[Solved] Problem surf internet but connection ok

Solar

Hello,

Here my file server :

port 443
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

And my file client :

client
dev tun
proto tcp
remote x.x.x.x 443
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
ns-cert-type server
comp-lzo
verb 3

After starting the server, I get the following:
Initialization Sequence Completed

So I run the client that connects.
Here the connection of the client :
Mon Feb 3 13:58:12 2014 TUN/TAP device tun0 opened
Mon Feb 3 13:58:12 2014 TUN/TAP TX queue length set to 100
Mon Feb 3 13:58:12 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Feb 3 13:58:12 2014 /sbin/ip link set dev tun0 up mtu 1500
Mon Feb 3 13:58:12 2014 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Mon Feb 3 13:58:12 2014 /sbin/ip route add x.x.x.x/32 via 176.0.1.1
RTNETLINK answers: File exists
Mon Feb 3 13:58:12 2014 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Feb 3 13:58:12 2014 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Mon Feb 3 13:58:12 2014 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Mon Feb 3 13:58:12 2014 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Mon Feb 3 13:58:12 2014 GID set to nogroup
Mon Feb 3 13:58:12 2014 UID set to nobody
Mon Feb 3 13:58:12 2014 Initialization Sequence Completed

The problem must be located at the routing but I can not find the solution.
My OpenVPN server is on a dedicated server Online.net with a fixed IP x.x.x.x
And My PC have got a fixed IP Private 176.0.1.1

Best regards

Solar

I put in the terminal (for my server) :
sudo -s
my password

cd /etc/openvpn
openvpn server.conf

Wed Feb 5 19:52:24 2014 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jul 12 2013
Wed Feb 5 19:52:24 2014 Diffie-Hellman initialized with 1024 bit key
Wed Feb 5 19:52:24 2014 WARNING: file '/etc/openvpn/server.key' is group or others accessible
Wed Feb 5 19:52:24 2014 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Feb 5 19:52:24 2014 ROUTE_GATEWAY 10.0.0.254/255.255.255.0 IFACE=eth0 HWADDR=x:x:x:x:x:x
Wed Feb 5 19:52:24 2014 TUN/TAP device tun0 opened
Wed Feb 5 19:52:24 2014 TUN/TAP TX queue length set to 100
Wed Feb 5 19:52:24 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 5 19:52:24 2014 /sbin/ip link set dev tun0 up mtu 1500
Wed Feb 5 19:52:24 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Wed Feb 5 19:52:24 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Feb 5 19:52:24 2014 GID set to nogroup
Wed Feb 5 19:52:24 2014 UID set to nobody
Wed Feb 5 19:52:24 2014 Listening for incoming TCP connection on [undef]
Wed Feb 5 19:52:24 2014 TCPv4_SERVER link local (bound): [undef]
Wed Feb 5 19:52:24 2014 TCPv4_SERVER link remote: [undef]
Wed Feb 5 19:52:24 2014 MULTI: multi_init called, r=256 v=256
Wed Feb 5 19:52:24 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Feb 5 19:52:24 2014 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Feb 5 19:52:24 2014 Initialization Sequence Completed

Solar

Server :
sudo service openvpn start
* Starting virtual private network daemon(s)...
* Autostarting VPN 'server'

Client :
sudo service openvpn start
* Starting virtual private network daemon(s)...
* Autostarting VPN 'client'

Ping from client to server works
Ping from server to client works
But when I surf on the internet, I do not get the server's IP address by going to the website www.ip2location.com

Solar

To leave on a good start, I remade my files.

Server config :
;local a.b.c.d
port 443
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4

Client config :
client
dev tun
proto tcp
remote 88.x.x.18 443
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
ns-cert-type server
comp-lzo
verb 4

