Hi,
I am having problems with routing internet traffic through my server. My ip address is not changed.
I can ping both ways and am able to ping 8.8.8.8 and
http://www.google.com with no issues.
Both client and server are using Arch linux.
ipv4 forwarding and iptables rules
cat /proc/sys/net/ipv4/ip_forward
1
iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE
client.conf
client
dev tun0
proto udp
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca ca.crt
cert raspberryclient.crt
key raspberryclient.key
ns-cert-type server
comp-lzo
verb 3
server.conf
port 4444
proto udp
dev tun0
ca ca.crt
cert raspberryserver.crt
key raspberryserver.key
dh dh2048.pem
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 6
Connection Log
Mon Jan 27 11:55:24 2014 us=227969 Current Parameter Settings:
Mon Jan 27 11:55:24 2014 us=228027 config = 'client.conf'
Mon Jan 27 11:55:24 2014 us=228038 mode = 0
Mon Jan 27 11:55:24 2014 us=228046 persist_config = DISABLED
Mon Jan 27 11:55:24 2014 us=228054 persist_mode = 1
Mon Jan 27 11:55:24 2014 us=228062 show_ciphers = DISABLED
Mon Jan 27 11:55:24 2014 us=228072 show_digests = DISABLED
Mon Jan 27 11:55:24 2014 us=228080 show_engines = DISABLED
Mon Jan 27 11:55:24 2014 us=228087 genkey = DISABLED
Mon Jan 27 11:55:24 2014 us=228095 key_pass_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228103 show_tls_ciphers = DISABLED
Mon Jan 27 11:55:24 2014 us=228111 Connection profiles [default]:
Mon Jan 27 11:55:24 2014 us=228118 proto = udp
Mon Jan 27 11:55:24 2014 us=228126 local = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228134 local_port = 0
Mon Jan 27 11:55:24 2014 us=228142 remote = '192.168.1.13'
Mon Jan 27 11:55:24 2014 us=228150 remote_port = 4444
Mon Jan 27 11:55:24 2014 us=228157 remote_float = DISABLED
Mon Jan 27 11:55:24 2014 us=228165 bind_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=228172 bind_local = DISABLED
Mon Jan 27 11:55:24 2014 us=228180 connect_retry_seconds = 5
Mon Jan 27 11:55:24 2014 us=228188 connect_timeout = 10
Mon Jan 27 11:55:24 2014 us=228196 connect_retry_max = 0
Mon Jan 27 11:55:24 2014 us=228204 socks_proxy_server = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228212 socks_proxy_port = 0
Mon Jan 27 11:55:24 2014 us=228222 socks_proxy_retry = DISABLED
Mon Jan 27 11:55:24 2014 us=228229 tun_mtu = 1500
Mon Jan 27 11:55:24 2014 us=228237 tun_mtu_defined = ENABLED
Mon Jan 27 11:55:24 2014 us=228245 link_mtu = 1500
Mon Jan 27 11:55:24 2014 us=228253 link_mtu_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=228260 tun_mtu_extra = 0
Mon Jan 27 11:55:24 2014 us=228268 tun_mtu_extra_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=228276 mtu_discover_type = -1
Mon Jan 27 11:55:24 2014 us=228284 fragment = 0
Mon Jan 27 11:55:24 2014 us=228291 mssfix = 1450
Mon Jan 27 11:55:24 2014 us=228299 explicit_exit_notification = 0
Mon Jan 27 11:55:24 2014 us=228307 Connection profiles END
Mon Jan 27 11:55:24 2014 us=228315 remote_random = DISABLED
Mon Jan 27 11:55:24 2014 us=228323 ipchange = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228330 dev = 'tun0'
Mon Jan 27 11:55:24 2014 us=228340 dev_type = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228348 dev_node = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228356 lladdr = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228364 topology = 1
Mon Jan 27 11:55:24 2014 us=228372 tun_ipv6 = DISABLED
Mon Jan 27 11:55:24 2014 us=228381 ifconfig_local = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228389 ifconfig_remote_netmask = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228399 ifconfig_noexec = DISABLED
Mon Jan 27 11:55:24 2014 us=228407 ifconfig_nowarn = DISABLED
Mon Jan 27 11:55:24 2014 us=228415 ifconfig_ipv6_local = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228423 ifconfig_ipv6_netbits = 0
Mon Jan 27 11:55:24 2014 us=228431 ifconfig_ipv6_remote = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228440 shaper = 0
Mon Jan 27 11:55:24 2014 us=228448 mtu_test = 0
Mon Jan 27 11:55:24 2014 us=228455 mlock = DISABLED
Mon Jan 27 11:55:24 2014 us=228467 keepalive_ping = 0
Mon Jan 27 11:55:24 2014 us=228475 keepalive_timeout = 0
Mon Jan 27 11:55:24 2014 us=228483 inactivity_timeout = 0
Mon Jan 27 11:55:24 2014 us=228491 ping_send_timeout = 0
Mon Jan 27 11:55:24 2014 us=228498 ping_rec_timeout = 0
Mon Jan 27 11:55:24 2014 us=228507 ping_rec_timeout_action = 0
Mon Jan 27 11:55:24 2014 us=228514 ping_timer_remote = DISABLED
Mon Jan 27 11:55:24 2014 us=228522 remap_sigusr1 = 0
Mon Jan 27 11:55:24 2014 us=228530 persist_tun = ENABLED
