So, my server has been working fine for ages, clients can connect without any problems. In my home network, I have PC1, which is connecting to the server fine. PC2 however, which is raspbmc gives an error: WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Why does it give this conflict when none of the other computers do? My internal LAN isn't even on 172.16 it is on 192.168.0.x client.ovpn [code]client dev tun1 proto tcp remote 88.xxx.xxx.xxx 1194 resolv-retry infinite nobind persist-key persist-tun ns-cert-type server comp-lzo verb 1[/code] [i]ca, crt, key follows inline[/i] server.conf [code]port 1194 proto tcp dev tun ;crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem crl-verify /etc/openvpn/crl.pem client-config-dir /etc/openvpn/ccd ca ca.crt cert server.crt key server.key dh dh1024.pem server 172.16.0.0 255.255.255.0 push "redirect-gateway" push "dhcp-option DNS 213.171.192.249" push "dhcp-option DNS 213.171.192.245" ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group users tun-mtu 1460 persist-key persist-tun status openvpn-status.log verb 3 ;duplicate-cn # (this means several users can use the same key) log /var/log/openvpn.log [/code]

[quote="debbie10t"]Hi, you must have an old version of openvpn as "proto tcp" has been replaced by "proto tcp-server" or "proto tcp-client", you should upgrade to version 2.3.2 This warning is probably caused by the RaspBMC default network address: [code]WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255][/code]Check the settings on your device. [quote=" qwertyjjj"]My internal LAN isn't even on 172.16 it is on 192.168.0.x[/quote]Your vpn subnet is 172.16.0.0, as configured here: Server[code]server 172.16.0.0 255.255.255.0[/code][/quote] settings on the device are 192.168.0.11 255.255.255.0 [code]pi@raspbmc:~$ ifconfig eth0 Link encap:Ethernet HWaddr b8:27:eb:03:b7:b1 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) wlan0 Link encap:Ethernet HWaddr 80:1f:02:a6:9d:e9 inet addr:192.168.0.11 Bcast:192.168.0.255 Mask:255.255.255.0 inet6 addr: fe80::821f:2ff:fea6:9de9/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:85220 errors:0 dropped:87261 overruns:0 frame:0 TX packets:33596 errors:0 dropped:1 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:109248179 (104.1 MiB) TX bytes:4354045 (4.1 MiB)[/code] when connected to openvpn: [code]pi@raspbmc:~$ ifconfig eth0 Link encap:Ethernet HWaddr b8:27:eb:03:b7:b1 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:172.16.0.86 P-t-P:172.16.0.85 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:4 errors:0 dropped:0 overruns:0 frame:0 TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:304 (304.0 B) TX bytes:374 (374.0 B) wlan0 Link encap:Ethernet HWaddr 80:1f:02:a6:9d:e9 inet addr:192.168.0.11 Bcast:192.168.0.255 Mask:255.255.255.0 inet6 addr: fe80::821f:2ff:fea6:9de9/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:85786 errors:0 dropped:87841 overruns:0 frame:0 TX packets:34026 errors:0 dropped:1 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:109337981 (104.2 MiB) TX bytes:4436121 (4.2 MiB)[/code]

[quote="debbie10t"]What versions of openvpn are you running on each of your machines ?[/quote] server is openvpn-2.2.2-1.el5.rf client is OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] bu I guess the client repors are old? If so, what repo can I use for an up to date version of openvpn on mint/ubuntu/raspbmc?

[quote="debbie10t"]Although your versions are not the most up to date I think we can still try to work with them. I notice in your server config you are using "client-config-dir" and you have commented out ";duplicate-cn", I am suspicious that you use duplicate certificates, can you confirm if you have used duplicate certs for this new machine or not ? Although this is not the error I would expect to see, it may be something we have overlooked. Does the error occur at your rasbmc ? Can you please post your full server & client log ? (use code: delimiters)[/quote] I don;t issue any duplicates, I am using duplicate-cn to stop a certificate from being copied and used by more than 1 client. For example, where a client might copy the certificate in the same network and give it to a friend to connect. The strange thing is this. I have 1 connection on tcp and 1 on udp. Both give the subnet conflict. Also, this hapens on raspbmc and also on Linux Mint (ubuntu) so it seems like it is an ubuntu problem somehow. tcp client log: [code] spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn Tue Nov 5 22:06:40 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:06:40 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:06:40 2013 LZO compression initialized Tue Nov 5 22:06:40 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock] Tue Nov 5 22:06:41 2013 TCP connection established with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:41 2013 TCPv4_CLIENT link local: [undef] Tue Nov 5 22:06:41 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:43 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504' Tue Nov 5 22:06:43 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460' Tue Nov 5 22:06:43 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:06:45 2013 TUN/TAP device tun1 opened Tue Nov 5 22:06:45 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:06:45 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500 Tue Nov 5 22:06:45 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Tue Nov 5 22:06:45 2013 Initialization Sequence Completed ^CTue Nov 5 22:06:59 2013 event_wait : Interrupted system call (code=4) Tue Nov 5 22:06:59 2013 /sbin/ifconfig tun1 0.0.0.0 Tue Nov 5 22:06:59 2013 SIGINT[hard,] received, process exiting spain ~ # nano /etc/openvpn/jw.jwebster_2.ovpn spain ~ # openvpn --config /etc/openvpn/jw.jwebster_2.ovpn Tue Nov 5 22:07:08 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:07:08 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:07:08 2013 LZO compression initialized Tue Nov 5 22:07:08 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 [nonblock] Tue Nov 5 22:07:09 2013 TCP connection established with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:09 2013 TCPv4_CLIENT link local: [undef] Tue Nov 5 22:07:09 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:11 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504' Tue Nov 5 22:07:11 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460' Tue Nov 5 22:07:11 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:07:13 2013 TUN/TAP device tun1 opened Tue Nov 5 22:07:13 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:07:13 2013 /sbin/ifconfig tun1 172.16.0.86 pointopoint 172.16.0.85 mtu 1500 Tue Nov 5 22:07:13 2013 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.255.0] and remote VPN [172.16.0.1/255.255.255.255] Tue Nov 5 22:07:13 2013 Initialization Sequence Completed [/code] tcp server log [code] Tue Nov 5 22:10:10 2013 MULTI: multi_create_instance called Tue Nov 5 22:10:10 2013 Re-using SSL/TLS context Tue Nov 5 22:10:10 2013 LZO compression initialized Tue Nov 5 22:10:10 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1460) Tue Nov 5 22:10:10 2013 Control Channel MTU parms [ L:1504 D:140 EF:40 EB:0 ET:0 EL:0 ] Tue Nov 5 22:10:10 2013 Data Channel MTU parms [ L:1504 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ] Tue Nov 5 22:10:10 2013 Local Options hash (VER=V4): '3dc0591a' Tue Nov 5 22:10:10 2013 Expected Remote Options hash (VER=V4): '5e3b8323' Tue Nov 5 22:10:10 2013 TCP connection established with 86.15.42.109:49142 Tue Nov 5 22:10:10 2013 TCPv4_SERVER link local: [undef] Tue Nov 5 22:10:10 2013 TCPv4_SERVER link remote: 86.15.42.109:49142 Tue Nov 5 22:10:11 2013 86.15.42.109:49142 TLS: Initial packet from 86.15.42.109:49142, sid=9abbb370 e968926c Tue Nov 5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:12 2013 86.15.42.109:49142 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Tue Nov 5 22:10:13 2013 86.15.42.109:49142 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1504', remote='link-mtu 1544' Tue Nov 5 22:10:13 2013 86.15.42.109:49142 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1460', remote='tun-mtu 1500' Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Tue Nov 5 22:10:13 2013 86.15.42.109:49142 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Tue Nov 5 22:10:13 2013 86.15.42.109:49142 [jw.jwebster] Peer Connection Initiated with 86.15.42.109:49142 Tue Nov 5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: Learn: 172.16.0.86 -> jw.jwebster/86.15.42.109:49142 Tue Nov 5 22:10:13 2013 jw.jwebster/86.15.42.109:49142 MULTI: primary virtual IP for jw.jwebster/86.15.42.109:49142: 172.16.0.86 Tue Nov 5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 PUSH: Received control message: 'PUSH_REQUEST' Tue Nov 5 22:10:15 2013 jw.jwebster/86.15.42.109:49142 SENT CONTROL [jw.jwebster]: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 172.16.0.1,topology net30,ping 10,ping-restart 120,ifconfig 172.16.0.86 172.16.0.85' (status=1) [/code] udp client log: [code] spain ~ # openvpn --config /etc/openvpn/jw.jwebster_1.ovpn Tue Nov 5 22:10:38 2013 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Tue Nov 5 22:10:38 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Nov 5 22:10:38 2013 LZO compression initialized Tue Nov 5 22:10:38 2013 UDPv4 link local: [undef] Tue Nov 5 22:10:38 2013 UDPv4 link remote: [AF_INET]88.208.237.199:1194 Tue Nov 5 22:10:39 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Tue Nov 5 22:10:41 2013 TUN/TAP device tun1 opened Tue Nov 5 22:10:41 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Tue Nov 5 22:10:41 2013 /sbin/ifconfig tun1 10.8.0.202 pointopoint 10.8.0.201 mtu 1500 Tue Nov 5 22:10:41 2013 WARNING: potential route subnet conflict between local LAN [10.8.0.0/255.255.255.0] and remote VPN [10.8.0.1/255.255.255.255] Tue Nov 5 22:10:41 2013 Initialization Sequence Completed [/code] udp server log: nothing...could just be that verb is set to 0.

