debbie10t wroteAs you say "after disconnection", this can be eradicated by using:
push "explicit-exit-notify 3"
Added to server-side config (no other changes was made since the first post).
debbie10t wroteAlso, you appear to be using the OpenVPN Access Server Client: Can you explain this ? Why not use normal OpenVPN CE FOSS version ?
I have OpenVPN ASC before the server setup and I thought it is completely compatible with OpenVPN server.
I'm not exactly sure, what "OpenVPN CE FOSS" mean, but I've reinstalled the OpenVPN on my Windows from
http://openvpn.net/index.php/open-source/downloads.html Unfortunately, I see no difference in the behavior: ping and HTTP routing still works, while DNS does not. Here are the logs.
Server
Sat Mar 15 19:44:33 2014 us=58000 Current Parameter Settings:
Sat Mar 15 19:44:33 2014 us=58114 config = '/etc/openvpn/server.conf'
Sat Mar 15 19:44:33 2014 us=58142 mode = 1
Sat Mar 15 19:44:33 2014 us=58165 persist_config = DISABLED
Sat Mar 15 19:44:33 2014 us=58189 persist_mode = 1
Sat Mar 15 19:44:33 2014 us=58220 show_ciphers = DISABLED
Sat Mar 15 19:44:33 2014 us=58254 show_digests = DISABLED
Sat Mar 15 19:44:33 2014 us=58269 show_engines = DISABLED
Sat Mar 15 19:44:33 2014 us=58284 genkey = DISABLED
Sat Mar 15 19:44:33 2014 us=58299 key_pass_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58315 show_tls_ciphers = DISABLED
Sat Mar 15 19:44:33 2014 us=58332 Connection profiles [default]:
Sat Mar 15 19:44:33 2014 us=58347 proto = udp
Sat Mar 15 19:44:33 2014 us=58362 local = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58381 local_port = 212
Sat Mar 15 19:44:33 2014 us=58396 remote = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58411 remote_port = 212
Sat Mar 15 19:44:33 2014 us=58426 remote_float = DISABLED
Sat Mar 15 19:44:33 2014 us=58441 bind_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=58455 bind_local = ENABLED
Sat Mar 15 19:44:33 2014 us=58470 connect_retry_seconds = 5
Sat Mar 15 19:44:33 2014 us=58485 connect_timeout = 10
Sat Mar 15 19:44:33 2014 us=58500 connect_retry_max = 0
Sat Mar 15 19:44:33 2014 us=58516 socks_proxy_server = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58531 socks_proxy_port = 0
Sat Mar 15 19:44:33 2014 us=58546 socks_proxy_retry = DISABLED
Sat Mar 15 19:44:33 2014 us=58563 Connection profiles END
Sat Mar 15 19:44:33 2014 us=58578 remote_random = DISABLED
Sat Mar 15 19:44:33 2014 us=58592 ipchange = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58607 dev = 'tun'
Sat Mar 15 19:44:33 2014 us=58622 dev_type = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58637 dev_node = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58652 lladdr = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58667 topology = 1
Sat Mar 15 19:44:33 2014 us=58681 tun_ipv6 = DISABLED
Sat Mar 15 19:44:33 2014 us=58696 ifconfig_local = '10.8.0.1'
Sat Mar 15 19:44:33 2014 us=58711 ifconfig_remote_netmask = '10.8.0.2'
Sat Mar 15 19:44:33 2014 us=58726 ifconfig_noexec = DISABLED
Sat Mar 15 19:44:33 2014 us=58741 ifconfig_nowarn = DISABLED
Sat Mar 15 19:44:33 2014 us=58756 ifconfig_ipv6_local = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58771 ifconfig_ipv6_netbits = 0
Sat Mar 15 19:44:33 2014 us=58786 ifconfig_ipv6_remote = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=58801 shaper = 0
Sat Mar 15 19:44:33 2014 us=58815 tun_mtu = 1500
Sat Mar 15 19:44:33 2014 us=58830 tun_mtu_defined = ENABLED
Sat Mar 15 19:44:33 2014 us=58845 link_mtu = 1500
Sat Mar 15 19:44:33 2014 us=58860 link_mtu_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=58875 tun_mtu_extra = 0
Sat Mar 15 19:44:33 2014 us=58890 tun_mtu_extra_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=58905 fragment = 0
Sat Mar 15 19:44:33 2014 us=58919 mtu_discover_type = -1
Sat Mar 15 19:44:33 2014 us=58934 mtu_test = 0
