Connect but cannot surf

syltrell

Hello,

I use openVPN in several servers I rent, some dedicated some vps, normally I don't have any problems with the openVPN installation, I use always the same routine and always work. However, I have now two servers, one dedicated and one KVM VPS which the openVPN connects on 1194 but once connected I cannot surf.

Once I had that problem and I corrected it by adding #net.ipv4.ip_forward = 1 with #vi /etc/sysctl.conf . Now I tried but didn't work.

I made sure I added the rules to iptables, saved and restarted, I restarted service openvpn as well and still doesn't work.

I have the servers with CentOS 5 32bit

I am a bit lost and cannot figure out how to solve this, can anyone help me?

Thanks in advance

Sylvie

syltrell

Hi, thanks for replying.

For installing I use the following routine:

#wget packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm
#rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt
#rpm -K rpmforge-release-0.5.2-2.el5.rf.*.rpm
#rpm -i rpmforge-release-0.5.2-2.el5.rf.*.rpm
#sed --in-place "s/\\(.*enabled.*=\\).*/\1 0/" /etc/yum.repos.d/rpmforge.repo
#yum --enablerepo rpmforge install openvpn

and then go on

My configurations are:

Server configuration (nxx.conf)

dev tun
port 1194
proto udp
comp-lzo
dh dh1024.pem
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
ifconfig-pool-persist ipp.txt
ca ca.crt
cert nxx.crt
key nxx.key
local 46.xxx.xxx.58
server 10.5.0.0 255.255.255.0
push "route 10.5.0.0 255.255.255.0"
#push "redirect-gateway def1"

===========================================
Client N123 configuration

dev tun
proto udp
comp-lzo
client
nobind
user nobody
group nobody
persist-key
persist-tun
ca ca.crt
cert N123.crt
key N123.key
resolv-retry infinite
remote 46.xxx.xxx.58 1194
ns-cert-type server

=================================

The iptables permissions routine I used during openvpn setup

#iptables -F
#iptables -t nat -F
#iptables -t mangle -F
#iptables -X

#iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

#service iptables save

#echo 1 > /proc/sys/net/ipv4/ip_forward

#service openvpn restart

When it didn't forward I did:
#vi /etc/sysctl.conf
added the following line
net.ipv4.ip_forward = 1

#service openvpn restart

syltrell

debbie10t wroteHi, are you using "OpenVPN Technologies ACCESS-SERVER"
or the standard "community OpenVPN (V2.x.x)"

I believe is the standard "community OpenVPN (V2.x.x)"

syltrell

Thank you,I did

Can I send you a short PM ?

Thanx

syltrell

Thank you for your leading in this post, it may help in a limited way and it is certainly appreciated. Regarding the PM, it was not for requesting support, support I requested here, it was a simple explanation of why I was making you loose your time with my question here. I am sure that you see cases of not finding answers to technical questions because of tunnel vision, be aware to not have tunnel vision when you judge the acts or reasons of others. A minute to breath and think if you are making the correct judgement may take you a long way, that is what I will do with this issue and hopefully you will do with your fast judgement and sentencing.

Sylvie

[deleted]

debbie10t wrote
syltrell wroteThank you,I did

Can I send you a short PM ?

Thanx
PMs to MODs For Support are not Tolerated under Any circimstances, unless the MOD gives you permission in advance.

Just wanted to jump in here..

The poster asked permission to send you a PM, therefore satisfying "unless the mod has given permission in advance" stipulation that you posted. The official rule is actually..

ecrist wrote Just an FYI and reminder, if you use the private message system to contact administrators or moderators to solicit help, you get an automatic 30 day ban.

@OP - bear this in mind. 🙂

syltrell

I decline to comment on your advice about life or circumstances of life. I also decline to comment on how people with 87% burns may speak on the telephone. Edit: I also decline to comment on the classification and assumption of the term guilty trip. So I will just comment on your help within the boundaries of your knowledge and this forum:

Many thanks for the leads, are certainly useful and I appreciate your going beyond your natural moderator boundaries to help. Mostly I thank you kindly to have done as much as you can within your personally established judgement and assumptions, you are clearly aiming to help.