Server log verb 4 :
Thu Feb 6 21:39:26 2014 us=398271 Current Parameter Settings:
Thu Feb 6 21:39:26 2014 us=398323 config = 'server.conf'
Thu Feb 6 21:39:26 2014 us=398333 mode = 1
Thu Feb 6 21:39:26 2014 us=398342 persist_config = DISABLED
Thu Feb 6 21:39:26 2014 us=398358 persist_mode = 1
Thu Feb 6 21:39:26 2014 us=398374 show_ciphers = DISABLED
Thu Feb 6 21:39:26 2014 us=398391 show_digests = DISABLED
Thu Feb 6 21:39:26 2014 us=398399 show_engines = DISABLED
Thu Feb 6 21:39:26 2014 us=398410 genkey = DISABLED
Thu Feb 6 21:39:26 2014 us=398421 key_pass_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398432 show_tls_ciphers = DISABLED
Thu Feb 6 21:39:26 2014 us=398443 Connection profiles [default]:
Thu Feb 6 21:39:26 2014 us=398453 proto = tcp-server
Thu Feb 6 21:39:26 2014 us=398463 local = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398472 local_port = 443
Thu Feb 6 21:39:26 2014 us=398481 remote = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398492 remote_port = 443
Thu Feb 6 21:39:26 2014 us=398501 remote_float = DISABLED
Thu Feb 6 21:39:26 2014 us=398510 bind_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=398518 bind_local = ENABLED
Thu Feb 6 21:39:26 2014 us=398528 connect_retry_seconds = 5
Thu Feb 6 21:39:26 2014 us=398537 connect_timeout = 10
Thu Feb 6 21:39:26 2014 us=398547 connect_retry_max = 0
Thu Feb 6 21:39:26 2014 us=398556 socks_proxy_server = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398566 socks_proxy_port = 0
Thu Feb 6 21:39:26 2014 us=398575 socks_proxy_retry = DISABLED
Thu Feb 6 21:39:26 2014 us=398585 tun_mtu = 1500
Thu Feb 6 21:39:26 2014 us=398594 tun_mtu_defined = ENABLED
Thu Feb 6 21:39:26 2014 us=398604 link_mtu = 1500
Thu Feb 6 21:39:26 2014 us=398613 link_mtu_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=398622 tun_mtu_extra = 0
Thu Feb 6 21:39:26 2014 us=398631 tun_mtu_extra_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=398641 mtu_discover_type = -1
Thu Feb 6 21:39:26 2014 us=398650 fragment = 0
Thu Feb 6 21:39:26 2014 us=398659 mssfix = 1450
Thu Feb 6 21:39:26 2014 us=398669 explicit_exit_notification = 0
Thu Feb 6 21:39:26 2014 us=398680 Connection profiles END
Thu Feb 6 21:39:26 2014 us=398689 remote_random = DISABLED
Thu Feb 6 21:39:26 2014 us=398699 ipchange = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398708 dev = 'tun'
Thu Feb 6 21:39:26 2014 us=398717 dev_type = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398727 dev_node = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398736 lladdr = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398745 topology = 1
Thu Feb 6 21:39:26 2014 us=398754 tun_ipv6 = DISABLED
Thu Feb 6 21:39:26 2014 us=398764 ifconfig_local = '10.8.0.1'
Thu Feb 6 21:39:26 2014 us=398773 ifconfig_remote_netmask = '10.8.0.2'
Thu Feb 6 21:39:26 2014 us=398783 ifconfig_noexec = DISABLED
Thu Feb 6 21:39:26 2014 us=398792 ifconfig_nowarn = DISABLED
Thu Feb 6 21:39:26 2014 us=398801 ifconfig_ipv6_local = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398811 ifconfig_ipv6_netbits = 0
Thu Feb 6 21:39:26 2014 us=398821 ifconfig_ipv6_remote = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=398830 shaper = 0
Thu Feb 6 21:39:26 2014 us=398839 mtu_test = 0
Thu Feb 6 21:39:26 2014 us=398848 mlock = DISABLED
Thu Feb 6 21:39:26 2014 us=398858 keepalive_ping = 10
Thu Feb 6 21:39:26 2014 us=398867 keepalive_timeout = 120
Thu Feb 6 21:39:26 2014 us=398877 inactivity_timeout = 0
Thu Feb 6 21:39:26 2014 us=398886 ping_send_timeout = 10
Thu Feb 6 21:39:26 2014 us=398895 ping_rec_timeout = 240
Thu Feb 6 21:39:26 2014 us=398904 ping_rec_timeout_action = 2
Thu Feb 6 21:39:26 2014 us=398914 ping_timer_remote = DISABLED
Thu Feb 6 21:39:26 2014 us=398923 remap_sigusr1 = 0
Thu Feb 6 21:39:26 2014 us=398933 persist_tun = ENABLED
Thu Feb 6 21:39:26 2014 us=398942 persist_local_ip = DISABLED
Thu Feb 6 21:39:26 2014 us=398951 persist_remote_ip = DISABLED
Thu Feb 6 21:39:26 2014 us=398960 persist_key = ENABLED
Thu Feb 6 21:39:26 2014 us=398969 passtos = DISABLED
Thu Feb 6 21:39:26 2014 us=398979 resolve_retry_seconds = 1000000000
Thu Feb 6 21:39:26 2014 us=398987 username = 'nobody'
Thu Feb 6 21:39:26 2014 us=398995 groupname = 'nogroup'
Thu Feb 6 21:39:26 2014 us=399003 chroot_dir = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399011 cd_dir = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399018 writepid = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399026 up_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399034 down_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399042 down_pre = DISABLED
Thu Feb 6 21:39:26 2014 us=399050 up_restart = DISABLED
Thu Feb 6 21:39:26 2014 us=399057 up_delay = DISABLED
Thu Feb 6 21:39:26 2014 us=399065 daemon = DISABLED
Thu Feb 6 21:39:26 2014 us=399073 inetd = 0
Thu Feb 6 21:39:26 2014 us=399081 log = DISABLED
Thu Feb 6 21:39:26 2014 us=399089 suppress_timestamps = DISABLED
Thu Feb 6 21:39:26 2014 us=399097 nice = 0
Thu Feb 6 21:39:26 2014 us=399104 verbosity = 4
Thu Feb 6 21:39:26 2014 us=399112 mute = 0
Thu Feb 6 21:39:26 2014 us=399119 gremlin = 0
Thu Feb 6 21:39:26 2014 us=399127 status_file = 'openvpn-status.log'
Thu Feb 6 21:39:26 2014 us=399135 status_file_version = 1
Thu Feb 6 21:39:26 2014 us=399143 status_file_update_freq = 60
Thu Feb 6 21:39:26 2014 us=399151 occ = ENABLED
Thu Feb 6 21:39:26 2014 us=399159 rcvbuf = 65536
Thu Feb 6 21:39:26 2014 us=399167 sndbuf = 65536
Thu Feb 6 21:39:26 2014 us=399174 mark = 0
Thu Feb 6 21:39:26 2014 us=399182 sockflags = 0
Thu Feb 6 21:39:26 2014 us=399190 fast_io = DISABLED
Thu Feb 6 21:39:26 2014 us=399198 lzo = 7
Thu Feb 6 21:39:26 2014 us=399205 route_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399213 route_default_gateway = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399221 route_default_metric = 0
Thu Feb 6 21:39:26 2014 us=399229 route_noexec = DISABLED
Thu Feb 6 21:39:26 2014 us=399237 route_delay = 0
Thu Feb 6 21:39:26 2014 us=399245 route_delay_window = 30
Thu Feb 6 21:39:26 2014 us=399253 route_delay_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=399261 route_nopull = DISABLED
Thu Feb 6 21:39:26 2014 us=399269 route_gateway_via_dhcp = DISABLED
Thu Feb 6 21:39:26 2014 us=399277 max_routes = 100
Thu Feb 6 21:39:26 2014 us=399285 allow_pull_fqdn = DISABLED
Thu Feb 6 21:39:26 2014 us=399295 route 10.8.0.0/255.255.255.0/nil/nil