Mon Jan 27 11:55:24 2014 us=228537 persist_local_ip = DISABLED
Mon Jan 27 11:55:24 2014 us=228545 persist_remote_ip = DISABLED
Mon Jan 27 11:55:24 2014 us=228553 persist_key = ENABLED
Mon Jan 27 11:55:24 2014 us=228561 passtos = DISABLED
Mon Jan 27 11:55:24 2014 us=228568 resolve_retry_seconds = 1000000000
Mon Jan 27 11:55:24 2014 us=228576 username = 'nobody'
Mon Jan 27 11:55:24 2014 us=228584 groupname = 'nobody'
Mon Jan 27 11:55:24 2014 us=228601 chroot_dir = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228609 cd_dir = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228617 writepid = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228625 up_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228633 down_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228641 down_pre = DISABLED
Mon Jan 27 11:55:24 2014 us=228648 up_restart = DISABLED
Mon Jan 27 11:55:24 2014 us=228656 up_delay = DISABLED
Mon Jan 27 11:55:24 2014 us=228665 daemon = DISABLED
Mon Jan 27 11:55:24 2014 us=228672 inetd = 0
Mon Jan 27 11:55:24 2014 us=228680 log = DISABLED
Mon Jan 27 11:55:24 2014 us=228687 suppress_timestamps = DISABLED
Mon Jan 27 11:55:24 2014 us=228695 nice = 0
Mon Jan 27 11:55:24 2014 us=228702 verbosity = 4
Mon Jan 27 11:55:24 2014 us=228710 mute = 0
Mon Jan 27 11:55:24 2014 us=228718 gremlin = 0
Mon Jan 27 11:55:24 2014 us=228726 status_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228733 status_file_version = 1
Mon Jan 27 11:55:24 2014 us=228741 status_file_update_freq = 60
Mon Jan 27 11:55:24 2014 us=228749 occ = ENABLED
Mon Jan 27 11:55:24 2014 us=228756 rcvbuf = 65536
Mon Jan 27 11:55:24 2014 us=228764 sndbuf = 65536
Mon Jan 27 11:55:24 2014 us=228771 mark = 0
Mon Jan 27 11:55:24 2014 us=228780 sockflags = 0
Mon Jan 27 11:55:24 2014 us=228788 fast_io = DISABLED
Mon Jan 27 11:55:24 2014 us=228795 lzo = 7
Mon Jan 27 11:55:24 2014 us=228803 route_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228810 route_default_gateway = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228818 route_default_metric = 0
Mon Jan 27 11:55:24 2014 us=228826 route_noexec = DISABLED
Mon Jan 27 11:55:24 2014 us=228833 route_delay = 0
Mon Jan 27 11:55:24 2014 us=228841 route_delay_window = 30
Mon Jan 27 11:55:24 2014 us=228851 route_delay_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=228859 route_nopull = DISABLED
Mon Jan 27 11:55:24 2014 us=228866 route_gateway_via_dhcp = DISABLED
Mon Jan 27 11:55:24 2014 us=228874 max_routes = 100
Mon Jan 27 11:55:24 2014 us=228882 allow_pull_fqdn = DISABLED
Mon Jan 27 11:55:24 2014 us=228890 management_addr = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228897 management_port = 0
Mon Jan 27 11:55:24 2014 us=228905 management_user_pass = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228915 management_log_history_cache = 250
Mon Jan 27 11:55:24 2014 us=228923 management_echo_buffer_size = 100
Mon Jan 27 11:55:24 2014 us=228930 management_write_peer_info_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228938 management_client_user = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228946 management_client_group = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228954 management_flags = 0
Mon Jan 27 11:55:24 2014 us=228961 shared_secret_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=228969 key_direction = 0
Mon Jan 27 11:55:24 2014 us=228977 ciphername_defined = ENABLED
Mon Jan 27 11:55:24 2014 us=228987 ciphername = 'BF-CBC'
Mon Jan 27 11:55:24 2014 us=228994 authname_defined = ENABLED
Mon Jan 27 11:55:24 2014 us=229002 authname = 'SHA1'
Mon Jan 27 11:55:24 2014 us=229010 prng_hash = 'SHA1'
Mon Jan 27 11:55:24 2014 us=229017 prng_nonce_secret_len = 16
Mon Jan 27 11:55:24 2014 us=229025 keysize = 0
Mon Jan 27 11:55:24 2014 us=229032 engine = DISABLED
Mon Jan 27 11:55:24 2014 us=229040 replay = ENABLED
Mon Jan 27 11:55:24 2014 us=229048 mute_replay_warnings = DISABLED
Mon Jan 27 11:55:24 2014 us=229056 replay_window = 64
Mon Jan 27 11:55:24 2014 us=229064 replay_time = 15
Mon Jan 27 11:55:24 2014 us=229072 packet_id_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229080 use_iv = ENABLED
Mon Jan 27 11:55:24 2014 us=229087 test_crypto = DISABLED
Mon Jan 27 11:55:24 2014 us=229095 tls_server = DISABLED
Mon Jan 27 11:55:24 2014 us=229102 tls_client = ENABLED
Mon Jan 27 11:55:24 2014 us=229110 key_method = 2
Mon Jan 27 11:55:24 2014 us=229118 ca_file = 'ca.crt'
Mon Jan 27 11:55:24 2014 us=229125 ca_path = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229134 dh_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229141 cert_file = 'raspberryclient.crt'