Again thank you for the technical leads.

syltrell

Hello,

Thank you for your concern it is most kind. No, I have been trying but with no success and yes you are right, I didn't know how to extract the logs. I will do it now and post them as soon as I can. I have root.

syltrell

debbie10t wroteHi,

have you been able to resolve this issue or not ?

If not, please post your logs so that we can see what is happening.

In order to make your logs easier to find add these commands to both your server and client configs:
log vpn.log
verb 4
This will create logs in /etc/openvpn/vpn.log on both server and client, not the the syslog file, where they are currently being written. They will be created from scratch each time you restart the openvpn service. You will need root access to read these files.
.

When I added those commands at the server configuration it was okay but when I added to the client configuration it was a popup saying that the GUI will not work with that command because it has already a way to write its log and asked to remove that command pointing to where to find the GUI log. So I went to the GUI log and here is what it says when I connect (I obscured with xxx part of the IP for safety only):

Thu Nov 14 16:36:15 2013 NOTE: --user option is not implemented on Windows
Thu Nov 14 16:36:15 2013 NOTE: --group option is not implemented on Windows
Thu Nov 14 16:36:15 2013 us=573000 Current Parameter Settings:
Thu Nov 14 16:36:15 2013 us=573000 config = 'BE Eucomm6 (op).ovpn'
Thu Nov 14 16:36:15 2013 us=573000 mode = 0
Thu Nov 14 16:36:15 2013 us=573000 show_ciphers = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 show_digests = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 show_engines = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 genkey = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 key_pass_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 show_tls_ciphers = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 Connection profiles [default]:
Thu Nov 14 16:36:15 2013 us=573000 proto = udp
Thu Nov 14 16:36:15 2013 us=573000 local = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 local_port = 0
Thu Nov 14 16:36:15 2013 us=573000 remote = '185.18.xxx.xxx'
Thu Nov 14 16:36:15 2013 us=573000 remote_port = 1194
Thu Nov 14 16:36:15 2013 us=573000 remote_float = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 bind_defined = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 bind_local = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 connect_retry_seconds = 5
Thu Nov 14 16:36:15 2013 us=573000 connect_timeout = 10
Thu Nov 14 16:36:15 2013 us=573000 connect_retry_max = 0
Thu Nov 14 16:36:15 2013 us=573000 socks_proxy_server = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 socks_proxy_port = 0
Thu Nov 14 16:36:15 2013 us=573000 socks_proxy_retry = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 Connection profiles END
Thu Nov 14 16:36:15 2013 us=573000 remote_random = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 ipchange = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 dev = 'tun'
Thu Nov 14 16:36:15 2013 us=573000 dev_type = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 dev_node = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 lladdr = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 topology = 1
Thu Nov 14 16:36:15 2013 us=573000 tun_ipv6 = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 ifconfig_local = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 ifconfig_remote_netmask = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 ifconfig_noexec = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 ifconfig_nowarn = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 shaper = 0
Thu Nov 14 16:36:15 2013 us=573000 tun_mtu = 1500
Thu Nov 14 16:36:15 2013 us=573000 tun_mtu_defined = ENABLED
Thu Nov 14 16:36:15 2013 us=573000 link_mtu = 1500
Thu Nov 14 16:36:15 2013 us=573000 link_mtu_defined = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 tun_mtu_extra = 0
Thu Nov 14 16:36:15 2013 us=573000 tun_mtu_extra_defined = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 fragment = 0
Thu Nov 14 16:36:15 2013 us=573000 mtu_discover_type = -1
Thu Nov 14 16:36:15 2013 us=573000 mtu_test = 0
Thu Nov 14 16:36:15 2013 us=573000 mlock = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 keepalive_ping = 0
Thu Nov 14 16:36:15 2013 us=573000 keepalive_timeout = 0
Thu Nov 14 16:36:15 2013 us=573000 inactivity_timeout = 0
Thu Nov 14 16:36:15 2013 us=573000 ping_send_timeout = 0
Thu Nov 14 16:36:15 2013 us=573000 ping_rec_timeout = 0
Thu Nov 14 16:36:15 2013 us=573000 ping_rec_timeout_action = 0
Thu Nov 14 16:36:15 2013 us=573000 ping_timer_remote = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 remap_sigusr1 = 0
Thu Nov 14 16:36:15 2013 us=573000 explicit_exit_notification = 0
Thu Nov 14 16:36:15 2013 us=573000 persist_tun = ENABLED