Thu Feb 6 21:39:26 2014 us=399303 management_addr = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399311 management_port = 0
Thu Feb 6 21:39:26 2014 us=399319 management_user_pass = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399327 management_log_history_cache = 250
Thu Feb 6 21:39:26 2014 us=399335 management_echo_buffer_size = 100
Thu Feb 6 21:39:26 2014 us=399343 management_write_peer_info_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399351 management_client_user = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399359 management_client_group = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399367 management_flags = 0
Thu Feb 6 21:39:26 2014 us=399375 shared_secret_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399383 key_direction = 0
Thu Feb 6 21:39:26 2014 us=399392 ciphername_defined = ENABLED
Thu Feb 6 21:39:26 2014 us=399400 ciphername = 'BF-CBC'
Thu Feb 6 21:39:26 2014 us=399408 authname_defined = ENABLED
Thu Feb 6 21:39:26 2014 us=399416 authname = 'SHA1'
Thu Feb 6 21:39:26 2014 us=399424 prng_hash = 'SHA1'
Thu Feb 6 21:39:26 2014 us=399432 prng_nonce_secret_len = 16
Thu Feb 6 21:39:26 2014 us=399439 keysize = 0
Thu Feb 6 21:39:26 2014 us=399447 engine = DISABLED
Thu Feb 6 21:39:26 2014 us=399455 replay = ENABLED
Thu Feb 6 21:39:26 2014 us=399463 mute_replay_warnings = DISABLED
Thu Feb 6 21:39:26 2014 us=399471 replay_window = 64
Thu Feb 6 21:39:26 2014 us=399479 replay_time = 15
Thu Feb 6 21:39:26 2014 us=399487 packet_id_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399495 use_iv = ENABLED
Thu Feb 6 21:39:26 2014 us=399503 test_crypto = DISABLED
Thu Feb 6 21:39:26 2014 us=399510 tls_server = ENABLED
Thu Feb 6 21:39:26 2014 us=399518 tls_client = DISABLED
Thu Feb 6 21:39:26 2014 us=399526 key_method = 2
Thu Feb 6 21:39:26 2014 us=399533 ca_file = '/etc/openvpn/ca.crt'
Thu Feb 6 21:39:26 2014 us=399541 ca_path = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399548 dh_file = '/etc/openvpn/dh1024.pem'
Thu Feb 6 21:39:26 2014 us=399556 cert_file = '/etc/openvpn/server.crt'
Thu Feb 6 21:39:26 2014 us=399564 priv_key_file = '/etc/openvpn/server.key'
Thu Feb 6 21:39:26 2014 us=399572 pkcs12_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399579 cipher_list = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399587 tls_verify = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399595 tls_export_cert = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399602 verify_x509_type = 0
Thu Feb 6 21:39:26 2014 us=399610 verify_x509_name = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399617 crl_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399625 ns_cert_type = 0
Thu Feb 6 21:39:26 2014 us=399633 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399640 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399648 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399655 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399663 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399670 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399677 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399685 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399692 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399700 remote_cert_ku = 0
Thu Feb 6 21:39:26 2014 us=399707 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399715 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399722 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399730 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399737 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399745 remote_cert_ku[i] = 0
Thu Feb 6 21:39:26 2014 us=399752 remote_cert_eku = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399760 ssl_flags = 0
Thu Feb 6 21:39:26 2014 us=399767 tls_timeout = 2
Thu Feb 6 21:39:26 2014 us=399775 renegotiate_bytes = 0
Thu Feb 6 21:39:26 2014 us=399782 renegotiate_packets = 0
Thu Feb 6 21:39:26 2014 us=399790 renegotiate_seconds = 3600
Thu Feb 6 21:39:26 2014 us=399797 handshake_window = 60
Thu Feb 6 21:39:26 2014 us=399805 transition_window = 3600
Thu Feb 6 21:39:26 2014 us=399812 single_session = DISABLED
Thu Feb 6 21:39:26 2014 us=399820 push_peer_info = DISABLED
Thu Feb 6 21:39:26 2014 us=399827 tls_exit = DISABLED
Thu Feb 6 21:39:26 2014 us=399834 tls_auth_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=399842 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399850 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399857 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399865 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399872 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399880 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399887 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399895 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399903 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399910 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399918 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399925 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399933 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399940 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399948 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399955 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:39:26 2014 us=399963 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=399971 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=399979 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=399986 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=399994 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400001 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400009 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400017 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400024 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400032 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400039 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400047 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400054 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400062 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400070 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400077 pkcs11_private_mode = 00000000