[quote="debbie10t"][quote=" qwertyjjj"]I don;t issue any duplicates, I am using duplicate-cn to stop a certificate from being copied and used by more than 1 client. For example, where a client might [u]copy the certificate in the same network and give it to a friend[/u] to connect.[/quote]According to your reply, you are using duplicate-cn for the opposite of it's intended use. [quote="The Manual"][code]--duplicate-cn Allow multiple clients with the same common name to concurrently connect. In the absence of this option, OpenVPN will disconnect a client instance upon connection of a new client having the same common name.[/code][/quote]Notice "In the [u]absence[/u] of this option" However, you are aware that some of your clients copy their certs and then try to connect. There is nothing we can do to prevent the issues you are having if you are using duplicates. Your VPN is fully functional, your deployment is messy and as a result you are seeing these warnings. The only sensible advice I can offer is to disconnect all your clients and try the raspbmc, I doubt you will see any warnings if you only have one client connected. Remember though, you will have to tear down [u]all[/u] your current routing to ensure you do not have any stale routes causing the warnings.[/quote] But I commented out duplicate-cn (;duplicate-cn). That means: [b]Dis[/b]Allow multiple clients with the same common name to concurrently connect. I'm not sure I really understand - if that line wasn't in the conf, which it isn;t because it is commented out, then the server would just be acting by default... I am not aware any clients copy the certificate, it could just be possible. Besides, the certificate with the error is my certificate, which I have not copied and no-one else could have. By default, every client has a different common name. I can issue myself a new certificate if you want to test this but I suspect it will be the same error. The question remains, how can multiple Windows clients connect without routing problems but not Linux?