Thu Nov 14 16:36:15 2013 us=573000 persist_local_ip = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 persist_remote_ip = DISABLED
Thu Nov 14 16:36:15 2013 us=573000 persist_key = ENABLED
Thu Nov 14 16:36:15 2013 us=573000 mssfix = 1450
Thu Nov 14 16:36:15 2013 us=573000 resolve_retry_seconds = 1000000000
Thu Nov 14 16:36:15 2013 us=573000 username = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 groupname = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=573000 chroot_dir = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 cd_dir = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 writepid = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 up_script = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 down_script = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 down_pre = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 up_restart = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 up_delay = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 daemon = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 inetd = 0
Thu Nov 14 16:36:15 2013 us=792000 log = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 suppress_timestamps = DISABLED
Thu Nov 14 16:36:15 2013 us=792000 nice = 0
Thu Nov 14 16:36:15 2013 us=792000 verbosity = 4
Thu Nov 14 16:36:15 2013 us=792000 mute = 0
Thu Nov 14 16:36:15 2013 us=792000 gremlin = 0
Thu Nov 14 16:36:15 2013 us=792000 status_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=792000 status_file_version = 1
Thu Nov 14 16:36:15 2013 us=792000 status_file_update_freq = 60
Thu Nov 14 16:36:15 2013 us=807000 occ = ENABLED
Thu Nov 14 16:36:15 2013 us=807000 rcvbuf = 0
Thu Nov 14 16:36:15 2013 us=807000 sndbuf = 0
Thu Nov 14 16:36:15 2013 us=807000 sockflags = 0
Thu Nov 14 16:36:15 2013 us=807000 fast_io = DISABLED
Thu Nov 14 16:36:15 2013 us=807000 lzo = 7
Thu Nov 14 16:36:15 2013 us=807000 route_script = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=807000 route_default_gateway = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=807000 route_default_metric = 0
Thu Nov 14 16:36:15 2013 us=807000 route_noexec = DISABLED
Thu Nov 14 16:36:15 2013 us=807000 route_delay = 5
Thu Nov 14 16:36:15 2013 us=807000 route_delay_window = 30
Thu Nov 14 16:36:15 2013 us=807000 route_delay_defined = ENABLED
Thu Nov 14 16:36:15 2013 us=807000 route_nopull = DISABLED
Thu Nov 14 16:36:15 2013 us=807000 route_gateway_via_dhcp = DISABLED
Thu Nov 14 16:36:15 2013 us=807000 max_routes = 100
Thu Nov 14 16:36:15 2013 us=807000 allow_pull_fqdn = DISABLED
Thu Nov 14 16:36:15 2013 us=823000 management_addr = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 management_port = 0
Thu Nov 14 16:36:15 2013 us=823000 management_user_pass = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 management_log_history_cache = 250
Thu Nov 14 16:36:15 2013 us=823000 management_echo_buffer_size = 100
Thu Nov 14 16:36:15 2013 us=823000 management_write_peer_info_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 management_client_user = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 management_client_group = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 management_flags = 0
Thu Nov 14 16:36:15 2013 us=823000 shared_secret_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=823000 key_direction = 0
Thu Nov 14 16:36:15 2013 us=823000 ciphername_defined = ENABLED
Thu Nov 14 16:36:15 2013 us=823000 ciphername = 'BF-CBC'
Thu Nov 14 16:36:15 2013 us=823000 authname_defined = ENABLED
Thu Nov 14 16:36:15 2013 us=838000 authname = 'SHA1'
Thu Nov 14 16:36:15 2013 us=838000 prng_hash = 'SHA1'
Thu Nov 14 16:36:15 2013 us=838000 prng_nonce_secret_len = 16
Thu Nov 14 16:36:15 2013 us=838000 keysize = 0
Thu Nov 14 16:36:15 2013 us=838000 engine = DISABLED
Thu Nov 14 16:36:15 2013 us=838000 replay = ENABLED
Thu Nov 14 16:36:15 2013 us=854000 mute_replay_warnings = DISABLED
Thu Nov 14 16:36:15 2013 us=854000 replay_window = 64
Thu Nov 14 16:36:15 2013 us=854000 replay_time = 15
Thu Nov 14 16:36:15 2013 us=854000 packet_id_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=854000 use_iv = ENABLED
Thu Nov 14 16:36:15 2013 us=854000 test_crypto = DISABLED
Thu Nov 14 16:36:15 2013 us=854000 tls_server = DISABLED
Thu Nov 14 16:36:15 2013 us=854000 tls_client = ENABLED
Thu Nov 14 16:36:15 2013 us=854000 key_method = 2
Thu Nov 14 16:36:15 2013 us=854000 ca_file = 'ca.crt'
Thu Nov 14 16:36:15 2013 us=854000 ca_path = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 dh_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 cert_file = 'Eucomm6.crt'
Thu Nov 14 16:36:15 2013 us=870000 priv_key_file = 'Eucomm6.key'
Thu Nov 14 16:36:15 2013 us=870000 pkcs12_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 cryptoapi_cert = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 cipher_list = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 tls_verify = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 tls_remote = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 crl_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=870000 ns_cert_type = 64