Sat Mar 15 19:44:33 2014 us=58949 mlock = DISABLED
Sat Mar 15 19:44:33 2014 us=58964 keepalive_ping = 10
Sat Mar 15 19:44:33 2014 us=58979 keepalive_timeout = 120
Sat Mar 15 19:44:33 2014 us=58994 inactivity_timeout = 0
Sat Mar 15 19:44:33 2014 us=59009 ping_send_timeout = 10
Sat Mar 15 19:44:33 2014 us=59024 ping_rec_timeout = 240
Sat Mar 15 19:44:33 2014 us=59039 ping_rec_timeout_action = 2
Sat Mar 15 19:44:33 2014 us=59053 ping_timer_remote = DISABLED
Sat Mar 15 19:44:33 2014 us=59068 remap_sigusr1 = 0
Sat Mar 15 19:44:33 2014 us=59083 explicit_exit_notification = 0
Sat Mar 15 19:44:33 2014 us=59098 persist_tun = ENABLED
Sat Mar 15 19:44:33 2014 us=59113 persist_local_ip = DISABLED
Sat Mar 15 19:44:33 2014 us=59127 persist_remote_ip = DISABLED
Sat Mar 15 19:44:33 2014 us=59142 persist_key = ENABLED
Sat Mar 15 19:44:33 2014 us=59157 mssfix = 1450
Sat Mar 15 19:44:33 2014 us=59199 passtos = DISABLED
Sat Mar 15 19:44:33 2014 us=59225 resolve_retry_seconds = 1000000000
Sat Mar 15 19:44:33 2014 us=59241 username = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59262 groupname = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59279 chroot_dir = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59508 cd_dir = '/etc/openvpn'
Sat Mar 15 19:44:33 2014 us=59524 writepid = '/var/run/openvpn.server.pid'
Sat Mar 15 19:44:33 2014 us=59544 up_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59559 down_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59574 down_pre = DISABLED
Sat Mar 15 19:44:33 2014 us=59589 up_restart = DISABLED
Sat Mar 15 19:44:33 2014 us=59604 up_delay = DISABLED
Sat Mar 15 19:44:33 2014 us=59619 daemon = ENABLED
Sat Mar 15 19:44:33 2014 us=59634 inetd = 0
Sat Mar 15 19:44:33 2014 us=59649 log = ENABLED
Sat Mar 15 19:44:33 2014 us=59664 suppress_timestamps = DISABLED
Sat Mar 15 19:44:33 2014 us=59679 nice = 0
Sat Mar 15 19:44:33 2014 us=59694 verbosity = 4
Sat Mar 15 19:44:33 2014 us=59709 mute = 0
Sat Mar 15 19:44:33 2014 us=59724 gremlin = 0
Sat Mar 15 19:44:33 2014 us=59739 status_file = 'openvpn-status.log'
Sat Mar 15 19:44:33 2014 us=59754 status_file_version = 1
Sat Mar 15 19:44:33 2014 us=59769 status_file_update_freq = 60
Sat Mar 15 19:44:33 2014 us=59784 occ = ENABLED
Sat Mar 15 19:44:33 2014 us=59799 rcvbuf = 65536
Sat Mar 15 19:44:33 2014 us=59814 sndbuf = 65536
Sat Mar 15 19:44:33 2014 us=59829 sockflags = 0
Sat Mar 15 19:44:33 2014 us=59843 fast_io = DISABLED
Sat Mar 15 19:44:33 2014 us=59858 lzo = 7
Sat Mar 15 19:44:33 2014 us=59873 route_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59888 route_default_gateway = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=59903 route_default_metric = 0
Sat Mar 15 19:44:33 2014 us=59918 route_noexec = DISABLED
Sat Mar 15 19:44:33 2014 us=59933 route_delay = 0
Sat Mar 15 19:44:33 2014 us=59949 route_delay_window = 30
Sat Mar 15 19:44:33 2014 us=59964 route_delay_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=59979 route_nopull = DISABLED
Sat Mar 15 19:44:33 2014 us=59994 route_gateway_via_dhcp = DISABLED
Sat Mar 15 19:44:33 2014 us=60009 max_routes = 100
Sat Mar 15 19:44:33 2014 us=60024 allow_pull_fqdn = DISABLED
Sat Mar 15 19:44:33 2014 us=60040 route 10.8.0.0/255.255.255.0/nil/nil
Sat Mar 15 19:44:33 2014 us=60056 management_addr = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60071 management_port = 0
Sat Mar 15 19:44:33 2014 us=60086 management_user_pass = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60101 management_log_history_cache = 250
Sat Mar 15 19:44:33 2014 us=60116 management_echo_buffer_size = 100
Sat Mar 15 19:44:33 2014 us=60131 management_write_peer_info_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60146 management_client_user = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60161 management_client_group = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60176 management_flags = 0