killed openvpn on server restarted started openvpn again and connected on client: client conf [code] client dev tun1 proto udp remote 88.208.237.199 1194 resolv-retry infinite #route-nopull #dhcp-option DNS 8.8.8.8 nobind persist-key persist-tun ns-cert-type server comp-lzo verb 4 #log /etc/openvpn/client.log -----BEGIN CERTIFICATE----- [/code] server conf [code] local 88.208.237.199 port 1194 proto udp dev tun1 crl-verify /etc/openvpn/crl.pem client-config-dir /etc/openvpn/ccd ca ca.crt cert server.crt key server.key dh dh1024.pem server 10.8.0.0 255.255.255.0 push "redirect-gateway" push "dhcp-option DNS 213.171.192.249" push "dhcp-option DNS 213.171.192.245" ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group users persist-key persist-tun status openvpn-status2.log verb 4 log /var/log/openvpn2.log tun-mtu 1500 [/code] [code] sudo openvpn --config /etc/openvpn/jw.jwebster_1.ovpn[sudo] password for jason: Sat Nov 9 09:49:42 2013 us=166364 Current Parameter Settings: Sat Nov 9 09:49:42 2013 us=166490 config = '/etc/openvpn/jw.jwebster_1.ovpn' Sat Nov 9 09:49:42 2013 us=166530 mode = 0 Sat Nov 9 09:49:42 2013 us=166582 persist_config = DISABLED Sat Nov 9 09:49:42 2013 us=166628 persist_mode = 1 Sat Nov 9 09:49:42 2013 us=166670 show_ciphers = DISABLED Sat Nov 9 09:49:42 2013 us=166705 show_digests = DISABLED Sat Nov 9 09:49:42 2013 us=166737 show_engines = DISABLED Sat Nov 9 09:49:42 2013 us=166773 genkey = DISABLED Sat Nov 9 09:49:42 2013 us=166806 key_pass_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=166849 show_tls_ciphers = DISABLED Sat Nov 9 09:49:42 2013 us=166889 Connection profiles [default]: Sat Nov 9 09:49:42 2013 us=166924 proto = udp Sat Nov 9 09:49:42 2013 us=166960 local = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=166997 local_port = 0 Sat Nov 9 09:49:42 2013 us=167033 remote = '88.208.237.199' Sat Nov 9 09:49:42 2013 us=167071 remote_port = 1194 Sat Nov 9 09:49:42 2013 us=167106 remote_float = DISABLED Sat Nov 9 09:49:42 2013 us=167140 bind_defined = DISABLED Sat Nov 9 09:49:42 2013 us=167176 bind_local = DISABLED Sat Nov 9 09:49:42 2013 us=167212 connect_retry_seconds = 5 Sat Nov 9 09:49:42 2013 us=167246 connect_timeout = 10 Sat Nov 9 09:49:42 2013 us=167283 connect_retry_max = 0 Sat Nov 9 09:49:42 2013 us=167318 socks_proxy_server = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167352 socks_proxy_port = 0 Sat Nov 9 09:49:42 2013 us=167387 socks_proxy_retry = DISABLED Sat Nov 9 09:49:42 2013 us=167425 Connection profiles END Sat Nov 9 09:49:42 2013 us=167458 remote_random = DISABLED Sat Nov 9 09:49:42 2013 us=167492 ipchange = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167526 dev = 'tun1' Sat Nov 9 09:49:42 2013 us=167562 dev_type = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167598 dev_node = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167632 lladdr = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167670 topology = 1 Sat Nov 9 09:49:42 2013 us=167707 tun_ipv6 = DISABLED Sat Nov 9 09:49:42 2013 us=167746 ifconfig_local = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167781 ifconfig_remote_netmask = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167819 ifconfig_noexec = DISABLED Sat Nov 9 09:49:42 2013 us=167853 ifconfig_nowarn = DISABLED Sat Nov 9 09:49:42 2013 us=167888 ifconfig_ipv6_local = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167925 ifconfig_ipv6_netbits = 0 Sat Nov 9 09:49:42 2013 us=167961 ifconfig_ipv6_remote = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=167994 shaper = 0 Sat Nov 9 09:49:42 2013 us=168030 tun_mtu = 1500 Sat Nov 9 09:49:42 2013 us=168065 tun_mtu_defined = ENABLED Sat Nov 9 09:49:42 2013 us=168099 link_mtu = 1500 Sat Nov 9 09:49:42 2013 us=168135 link_mtu_defined = DISABLED Sat Nov 9 09:49:42 2013 us=168170 tun_mtu_extra = 0 Sat Nov 9 09:49:42 2013 us=168203 tun_mtu_extra_defined = DISABLED Sat Nov 9 09:49:42 2013 us=168240 fragment = 0 Sat Nov 9 09:49:42 2013 us=168275 mtu_discover_type = -1 Sat Nov 9 09:49:42 2013 us=168309 mtu_test = 0 Sat Nov 9 09:49:42 2013 us=168346 mlock = DISABLED Sat Nov 9 09:49:42 2013 us=168380 keepalive_ping = 0 Sat Nov 9 09:49:42 2013 us=168412 keepalive_timeout = 0 Sat Nov 9 09:49:42 2013 us=168451 inactivity_timeout = 0 Sat Nov 9 09:49:42 2013 us=168486 ping_send_timeout = 0 Sat Nov 9 09:49:42 2013 us=168519 ping_rec_timeout = 0 Sat Nov 9 09:49:42 2013 us=168557 ping_rec_timeout_action = 0 Sat Nov 9 09:49:42 2013 us=168591 ping_timer_remote = DISABLED Sat Nov 9 09:49:42 2013 us=168624 remap_sigusr1 = 0 Sat Nov 9 09:49:42 2013 us=168663 explicit_exit_notification = 0 Sat Nov 9 09:49:42 2013 us=168697 persist_tun = ENABLED Sat Nov 9 09:49:42 2013 us=168730 persist_local_ip = DISABLED Sat Nov 9 09:49:42 2013 us=168767 persist_remote_ip = DISABLED Sat Nov 9 09:49:42 2013 us=168801 persist_key = ENABLED Sat Nov 9 09:49:42 2013 us=168835 mssfix = 1450 Sat Nov 9 09:49:42 2013 us=168871 passtos = DISABLED Sat Nov 9 09:49:42 2013 us=168905 resolve_retry_seconds = 1000000000 Sat Nov 9 09:49:42 2013 us=168939 username = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=168966 groupname = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=168986 chroot_dir = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169007 cd_dir = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169027 writepid = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169047 up_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169067 down_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169087 down_pre = DISABLED Sat Nov 9 09:49:42 2013 us=169107 up_restart = DISABLED Sat Nov 9 09:49:42 2013 us=169127 up_delay = DISABLED Sat Nov 9 09:49:42 2013 us=169163 daemon = DISABLED Sat Nov 9 09:49:42 2013 us=169185 inetd = 0 Sat Nov 9 09:49:42 2013 us=169205 log = DISABLED Sat Nov 9 09:49:42 2013 us=169225 suppress_timestamps = DISABLED Sat Nov 9 09:49:42 2013 us=169249 nice = 0 Sat Nov 9 09:49:42 2013 us=169269 verbosity = 4 Sat Nov 9 09:49:42 2013 us=169289 mute = 0 Sat Nov 9 09:49:42 2013 us=169310 gremlin = 0 Sat Nov 9 09:49:42 2013 us=169329 status_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169350 status_file_version = 1 Sat Nov 9 09:49:42 2013 us=169370 status_file_update_freq = 60 Sat Nov 9 09:49:42 2013 us=169389 occ = ENABLED Sat Nov 9 09:49:42 2013 us=169410 rcvbuf = 65536 Sat Nov 9 09:49:42 2013 us=169429 sndbuf = 65536 Sat Nov 9 09:49:42 2013 us=169449 sockflags = 0 Sat Nov 9 09:49:42 2013 us=169469 fast_io = DISABLED Sat Nov 9 09:49:42 2013 us=169489 lzo = 7 Sat Nov 9 09:49:42 2013 us=169509 route_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169529 route_default_gateway = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169549 route_default_metric = 0 Sat Nov 9 09:49:42 2013 us=169569 route_noexec = DISABLED Sat Nov 9 09:49:42 2013 us=169591 route_delay = 0 Sat Nov 9 09:49:42 2013 us=169612 route_delay_window = 30 Sat Nov 9 09:49:42 2013 us=169632 route_delay_defined = DISABLED Sat Nov 9 09:49:42 2013 us=169652 route_nopull = DISABLED Sat Nov 9 09:49:42 2013 us=169672 route_gateway_via_dhcp = DISABLED Sat Nov 9 09:49:42 2013 us=169693 max_routes = 100 Sat Nov 9 09:49:42 2013 us=169713 allow_pull_fqdn = DISABLED Sat Nov 9 09:49:42 2013 us=169734 management_addr = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169754 management_port = 0 Sat Nov 9 09:49:42 2013 us=169775 management_user_pass = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169795 management_log_history_cache = 250 Sat Nov 9 09:49:42 2013 us=169815 management_echo_buffer_size = 100 Sat Nov 9 09:49:42 2013 us=169835 management_write_peer_info_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169858 management_client_user = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169879 management_client_group = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169899 management_flags = 0 Sat Nov 9 09:49:42 2013 us=169919 shared_secret_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=169940 key_direction = 0 Sat Nov 9 09:49:42 2013 us=169959 ciphername_defined = ENABLED Sat Nov 9 09:49:42 2013 us=169980 ciphername = 'BF-CBC' Sat Nov 9 09:49:42 2013 us=170000 authname_defined = ENABLED Sat Nov 9 09:49:42 2013 us=170020 authname = 'SHA1' Sat Nov 9 09:49:42 2013 us=170040 prng_hash = 'SHA1' Sat Nov 9 09:49:42 2013 us=170060 prng_nonce_secret_len = 16 Sat Nov 9 09:49:42 2013 us=170080 keysize = 0 Sat Nov 9 09:49:42 2013 us=170100 engine = DISABLED Sat Nov 9 09:49:42 2013 us=170120 replay = ENABLED Sat Nov 9 09:49:42 2013 us=170140 mute_replay_warnings = DISABLED Sat Nov 9 09:49:42 2013 us=170161 replay_window = 64 Sat Nov 9 09:49:42 2013 us=170181 replay_time = 15 Sat Nov 9 09:49:42 2013 us=170201 packet_id_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170221 use_iv = ENABLED Sat Nov 9 09:49:42 2013 us=170241 test_crypto = DISABLED Sat Nov 9 09:49:42 2013 us=170261 tls_server = DISABLED Sat Nov 9 09:49:42 2013 us=170281 tls_client = ENABLED Sat Nov 9 09:49:42 2013 us=170301 key_method = 2 Sat Nov 9 09:49:42 2013 us=170321 ca_file = '[[INLINE]]' Sat Nov 9 09:49:42 2013 us=170340 ca_path = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170360 dh_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170379 cert_file = '[[INLINE]]' Sat Nov 9 09:49:42 2013 us=170399 priv_key_file = '[[INLINE]]' Sat Nov 9 09:49:42 2013 us=170419 pkcs12_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170438 cipher_list = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170457 tls_verify = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170476 tls_export_cert = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170496 tls_remote = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170515 crl_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170535 ns_cert_type = 64 Sat Nov 9 09:49:42 2013 us=170555 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170574 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170593 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170613 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170632 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170652 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170671 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170690 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170709 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170729 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170748 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170768 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170787 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170806 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170826 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170845 remote_cert_ku[i] = 0 Sat Nov 9 09:49:42 2013 us=170864 remote_cert_eku = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=170884 tls_timeout = 2 Sat Nov 9 09:49:42 2013 us=170903 renegotiate_bytes = 0 Sat Nov 9 09:49:42 2013 us=170922 renegotiate_packets = 0 Sat Nov 9 09:49:42 2013 us=170941 renegotiate_seconds = 3600 Sat Nov 9 09:49:42 2013 us=170961 handshake_window = 60 Sat Nov 9 09:49:42 2013 us=170980 transition_window = 3600 Sat Nov 9 09:49:42 2013 us=170999 single_session = DISABLED Sat Nov 9 09:49:42 2013 us=171018 push_peer_info = DISABLED Sat Nov 9 09:49:42 2013 us=171037 tls_exit = DISABLED Sat Nov 9 09:49:42 2013 us=171056 tls_auth_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=171076 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171095 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171115 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171135 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171155 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171174 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171194 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171214 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171233 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171252 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171272 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171291 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171311 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171330 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171350 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171369 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:42 2013 us=171389 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171409 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171430 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171450 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171469 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171489 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171509 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171529 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171548 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171569 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171588 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171607 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171627 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171646 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171666 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171686 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:42 2013 us=171705 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171724 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171746 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171766 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171785 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171805 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171824 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171849 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171868 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171887 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171907 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171929 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171948 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171968 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=171987 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=172007 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:42 2013 us=172026 pkcs11_pin_cache_period = -1 Sat Nov 9 09:49:42 2013 us=172046 pkcs11_id = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=172065 pkcs11_id_management = DISABLED Sat Nov 9 09:49:42 2013 us=172098 server_network = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172120 server_netmask = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172146 server_network_ipv6 = :: Sat Nov 9 09:49:42 2013 us=172166 server_netbits_ipv6 = 0 Sat Nov 9 09:49:42 2013 us=172187 server_bridge_ip = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172208 server_bridge_netmask = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172229 server_bridge_pool_start = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172250 server_bridge_pool_end = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172270 ifconfig_pool_defined = DISABLED Sat Nov 9 09:49:42 2013 us=172292 ifconfig_pool_start = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=172313 ifconfig_pool_end = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=177301 ifconfig_pool_netmask = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=177359 ifconfig_pool_persist_filename = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=177393 ifconfig_pool_persist_refresh_freq = 600 Sat Nov 9 09:49:42 2013 us=177424 ifconfig_ipv6_pool_defined = DISABLED Sat Nov 9 09:49:42 2013 us=177458 ifconfig_ipv6_pool_base = :: Sat Nov 9 09:49:42 2013 us=177489 ifconfig_ipv6_pool_netbits = 0 Sat Nov 9 09:49:42 2013 us=177519 n_bcast_buf = 256 Sat Nov 9 09:49:42 2013 us=177549 tcp_queue_limit = 64 Sat Nov 9 09:49:42 2013 us=177579 real_hash_size = 256 Sat Nov 9 09:49:42 2013 us=177609 virtual_hash_size = 256 Sat Nov 9 09:49:42 2013 us=177639 client_connect_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=177669 learn_address_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=177701 client_disconnect_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=177733 client_config_dir = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=177764 ccd_exclusive = DISABLED Sat Nov 9 09:49:42 2013 us=177794 tmp_dir = '/tmp' Sat Nov 9 09:49:42 2013 us=177825 push_ifconfig_defined = DISABLED Sat Nov 9 09:49:42 2013 us=177860 push_ifconfig_local = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=177893 push_ifconfig_remote_netmask = 0.0.0.0 Sat Nov 9 09:49:42 2013 us=177923 push_ifconfig_ipv6_defined = DISABLED Sat Nov 9 09:49:42 2013 us=177955 push_ifconfig_ipv6_local = ::/0 Sat Nov 9 09:49:42 2013 us=177987 push_ifconfig_ipv6_remote = :: Sat Nov 9 09:49:42 2013 us=178019 enable_c2c = DISABLED Sat Nov 9 09:49:42 2013 us=178049 duplicate_cn = DISABLED Sat Nov 9 09:49:42 2013 us=178082 cf_max = 0 Sat Nov 9 09:49:42 2013 us=178117 cf_per = 0 Sat Nov 9 09:49:42 2013 us=178152 max_clients = 1024 Sat Nov 9 09:49:42 2013 us=178186 max_routes_per_client = 256 Sat Nov 9 09:49:42 2013 us=178219 auth_user_pass_verify_script = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=178253 auth_user_pass_verify_script_via_file = DISABLED Sat Nov 9 09:49:42 2013 us=178288 ssl_flags = 0 Sat Nov 9 09:49:42 2013 us=178320 port_share_host = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=178352 port_share_port = 0 Sat Nov 9 09:49:42 2013 us=178384 client = ENABLED Sat Nov 9 09:49:42 2013 us=178417 pull = ENABLED Sat Nov 9 09:49:42 2013 us=178448 auth_user_pass_file = '[UNDEF]' Sat Nov 9 09:49:42 2013 us=178496 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013 Sat Nov 9 09:49:42 2013 us=178749 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sat Nov 9 09:49:42 2013 us=180367 LZO compression initialized Sat Nov 9 09:49:42 2013 us=180559 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sat Nov 9 09:49:42 2013 us=180656 Socket Buffers: R=[163840->131072] S=[163840->131072] Sat Nov 9 09:49:42 2013 us=180734 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sat Nov 9 09:49:42 2013 us=180791 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' Sat Nov 9 09:49:42 2013 us=180824 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' Sat Nov 9 09:49:42 2013 us=180886 Local Options hash (VER=V4): '41690919' Sat Nov 9 09:49:42 2013 us=180933 Expected Remote Options hash (VER=V4): '530fdded' Sat Nov 9 09:49:42 2013 us=180978 UDPv4 link local: [undef] Sat Nov 9 09:49:42 2013 us=181017 UDPv4 link remote: [AF_INET]88.208.237.199:1194 Sat Nov 9 09:49:42 2013 us=229082 TLS: Initial packet from [AF_INET]88.208.237.199:1194, sid=cd483230 855a7e86 Sat Nov 9 09:49:42 2013 us=451492 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:49:42 2013 us=452097 VERIFY OK: nsCertType=SERVER Sat Nov 9 09:49:42 2013 us=452131 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=server/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:49:42 2013 us=832165 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Nov 9 09:49:42 2013 us=832326 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Nov 9 09:49:42 2013 us=832586 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Nov 9 09:49:42 2013 us=832642 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Nov 9 09:49:42 2013 us=832847 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Nov 9 09:49:42 2013 us=832935 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Sat Nov 9 09:49:44 2013 us=939337 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Nov 9 09:49:44 2013 us=980017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Sat Nov 9 09:49:44 2013 us=980282 OPTIONS IMPORT: timers and/or timeouts modified Sat Nov 9 09:49:44 2013 us=980314 OPTIONS IMPORT: --ifconfig/up options modified Sat Nov 9 09:49:44 2013 us=980336 OPTIONS IMPORT: route options modified Sat Nov 9 09:49:44 2013 us=980354 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Nov 9 09:49:44 2013 us=980726 ROUTE default_gateway=192.168.0.1 Sat Nov 9 09:49:44 2013 us=981415 TUN/TAP device tun1 opened Sat Nov 9 09:49:44 2013 us=981487 TUN/TAP TX queue length set to 100 Sat Nov 9 09:49:44 2013 us=981546 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat Nov 9 09:49:44 2013 us=981644 /sbin/ifconfig tun1 10.8.0.6 pointopoint 10.8.0.5 mtu 1500 Sat Nov 9 09:49:44 2013 us=986943 /sbin/route add -net 88.208.237.199 netmask 255.255.255.255 gw 192.168.0.1 Sat Nov 9 09:49:44 2013 us=989659 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0 Sat Nov 9 09:49:44 2013 us=991744 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.8.0.5 Sat Nov 9 09:49:44 2013 us=997299 WARNING: potential route subnet conflict between local LAN [10.8.0.0/255.255.255.0] and remote VPN [10.8.0.1/255.255.255.255] Sat Nov 9 09:49:44 2013 us=997430 /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5 Sat Nov 9 09:49:44 2013 us=999461 Initialization Sequence Completed ^CSat Nov 9 09:50:51 2013 us=152143 event_wait : Interrupted system call (code=4) Sat Nov 9 09:50:51 2013 us=152864 TCP/UDP: Closing socket Sat Nov 9 09:50:51 2013 us=153001 /sbin/route del -net 10.8.0.1 netmask 255.255.255.255 Sat Nov 9 09:50:51 2013 us=155203 /sbin/route del -net 88.208.237.199 netmask 255.255.255.255 Sat Nov 9 09:50:51 2013 us=157257 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0 Sat Nov 9 09:50:51 2013 us=159197 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.0.1 Sat Nov 9 09:50:51 2013 us=161099 Closing TUN/TAP interface Sat Nov 9 09:50:51 2013 us=161191 /sbin/ifconfig tun1 0.0.0.0 Sat Nov 9 09:50:51 2013 us=180929 SIGINT[hard,] received, process exiting [/code] server