Mon Jan 27 11:55:24 2014 us=229149 priv_key_file = 'raspberryclient.key'
Mon Jan 27 11:55:24 2014 us=229157 pkcs12_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229165 cipher_list = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229173 tls_verify = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229180 tls_export_cert = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229188 verify_x509_type = 0
Mon Jan 27 11:55:24 2014 us=229196 verify_x509_name = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229203 crl_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229211 ns_cert_type = 1
Mon Jan 27 11:55:24 2014 us=229219 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229227 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229234 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229242 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229249 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229257 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229265 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229272 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229280 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229287 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229296 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229304 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229311 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229319 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229326 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229334 remote_cert_ku[i] = 0
Mon Jan 27 11:55:24 2014 us=229341 remote_cert_eku = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229349 ssl_flags = 0
Mon Jan 27 11:55:24 2014 us=229357 tls_timeout = 2
Mon Jan 27 11:55:24 2014 us=229364 renegotiate_bytes = 0
Mon Jan 27 11:55:24 2014 us=229373 renegotiate_packets = 0
Mon Jan 27 11:55:24 2014 us=229381 renegotiate_seconds = 3600
Mon Jan 27 11:55:24 2014 us=229389 handshake_window = 60
Mon Jan 27 11:55:24 2014 us=229396 transition_window = 3600
Mon Jan 27 11:55:24 2014 us=229404 single_session = DISABLED
Mon Jan 27 11:55:24 2014 us=229411 push_peer_info = DISABLED
Mon Jan 27 11:55:24 2014 us=229419 tls_exit = DISABLED
Mon Jan 27 11:55:24 2014 us=229427 tls_auth_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229438 server_network = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229446 server_netmask = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229457 server_network_ipv6 = ::
Mon Jan 27 11:55:24 2014 us=229465 server_netbits_ipv6 = 0
Mon Jan 27 11:55:24 2014 us=229473 server_bridge_ip = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229481 server_bridge_netmask = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229489 server_bridge_pool_start = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229497 server_bridge_pool_end = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229505 ifconfig_pool_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=229513 ifconfig_pool_start = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229521 ifconfig_pool_end = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229531 ifconfig_pool_netmask = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229539 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229547 ifconfig_pool_persist_refresh_freq = 600
Mon Jan 27 11:55:24 2014 us=229555 ifconfig_ipv6_pool_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=229563 ifconfig_ipv6_pool_base = ::
Mon Jan 27 11:55:24 2014 us=229570 ifconfig_ipv6_pool_netbits = 0
Mon Jan 27 11:55:24 2014 us=229578 n_bcast_buf = 256
Mon Jan 27 11:55:24 2014 us=229586 tcp_queue_limit = 64
Mon Jan 27 11:55:24 2014 us=229593 real_hash_size = 256
Mon Jan 27 11:55:24 2014 us=229602 virtual_hash_size = 256
Mon Jan 27 11:55:24 2014 us=229610 client_connect_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229617 learn_address_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229625 client_disconnect_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229633 client_config_dir = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229640 ccd_exclusive = DISABLED
Mon Jan 27 11:55:24 2014 us=229648 tmp_dir = '/tmp'
Mon Jan 27 11:55:24 2014 us=229655 push_ifconfig_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=229664 push_ifconfig_local = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229672 push_ifconfig_remote_netmask = 0.0.0.0
Mon Jan 27 11:55:24 2014 us=229680 push_ifconfig_ipv6_defined = DISABLED
Mon Jan 27 11:55:24 2014 us=229689 push_ifconfig_ipv6_local = ::/0
Mon Jan 27 11:55:24 2014 us=229697 push_ifconfig_ipv6_remote = ::