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=870000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_ku[i] = 0
Thu Nov 14 16:36:15 2013 us=885000 remote_cert_eku = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=885000 tls_timeout = 2
Thu Nov 14 16:36:15 2013 us=885000 renegotiate_bytes = 0
Thu Nov 14 16:36:15 2013 us=885000 renegotiate_packets = 0
Thu Nov 14 16:36:15 2013 us=885000 renegotiate_seconds = 3600
Thu Nov 14 16:36:15 2013 us=885000 handshake_window = 60
Thu Nov 14 16:36:15 2013 us=885000 transition_window = 3600
Thu Nov 14 16:36:15 2013 us=916000 single_session = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 tls_exit = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 tls_auth_file = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=916000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_protected_authentication = DISABLED
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=948000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_private_mode = 00000000
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=963000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_cert_private = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_pin_cache_period = -1
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_id = '[UNDEF]'
Thu Nov 14 16:36:15 2013 us=979000 pkcs11_id_management = DISABLED
Thu Nov 14 16:36:15 2013 us=979000 server_network = 0.0.0.0
Thu Nov 14 16:36:15 2013 us=979000 server_netmask = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 server_bridge_ip = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 server_bridge_netmask = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 server_bridge_pool_start = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 server_bridge_pool_end = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_defined = DISABLED
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_start = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_end = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_netmask = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=10000 ifconfig_pool_persist_refresh_freq = 600
Thu Nov 14 16:36:16 2013 us=10000 n_bcast_buf = 256
Thu Nov 14 16:36:16 2013 us=10000 tcp_queue_limit = 64
Thu Nov 14 16:36:16 2013 us=10000 real_hash_size = 256
Thu Nov 14 16:36:16 2013 us=10000 virtual_hash_size = 256
Thu Nov 14 16:36:16 2013 us=26000 client_connect_script = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=26000 learn_address_script = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=26000 client_disconnect_script = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=26000 client_config_dir = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=26000 ccd_exclusive = DISABLED
Thu Nov 14 16:36:16 2013 us=26000 tmp_dir = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=26000 push_ifconfig_defined = DISABLED
Thu Nov 14 16:36:16 2013 us=26000 push_ifconfig_local = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=26000 push_ifconfig_remote_netmask = 0.0.0.0
Thu Nov 14 16:36:16 2013 us=26000 enable_c2c = DISABLED
Thu Nov 14 16:36:16 2013 us=26000 duplicate_cn = DISABLED
Thu Nov 14 16:36:16 2013 us=26000 cf_max = 0
Thu Nov 14 16:36:16 2013 us=26000 cf_per = 0
Thu Nov 14 16:36:16 2013 us=26000 max_clients = 1024
Thu Nov 14 16:36:16 2013 us=26000 max_routes_per_client = 256
Thu Nov 14 16:36:16 2013 us=26000 auth_user_pass_verify_script = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=57000 auth_user_pass_verify_script_via_file = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 ssl_flags = 0
Thu Nov 14 16:36:16 2013 us=57000 client = ENABLED
Thu Nov 14 16:36:16 2013 us=57000 pull = ENABLED
Thu Nov 14 16:36:16 2013 us=57000 auth_user_pass_file = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=57000 show_net_up = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 route_method = 0
Thu Nov 14 16:36:16 2013 us=57000 ip_win32_defined = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 ip_win32_type = 3
Thu Nov 14 16:36:16 2013 us=57000 dhcp_masq_offset = 0
Thu Nov 14 16:36:16 2013 us=57000 dhcp_lease_time = 31536000
Thu Nov 14 16:36:16 2013 us=57000 tap_sleep = 0
Thu Nov 14 16:36:16 2013 us=57000 dhcp_options = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 dhcp_renew = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 dhcp_pre_release = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 dhcp_release = DISABLED
Thu Nov 14 16:36:16 2013 us=57000 domain = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=72000 netbios_scope = '[UNDEF]'
Thu Nov 14 16:36:16 2013 us=72000 netbios_node_type = 0
Thu Nov 14 16:36:16 2013 us=72000 disable_nbt = DISABLED
Thu Nov 14 16:36:16 2013 us=72000 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Jul 1 2010
Thu Nov 14 16:36:16 2013 us=72000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Nov 14 16:36:16 2013 us=291000 LZO compression initialized