Thu Feb 6 21:39:26 2014 us=400085 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400094 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400102 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400109 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400117 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400124 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400132 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400139 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400147 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400155 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400162 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400170 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400178 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400185 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400193 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400200 pkcs11_cert_private = DISABLED
Thu Feb 6 21:39:26 2014 us=400208 pkcs11_pin_cache_period = -1
Thu Feb 6 21:39:26 2014 us=400215 pkcs11_id = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=400223 pkcs11_id_management = DISABLED
Thu Feb 6 21:39:26 2014 us=400233 server_network = 10.8.0.0
Thu Feb 6 21:39:26 2014 us=400242 server_netmask = 255.255.255.0
Thu Feb 6 21:39:26 2014 us=400251 server_network_ipv6 = ::
Thu Feb 6 21:39:26 2014 us=400259 server_netbits_ipv6 = 0
Thu Feb 6 21:39:26 2014 us=400268 server_bridge_ip = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=400276 server_bridge_netmask = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=400285 server_bridge_pool_start = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=400293 server_bridge_pool_end = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=407417 push_entry = 'redirect-gateway def1 bypass-dhcp'
Thu Feb 6 21:39:26 2014 us=407451 push_entry = 'dhcp-option DNS 208.67.222.222'
Thu Feb 6 21:39:26 2014 us=407467 push_entry = 'dhcp-option DNS 208.67.220.220'
Thu Feb 6 21:39:26 2014 us=407480 push_entry = 'route 10.8.0.1'
Thu Feb 6 21:39:26 2014 us=407491 push_entry = 'topology net30'
Thu Feb 6 21:39:26 2014 us=407502 push_entry = 'ping 10'
Thu Feb 6 21:39:26 2014 us=407512 push_entry = 'ping-restart 120'
Thu Feb 6 21:39:26 2014 us=407522 ifconfig_pool_defined = ENABLED
Thu Feb 6 21:39:26 2014 us=407535 ifconfig_pool_start = 10.8.0.4
Thu Feb 6 21:39:26 2014 us=407547 ifconfig_pool_end = 10.8.0.251
Thu Feb 6 21:39:26 2014 us=407559 ifconfig_pool_netmask = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=407570 ifconfig_pool_persist_filename = 'ipp.txt'
Thu Feb 6 21:39:26 2014 us=407581 ifconfig_pool_persist_refresh_freq = 600
Thu Feb 6 21:39:26 2014 us=407592 ifconfig_ipv6_pool_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=407604 ifconfig_ipv6_pool_base = ::
Thu Feb 6 21:39:26 2014 us=407614 ifconfig_ipv6_pool_netbits = 0
Thu Feb 6 21:39:26 2014 us=407625 n_bcast_buf = 256
Thu Feb 6 21:39:26 2014 us=407635 tcp_queue_limit = 64
Thu Feb 6 21:39:26 2014 us=407645 real_hash_size = 256
Thu Feb 6 21:39:26 2014 us=407655 virtual_hash_size = 256
Thu Feb 6 21:39:26 2014 us=407665 client_connect_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407675 learn_address_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407685 client_disconnect_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407695 client_config_dir = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407705 ccd_exclusive = DISABLED
Thu Feb 6 21:39:26 2014 us=407715 tmp_dir = '/tmp'
Thu Feb 6 21:39:26 2014 us=407725 push_ifconfig_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=407737 push_ifconfig_local = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=407748 push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb 6 21:39:26 2014 us=407759 push_ifconfig_ipv6_defined = DISABLED
Thu Feb 6 21:39:26 2014 us=407777 push_ifconfig_ipv6_local = ::/0
Thu Feb 6 21:39:26 2014 us=407789 push_ifconfig_ipv6_remote = ::
Thu Feb 6 21:39:26 2014 us=407799 enable_c2c = DISABLED
Thu Feb 6 21:39:26 2014 us=407809 duplicate_cn = DISABLED
Thu Feb 6 21:39:26 2014 us=407819 cf_max = 0
Thu Feb 6 21:39:26 2014 us=407829 cf_per = 0
Thu Feb 6 21:39:26 2014 us=407839 max_clients = 1024
Thu Feb 6 21:39:26 2014 us=407849 max_routes_per_client = 256
Thu Feb 6 21:39:26 2014 us=407860 auth_user_pass_verify_script = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407870 auth_user_pass_verify_script_via_file = DISABLED
Thu Feb 6 21:39:26 2014 us=407881 port_share_host = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407891 port_share_port = 0
Thu Feb 6 21:39:26 2014 us=407901 client = DISABLED
Thu Feb 6 21:39:26 2014 us=407911 pull = DISABLED
Thu Feb 6 21:39:26 2014 us=407922 auth_user_pass_file = '[UNDEF]'
Thu Feb 6 21:39:26 2014 us=407934 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jul 12 2013
Thu Feb 6 21:39:26 2014 us=413226 Diffie-Hellman initialized with 1024 bit key
Thu Feb 6 21:39:26 2014 us=413583 WARNING: file '/etc/openvpn/server.key' is group or others accessible
Thu Feb 6 21:39:26 2014 us=413846 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Feb 6 21:39:26 2014 us=413877 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu Feb 6 21:39:26 2014 us=414009 ROUTE_GATEWAY 88.x.x.1/255.255.255.0 IFACE=eth0 HWADDR=x:ae:x:c9:31:x
Thu Feb 6 21:39:26 2014 us=414807 TUN/TAP device tun0 opened
Thu Feb 6 21:39:26 2014 us=414834 TUN/TAP TX queue length set to 100
Thu Feb 6 21:39:26 2014 us=414854 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Feb 6 21:39:26 2014 us=414881 /sbin/ip link set dev tun0 up mtu 1500
Thu Feb 6 21:39:26 2014 us=418376 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Thu Feb 6 21:39:26 2014 us=421307 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Thu Feb 6 21:39:26 2014 us=424023 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Feb 6 21:39:26 2014 us=424565 GID set to nogroup
Thu Feb 6 21:39:26 2014 us=424582 UID set to nobody
Thu Feb 6 21:39:26 2014 us=424596 Listening for incoming TCP connection on [undef]
Thu Feb 6 21:39:26 2014 us=424609 TCPv4_SERVER link local (bound): [undef]
Thu Feb 6 21:39:26 2014 us=424618 TCPv4_SERVER link remote: [undef]
Thu Feb 6 21:39:26 2014 us=424631 MULTI: multi_init called, r=256 v=256
Thu Feb 6 21:39:26 2014 us=424649 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Feb 6 21:39:26 2014 us=424669 IFCONFIG POOL LIST
Thu Feb 6 21:39:26 2014 us=424691 MULTI: TCP INIT maxclients=1024 maxevents=1028
Thu Feb 6 21:39:26 2014 us=424716 Initialization Sequence Completed

