nov  9 09:49:04 2013 us=686218   ssl_flags = 0
Sat Nov  9 09:49:04 2013 us=686233   port_share_host = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=686247   port_share_port = 0
Sat Nov  9 09:49:04 2013 us=686261   client = DISABLED
Sat Nov  9 09:49:04 2013 us=686275   pull = DISABLED
Sat Nov  9 09:49:04 2013 us=686289   auth_user_pass_file = '[UNDEF]'
Sat Nov  9 09:49:04 2013 us=686307 OpenVPN 2.2.2 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr  5 2012
Sat Nov  9 09:49:04 2013 us=686508 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Nov  9 09:49:04 2013 us=693651 Diffie-Hellman initialized with 1024 bit key
Sat Nov  9 09:49:04 2013 us=694412 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Nov  9 09:49:04 2013 us=694454 Socket Buffers: R=[262144->131072] S=[262144->131072]
Sat Nov  9 09:49:04 2013 us=694620 ROUTE default_gateway=88.208.236.1
Sat Nov  9 09:49:04 2013 us=694756 TUN/TAP device tun1 opened
Sat Nov  9 09:49:04 2013 us=694781 TUN/TAP TX queue length set to 100
Sat Nov  9 09:49:04 2013 us=694828 /sbin/ip link set dev tun1 up mtu 1500
Sat Nov  9 09:49:04 2013 us=695625 /sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2
Sat Nov  9 09:49:04 2013 us=699726 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sat Nov  9 09:49:04 2013 us=700410 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov  9 09:49:04 2013 us=700788 GID set to users
Sat Nov  9 09:49:04 2013 us=700813 UID set to nobody
Sat Nov  9 09:49:04 2013 us=700839 UDPv4 link local (bound): 88.208.237.199:1194
Sat Nov  9 09:49:04 2013 us=700853 UDPv4 link remote: [undef]
Sat Nov  9 09:49:04 2013 us=700878 MULTI: multi_init called, r=256 v=256
Sat Nov  9 09:49:04 2013 us=700924 IFCONFIG POOL: base=10.8.0.4 size=62
Sat Nov  9 09:49:04 2013 us=701067 IFCONFIG POOL LIST
Sat Nov  9 09:49:04 2013 us=701102 Initialization Sequence Completed
Sat Nov  9 09:50:03 2013 us=74175 MULTI: multi_create_instance called
Sat Nov  9 09:50:03 2013 us=74247 86.15.42.109:45951 Re-using SSL/TLS context
Sat Nov  9 09:50:03 2013 us=74280 86.15.42.109:45951 LZO compression initialized
Sat Nov  9 09:50:03 2013 us=74424 86.15.42.109:45951 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Nov  9 09:50:03 2013 us=74444 86.15.42.109:45951 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov  9 09:50:03 2013 us=74494 86.15.42.109:45951 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Nov  9 09:50:03 2013 us=74509 86.15.42.109:45951 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Nov  9 09:50:03 2013 us=74537 86.15.42.109:45951 Local Options hash (VER=V4): '530fdded'
Sat Nov  9 09:50:03 2013 us=74561 86.15.42.109:45951 Expected Remote Options hash (VER=V4): '41690919'
Sat Nov  9 09:50:03 2013 us=74627 86.15.42.109:45951 TLS: Initial packet from 86.15.42.109:45951, sid=9b39e42c 910c8113
Sat Nov  9 09:50:03 2013 us=593334 86.15.42.109:45951 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:50:03 2013 us=593409 86.15.42.109:45951 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:50:03 2013 us=593878 86.15.42.109:45951 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:50:03 2013 us=593935 86.15.42.109:45951 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk
Sat Nov  9 09:50:03 2013 us=676809 86.15.42.109:45951 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov  9 09:50:03 2013 us=676838 86.15.42.109:45951 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov  9 09:50:03 2013 us=676925 86.15.42.109:45951 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov  9 09:50:03 2013 us=676943 86.15.42.109:45951 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov  9 09:50:03 2013 us=717066 86.15.42.109:45951 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov  9 09:50:03 2013 us=717100 86.15.42.109:45951 [jw.jwebster] Peer Connection Initiated with 86.15.42.109:45951
Sat Nov  9 09:50:03 2013 us=717218 jw.jwebster/86.15.42.109:45951 MULTI: Learn: 10.8.0.6 -> jw.jwebster/86.15.42.109:45951
Sat Nov  9 09:50:03 2013 us=717241 jw.jwebster/86.15.42.109:45951 MULTI: primary virtual IP for jw.jwebster/86.15.42.109:45951: 10.8.0.6
Sat Nov  9 09:50:05 2013 us=825347 jw.jwebster/86.15.42.109:45951 PUSH: Received control message: 'PUSH_REQUEST'
Sat Nov  9 09:50:05 2013 us=825420 jw.jwebster/86.15.42.109:45951 SENT CONTROL [jw.jwebster]: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sat Nov  9 09:50:06 2013 us=535973 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:18 2013 us=181382 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:18 2013 us=185433 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:18 2013 us=185485 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:18 2013 us=185537 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:20 2013 us=323047 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:21 2013 us=655266 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:24 2013 us=813583 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped
Sat Nov  9 09:50:33 2013 us=786978 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped

route

route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.8.0.5        0.0.0.0         UG    0      0        0 tun1
10.8.0.1        10.8.0.5        255.255.255.255 UGH   0      0        0 tun1
10.8.0.5        *               255.255.255.255 UH    0      0        0 tun1
88.208.237.199  192.168.0.1     255.255.255.255 UGH   0      0        0 wlan1
link-local      *               255.255.0.0     U     1000   0        0 wlan1
192.168.0.0     *               255.255.255.0   U     9      0        0 wlan1

qwertyjjj

bump bump bump bump

qwertyjjj

debbie10t wroteI notice you are using "tun1" . . . do you also have "tun0" ?

If you use the same config on more than one tun device they will each need separate subnets, or you can use one instance of openvpn on the server which multiple clients can connect to.

At this time, this is the only explanation I can think of.

If this is not the case, you could try the IRC Channel #openvpn on freenode.net

This is the serve route. I have 2 instances one running on tcp, one running on udp. However, Windows clients connect to it fine without subnet warnings so is this something that only occurs on Linux?

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.8.0.2        *               255.255.255.255 UH    0      0        0 tun1
172.16.0.2      *               255.255.255.255 UH    0      0        0 tun0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun1
172.16.0.0      172.16.0.2      255.255.255.0   UG    0      0        0 tun0

qwertyjjj

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

qwertyjjj

debbie10t wroteCheck your logs and see if the error persists.

these are the logs from a windows client:

Thu Nov 14 18:31:41 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Nov 14 18:31:42 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:42 2013 TCP connection established with [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:42 2013 TCPv4_CLIENT link local: [undef]
Thu Nov 14 18:31:42 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:44 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504'
Thu Nov 14 18:31:44 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460'
Thu Nov 14 18:31:44 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:46 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Nov 14 18:31:46 2013 open_tun, tt->ipv6=0
Thu Nov 14 18:31:46 2013 TAP-WIN32 device [Local Area Connection 13] opened: \\.\Global\{90FA8555-CF6C-4173-9DE9-31A842D5FBBC}.tap
Thu Nov 14 18:31:46 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 172.16.0.142/255.255.255.252 on interface {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} [DHCP-serv: 172.16.0.141, lease-time: 31536000]
Thu Nov 14 18:31:46 2013 Successful ARP Flush on interface [3] {90FA8555-CF6C-4173-9DE9-31A842D5FBBC}
Thu Nov 14 18:31:56 2013 Initialization Sequence Completed

Thu Nov 14 18:31:03 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Nov 14 18:31:03 2013 UDPv4 link local: [undef]
Thu Nov 14 18:31:03 2013 UDPv4 link remote: [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:08 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Thu Nov 14 18:31:10 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Nov 14 18:31:10 2013 open_tun, tt->ipv6=0
Thu Nov 14 18:31:10 2013 TAP-WIN32 device [Local Area Connection 13] opened: \\.\Global\{90FA8555-CF6C-4173-9DE9-31A842D5FBBC}.tap
Thu Nov 14 18:31:10 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.90/255.255.255.252 on interface {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} [DHCP-serv: 10.8.0.89, lease-time: 31536000]
Thu Nov 14 18:31:10 2013 Successful ARP Flush on interface [3] {90FA8555-CF6C-4173-9DE9-31A842D5FBBC}
Thu Nov 14 18:31:16 2013 Initialization Sequence Completed

qwertyjjj

No!
The whole time I have been trying to explain that the warning appears when a :Linux client tries to connect.
I mentioned that the same error does not happen to Windows clients connecting to the server.
You said it must be the server config and so after showing you the server conf, I showed you the windows client logs above proving that Windows clients do not have a subnet warning when connecting to the server.