log [code] Sat Nov 9 09:49:04 2013 us=682185 Current Parameter Settings: Sat Nov 9 09:49:04 2013 us=682281 config = 'openvpn2.conf' Sat Nov 9 09:49:04 2013 us=682298 mode = 1 Sat Nov 9 09:49:04 2013 us=682313 persist_config = DISABLED Sat Nov 9 09:49:04 2013 us=682328 persist_mode = 1 Sat Nov 9 09:49:04 2013 us=682342 show_ciphers = DISABLED Sat Nov 9 09:49:04 2013 us=682356 show_digests = DISABLED Sat Nov 9 09:49:04 2013 us=682370 show_engines = DISABLED Sat Nov 9 09:49:04 2013 us=682384 genkey = DISABLED Sat Nov 9 09:49:04 2013 us=682398 key_pass_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682413 show_tls_ciphers = DISABLED Sat Nov 9 09:49:04 2013 us=682428 Connection profiles [default]: Sat Nov 9 09:49:04 2013 us=682442 proto = udp Sat Nov 9 09:49:04 2013 us=682457 local = '88.208.237.199' Sat Nov 9 09:49:04 2013 us=682471 local_port = 1194 Sat Nov 9 09:49:04 2013 us=682485 remote = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682500 remote_port = 1194 Sat Nov 9 09:49:04 2013 us=682514 remote_float = DISABLED Sat Nov 9 09:49:04 2013 us=682528 bind_defined = DISABLED Sat Nov 9 09:49:04 2013 us=682542 bind_local = ENABLED Sat Nov 9 09:49:04 2013 us=682556 connect_retry_seconds = 5 Sat Nov 9 09:49:04 2013 us=682570 connect_timeout = 10 Sat Nov 9 09:49:04 2013 us=682585 connect_retry_max = 0 Sat Nov 9 09:49:04 2013 us=682599 socks_proxy_server = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682624 socks_proxy_port = 0 Sat Nov 9 09:49:04 2013 us=682638 socks_proxy_retry = DISABLED Sat Nov 9 09:49:04 2013 us=682655 Connection profiles END Sat Nov 9 09:49:04 2013 us=682670 remote_random = DISABLED Sat Nov 9 09:49:04 2013 us=682684 ipchange = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682698 dev = 'tun1' Sat Nov 9 09:49:04 2013 us=682712 dev_type = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682726 dev_node = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682740 lladdr = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=682754 topology = 1 Sat Nov 9 09:49:04 2013 us=682768 tun_ipv6 = DISABLED Sat Nov 9 09:49:04 2013 us=682782 ifconfig_local = '10.8.0.1' Sat Nov 9 09:49:04 2013 us=682797 ifconfig_remote_netmask = '10.8.0.2' Sat Nov 9 09:49:04 2013 us=682811 ifconfig_noexec = DISABLED Sat Nov 9 09:49:04 2013 us=682825 ifconfig_nowarn = DISABLED Sat Nov 9 09:49:04 2013 us=682839 shaper = 0 Sat Nov 9 09:49:04 2013 us=682853 tun_mtu = 1500 Sat Nov 9 09:49:04 2013 us=682867 tun_mtu_defined = ENABLED Sat Nov 9 09:49:04 2013 us=682881 link_mtu = 1500 Sat Nov 9 09:49:04 2013 us=682895 link_mtu_defined = DISABLED Sat Nov 9 09:49:04 2013 us=682910 tun_mtu_extra = 0 Sat Nov 9 09:49:04 2013 us=682924 tun_mtu_extra_defined = DISABLED Sat Nov 9 09:49:04 2013 us=682938 fragment = 0 Sat Nov 9 09:49:04 2013 us=682953 mtu_discover_type = -1 Sat Nov 9 09:49:04 2013 us=682967 mtu_test = 0 Sat Nov 9 09:49:04 2013 us=682981 mlock = DISABLED Sat Nov 9 09:49:04 2013 us=682995 keepalive_ping = 10 Sat Nov 9 09:49:04 2013 us=683009 keepalive_timeout = 120 Sat Nov 9 09:49:04 2013 us=683024 inactivity_timeout = 0 Sat Nov 9 09:49:04 2013 us=683038 ping_send_timeout = 10 Sat Nov 9 09:49:04 2013 us=683052 ping_rec_timeout = 240 Sat Nov 9 09:49:04 2013 us=683066 ping_rec_timeout_action = 2 Sat Nov 9 09:49:04 2013 us=683080 ping_timer_remote = DISABLED Sat Nov 9 09:49:04 2013 us=683095 remap_sigusr1 = 0 Sat Nov 9 09:49:04 2013 us=683109 explicit_exit_notification = 0 Sat Nov 9 09:49:04 2013 us=683123 persist_tun = ENABLED Sat Nov 9 09:49:04 2013 us=683137 persist_local_ip = DISABLED Sat Nov 9 09:49:04 2013 us=683152 persist_remote_ip = DISABLED Sat Nov 9 09:49:04 2013 us=683166 persist_key = ENABLED Sat Nov 9 09:49:04 2013 us=683180 mssfix = 1450 Sat Nov 9 09:49:04 2013 us=683195 passtos = DISABLED Sat Nov 9 09:49:04 2013 us=683209 resolve_retry_seconds = 1000000000 Sat Nov 9 09:49:04 2013 us=683223 username = 'nobody' Sat Nov 9 09:49:04 2013 us=683237 groupname = 'users' Sat Nov 9 09:49:04 2013 us=683251 chroot_dir = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683281 cd_dir = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683296 selinux_context = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683310 writepid = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683325 up_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683339 down_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683353 down_pre = DISABLED Sat Nov 9 09:49:04 2013 us=683367 up_restart = DISABLED Sat Nov 9 09:49:04 2013 us=683381 up_delay = DISABLED Sat Nov 9 09:49:04 2013 us=683395 daemon = DISABLED Sat Nov 9 09:49:04 2013 us=683409 inetd = 0 Sat Nov 9 09:49:04 2013 us=683423 log = ENABLED Sat Nov 9 09:49:04 2013 us=683438 suppress_timestamps = DISABLED Sat Nov 9 09:49:04 2013 us=683452 nice = 0 Sat Nov 9 09:49:04 2013 us=683466 verbosity = 4 Sat Nov 9 09:49:04 2013 us=683480 mute = 0 Sat Nov 9 09:49:04 2013 us=683494 gremlin = 0 Sat Nov 9 09:49:04 2013 us=683508 status_file = 'openvpn-status2.log' Sat Nov 9 09:49:04 2013 us=683522 status_file_version = 1 Sat Nov 9 09:49:04 2013 us=683537 status_file_update_freq = 60 Sat Nov 9 09:49:04 2013 us=683551 occ = ENABLED Sat Nov 9 09:49:04 2013 us=683565 rcvbuf = 65536 Sat Nov 9 09:49:04 2013 us=683579 sndbuf = 65536 Sat Nov 9 09:49:04 2013 us=683593 sockflags = 0 Sat Nov 9 09:49:04 2013 us=683615 fast_io = DISABLED Sat Nov 9 09:49:04 2013 us=683630 lzo = 7 Sat Nov 9 09:49:04 2013 us=683644 route_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683658 route_default_gateway = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683673 route_default_metric = 0 Sat Nov 9 09:49:04 2013 us=683686 route_noexec = DISABLED Sat Nov 9 09:49:04 2013 us=683700 route_delay = 0 Sat Nov 9 09:49:04 2013 us=683714 route_delay_window = 30 Sat Nov 9 09:49:04 2013 us=683728 route_delay_defined = DISABLED Sat Nov 9 09:49:04 2013 us=683743 route_nopull = DISABLED Sat Nov 9 09:49:04 2013 us=683758 route_gateway_via_dhcp = DISABLED Sat Nov 9 09:49:04 2013 us=683773 max_routes = 100 Sat Nov 9 09:49:04 2013 us=683787 allow_pull_fqdn = DISABLED Sat Nov 9 09:49:04 2013 us=683802 route 10.8.0.0/255.255.255.0/nil/nil Sat Nov 9 09:49:04 2013 us=683817 management_addr = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683831 management_port = 0 Sat Nov 9 09:49:04 2013 us=683846 management_user_pass = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683860 management_log_history_cache = 250 Sat Nov 9 09:49:04 2013 us=683875 management_echo_buffer_size = 100 Sat Nov 9 09:49:04 2013 us=683889 management_write_peer_info_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683903 management_client_user = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683918 management_client_group = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683932 management_flags = 0 Sat Nov 9 09:49:04 2013 us=683946 shared_secret_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=683961 key_direction = 0 Sat Nov 9 09:49:04 2013 us=683975 ciphername_defined = ENABLED Sat Nov 9 09:49:04 2013 us=683990 ciphername = 'BF-CBC' Sat Nov 9 09:49:04 2013 us=684004 authname_defined = ENABLED Sat Nov 9 09:49:04 2013 us=684018 authname = 'SHA1' Sat Nov 9 09:49:04 2013 us=684033 prng_hash = 'SHA1' Sat Nov 9 09:49:04 2013 us=684047 prng_nonce_secret_len = 16 Sat Nov 9 09:49:04 2013 us=684061 keysize = 0 Sat Nov 9 09:49:04 2013 us=684075 engine = DISABLED Sat Nov 9 09:49:04 2013 us=684089 replay = ENABLED Sat Nov 9 09:49:04 2013 us=684104 mute_replay_warnings = DISABLED Sat Nov 9 09:49:04 2013 us=684118 replay_window = 64 Sat Nov 9 09:49:04 2013 us=684132 replay_time = 15 Sat Nov 9 09:49:04 2013 us=684147 packet_id_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684161 use_iv = ENABLED Sat Nov 9 09:49:04 2013 us=684175 test_crypto = DISABLED Sat Nov 9 09:49:04 2013 us=684189 tls_server = ENABLED Sat Nov 9 09:49:04 2013 us=684203 tls_client = DISABLED Sat Nov 9 09:49:04 2013 us=684217 key_method = 2 Sat Nov 9 09:49:04 2013 us=684232 ca_file = 'ca.crt' Sat Nov 9 09:49:04 2013 us=684246 ca_path = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684260 dh_file = 'dh1024.pem' Sat Nov 9 09:49:04 2013 us=684284 cert_file = 'server.crt' Sat Nov 9 09:49:04 2013 us=684300 priv_key_file = 'server.key' Sat Nov 9 09:49:04 2013 us=684314 pkcs12_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684328 cipher_list = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684343 tls_verify = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684357 tls_export_cert = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684372 tls_remote = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684386 crl_file = '/etc/openvpn/crl.pem' Sat Nov 9 09:49:04 2013 us=684401 ns_cert_type = 0 Sat Nov 9 09:49:04 2013 us=684415 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684430 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684444 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684458 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684472 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684486 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684501 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684515 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684529 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684543 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684557 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684571 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684585 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684600 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684664 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684679 remote_cert_ku[i] = 0 Sat Nov 9 09:49:04 2013 us=684694 remote_cert_eku = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684709 tls_timeout = 2 Sat Nov 9 09:49:04 2013 us=684723 renegotiate_bytes = 0 Sat Nov 9 09:49:04 2013 us=684737 renegotiate_packets = 0 Sat Nov 9 09:49:04 2013 us=684752 renegotiate_seconds = 3600 Sat Nov 9 09:49:04 2013 us=684766 handshake_window = 60 Sat Nov 9 09:49:04 2013 us=684780 transition_window = 3600 Sat Nov 9 09:49:04 2013 us=684795 single_session = DISABLED Sat Nov 9 09:49:04 2013 us=684809 push_peer_info = DISABLED Sat Nov 9 09:49:04 2013 us=684823 tls_exit = DISABLED Sat Nov 9 09:49:04 2013 us=684837 tls_auth_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=684853 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684869 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684883 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684897 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684911 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684926 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684940 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684955 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684969 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684983 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=684998 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685012 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685026 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685040 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685055 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685069 pkcs11_protected_authentication = DISABLED Sat Nov 9 09:49:04 2013 us=685084 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685099 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685113 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685128 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685143 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685157 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685171 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685186 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685200 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685215 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685240 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685255 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685270 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685284 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685299 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685313 pkcs11_private_mode = 00000000 Sat Nov 9 09:49:04 2013 us=685328 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685342 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685356 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685370 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685384 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685399 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685413 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685427 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685442 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685456 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685470 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685484 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685498 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685512 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685526 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685540 pkcs11_cert_private = DISABLED Sat Nov 9 09:49:04 2013 us=685556 pkcs11_pin_cache_period = -1 Sat Nov 9 09:49:04 2013 us=685570 pkcs11_id = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=685585 pkcs11_id_management = DISABLED Sat Nov 9 09:49:04 2013 us=685601 server_network = 10.8.0.0 Sat Nov 9 09:49:04 2013 us=685626 server_netmask = 255.255.255.0 Sat Nov 9 09:49:04 2013 us=685646 server_bridge_ip = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=685663 server_bridge_netmask = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=685679 server_bridge_pool_start = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=685695 server_bridge_pool_end = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=685709 push_entry = 'redirect-gateway' Sat Nov 9 09:49:04 2013 us=685724 push_entry = 'dhcp-option DNS 213.171.192.249' Sat Nov 9 09:49:04 2013 us=685739 push_entry = 'dhcp-option DNS 213.171.192.245' Sat Nov 9 09:49:04 2013 us=685753 push_entry = 'route 10.8.0.1' Sat Nov 9 09:49:04 2013 us=685768 push_entry = 'topology net30' Sat Nov 9 09:49:04 2013 us=685782 push_entry = 'ping 10' Sat Nov 9 09:49:04 2013 us=685796 push_entry = 'ping-restart 120' Sat Nov 9 09:49:04 2013 us=685811 ifconfig_pool_defined = ENABLED Sat Nov 9 09:49:04 2013 us=685827 ifconfig_pool_start = 10.8.0.4 Sat Nov 9 09:49:04 2013 us=685843 ifconfig_pool_end = 10.8.0.251 Sat Nov 9 09:49:04 2013 us=685859 ifconfig_pool_netmask = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=685874 ifconfig_pool_persist_filename = 'ipp.txt' Sat Nov 9 09:49:04 2013 us=685889 ifconfig_pool_persist_refresh_freq = 600 Sat Nov 9 09:49:04 2013 us=685903 n_bcast_buf = 256 Sat Nov 9 09:49:04 2013 us=685918 tcp_queue_limit = 64 Sat Nov 9 09:49:04 2013 us=685932 real_hash_size = 256 Sat Nov 9 09:49:04 2013 us=685946 virtual_hash_size = 256 Sat Nov 9 09:49:04 2013 us=685960 client_connect_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=685975 learn_address_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=685989 client_disconnect_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=686003 client_config_dir = '/etc/openvpn/ccd' Sat Nov 9 09:49:04 2013 us=686018 ccd_exclusive = DISABLED Sat Nov 9 09:49:04 2013 us=686032 tmp_dir = '/tmp' Sat Nov 9 09:49:04 2013 us=686046 push_ifconfig_defined = DISABLED Sat Nov 9 09:49:04 2013 us=686062 push_ifconfig_local = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=686078 push_ifconfig_remote_netmask = 0.0.0.0 Sat Nov 9 09:49:04 2013 us=686092 enable_c2c = DISABLED Sat Nov 9 09:49:04 2013 us=686106 duplicate_cn = DISABLED Sat Nov 9 09:49:04 2013 us=686121 cf_max = 0 Sat Nov 9 09:49:04 2013 us=686145 cf_per = 0 Sat Nov 9 09:49:04 2013 us=686160 max_clients = 1024 Sat Nov 9 09:49:04 2013 us=686175 max_routes_per_client = 256 Sat Nov 9 09:49:04 2013 us=686189 auth_user_pass_verify_script = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=686204 auth_user_pass_verify_script_via_file = DISABLED Sat Nov 9 09:49:04 2013 us=686218 ssl_flags = 0 Sat Nov 9 09:49:04 2013 us=686233 port_share_host = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=686247 port_share_port = 0 Sat Nov 9 09:49:04 2013 us=686261 client = DISABLED Sat Nov 9 09:49:04 2013 us=686275 pull = DISABLED Sat Nov 9 09:49:04 2013 us=686289 auth_user_pass_file = '[UNDEF]' Sat Nov 9 09:49:04 2013 us=686307 OpenVPN 2.2.2 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr 5 2012 Sat Nov 9 09:49:04 2013 us=686508 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sat Nov 9 09:49:04 2013 us=693651 Diffie-Hellman initialized with 1024 bit key Sat Nov 9 09:49:04 2013 us=694412 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sat Nov 9 09:49:04 2013 us=694454 Socket Buffers: R=[262144->131072] S=[262144->131072] Sat Nov 9 09:49:04 2013 us=694620 ROUTE default_gateway=88.208.236.1 Sat Nov 9 09:49:04 2013 us=694756 TUN/TAP device tun1 opened Sat Nov 9 09:49:04 2013 us=694781 TUN/TAP TX queue length set to 100 Sat Nov 9 09:49:04 2013 us=694828 /sbin/ip link set dev tun1 up mtu 1500 Sat Nov 9 09:49:04 2013 us=695625 /sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2 Sat Nov 9 09:49:04 2013 us=699726 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 Sat Nov 9 09:49:04 2013 us=700410 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sat Nov 9 09:49:04 2013 us=700788 GID set to users Sat Nov 9 09:49:04 2013 us=700813 UID set to nobody Sat Nov 9 09:49:04 2013 us=700839 UDPv4 link local (bound): 88.208.237.199:1194 Sat Nov 9 09:49:04 2013 us=700853 UDPv4 link remote: [undef] Sat Nov 9 09:49:04 2013 us=700878 MULTI: multi_init called, r=256 v=256 Sat Nov 9 09:49:04 2013 us=700924 IFCONFIG POOL: base=10.8.0.4 size=62 Sat Nov 9 09:49:04 2013 us=701067 IFCONFIG POOL LIST Sat Nov 9 09:49:04 2013 us=701102 Initialization Sequence Completed Sat Nov 9 09:50:03 2013 us=74175 MULTI: multi_create_instance called Sat Nov 9 09:50:03 2013 us=74247 86.15.42.109:45951 Re-using SSL/TLS context Sat Nov 9 09:50:03 2013 us=74280 86.15.42.109:45951 LZO compression initialized Sat Nov 9 09:50:03 2013 us=74424 86.15.42.109:45951 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sat Nov 9 09:50:03 2013 us=74444 86.15.42.109:45951 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sat Nov 9 09:50:03 2013 us=74494 86.15.42.109:45951 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' Sat Nov 9 09:50:03 2013 us=74509 86.15.42.109:45951 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' Sat Nov 9 09:50:03 2013 us=74537 86.15.42.109:45951 Local Options hash (VER=V4): '530fdded' Sat Nov 9 09:50:03 2013 us=74561 86.15.42.109:45951 Expected Remote Options hash (VER=V4): '41690919' Sat Nov 9 09:50:03 2013 us=74627 86.15.42.109:45951 TLS: Initial packet from 86.15.42.109:45951, sid=9b39e42c 910c8113 Sat Nov 9 09:50:03 2013 us=593334 86.15.42.109:45951 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:50:03 2013 us=593409 86.15.42.109:45951 VERIFY OK: depth=1, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=PROXYPLAYER_CA/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:50:03 2013 us=593878 86.15.42.109:45951 CRL CHECK OK: /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:50:03 2013 us=593935 86.15.42.109:45951 VERIFY OK: depth=0, /C=GB/ST=LND/L=LONDON/O=PROXYPLAYER/CN=jw.jwebster/emailAddress=sales@proxyplayer.co.uk Sat Nov 9 09:50:03 2013 us=676809 86.15.42.109:45951 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Nov 9 09:50:03 2013 us=676838 86.15.42.109:45951 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Nov 9 09:50:03 2013 us=676925 86.15.42.109:45951 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Nov 9 09:50:03 2013 us=676943 86.15.42.109:45951 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Nov 9 09:50:03 2013 us=717066 86.15.42.109:45951 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Nov 9 09:50:03 2013 us=717100 86.15.42.109:45951 [jw.jwebster] Peer Connection Initiated with 86.15.42.109:45951 Sat Nov 9 09:50:03 2013 us=717218 jw.jwebster/86.15.42.109:45951 MULTI: Learn: 10.8.0.6 -> jw.jwebster/86.15.42.109:45951 Sat Nov 9 09:50:03 2013 us=717241 jw.jwebster/86.15.42.109:45951 MULTI: primary virtual IP for jw.jwebster/86.15.42.109:45951: 10.8.0.6 Sat Nov 9 09:50:05 2013 us=825347 jw.jwebster/86.15.42.109:45951 PUSH: Received control message: 'PUSH_REQUEST' Sat Nov 9 09:50:05 2013 us=825420 jw.jwebster/86.15.42.109:45951 SENT CONTROL [jw.jwebster]: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1) Sat Nov 9 09:50:06 2013 us=535973 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:18 2013 us=181382 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:18 2013 us=185433 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:18 2013 us=185485 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:18 2013 us=185537 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:20 2013 us=323047 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:21 2013 us=655266 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:24 2013 us=813583 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped Sat Nov 9 09:50:33 2013 us=786978 jw.jwebster/86.15.42.109:45951 MULTI: bad source address from client [192.168.0.12], packet dropped [/code] route [code] route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 10.8.0.5 0.0.0.0 UG 0 0 0 tun1 10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun1 10.8.0.5 * 255.255.255.255 UH 0 0 0 tun1 88.208.237.199 192.168.0.1 255.255.255.255 UGH 0 0 0 wlan1 link-local * 255.255.0.0 U 1000 0 0 wlan1 192.168.0.0 * 255.255.255.0 U 9 0 0 wlan1 [/code]