Client log verb 4 :
Thu Feb 6 21:43:26 2014 us=182080 Current Parameter Settings:
Thu Feb 6 21:43:26 2014 us=182327 config = 'client.conf'
Thu Feb 6 21:43:26 2014 us=182386 mode = 0
Thu Feb 6 21:43:26 2014 us=182428 persist_config = DISABLED
Thu Feb 6 21:43:26 2014 us=182453 persist_mode = 1
Thu Feb 6 21:43:26 2014 us=182464 show_ciphers = DISABLED
Thu Feb 6 21:43:26 2014 us=182474 show_digests = DISABLED
Thu Feb 6 21:43:26 2014 us=182484 show_engines = DISABLED
Thu Feb 6 21:43:26 2014 us=182494 genkey = DISABLED
Thu Feb 6 21:43:26 2014 us=182504 key_pass_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182514 show_tls_ciphers = DISABLED
Thu Feb 6 21:43:26 2014 us=182524 Connection profiles [default]:
Thu Feb 6 21:43:26 2014 us=182535 proto = tcp-client
Thu Feb 6 21:43:26 2014 us=182545 local = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182555 local_port = 0
Thu Feb 6 21:43:26 2014 us=182565 remote = '88.x.x.18'
Thu Feb 6 21:43:26 2014 us=182575 remote_port = 443
Thu Feb 6 21:43:26 2014 us=182585 remote_float = DISABLED
Thu Feb 6 21:43:26 2014 us=182595 bind_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=182605 bind_local = DISABLED
Thu Feb 6 21:43:26 2014 us=182615 connect_retry_seconds = 5
Thu Feb 6 21:43:26 2014 us=182625 connect_timeout = 10
Thu Feb 6 21:43:26 2014 us=182636 connect_retry_max = 0
Thu Feb 6 21:43:26 2014 us=182646 socks_proxy_server = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182656 socks_proxy_port = 0
Thu Feb 6 21:43:26 2014 us=182667 socks_proxy_retry = DISABLED
Thu Feb 6 21:43:26 2014 us=182677 tun_mtu = 1500
Thu Feb 6 21:43:26 2014 us=182688 tun_mtu_defined = ENABLED
Thu Feb 6 21:43:26 2014 us=182699 link_mtu = 1500
Thu Feb 6 21:43:26 2014 us=182710 link_mtu_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=182722 tun_mtu_extra = 0
Thu Feb 6 21:43:26 2014 us=182743 tun_mtu_extra_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=182760 mtu_discover_type = -1
Thu Feb 6 21:43:26 2014 us=182771 fragment = 0
Thu Feb 6 21:43:26 2014 us=182784 mssfix = 1450
Thu Feb 6 21:43:26 2014 us=182795 explicit_exit_notification = 0
Thu Feb 6 21:43:26 2014 us=182815 Connection profiles END
Thu Feb 6 21:43:26 2014 us=182826 remote_random = DISABLED
Thu Feb 6 21:43:26 2014 us=182839 ipchange = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182858 dev = 'tun'
Thu Feb 6 21:43:26 2014 us=182874 dev_type = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182885 dev_node = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182903 lladdr = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=182920 topology = 1
Thu Feb 6 21:43:26 2014 us=183114 tun_ipv6 = DISABLED
Thu Feb 6 21:43:26 2014 us=183125 ifconfig_local = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183136 ifconfig_remote_netmask = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183146 ifconfig_noexec = DISABLED
Thu Feb 6 21:43:26 2014 us=183157 ifconfig_nowarn = DISABLED
Thu Feb 6 21:43:26 2014 us=183167 ifconfig_ipv6_local = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183178 ifconfig_ipv6_netbits = 0
Thu Feb 6 21:43:26 2014 us=183188 ifconfig_ipv6_remote = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183198 shaper = 0
Thu Feb 6 21:43:26 2014 us=183209 mtu_test = 0
Thu Feb 6 21:43:26 2014 us=183219 mlock = DISABLED
Thu Feb 6 21:43:26 2014 us=183229 keepalive_ping = 0
Thu Feb 6 21:43:26 2014 us=183239 keepalive_timeout = 0
Thu Feb 6 21:43:26 2014 us=183249 inactivity_timeout = 0
Thu Feb 6 21:43:26 2014 us=183260 ping_send_timeout = 0
Thu Feb 6 21:43:26 2014 us=183270 ping_rec_timeout = 0
Thu Feb 6 21:43:26 2014 us=183280 ping_rec_timeout_action = 0
Thu Feb 6 21:43:26 2014 us=183290 ping_timer_remote = DISABLED
Thu Feb 6 21:43:26 2014 us=183301 remap_sigusr1 = 0
Thu Feb 6 21:43:26 2014 us=183311 persist_tun = ENABLED
Thu Feb 6 21:43:26 2014 us=183321 persist_local_ip = DISABLED
Thu Feb 6 21:43:26 2014 us=183331 persist_remote_ip = DISABLED
Thu Feb 6 21:43:26 2014 us=183341 persist_key = ENABLED
Thu Feb 6 21:43:26 2014 us=183351 passtos = DISABLED
Thu Feb 6 21:43:26 2014 us=183362 resolve_retry_seconds = 1000000000
Thu Feb 6 21:43:26 2014 us=183372 username = 'nobody'
Thu Feb 6 21:43:26 2014 us=183383 groupname = 'nogroup'
Thu Feb 6 21:43:26 2014 us=183393 chroot_dir = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183403 cd_dir = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183413 writepid = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183423 up_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183434 down_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183444 down_pre = DISABLED
Thu Feb 6 21:43:26 2014 us=183454 up_restart = DISABLED
Thu Feb 6 21:43:26 2014 us=183527 up_delay = DISABLED
Thu Feb 6 21:43:26 2014 us=183538 daemon = DISABLED
Thu Feb 6 21:43:26 2014 us=183552 inetd = 0
Thu Feb 6 21:43:26 2014 us=183563 log = DISABLED
Thu Feb 6 21:43:26 2014 us=183573 suppress_timestamps = DISABLED
Thu Feb 6 21:43:26 2014 us=183585 nice = 0
Thu Feb 6 21:43:26 2014 us=183596 verbosity = 4
Thu Feb 6 21:43:26 2014 us=183606 mute = 0
Thu Feb 6 21:43:26 2014 us=183616 gremlin = 0
Thu Feb 6 21:43:26 2014 us=183626 status_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183636 status_file_version = 1
Thu Feb 6 21:43:26 2014 us=183646 status_file_update_freq = 60
Thu Feb 6 21:43:26 2014 us=183656 occ = ENABLED
Thu Feb 6 21:43:26 2014 us=183666 rcvbuf = 65536
Thu Feb 6 21:43:26 2014 us=183676 sndbuf = 65536
Thu Feb 6 21:43:26 2014 us=183686 mark = 0
Thu Feb 6 21:43:26 2014 us=183696 sockflags = 0
Thu Feb 6 21:43:26 2014 us=183709 fast_io = DISABLED
Thu Feb 6 21:43:26 2014 us=183719 lzo = 7
Thu Feb 6 21:43:26 2014 us=183729 route_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183739 route_default_gateway = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183749 route_default_metric = 0
Thu Feb 6 21:43:26 2014 us=183759 route_noexec = DISABLED
Thu Feb 6 21:43:26 2014 us=183770 route_delay = 0
Thu Feb 6 21:43:26 2014 us=183780 route_delay_window = 30
Thu Feb 6 21:43:26 2014 us=183790 route_delay_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=183800 route_nopull = DISABLED
Thu Feb 6 21:43:26 2014 us=183810 route_gateway_via_dhcp = DISABLED
Thu Feb 6 21:43:26 2014 us=183820 max_routes = 100
Thu Feb 6 21:43:26 2014 us=183830 allow_pull_fqdn = DISABLED
Thu Feb 6 21:43:26 2014 us=183841 management_addr = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183851 management_port = 0
Thu Feb 6 21:43:26 2014 us=183861 management_user_pass = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183871 management_log_history_cache = 250
Thu Feb 6 21:43:26 2014 us=183881 management_echo_buffer_size = 100
Thu Feb 6 21:43:26 2014 us=183892 management_write_peer_info_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183902 management_client_user = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183913 management_client_group = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183923 management_flags = 0