Thu Nov 14 16:36:16 2013 us=291000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Nov 14 16:36:16 2013 us=291000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Nov 14 16:36:16 2013 us=291000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Nov 14 16:36:16 2013 us=291000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Nov 14 16:36:16 2013 us=291000 Local Options hash (VER=V4): '41690919'
Thu Nov 14 16:36:16 2013 us=291000 Expected Remote Options hash (VER=V4): '530fdded'
Thu Nov 14 16:36:16 2013 us=291000 Socket Buffers: R=[516096->516096] S=[172032->172032]
Thu Nov 14 16:36:16 2013 us=291000 UDPv4 link local: [undef]
Thu Nov 14 16:36:16 2013 us=291000 UDPv4 link remote: 185.18.xxx.xxx:1194
Thu Nov 14 16:36:16 2013 us=338000 TLS: Initial packet from 185.18.xxx.xxx:1194, sid=afa078e1 7b58f960
Thu Nov 14 16:36:16 2013 us=618000 VERIFY OK: depth=1, /C=BE/ST=BE/L=Brussels/O=GEG-BE/OU=BE/CN=Eucomm32/name=GEGBE/emailAddress=noreply@e-k-o.net
Thu Nov 14 16:36:16 2013 us=618000 VERIFY OK: nsCertType=SERVER
Thu Nov 14 16:36:16 2013 us=618000 VERIFY OK: depth=0, /C=BE/ST=BE/L=Brussels/O=GEG-BE/OU=BE/CN=main/name=GEGBE/emailAddress=noreply@e-k-o.net
Thu Nov 14 16:36:17 2013 us=55000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Nov 14 16:36:17 2013 us=55000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Nov 14 16:36:17 2013 us=55000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Nov 14 16:36:17 2013 us=55000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Nov 14 16:36:17 2013 us=55000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Nov 14 16:36:17 2013 us=55000 [main] Peer Connection Initiated with 185.18.xxx.xxx:1194
Thu Nov 14 16:36:19 2013 us=442000 SENT CONTROL [main]: 'PUSH_REQUEST' (status=1)
Thu Nov 14 16:36:19 2013 us=489000 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.5.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.5.0.6 10.5.0.5'
Thu Nov 14 16:36:19 2013 us=489000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Nov 14 16:36:19 2013 us=489000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Nov 14 16:36:19 2013 us=489000 OPTIONS IMPORT: route options modified
Thu Nov 14 16:36:19 2013 us=489000 ROUTE default_gateway=192.168.1.1
Thu Nov 14 16:36:19 2013 us=520000 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{49346794-253D-4235-A83A-5CEA76839AB6}.tap
Thu Nov 14 16:36:19 2013 us=520000 TAP-Win32 Driver Version 9.6
Thu Nov 14 16:36:19 2013 us=520000 TAP-Win32 MTU=1500
Thu Nov 14 16:36:19 2013 us=520000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.5.0.6/255.255.255.252 on interface {49346794-253D-4235-A83A-5CEA76839AB6} [DHCP-serv: 10.5.0.5, lease-time: 31536000]
Thu Nov 14 16:36:19 2013 us=520000 Successful ARP Flush on interface [14] {49346794-253D-4235-A83A-5CEA76839AB6}
Thu Nov 14 16:36:24 2013 us=731000 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Nov 14 16:36:24 2013 us=731000 C:\WINDOWS\system32\route.exe ADD 185.18.xxx.xxx MASK 255.255.255.255 192.168.1.1
Thu Nov 14 16:36:24 2013 us=731000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Nov 14 16:36:24 2013 us=731000 Route addition via IPAPI succeeded [adaptive]
Thu Nov 14 16:36:24 2013 us=731000 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.5.0.5
Thu Nov 14 16:36:24 2013 us=731000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Nov 14 16:36:24 2013 us=731000 Route addition via IPAPI succeeded [adaptive]
Thu Nov 14 16:36:24 2013 us=731000 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.5.0.5
Thu Nov 14 16:36:24 2013 us=746000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Nov 14 16:36:24 2013 us=746000 Route addition via IPAPI succeeded [adaptive]
Thu Nov 14 16:36:24 2013 us=746000 C:\WINDOWS\system32\route.exe ADD 10.5.0.1 MASK 255.255.255.255 10.5.0.5
Thu Nov 14 16:36:24 2013 us=746000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Nov 14 16:36:24 2013 us=746000 Route addition via IPAPI succeeded [adaptive]
Thu Nov 14 16:36:24 2013 us=746000 Initialization Sequence Completed
Thu Nov 14 16:37:32 2013 us=482000 TCP/UDP: Closing socket
Thu Nov 14 16:37:32 2013 us=482000 C:\WINDOWS\system32\route.exe DELETE 10.5.0.1 MASK 255.255.255.255 10.5.0.5
Thu Nov 14 16:37:32 2013 us=482000 Route deletion via IPAPI succeeded [adaptive]
Thu Nov 14 16:37:32 2013 us=482000 C:\WINDOWS\system32\route.exe DELETE 185.18.xxx.xxx MASK 255.255.255.255 192.168.1.1
Thu Nov 14 16:37:32 2013 us=482000 Route deletion via IPAPI succeeded [adaptive]
Thu Nov 14 16:37:32 2013 us=482000 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.5.0.5
Thu Nov 14 16:37:32 2013 us=482000 Route deletion via IPAPI succeeded [adaptive]
Thu Nov 14 16:37:32 2013 us=482000 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.5.0.5
Thu Nov 14 16:37:32 2013 us=497000 Route deletion via IPAPI succeeded [adaptive]
Thu Nov 14 16:37:32 2013 us=497000 Closing TUN/TAP interface
Thu Nov 14 16:37:32 2013 us=497000 SIGTERM[hard,] received, process exiting