[quote="debbie10t"]I notice you are using "tun1" . . . do you also have "tun0" ? If you use the same config on more than one tun device they will each need separate subnets, or you can use one instance of openvpn on the server which multiple clients can connect to. At this time, this is the only explanation I can think of. If this is not the case, you could try the IRC Channel #openvpn on freenode.net[/quote] This is the serve route. I have 2 instances one running on tcp, one running on udp. However, Windows clients connect to it fine without subnet warnings so is this something that only occurs on Linux? [code] Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.8.0.2 * 255.255.255.255 UH 0 0 0 tun1 172.16.0.2 * 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun1 172.16.0.0 172.16.0.2 255.255.255.0 UG 0 0 0 tun0 [/code]

[quote="debbie10t"][quote="qwertyjjj"]I have 2 instances one running on tcp, one running on udp. However, Windows clients connect to it fine without subnet warnings so is this something that only occurs on Linux?[/quote] [quote="debbie10t"]f you use the same config on more than one tun device they will each need separate subnets, or you can use one instance of openvpn on the server which multiple clients can connect to.[/quote] ~One or the other~ As you are using UPD & TCP you need two instances and you also REQUIRE two separate subnets. Which means you [u]CANNOT[/u] use 10.x.0.0 for both instances.[/quote] There are 2 instances now tcp runs on 10.8.0.0 udp runs on 172.16.0.0 If you want me to test with 1 instance running I can but I think it will be the same result. If it was a config error, you would think the Windows client clogs would have warnings as well and they don't. :cry:

[quote="debbie10t"]Check your logs and see if the error persists.[/quote] these are the logs from a windows client: [code] Thu Nov 14 18:31:41 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013 Thu Nov 14 18:31:42 2013 Attempting to establish TCP connection with [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:42 2013 TCP connection established with [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:42 2013 TCPv4_CLIENT link local: [undef] Thu Nov 14 18:31:42 2013 TCPv4_CLIENT link remote: [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:44 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1504' Thu Nov 14 18:31:44 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1460' Thu Nov 14 18:31:44 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:46 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Nov 14 18:31:46 2013 open_tun, tt->ipv6=0 Thu Nov 14 18:31:46 2013 TAP-WIN32 device [Local Area Connection 13] opened: \\.\Global\{90FA8555-CF6C-4173-9DE9-31A842D5FBBC}.tap Thu Nov 14 18:31:46 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 172.16.0.142/255.255.255.252 on interface {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} [DHCP-serv: 172.16.0.141, lease-time: 31536000] Thu Nov 14 18:31:46 2013 Successful ARP Flush on interface [3] {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} Thu Nov 14 18:31:56 2013 Initialization Sequence Completed [/code] [code] Thu Nov 14 18:31:03 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013 Thu Nov 14 18:31:03 2013 UDPv4 link local: [undef] Thu Nov 14 18:31:03 2013 UDPv4 link remote: [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:08 2013 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194 Thu Nov 14 18:31:10 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Nov 14 18:31:10 2013 open_tun, tt->ipv6=0 Thu Nov 14 18:31:10 2013 TAP-WIN32 device [Local Area Connection 13] opened: \\.\Global\{90FA8555-CF6C-4173-9DE9-31A842D5FBBC}.tap Thu Nov 14 18:31:10 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.90/255.255.255.252 on interface {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} [DHCP-serv: 10.8.0.89, lease-time: 31536000] Thu Nov 14 18:31:10 2013 Successful ARP Flush on interface [3] {90FA8555-CF6C-4173-9DE9-31A842D5FBBC} Thu Nov 14 18:31:16 2013 Initialization Sequence Completed [/code]