Thu Feb 6 21:43:26 2014 us=183934 shared_secret_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=183944 key_direction = 0
Thu Feb 6 21:43:26 2014 us=183954 ciphername_defined = ENABLED
Thu Feb 6 21:43:26 2014 us=183964 ciphername = 'BF-CBC'
Thu Feb 6 21:43:26 2014 us=183974 authname_defined = ENABLED
Thu Feb 6 21:43:26 2014 us=183984 authname = 'SHA1'
Thu Feb 6 21:43:26 2014 us=183994 prng_hash = 'SHA1'
Thu Feb 6 21:43:26 2014 us=184005 prng_nonce_secret_len = 16
Thu Feb 6 21:43:26 2014 us=184015 keysize = 0
Thu Feb 6 21:43:26 2014 us=184024 engine = DISABLED
Thu Feb 6 21:43:26 2014 us=184034 replay = ENABLED
Thu Feb 6 21:43:26 2014 us=184044 mute_replay_warnings = DISABLED
Thu Feb 6 21:43:26 2014 us=184055 replay_window = 64
Thu Feb 6 21:43:26 2014 us=184065 replay_time = 15
Thu Feb 6 21:43:26 2014 us=184075 packet_id_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184085 use_iv = ENABLED
Thu Feb 6 21:43:26 2014 us=184095 test_crypto = DISABLED
Thu Feb 6 21:43:26 2014 us=184105 tls_server = DISABLED
Thu Feb 6 21:43:26 2014 us=184115 tls_client = ENABLED
Thu Feb 6 21:43:26 2014 us=184125 key_method = 2
Thu Feb 6 21:43:26 2014 us=184135 ca_file = '/etc/openvpn/ca.crt'
Thu Feb 6 21:43:26 2014 us=184146 ca_path = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184156 dh_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184166 cert_file = '/etc/openvpn/client1.crt'
Thu Feb 6 21:43:26 2014 us=184176 priv_key_file = '/etc/openvpn/client1.key'
Thu Feb 6 21:43:26 2014 us=184187 pkcs12_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184197 cipher_list = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184207 tls_verify = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184217 tls_export_cert = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184227 verify_x509_type = 0
Thu Feb 6 21:43:26 2014 us=184237 verify_x509_name = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184248 crl_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184258 ns_cert_type = 1
Thu Feb 6 21:43:26 2014 us=184268 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184278 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184288 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184297 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184307 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184316 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184326 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184336 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184345 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184355 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184365 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184375 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184384 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184394 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184403 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184413 remote_cert_ku[i] = 0
Thu Feb 6 21:43:26 2014 us=184423 remote_cert_eku = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184432 ssl_flags = 0
Thu Feb 6 21:43:26 2014 us=184442 tls_timeout = 2
Thu Feb 6 21:43:26 2014 us=184452 renegotiate_bytes = 0
Thu Feb 6 21:43:26 2014 us=184461 renegotiate_packets = 0
Thu Feb 6 21:43:26 2014 us=184471 renegotiate_seconds = 3600
Thu Feb 6 21:43:26 2014 us=184481 handshake_window = 60
Thu Feb 6 21:43:26 2014 us=184490 transition_window = 3600
Thu Feb 6 21:43:26 2014 us=184500 single_session = DISABLED
Thu Feb 6 21:43:26 2014 us=184510 push_peer_info = DISABLED
Thu Feb 6 21:43:26 2014 us=184520 tls_exit = DISABLED
Thu Feb 6 21:43:26 2014 us=184529 tls_auth_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=184539 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184549 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184559 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184569 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184580 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184589 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184599 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184610 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184620 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184630 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184640 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184650 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184660 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184670 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184680 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184689 pkcs11_protected_authentication = DISABLED
Thu Feb 6 21:43:26 2014 us=184700 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184710 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184720 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184730 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184740 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184750 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184760 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184770 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184780 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184790 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184800 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184810 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184820 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184830 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184840 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184850 pkcs11_private_mode = 00000000
Thu Feb 6 21:43:26 2014 us=184860 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184870 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184880 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184889 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184899 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184909 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184919 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184928 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184939 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184948 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184958 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184968 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184978 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184988 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=184998 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=185007 pkcs11_cert_private = DISABLED
Thu Feb 6 21:43:26 2014 us=185017 pkcs11_pin_cache_period = -1