Mon Jan 27 11:55:24 2014 us=229705 enable_c2c = DISABLED
Mon Jan 27 11:55:24 2014 us=229713 duplicate_cn = DISABLED
Mon Jan 27 11:55:24 2014 us=229720 cf_max = 0
Mon Jan 27 11:55:24 2014 us=229728 cf_per = 0
Mon Jan 27 11:55:24 2014 us=229736 max_clients = 1024
Mon Jan 27 11:55:24 2014 us=229743 max_routes_per_client = 256
Mon Jan 27 11:55:24 2014 us=229751 auth_user_pass_verify_script = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229759 auth_user_pass_verify_script_via_file = DISABLED
Mon Jan 27 11:55:24 2014 us=229767 port_share_host = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229775 port_share_port = 0
Mon Jan 27 11:55:24 2014 us=229783 client = ENABLED
Mon Jan 27 11:55:24 2014 us=229790 pull = ENABLED
Mon Jan 27 11:55:24 2014 us=229798 auth_user_pass_file = '[UNDEF]'
Mon Jan 27 11:55:24 2014 us=229807 OpenVPN 2.3.2 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Nov 13 2013
Mon Jan 27 11:55:24 2014 us=230283 LZO compression initialized
Mon Jan 27 11:55:24 2014 us=230371 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jan 27 11:55:24 2014 us=230401 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Jan 27 11:55:24 2014 us=230420 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jan 27 11:55:24 2014 us=230437 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jan 27 11:55:24 2014 us=230448 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jan 27 11:55:24 2014 us=230464 Local Options hash (VER=V4): '41690919'
Mon Jan 27 11:55:24 2014 us=230479 Expected Remote Options hash (VER=V4): '530fdded'
Mon Jan 27 11:55:24 2014 us=230617 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon Jan 27 11:55:24 2014 us=230637 UDPv4 link local: [undef]
Mon Jan 27 11:55:24 2014 us=230650 UDPv4 link remote: [AF_INET]192.168.1.13:4444
Mon Jan 27 11:55:24 2014 us=240447 TLS: Initial packet from [AF_INET]192.168.1.13:4444, sid=8f07f6af afbb6c38
Mon Jan 27 11:55:24 2014 us=677236 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Mon Jan 27 11:55:24 2014 us=677419 VERIFY OK: nsCertType=SERVER
Mon Jan 27 11:55:24 2014 us=677432 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=raspberryserver, name=EasyRSA, emailAddress=me@myhost.mydomain
Mon Jan 27 11:55:25 2014 us=46851 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jan 27 11:55:25 2014 us=46922 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 27 11:55:25 2014 us=46957 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jan 27 11:55:25 2014 us=46967 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 27 11:55:25 2014 us=47036 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jan 27 11:55:25 2014 us=47056 [raspberryserver] Peer Connection Initiated with [AF_INET]192.168.1.13:4444
Mon Jan 27 11:55:27 2014 us=67304 SENT CONTROL [raspberryserver]: 'PUSH_REQUEST' (status=1)
Mon Jan 27 11:55:27 2014 us=88409 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.0.0.6 10.0.0.5'
Mon Jan 27 11:55:27 2014 us=88533 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jan 27 11:55:27 2014 us=88543 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jan 27 11:55:27 2014 us=88551 OPTIONS IMPORT: route options modified
Mon Jan 27 11:55:27 2014 us=88558 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Jan 27 11:55:27 2014 us=88678 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp2s0 HWADDR=d8:5d:4c:da:60:d6
Mon Jan 27 11:55:27 2014 us=88889 TUN/TAP device tun0 opened
Mon Jan 27 11:55:27 2014 us=88919 TUN/TAP TX queue length set to 100
Mon Jan 27 11:55:27 2014 us=88938 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jan 27 11:55:27 2014 us=88960 /usr/bin/ip link set dev tun0 up mtu 1500
Mon Jan 27 11:55:27 2014 us=90458 /usr/bin/ip addr add dev tun0 local 10.0.0.6 peer 10.0.0.5
Mon Jan 27 11:55:27 2014 us=91512 /usr/bin/ip route add 192.168.1.13/32 via 192.168.1.1
RTNETLINK answers: File exists
Mon Jan 27 11:55:27 2014 us=92314 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Jan 27 11:55:27 2014 us=92364 /usr/bin/ip route add 0.0.0.0/1 via 10.0.0.5
Mon Jan 27 11:55:27 2014 us=93121 /usr/bin/ip route add 128.0.0.0/1 via 10.0.0.5
Mon Jan 27 11:55:27 2014 us=93903 /usr/bin/ip route add 10.0.0.1/32 via 10.0.0.5
Mon Jan 27 11:55:27 2014 us=94640 GID set to nobody
Mon Jan 27 11:55:27 2014 us=94674 UID set to nobody
Mon Jan 27 11:55:27 2014 us=94681 Initialization Sequence Completed
I have also tried using OpenVPN for Android which also connects but does not change the ip address
Android client connection log
2014-01-27 12:04:44 Running on S5 (V9) S5, Android API 17, version 0.6.3, official build
2014-01-27 12:04:44 Log cleared.