Sat Mar 15 19:44:33 2014 us=60191 shared_secret_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60211 key_direction = 0
Sat Mar 15 19:44:33 2014 us=60228 ciphername_defined = ENABLED
Sat Mar 15 19:44:33 2014 us=60243 ciphername = 'BF-CBC'
Sat Mar 15 19:44:33 2014 us=60258 authname_defined = ENABLED
Sat Mar 15 19:44:33 2014 us=60273 authname = 'SHA1'
Sat Mar 15 19:44:33 2014 us=60289 prng_hash = 'SHA1'
Sat Mar 15 19:44:33 2014 us=60304 prng_nonce_secret_len = 16
Sat Mar 15 19:44:33 2014 us=60319 keysize = 0
Sat Mar 15 19:44:33 2014 us=60334 engine = DISABLED
Sat Mar 15 19:44:33 2014 us=60349 replay = ENABLED
Sat Mar 15 19:44:33 2014 us=60364 mute_replay_warnings = DISABLED
Sat Mar 15 19:44:33 2014 us=60379 replay_window = 64
Sat Mar 15 19:44:33 2014 us=60394 replay_time = 15
Sat Mar 15 19:44:33 2014 us=60409 packet_id_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60424 use_iv = ENABLED
Sat Mar 15 19:44:33 2014 us=60439 test_crypto = DISABLED
Sat Mar 15 19:44:33 2014 us=60454 tls_server = ENABLED
Sat Mar 15 19:44:33 2014 us=60469 tls_client = DISABLED
Sat Mar 15 19:44:33 2014 us=60484 key_method = 2
Sat Mar 15 19:44:33 2014 us=60499 ca_file = 'ca.crt'
Sat Mar 15 19:44:33 2014 us=60514 ca_path = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60529 dh_file = 'dh1024.pem'
Sat Mar 15 19:44:33 2014 us=60551 cert_file = 'server.crt'
Sat Mar 15 19:44:33 2014 us=60566 priv_key_file = 'server.key'
Sat Mar 15 19:44:33 2014 us=60581 pkcs12_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60596 cipher_list = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60611 tls_verify = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60626 tls_export_cert = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60641 tls_remote = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60656 crl_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60671 ns_cert_type = 0
Sat Mar 15 19:44:33 2014 us=60686 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60701 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60716 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60731 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60746 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60761 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60775 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60790 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60805 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60820 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60835 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60850 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60871 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60885 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60900 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60915 remote_cert_ku[i] = 0
Sat Mar 15 19:44:33 2014 us=60930 remote_cert_eku = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=60945 tls_timeout = 2
Sat Mar 15 19:44:33 2014 us=60960 renegotiate_bytes = 0
Sat Mar 15 19:44:33 2014 us=60975 renegotiate_packets = 0
Sat Mar 15 19:44:33 2014 us=60990 renegotiate_seconds = 3600
Sat Mar 15 19:44:33 2014 us=61005 handshake_window = 60
Sat Mar 15 19:44:33 2014 us=61019 transition_window = 3600
Sat Mar 15 19:44:33 2014 us=61039 single_session = DISABLED
Sat Mar 15 19:44:33 2014 us=61062 push_peer_info = DISABLED
Sat Mar 15 19:44:33 2014 us=61077 tls_exit = DISABLED