Thu Feb 6 21:43:26 2014 us=185027 pkcs11_id = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=185037 pkcs11_id_management = DISABLED
Thu Feb 6 21:43:26 2014 us=185055 server_network = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185067 server_netmask = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185079 server_network_ipv6 = ::
Thu Feb 6 21:43:26 2014 us=185089 server_netbits_ipv6 = 0
Thu Feb 6 21:43:26 2014 us=185100 server_bridge_ip = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185110 server_bridge_netmask = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185121 server_bridge_pool_start = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185131 server_bridge_pool_end = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185141 ifconfig_pool_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=185152 ifconfig_pool_start = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185162 ifconfig_pool_end = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185173 ifconfig_pool_netmask = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=185183 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=185193 ifconfig_pool_persist_refresh_freq = 600
Thu Feb 6 21:43:26 2014 us=185203 ifconfig_ipv6_pool_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=185213 ifconfig_ipv6_pool_base = ::
Thu Feb 6 21:43:26 2014 us=185223 ifconfig_ipv6_pool_netbits = 0
Thu Feb 6 21:43:26 2014 us=185234 n_bcast_buf = 256
Thu Feb 6 21:43:26 2014 us=185243 tcp_queue_limit = 64
Thu Feb 6 21:43:26 2014 us=185253 real_hash_size = 256
Thu Feb 6 21:43:26 2014 us=185263 virtual_hash_size = 256
Thu Feb 6 21:43:26 2014 us=206325 client_connect_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206383 learn_address_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206406 client_disconnect_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206428 client_config_dir = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206448 ccd_exclusive = DISABLED
Thu Feb 6 21:43:26 2014 us=206468 tmp_dir = '/tmp'
Thu Feb 6 21:43:26 2014 us=206488 push_ifconfig_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=206513 push_ifconfig_local = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=206536 push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb 6 21:43:26 2014 us=206557 push_ifconfig_ipv6_defined = DISABLED
Thu Feb 6 21:43:26 2014 us=206580 push_ifconfig_ipv6_local = ::/0
Thu Feb 6 21:43:26 2014 us=206601 push_ifconfig_ipv6_remote = ::
Thu Feb 6 21:43:26 2014 us=206620 enable_c2c = DISABLED
Thu Feb 6 21:43:26 2014 us=206639 duplicate_cn = DISABLED
Thu Feb 6 21:43:26 2014 us=206658 cf_max = 0
Thu Feb 6 21:43:26 2014 us=206677 cf_per = 0
Thu Feb 6 21:43:26 2014 us=206695 max_clients = 1024
Thu Feb 6 21:43:26 2014 us=206715 max_routes_per_client = 256
Thu Feb 6 21:43:26 2014 us=206734 auth_user_pass_verify_script = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206754 auth_user_pass_verify_script_via_file = DISABLED
Thu Feb 6 21:43:26 2014 us=206774 port_share_host = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206793 port_share_port = 0
Thu Feb 6 21:43:26 2014 us=206812 client = ENABLED
Thu Feb 6 21:43:26 2014 us=206831 pull = ENABLED
Thu Feb 6 21:43:26 2014 us=206849 auth_user_pass_file = '[UNDEF]'
Thu Feb 6 21:43:26 2014 us=206873 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jul 12 2013
Thu Feb 6 21:43:26 2014 us=208604 WARNING: file '/etc/openvpn/client1.key' is group or others accessible
Thu Feb 6 21:43:26 2014 us=209041 LZO compression initialized
Thu Feb 6 21:43:26 2014 us=209252 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Feb 6 21:43:26 2014 us=209373 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu Feb 6 21:43:26 2014 us=209449 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Feb 6 21:43:26 2014 us=209515 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Feb 6 21:43:26 2014 us=209553 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Feb 6 21:43:26 2014 us=209619 Local Options hash (VER=V4): '69109d17'
Thu Feb 6 21:43:26 2014 us=210236 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Feb 6 21:43:26 2014 us=211479 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Thu Feb 6 21:43:26 2014 us=212431 Attempting to establish TCP connection with [AF_INET]88.191.189.18:443 [nonblock]
Thu Feb 6 21:43:27 2014 us=212794 TCP connection established with [AF_INET]88.x.x.18:443
Thu Feb 6 21:43:27 2014 us=212866 TCPv4_CLIENT link local: [undef]
Thu Feb 6 21:43:27 2014 us=212894 TCPv4_CLIENT link remote: [AF_INET]88.x.x.18:443
Thu Feb 6 21:43:27 2014 us=240980 TLS: Initial packet from [AF_INET]88.x.x.18:443, sid=6849a2f5 6129d72b
Thu Feb 6 21:43:27 2014 us=790235 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Thu Feb 6 21:43:27 2014 us=790710 VERIFY OK: nsCertType=SERVER
Thu Feb 6 21:43:27 2014 us=790737 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Thu Feb 6 21:43:28 2014 us=861287 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Feb 6 21:43:28 2014 us=861324 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 6 21:43:28 2014 us=861366 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Feb 6 21:43:28 2014 us=861374 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 6 21:43:28 2014 us=861409 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Feb 6 21:43:28 2014 us=861431 [server] Peer Connection Initiated with [AF_INET]88.x.x.18:443
Thu Feb 6 21:43:31 2014 us=93135 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Feb 6 21:43:31 2014 us=186630 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Feb 6 21:43:31 2014 us=186894 OPTIONS IMPORT: timers and/or timeouts modified
Thu Feb 6 21:43:31 2014 us=186922 OPTIONS IMPORT: --ifconfig/up options modified
Thu Feb 6 21:43:31 2014 us=186942 OPTIONS IMPORT: route options modified
Thu Feb 6 21:43:31 2014 us=186959 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Feb 6 21:43:31 2014 us=187298 ROUTE_GATEWAY 10.0.0.254/255.255.255.0 IFACE=eth0 HWADDR=x:x:02:f6:x:f2
Thu Feb 6 21:43:31 2014 us=187820 TUN/TAP device tun0 opened
Thu Feb 6 21:43:31 2014 us=187862 TUN/TAP TX queue length set to 100
Thu Feb 6 21:43:31 2014 us=187897 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Feb 6 21:43:31 2014 us=187946 /sbin/ip link set dev tun0 up mtu 1500
Thu Feb 6 21:43:31 2014 us=192256 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Thu Feb 6 21:43:31 2014 us=198879 /sbin/ip route add 88.191.189.18/32 via 10.0.0.254
Thu Feb 6 21:43:31 2014 us=208039 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Thu Feb 6 21:43:31 2014 us=210314 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Thu Feb 6 21:43:31 2014 us=212370 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Thu Feb 6 21:43:31 2014 us=223470 GID set to nogroup
Thu Feb 6 21:43:31 2014 us=223779 UID set to nobody
Thu Feb 6 21:43:31 2014 us=223798 Initialization Sequence Completed