2014-01-27 12:04:55 Building configuration???
2014-01-27 12:04:57 started Socket Thread
2014-01-27 12:04:57 P:Initializing Google Breakpad!
2014-01-27 12:04:57 Current Parameter Settings:
2014-01-27 12:04:57 config = '/data/data/de.blinkt.openvpn/cache/android.conf'
2014-01-27 12:04:57 mode = 0
2014-01-27 12:04:57 show_ciphers = DISABLED
2014-01-27 12:04:57 show_digests = DISABLED
2014-01-27 12:04:57 show_engines = DISABLED
2014-01-27 12:04:57 genkey = DISABLED
2014-01-27 12:04:57 key_pass_file = '[UNDEF]'
2014-01-27 12:04:57 show_tls_ciphers = DISABLED
2014-01-27 12:04:57 connect_retry_max = 5
2014-01-27 12:04:57 Connection profiles [default]:
2014-01-27 12:04:57 proto = udp
2014-01-27 12:04:57 local = '[UNDEF]'
2014-01-27 12:04:57 local_port = '1194'
2014-01-27 12:04:57 remote = '[UNDEF]'
2014-01-27 12:04:57 remote_port = '1194'
2014-01-27 12:04:57 remote_float = DISABLED
2014-01-27 12:04:57 bind_defined = DISABLED
2014-01-27 12:04:57 bind_local = ENABLED
2014-01-27 12:04:57 bind_ipv6_only = DISABLED
2014-01-27 12:04:57 connect_retry_seconds = 5
2014-01-27 12:04:57 connect_timeout = 10
2014-01-27 12:04:57 socks_proxy_server = '[UNDEF]'
2014-01-27 12:04:57 socks_proxy_port = '[UNDEF]'
2014-01-27 12:04:57 socks_proxy_retry = DISABLED
2014-01-27 12:04:57 tun_mtu = 1500
2014-01-27 12:04:57 tun_mtu_defined = DISABLED
2014-01-27 12:04:57 link_mtu = 1500
2014-01-27 12:04:57 link_mtu_defined = DISABLED
2014-01-27 12:04:57 tun_mtu_extra = 0
2014-01-27 12:04:57 tun_mtu_extra_defined = DISABLED
2014-01-27 12:04:57 mtu_discover_type = -1
2014-01-27 12:04:57 fragment = 0
2014-01-27 12:04:57 mssfix = 1450
2014-01-27 12:04:57 explicit_exit_notification = 0
2014-01-27 12:04:57 Connection profiles [0]:
2014-01-27 12:04:57 proto = udp
2014-01-27 12:04:57 local = '[UNDEF]'
2014-01-27 12:04:57 local_port = '1194'
2014-01-27 12:04:57 remote = '192.168.1.13'
2014-01-27 12:04:57 remote_port = '4444'
2014-01-27 12:04:57 remote_float = DISABLED
2014-01-27 12:04:57 bind_defined = DISABLED
2014-01-27 12:04:57 bind_local = ENABLED
2014-01-27 12:04:57 bind_ipv6_only = DISABLED
2014-01-27 12:04:57 connect_retry_seconds = 5
2014-01-27 12:04:57 connect_timeout = 10
2014-01-27 12:04:57 socks_proxy_server = '[UNDEF]'
2014-01-27 12:04:57 socks_proxy_port = '[UNDEF]'
2014-01-27 12:04:57 socks_proxy_retry = DISABLED
2014-01-27 12:04:57 tun_mtu = 1500
2014-01-27 12:04:57 tun_mtu_defined = ENABLED
2014-01-27 12:04:57 link_mtu = 1500
2014-01-27 12:04:57 link_mtu_defined = DISABLED
2014-01-27 12:04:57 tun_mtu_extra = 0
2014-01-27 12:04:57 tun_mtu_extra_defined = DISABLED
2014-01-27 12:04:57 mtu_discover_type = -1
2014-01-27 12:04:57 fragment = 0
2014-01-27 12:04:57 mssfix = 1450
2014-01-27 12:04:57 explicit_exit_notification = 0
2014-01-27 12:04:57 Connection profiles END
2014-01-27 12:04:57 remote_random = DISABLED
2014-01-27 12:04:57 ipchange = '[UNDEF]'
2014-01-27 12:04:57 dev = 'tun'
2014-01-27 12:04:57 dev_type = '[UNDEF]'
2014-01-27 12:04:57 dev_node = '[UNDEF]'
2014-01-27 12:04:57 lladdr = '[UNDEF]'
2014-01-27 12:04:57 topology = 1
2014-01-27 12:04:57 tun_ipv6 = DISABLED
2014-01-27 12:04:57 ifconfig_local = '[UNDEF]'
2014-01-27 12:04:57 ifconfig_remote_netmask = '[UNDEF]'