No! The whole time I have been trying to explain that the warning appears when a :Linux client tries to connect. I mentioned that the same error does not happen to Windows clients connecting to the server. You said it must be the server config and so after showing you the server conf, I showed you the windows client logs above proving that Windows clients do not have a subnet warning when connecting to the server. We already worked through the Linux config files and there weren't any issues there. The server is setup correctly or other clients would not be able to connect. So, what is left to troubleshoot?

strange subnet conflict

rainbow6

/usr/sbin/openvpn --writepid /var/run/openvpn.openvpn.pid --cd /etc/openvpn --config /etc/openvpn/openvpn.conf

The above is commandline for debian and I think you need sudo on the initial start.

Please upgrade the binary to 2.3.2 as my user which is facing the same issue on Windows is now a happy user after making the upgrade.

qwertyjjj

rainbow6 wrote/usr/sbin/openvpn --writepid /var/run/openvpn.openvpn.pid --cd /etc/openvpn --config /etc/openvpn/openvpn.conf

The above is commandline for debian and I think you need sudo on the initial start.

Please upgrade the binary to 2.3.2 as my user which is facing the same issue on Windows is now a happy user after making the upgrade.

upgraded to 2.3.2
connection error has gone
However, when I connect I still cannot get any webpages to resolve - must still be a routing error somewhere?
I used the resolv conf settings as well

Sun Nov 17 19:13:35 2013 us=700308   pkcs11_cert_private = DISABLED
Sun Nov 17 19:13:35 2013 us=700318   pkcs11_cert_private = DISABLED
Sun Nov 17 19:13:35 2013 us=700330   pkcs11_cert_private = DISABLED
Sun Nov 17 19:13:35 2013 us=700340   pkcs11_pin_cache_period = -1
Sun Nov 17 19:13:35 2013 us=700350   pkcs11_id = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=700360   pkcs11_id_management = DISABLED
Sun Nov 17 19:13:35 2013 us=700377   server_network = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700388   server_netmask = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700401   server_network_ipv6 = ::
Sun Nov 17 19:13:35 2013 us=700411   server_netbits_ipv6 = 0
Sun Nov 17 19:13:35 2013 us=700422   server_bridge_ip = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700432   server_bridge_netmask = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700442   server_bridge_pool_start = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700453   server_bridge_pool_end = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=700462   ifconfig_pool_defined = DISABLED
Sun Nov 17 19:13:35 2013 us=719361   ifconfig_pool_start = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=719404   ifconfig_pool_end = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=719417   ifconfig_pool_netmask = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=719430   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719440   ifconfig_pool_persist_refresh_freq = 600
Sun Nov 17 19:13:35 2013 us=719449   ifconfig_ipv6_pool_defined = DISABLED
Sun Nov 17 19:13:35 2013 us=719468   ifconfig_ipv6_pool_base = ::
Sun Nov 17 19:13:35 2013 us=719482   ifconfig_ipv6_pool_netbits = 0
Sun Nov 17 19:13:35 2013 us=719490   n_bcast_buf = 256
Sun Nov 17 19:13:35 2013 us=719498   tcp_queue_limit = 64
Sun Nov 17 19:13:35 2013 us=719508   real_hash_size = 256
Sun Nov 17 19:13:35 2013 us=719519   virtual_hash_size = 256
Sun Nov 17 19:13:35 2013 us=719529   client_connect_script = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719538   learn_address_script = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719547   client_disconnect_script = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719558   client_config_dir = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719566   ccd_exclusive = DISABLED
Sun Nov 17 19:13:35 2013 us=719574   tmp_dir = '/tmp'
Sun Nov 17 19:13:35 2013 us=719584   push_ifconfig_defined = DISABLED
Sun Nov 17 19:13:35 2013 us=719595   push_ifconfig_local = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=719606   push_ifconfig_remote_netmask = 0.0.0.0
Sun Nov 17 19:13:35 2013 us=719615   push_ifconfig_ipv6_defined = DISABLED
Sun Nov 17 19:13:35 2013 us=719625   push_ifconfig_ipv6_local = ::/0
Sun Nov 17 19:13:35 2013 us=719634   push_ifconfig_ipv6_remote = ::
Sun Nov 17 19:13:35 2013 us=719645   enable_c2c = DISABLED
Sun Nov 17 19:13:35 2013 us=719655   duplicate_cn = DISABLED
Sun Nov 17 19:13:35 2013 us=719664   cf_max = 0
Sun Nov 17 19:13:35 2013 us=719673   cf_per = 0
Sun Nov 17 19:13:35 2013 us=719681   max_clients = 1024
Sun Nov 17 19:13:35 2013 us=719692   max_routes_per_client = 256
Sun Nov 17 19:13:35 2013 us=719701   auth_user_pass_verify_script = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719709   auth_user_pass_verify_script_via_file = DISABLED
Sun Nov 17 19:13:35 2013 us=719719   port_share_host = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719728   port_share_port = 0
Sun Nov 17 19:13:35 2013 us=719737   client = ENABLED
Sun Nov 17 19:13:35 2013 us=719746   pull = ENABLED
Sun Nov 17 19:13:35 2013 us=719755   auth_user_pass_file = '[UNDEF]'
Sun Nov 17 19:13:35 2013 us=719786 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Oct 28 2013
Sun Nov 17 19:13:35 2013 us=719935 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Nov 17 19:13:35 2013 us=720728 LZO compression initialized
Sun Nov 17 19:13:35 2013 us=720828 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 17 19:13:35 2013 us=720875 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sun Nov 17 19:13:35 2013 us=720900 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 17 19:13:35 2013 us=720921 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Nov 17 19:13:35 2013 us=720927 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Nov 17 19:13:35 2013 us=720951 Local Options hash (VER=V4): '41690919'
Sun Nov 17 19:13:35 2013 us=720962 Expected Remote Options hash (VER=V4): '530fdded'
Sun Nov 17 19:13:35 2013 us=720975 UDPv4 link local: [undef]
Sun Nov 17 19:13:35 2013 us=720984 UDPv4 link remote: [AF_INET]88.208.237.199:1194
Sun Nov 17 19:13:35 2013 us=776082 TLS: Initial packet from [AF_INET]88.208.237.199:1194, sid=17fcbd4f 3b1b02b3
Sun Nov 17 19:13:35 2013 us=998620 VERIFY OK: depth=1, C=GB, ST=LND, L=LONDON, O=PROXYPLAYER, CN=PROXYPLAYER CA, emailAddress=sales@proxyplayer.co.uk
Sun Nov 17 19:13:35 2013 us=999292 VERIFY OK: nsCertType=SERVER
Sun Nov 17 19:13:35 2013 us=999328 VERIFY OK: depth=0, C=GB, ST=LND, L=LONDON, O=PROXYPLAYER, CN=server, emailAddress=sales@proxyplayer.co.uk
Sun Nov 17 19:13:36 2013 us=384672 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 17 19:13:36 2013 us=384799 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 17 19:13:36 2013 us=385006 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 17 19:13:36 2013 us=385055 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 17 19:13:36 2013 us=385260 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Nov 17 19:13:36 2013 us=385350 [server] Peer Connection Initiated with [AF_INET]88.208.237.199:1194
Sun Nov 17 19:13:38 2013 us=882182 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Nov 17 19:13:38 2013 us=922821 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 213.171.192.249,dhcp-option DNS 213.171.192.245,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sun Nov 17 19:13:38 2013 us=923043 OPTIONS IMPORT: timers and/or timeouts modified
Sun Nov 17 19:13:38 2013 us=923059 OPTIONS IMPORT: --ifconfig/up options modified
Sun Nov 17 19:13:38 2013 us=923066 OPTIONS IMPORT: route options modified
Sun Nov 17 19:13:38 2013 us=923073 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Nov 17 19:13:38 2013 us=923510 TUN/TAP device tun1 opened
Sun Nov 17 19:13:38 2013 us=923599 TUN/TAP TX queue length set to 100
Sun Nov 17 19:13:38 2013 us=923623 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Nov 17 19:13:38 2013 us=923665 /sbin/ifconfig tun1 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Sun Nov 17 19:13:38 2013 us=925566 /etc/openvpn/update-resolv-conf tun1 1500 1542 10.8.0.6 10.8.0.5 init
dhcp-option DNS 213.171.192.249
dhcp-option DNS 213.171.192.245
Sun Nov 17 19:13:38 2013 us=957727 /sbin/route add -net 88.208.237.199 netmask 255.255.255.255 gw 192.168.0.1
Sun Nov 17 19:13:38 2013 us=959379 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Sun Nov 17 19:13:38 2013 us=961267 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.8.0.5
Sun Nov 17 19:13:38 2013 us=962839 /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Sun Nov 17 19:13:38 2013 us=963759 Initialization Sequence Completed