syltrell

debbie10t wroteYour log proves that your VPN is fully connected.

Your server Gateway IP appears to be 192.168.1.1 - This is your LAN router or default gateway.
Your server is likely to be something like 192.168.1.2 - As I do not believe your server is also your LAN router
Your VPN is 10.5.0.0 255.255.255.0

So all you need now is:

Add route 192.168.1.0 255.255.255.0 to your server config .

Add the route for 10.5.0.0/255.255.255.0 to your server Gateway so it knows where to send vpn traffic.
That will be something like Destination network 10.5.0.0 255.255.255.0 Gateway 192.168.1.2 <- This address is your server IP

Re-enable push "redirect-gateway def1" to your server config and restart
As I don't know what your server gateway is it is difficult to tell you exactly what you need there. You need to add a route to it for your vpn traffic and it has to point to your server IP.

You may get a warning that 192.168.1.1 is a very common network and you would be strongly advised to change it while you can, for your needs I would recommend you go for 192.168.97.0/255.255.255.0 as that is much less likely to cause a conflict with places you may be connecting from in future. However, if you are not ready to make such a drastic change then go with what you know but be aware there is very likely going to be a network conflict in the future.

Thanks! I understand. I will try that and let you know if it worked.

syltrell

Perfect! Now is working as it was, no problems at all. Tons of thanks, you have been most kind, I not only solved the issues with your leads but also learned quite a bit on how it works.

All the best and keep safe!