2014-01-27 12:04:57 ifconfig_noexec = DISABLED
2014-01-27 12:04:57 ifconfig_nowarn = DISABLED
2014-01-27 12:04:57 ifconfig_ipv6_local = '[UNDEF]'
2014-01-27 12:04:57 ifconfig_ipv6_netbits = 0
2014-01-27 12:04:57 ifconfig_ipv6_remote = '[UNDEF]'
2014-01-27 12:04:57 shaper = 0
2014-01-27 12:04:57 mtu_test = 0
2014-01-27 12:04:57 mlock = DISABLED
2014-01-27 12:04:57 keepalive_ping = 0
2014-01-27 12:04:57 keepalive_timeout = 0
2014-01-27 12:04:57 inactivity_timeout = 0
2014-01-27 12:04:57 ping_send_timeout = 0
2014-01-27 12:04:57 ping_rec_timeout = 0
2014-01-27 12:04:57 ping_rec_timeout_action = 0
2014-01-27 12:04:57 ping_timer_remote = DISABLED
2014-01-27 12:04:57 remap_sigusr1 = 0
2014-01-27 12:04:57 persist_tun = DISABLED
2014-01-27 12:04:57 Network Status: CONNECTED to WIFI "Home Network"
2014-01-27 12:04:57 persist_local_ip = DISABLED
2014-01-27 12:04:58 persist_remote_ip = DISABLED
2014-01-27 12:04:58 persist_key = DISABLED
2014-01-27 12:04:58 passtos = DISABLED
2014-01-27 12:04:58 resolve_retry_seconds = 60
2014-01-27 12:04:58 resolve_in_advance = DISABLED
2014-01-27 12:04:58 username = '[UNDEF]'
2014-01-27 12:04:58 groupname = '[UNDEF]'
2014-01-27 12:04:58 chroot_dir = '[UNDEF]'
2014-01-27 12:04:58 cd_dir = '[UNDEF]'
2014-01-27 12:04:58 writepid = '[UNDEF]'
2014-01-27 12:04:58 up_script = '[UNDEF]'
2014-01-27 12:04:58 down_script = '[UNDEF]'
2014-01-27 12:04:58 down_pre = DISABLED
2014-01-27 12:04:58 up_restart = DISABLED
2014-01-27 12:04:58 up_delay = DISABLED
2014-01-27 12:04:58 daemon = DISABLED
2014-01-27 12:04:58 inetd = 0
2014-01-27 12:04:58 log = DISABLED
2014-01-27 12:04:58 suppress_timestamps = DISABLED
2014-01-27 12:04:58 machine_readable_output = ENABLED
2014-01-27 12:04:58 nice = 0
2014-01-27 12:04:58 verbosity = 4
2014-01-27 12:04:58 mute = 0
2014-01-27 12:04:58 gremlin = 0
2014-01-27 12:04:58 status_file = '[UNDEF]'
2014-01-27 12:04:58 status_file_version = 1
2014-01-27 12:04:58 status_file_update_freq = 60
2014-01-27 12:04:58 occ = ENABLED
2014-01-27 12:04:58 rcvbuf = 65536
2014-01-27 12:04:58 sndbuf = 65536
2014-01-27 12:04:58 sockflags = 0
2014-01-27 12:04:58 fast_io = DISABLED
2014-01-27 12:04:58 comp.alg = 2
2014-01-27 12:04:58 comp.flags = 1
2014-01-27 12:04:58 route_script = '[UNDEF]'
2014-01-27 12:04:58 route_default_gateway = '[UNDEF]'
2014-01-27 12:04:58 route_default_metric = 0
2014-01-27 12:04:58 route_noexec = DISABLED
2014-01-27 12:04:58 route_delay = 0
2014-01-27 12:04:58 route_delay_window = 30
2014-01-27 12:04:58 route_delay_defined = DISABLED
2014-01-27 12:04:58 route_nopull = DISABLED
2014-01-27 12:04:58 route_gateway_via_dhcp = DISABLED
2014-01-27 12:04:58 max_routes = 100
2014-01-27 12:04:58 allow_pull_fqdn = DISABLED
2014-01-27 12:04:58 route 0.0.0.0/0.0.0.0/nil/nil
2014-01-27 12:04:58 management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'
2014-01-27 12:04:58 management_port = 'unix'
2014-01-27 12:04:58 management_user_pass = '[UNDEF]'
2014-01-27 12:04:58 management_log_history_cache = 250
2014-01-27 12:04:58 management_echo_buffer_size = 100
2014-01-27 12:04:58 management_write_peer_info_file = '[UNDEF]'
2014-01-27 12:04:58 management_client_user = '[UNDEF]'
2014-01-27 12:04:58 management_client_group = '[UNDEF]'