Client route :
Table de routage IP du noyau
Destination Passerelle Genmask Indic Metric Ref Use Iface
default 10.8.0.5 128.0.0.0 UG 0 0 0 tun0
default bbox.lan 0.0.0.0 UG 0 0 0 eth0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth0
10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun0
10.8.0.5 * 255.255.255.255 UH 0 0 0 tun0
88-x-x-18.p bbox.lan 255.255.255.255 UGH 0 0 0 eth0
128.0.0.0 10.8.0.5 128.0.0.0 UG 0 0 0 tun0

With this configuration, when I use the client to surf the internet, I have this :

Below, we see that the client is connected to the server.
Up when I surf on the internet, the connection to the site is trying to establish "but not established" just SYN_SENT

Solar

I made the changes : --proto tcp-server and --proto tcp-client

Server config :
port 443
proto tcp-server
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4

Client config :
client
dev tun
proto tcp-client
remote 88.x.x.18 443
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
ns-cert-type server
comp-lzo
verb 4

I start the server.
When I start the client, here is the server log (to the end) :
Fri Feb 7 03:29:03 2014 us=818958 client1/12.x.x.83:43699 MULTI: bad source address from client [10.0.0.47], packet dropped
Fri Feb 7 03:29:18 2014 us=443349 client1/12.x.x.83:43699 MULTI: bad source address from client [10.0.0.47], packet dropped
Fri Feb 7 03:29:47 2014 us=658919 client1/12.x.x.83:43699 MULTI: bad source address from client [10.0.0.47], packet dropped

IP ----> 12.x.x.83 (it's my IP public on my PC client)
IP ----> 10.0.0.47 (it's my IP private on my PC client)

Solar

Solar wroteFri Feb 7 03:29:47 2014 us=658919 client1/12.x.x.83:43699 MULTI: bad source address from client [10.0.0.47], packet dropped

debbie10t wroteThis generally occurs on Windows and is due to the source address of a packet being your real LAN address not your TUN address. The packets are dropped and can generally be ignored.

Server and client are on Linux

Solar wrotewhen I surf on the internet, the connection to the site is trying to establish "but not established" just SYN_SENT

debbie10t wroteDoes this problem persist ?

yes, even after the changes you advised me.

For information, my VPN server on a dedicated server.
Should I use a failover IP for simplicity ?

Solar

I use my desktop as a dedicated server to configure my server:
Server HTTP
Server DNS
Server Mail
"Server VPN"

yes, I can use internet with my dedicated server.

I just do a ipconfig in a terminal to better understand the network of my dedicated server :

em2 Link encap:Ethernet HWaddr d4:ae:52:c9:31:30
UP BROADCAST MULTICAST MTU:1500 Metric:1
Packets reçus:0 erreurs:0 :0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
Octets reçus:0 (0.0 B) Octets transmis:0 (0.0 B)

eth0 Link encap:Ethernet HWaddr d4:ae:52:c9:31:2f
inet adr:88.191.189.18 Bcast:88.191.189.255 Masque:255.255.255.0
adr inet6: fe80::d6ae:52ff:fec9:312f/64 Scope:Lien
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Packets reçus:17533036 erreurs:0 :5583 overruns:0 frame:0
TX packets:19485491 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
Octets reçus:1806638691 (1.8 GB) Octets transmis:14992700544 (14.9 GB)

eth0:1 Link encap:Ethernet HWaddr d4:ae:52:c9:31:2f
inet adr:192.168.100.1 Bcast:192.168.100.255 Masque:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:65536 Metric:1
Packets reçus:9905984 erreurs:0 :0 overruns:0 frame:0
TX packets:9905984 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
Octets reçus:6482704535 (6.4 GB) Octets transmis:6482704535 (6.4 GB)

I am not using eth0:1

Solar

debbie10t wroteiptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

With this command line, it works.

Thank you for your help, you can post marked as resolved