We already worked through the Linux config files and there weren't any issues there.
The server is setup correctly or other clients would not be able to connect.
So, what is left to troubleshoot?

qwertyjjj

client config dir contains various files with a certificate name and the text inside the file is disable.
That is all the client config dir is used for.

server tcp conf

port 1194
proto tcp
dev tun
crl-verify /etc/openvpn/crl.pem
client-config-dir /etc/openvpn/ccd
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 213.171.192.249"
push "dhcp-option DNS 213.171.192.245"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
tun-mtu 1460
persist-key
persist-tun
status openvpn-status.log
verb 3
log /var/log/openvpn.log

server udp conf

port 1194
proto udp
dev tun1
crl-verify /etc/openvpn/crl.pem
client-config-dir /etc/openvpn/ccd
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 213.171.192.249"
push "dhcp-option DNS 213.171.192.245"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status2.log
verb 4
log /var/log/openvpn2.log
tun-mtu 1500

qwertyjjj

debbie10t wroteMaybe you should try separate ports for your different protocols.

udp:1194
tcp:1195

for example ...

The Windows clients have no problem connecting.
So, why does the Linux client?

qwertyjjj

qwertyjjj wrote
debbie10t wroteMaybe you should try separate ports for your different protocols.

udp:1194
tcp:1195

for example ...
The Windows clients have no problem connecting.
So, why does the Linux client?

this points to a client problem doesn;t it and not a server problem.

qwertyjjj

debbie10t wroteAt this time it is difficult to answer which side of the VPN is at fault.

It seems that your linux client is aware that, on the server end there appears to be a subnet conflict.

Finding time to fully recreate your specific set of circumstances is also a problem.

Did you have time to separate the two server/protocol instances as I advised before ?

Once before, I turned off both instances, restarted the server, and then started 1 instance.
The Linux client had the same warning.
So, this implies there is no issue with the protocol or the port number as I only had one instance running and only 1 client trying to connect.

rainbow6

I'm not sure whether I have the same issue as you but some of my users has the same problems reported.
Maybe this is due openvpn version. windows is using 2.3.2 and linux is using 2.2.1. Change linux to 2.3.2 and see if the problem goes away. This is what I did, except mine, I have to change the windows to use 2.3.2 instead of 2.2.2

rainbow6

Based on experienced, this is client side issues. It could be wrong config, unsupported features etc..
In Linux client, you may also need to run the resolv-update-conf scripts during the up and down or you will probably end up with DNS leak and DNS push from the server will not have any effect.

qwertyjjj

debbie10t wrote
qwertyjjj wroteOnce before, I turned off both instances, restarted the server, and then started 1 instance.
The Linux client had the same warning.
So, this implies there is no issue with the protocol or the port number as I only had one instance running and only 1 client trying to connect.
This would imply there is something wrong with your network setup.

I have a windows computer in my LAN, connects fine.
I have 2 Linux computers in my LAN, both can't connect.
client confs are the same setup

rainbow6

Can you make sure that both Linux and Windows has same version of openvpn?
If you cannot update Linux, then downgrade Windows to the same version as Linux. Then connect again with Windows and see if the same problem repeated or not.

How did you start the connection command in your linux? command line or network manager?

qwertyjjj

rainbow6 wroteCan you make sure that both Linux and Windows has same version of openvpn?
If you cannot update Linux, then downgrade Windows to the same version as Linux. Then connect again with Windows and see if the same problem repeated or not.

How did you start the connection command in your linux? command line or network manager?

sudo openvpn --config /etc/openvpn/mycert_1.ovpn

If I don't use sudo I get this:

Sun Nov 17 16:48:47 2013 us=848063 /sbin/ifconfig 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
SIOCSIFADDR: Permission denied
: ERROR while getting interface flags: No such device
SIOCSIFDSTADDR: Permission denied
: ERROR while getting interface flags: No such device
SIOCSIFMTU: Operation not permitted
Sun Nov 17 16:48:47 2013 us=848935 Linux ifconfig failed: external program exited with error status: 1
Sun Nov 17 16:48:47 2013 us=848967 Exiting
jason@spain ~ $