2014-01-27 12:04:58 management_flags = 4390
2014-01-27 12:04:58 shared_secret_file = '[UNDEF]'
2014-01-27 12:04:58 key_direction = 0
2014-01-27 12:04:58 ciphername_defined = ENABLED
2014-01-27 12:04:58 ciphername = 'BF-CBC'
2014-01-27 12:04:58 authname_defined = ENABLED
2014-01-27 12:04:58 authname = 'SHA1'
2014-01-27 12:04:58 prng_hash = 'SHA1'
2014-01-27 12:04:58 prng_nonce_secret_len = 16
2014-01-27 12:04:58 keysize = 0
2014-01-27 12:04:58 engine = DISABLED
2014-01-27 12:04:58 replay = ENABLED
2014-01-27 12:04:58 mute_replay_warnings = DISABLED
2014-01-27 12:04:58 replay_window = 64
2014-01-27 12:04:58 replay_time = 15
2014-01-27 12:04:58 packet_id_file = '[UNDEF]'
2014-01-27 12:04:58 use_iv = ENABLED
2014-01-27 12:04:58 test_crypto = DISABLED
2014-01-27 12:04:58 tls_server = DISABLED
2014-01-27 12:04:58 tls_client = ENABLED
2014-01-27 12:04:58 key_method = 2
2014-01-27 12:04:58 ca_file = '[[INLINE]]'
2014-01-27 12:04:58 ca_path = '[UNDEF]'
2014-01-27 12:04:58 dh_file = '[UNDEF]'
2014-01-27 12:04:58 cert_file = '[[INLINE]]'
2014-01-27 12:04:58 priv_key_file = '[[INLINE]]'
2014-01-27 12:04:58 pkcs12_file = '[UNDEF]'
2014-01-27 12:04:58 cipher_list = '[UNDEF]'
2014-01-27 12:04:58 tls_verify = '[UNDEF]'
2014-01-27 12:04:58 tls_export_cert = '[UNDEF]'
2014-01-27 12:04:58 verify_x509_type = 0
2014-01-27 12:04:58 verify_x509_name = '[UNDEF]'
2014-01-27 12:04:58 crl_file = '[UNDEF]'
2014-01-27 12:04:58 ns_cert_type = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 160
2014-01-27 12:04:58 remote_cert_ku[i] = 136
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_ku[i] = 0
2014-01-27 12:04:58 remote_cert_eku = 'TLS Web Server Authentication'
2014-01-27 12:04:58 ssl_flags = 0
2014-01-27 12:04:58 tls_timeout = 2
2014-01-27 12:04:58 renegotiate_bytes = 0
2014-01-27 12:04:58 renegotiate_packets = 0
2014-01-27 12:04:58 renegotiate_seconds = 3600
2014-01-27 12:04:58 handshake_window = 60
2014-01-27 12:04:58 transition_window = 3600
2014-01-27 12:04:58 single_session = DISABLED
2014-01-27 12:04:58 push_peer_info = DISABLED
2014-01-27 12:04:58 tls_exit = DISABLED
2014-01-27 12:04:58 tls_auth_file = '[UNDEF]'
2014-01-27 12:04:58 client = ENABLED
2014-01-27 12:04:58 pull = ENABLED
2014-01-27 12:04:58 auth_user_pass_file = '[UNDEF]'
2014-01-27 12:04:58 OpenVPN 2.4-icsopenvpn android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [SNAPPY] [EPOLL] [MH] [IPv6] built on Dec 9 2013
2014-01-27 12:04:58 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2014-01-27 12:04:58 MANAGEMENT: CMD 'hold release'
2014-01-27 12:04:58 MANAGEMENT: CMD 'bytecount 2'
2014-01-27 12:04:58 MANAGEMENT: CMD 'state on'
2014-01-27 12:04:58 MANAGEMENT: CMD 'proxy NONE'
2014-01-27 12:04:59 LZO compression initializing
2014-01-27 12:04:59 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
2014-01-27 12:04:59 Socket Buffers: R=[163840->131072] S=[163840->131072]
2014-01-27 12:04:59 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:393 ET:0 EL:0 ]
2014-01-27 12:04:59 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2014-01-27 12:04:59 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2014-01-27 12:04:59 Local Options hash (VER=V4): '41690919'