Sat Mar 15 19:44:33 2014 us=61092 tls_auth_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=61107 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61122 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61137 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61152 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61167 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61182 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61197 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61218 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61234 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61249 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61264 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61279 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61294 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61309 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61324 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61339 pkcs11_protected_authentication = DISABLED
Sat Mar 15 19:44:33 2014 us=61354 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61369 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61384 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61400 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61415 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61430 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61445 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61460 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61475 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61490 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61512 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61527 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61542 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61557 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61572 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61588 pkcs11_private_mode = 00000000
Sat Mar 15 19:44:33 2014 us=61602 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61617 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61632 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61647 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61662 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61677 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61692 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61707 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61724 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61739 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61754 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61769 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61784 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61799 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61814 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61829 pkcs11_cert_private = DISABLED
Sat Mar 15 19:44:33 2014 us=61844 pkcs11_pin_cache_period = -1
Sat Mar 15 19:44:33 2014 us=61859 pkcs11_id = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=61874 pkcs11_id_management = DISABLED
Sat Mar 15 19:44:33 2014 us=61894 server_network = 10.8.0.0
Sat Mar 15 19:44:33 2014 us=61911 server_netmask = 255.255.255.0
Sat Mar 15 19:44:33 2014 us=61934 server_network_ipv6 = ::
Sat Mar 15 19:44:33 2014 us=61950 server_netbits_ipv6 = 0
Sat Mar 15 19:44:33 2014 us=61966 server_bridge_ip = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=61982 server_bridge_netmask = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=61998 server_bridge_pool_start = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=62015 server_bridge_pool_end = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=62030 push_entry = 'redirect-gateway def1 bypass-dhcp'
Sat Mar 15 19:44:33 2014 us=62045 push_entry = 'dhcp-option DNS 8.8.8.8'
Sat Mar 15 19:44:33 2014 us=62060 push_entry = 'explicit-exit-notify 3'
Sat Mar 15 19:44:33 2014 us=62075 push_entry = 'route 10.8.0.1'
Sat Mar 15 19:44:33 2014 us=62090 push_entry = 'topology net30'
Sat Mar 15 19:44:33 2014 us=62105 push_entry = 'ping 10'
Sat Mar 15 19:44:33 2014 us=62120 push_entry = 'ping-restart 120'