rainbow6

You need to change your server.conf to this:

From this

push "redirect-gateway"

to

push "redirect-gateway def1"

Doing this only redirects the clients to the server gateway but still they can't browse the internet unless you allow the server network to route those traffic. Read the manual on the howto route all traffic thru vpn. Basically you need to tell the server OS to allow redirect and packet forwarding and then use the firewall rules to NAT all traffic from the vpn subnet to the main server network interface. Not sure what is your server os.

qwertyjjj

rainbow6 wroteYou need to change your server.conf to this:

From this

push "redirect-gateway"

to

push "redirect-gateway def1"

Doing this only redirects the clients to the server gateway but still they can't browse the internet unless you allow the server network to route those traffic. Read the manual on the howto route all traffic thru vpn. Basically you need to tell the server OS to allow redirect and packet forwarding and then use the firewall rules to NAT all traffic from the vpn subnet to the main server network interface. Not sure what is your server os.

server is red hat but same issue applies, Windows clients can route fine so why not the Linux clientS?

rainbow6

Is your linux client able to ping the server by IP address?
Is your Linux client able to ping internet by DNS or IP?
Is your Win client can browse the internet?
Windows and Linux or OSX network behaves differently so you dont expect because its working in linux, is should be working in Windows or vice versa.

Openvpn is not something you just take off the shelf and installed without knowing how your OS and network settings. You need to know how to route traffic in linux and you must know linux.

List out what you can or cannot do with Linux vs Windows then find out what is causing the issue.

qwertyjjj

rainbow6 wroteIs your linux client able to ping the server by IP address?
Is your Linux client able to ping internet by DNS or IP?
Is your Win client can browse the internet?
Windows and Linux or OSX network behaves differently so you dont expect because its working in linux, is should be working in Windows or vice versa.

Openvpn is not something you just take off the shelf and installed without knowing how your OS and network settings. You need to know how to route traffic in linux and you must know linux.

List out what you can or cannot do with Linux vs Windows then find out what is causing the issue.

Is your Linux client able to ping internet by DNS or IP?
when connected to vpn, yes can ping server cannot ping www.google.com
Is your Win client can browse the internet?
when connected to the vpn, yes, all routing and dns works
Mac
when connected to the vpn, yes, all routing and dns works

So, it seems to me something is wrong on the Linux client.

rainbow6

From your linux client, can you ping any internet server/sites by IP address?
ping 8.8.8.8 (google dns) and see if there is any response

Did you add in Linux client conf, a statement
up /etc/openvpn/update-resolve-conf
down /etc/openvpn/update-resolve-conf

The linux client routing or dns is not setup properly.

After connecting to vpn server, check your linux client dns.
cat /etc/resolv.conf

qwertyjjj

here are the results:
seems like I can ping IP addresses but not dns
the .ovpn file has these in it:

up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
resolv-retry infinite

a@spain ~ $ ping 88.208.237.199
PING 88.208.237.199 (88.208.237.199) 56(84) bytes of data.
64 bytes from 88.208.237.199: icmp_req=1 ttl=54 time=39.2 ms
64 bytes from 88.208.237.199: icmp_req=2 ttl=54 time=40.1 ms
64 bytes from 88.208.237.199: icmp_req=3 ttl=54 time=41.8 ms
^C
--- 88.208.237.199 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 39.229/40.427/41.890/1.102 ms
a@spain ~ $ ping http://www.google.com
^C
a@spain ~ $ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_req=1 ttl=49 time=51.0 ms
64 bytes from 8.8.8.8: icmp_req=2 ttl=49 time=50.0 ms
64 bytes from 8.8.8.8: icmp_req=3 ttl=49 time=50.2 ms
^C
--- 8.8.8.8 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 50.034/50.450/51.035/0.498 ms

a@spain ~ $ cat /etc/resolv.conf
# Generated by resolvconf
nameserver 127.0.1.1

qwertyjjj

bump bump
bump bump

qwertyjjj

any ideas why the dns is not resolving on the client?
I can ping 8.8.8.8 but not www.google.com

rainbow6

Hi,
What is your dns before the connection is made? see whats in resolv.conf before and after.
Please put the content of your openvpn.conf on the client side and how did you start openvpn in your linux client? Please add into the linux client conf or ovpn,
script-security 2

If the server not able to push the DNS to you, you may need to add opendns in your resolv.conf

qwertyjjj

rainbow6 wroteHi,
What is your dns before the connection is made? see whats in resolv.conf before and after.
Please put the content of your openvpn.conf on the client side and how did you start openvpn in your linux client? Please add into the linux client conf or ovpn,
script-security 2

If the server not able to push the DNS to you, you may need to add opendns in your resolv.conf

I start it with:
sudo openvpn --config /etc/openvpn/mycert_1.ovpn

Before connection it says:
nameserver 127.0.0.1

After connection it says
nameserver 127.0.0.1

openvpn.conf:

client
dev tun1
proto udp
remote 88.208.237.199 1194
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
resolv-retry infinite
#dhcp-option DNS 208.67.222.222
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 4
<ca>
-----BEGIN CERTIFICATE-----
rest of certificates follow...not entered here

qwertyjjj

So, when I add oipendns to resolv.conf it works.
But the script keeps setting it back to namserver 127.0.0.1
How can I change the script or do I just take that out of the ovpn file and edit resolv.conf manually

rainbow6

remove the up and down script for now.
I'm not sure why your linux is resetting the resolv. Are you using network manager?
This could be due to your router DHCP is resetting this when you disconnect.

« Previous Page