2014-01-27 12:04:59 Expected Remote Options hash (VER=V4): '530fdded'
2014-01-27 12:04:59 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.1.13:4444
2014-01-27 12:04:59 Protecting socket fd 9
2014-01-27 12:04:59 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2014-01-27 12:04:59 UDP link local (bound): [AF_INET][undef]:1194
2014-01-27 12:04:59 UDP link remote: [AF_INET]192.168.1.13:4444
2014-01-27 12:04:59 MANAGEMENT: >STATE:1390824299,WAIT,,,
2014-01-27 12:04:59 MANAGEMENT: >STATE:1390824299,AUTH,,,
2014-01-27 12:04:59 TLS: Initial packet from [AF_INET]192.168.1.13:4444, sid=8c5c2c4f e9c60ab6
2014-01-27 12:04:59 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
2014-01-27 12:04:59 Validating certificate key usage
2014-01-27 12:04:59 ++ Certificate has key usage 00a0, expects 00a0
2014-01-27 12:04:59 VERIFY KU OK
2014-01-27 12:04:59 Validating certificate extended key usage
2014-01-27 12:04:59 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2014-01-27 12:04:59 VERIFY EKU OK
2014-01-27 12:04:59 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=raspberryserver, name=EasyRSA, emailAddress=me@myhost.mydomain
2014-01-27 12:05:00 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-01-27 12:05:00 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-01-27 12:05:00 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-01-27 12:05:00 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-01-27 12:05:00 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2014-01-27 12:05:00 [raspberryserver] Peer Connection Initiated with [AF_INET]192.168.1.13:4444
2014-01-27 12:05:01 MANAGEMENT: >STATE:1390824301,GET_CONFIG,,,
2014-01-27 12:05:02 SENT CONTROL [raspberryserver]: 'PUSH_REQUEST' (status=1)
2014-01-27 12:05:02 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.0.0.6 10.0.0.5'
2014-01-27 12:05:02 OPTIONS IMPORT: timers and/or timeouts modified
2014-01-27 12:05:02 OPTIONS IMPORT: --ifconfig/up options modified
2014-01-27 12:05:02 OPTIONS IMPORT: route options modified
2014-01-27 12:05:02 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2014-01-27 12:05:02 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlan0 HWADDR=d0:b3:3f:6b:ef:de
2014-01-27 12:05:02 ROUTE6: default_gateway=UNDEF
2014-01-27 12:05:02 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
2014-01-27 12:05:02 OpenVPN ROUTE: failed to parse/resolve route for host/network: ::/0
2014-01-27 12:05:02 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2014-01-27 12:05:02 MANAGEMENT: >STATE:1390824302,ASSIGN_IP,,10.0.0.6,
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-01-27 12:05:02 MANAGEMENT: >STATE:1390824302,ADD_ROUTES,,,
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2014-01-27 12:05:02 Opening tun interface:
2014-01-27 12:05:02 Local IPv4: 10.0.0.6/30 IPv6: null MTU: 1500
2014-01-27 12:05:02 DNS Server: 8.8.8.8, 8.8.4.4, Domain: null
2014-01-27 12:05:02 Routes: 192.168.1.13/32, 0.0.0.0/1, 128.0.0.0/1, 0.0.0.0/0, 10.0.0.1/32
2014-01-27 12:05:02 Routes IPv6:
2014-01-27 12:05:02 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2014-01-27 12:05:02 Initialization Sequence Completed
2014-01-27 12:05:02 MANAGEMENT: >STATE:1390824302,CONNECTED,SUCCESS,10.0.0.6,192.168.1.13
Thanks