Sat Mar 15 19:44:33 2014 us=62135 ifconfig_pool_defined = ENABLED
Sat Mar 15 19:44:33 2014 us=62151 ifconfig_pool_start = 10.8.0.4
Sat Mar 15 19:44:33 2014 us=62167 ifconfig_pool_end = 10.8.0.251
Sat Mar 15 19:44:33 2014 us=62183 ifconfig_pool_netmask = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=62198 ifconfig_pool_persist_filename = 'ipp.txt'
Sat Mar 15 19:44:33 2014 us=62220 ifconfig_pool_persist_refresh_freq = 600
Sat Mar 15 19:44:33 2014 us=62235 ifconfig_ipv6_pool_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=62251 ifconfig_ipv6_pool_base = ::
Sat Mar 15 19:44:33 2014 us=62266 ifconfig_ipv6_pool_netbits = 0
Sat Mar 15 19:44:33 2014 us=62282 n_bcast_buf = 256
Sat Mar 15 19:44:33 2014 us=62296 tcp_queue_limit = 64
Sat Mar 15 19:44:33 2014 us=62311 real_hash_size = 256
Sat Mar 15 19:44:33 2014 us=62326 virtual_hash_size = 256
Sat Mar 15 19:44:33 2014 us=62341 client_connect_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62356 learn_address_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62371 client_disconnect_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62386 client_config_dir = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62401 ccd_exclusive = DISABLED
Sat Mar 15 19:44:33 2014 us=62416 tmp_dir = '/tmp'
Sat Mar 15 19:44:33 2014 us=62431 push_ifconfig_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=62453 push_ifconfig_local = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=62469 push_ifconfig_remote_netmask = 0.0.0.0
Sat Mar 15 19:44:33 2014 us=62503 push_ifconfig_ipv6_defined = DISABLED
Sat Mar 15 19:44:33 2014 us=62520 push_ifconfig_ipv6_local = ::/0
Sat Mar 15 19:44:33 2014 us=62536 push_ifconfig_ipv6_remote = ::
Sat Mar 15 19:44:33 2014 us=62551 enable_c2c = DISABLED
Sat Mar 15 19:44:33 2014 us=62566 duplicate_cn = DISABLED
Sat Mar 15 19:44:33 2014 us=62581 cf_max = 0
Sat Mar 15 19:44:33 2014 us=62596 cf_per = 0
Sat Mar 15 19:44:33 2014 us=62645 max_clients = 1024
Sat Mar 15 19:44:33 2014 us=62661 max_routes_per_client = 256
Sat Mar 15 19:44:33 2014 us=62677 auth_user_pass_verify_script = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62692 auth_user_pass_verify_script_via_file = DISABLED
Sat Mar 15 19:44:33 2014 us=62708 ssl_flags = 0
Sat Mar 15 19:44:33 2014 us=62724 port_share_host = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62743 port_share_port = 0
Sat Mar 15 19:44:33 2014 us=62759 client = DISABLED
Sat Mar 15 19:44:33 2014 us=62774 pull = DISABLED
Sat Mar 15 19:44:33 2014 us=62789 auth_user_pass_file = '[UNDEF]'
Sat Mar 15 19:44:33 2014 us=62806 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Sat Mar 15 19:44:33 2014 us=63612 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Mar 15 19:44:33 2014 us=68591 Diffie-Hellman initialized with 1024 bit key
Sat Mar 15 19:44:33 2014 us=68878 WARNING: file 'server.key' is group or others accessible
Sat Mar 15 19:44:33 2014 us=69422 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 15 19:44:33 2014 us=69463 Socket Buffers: R=[245760->131072] S=[245760->131072]
Sat Mar 15 19:44:33 2014 us=69586 ROUTE: default_gateway=UNDEF
Sat Mar 15 19:44:33 2014 us=71749 TUN/TAP device tun0 opened
Sat Mar 15 19:44:33 2014 us=71795 TUN/TAP TX queue length set to 100
Sat Mar 15 19:44:33 2014 us=71823 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Mar 15 19:44:33 2014 us=71860 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sat Mar 15 19:44:33 2014 us=76473 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sat Mar 15 19:44:33 2014 us=77663 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Mar 15 19:44:33 2014 us=78540 UDPv4 link local (bound): [undef]
Sat Mar 15 19:44:33 2014 us=78607 UDPv4 link remote: [undef]
Sat Mar 15 19:44:33 2014 us=78631 MULTI: multi_init called, r=256 v=256
Sat Mar 15 19:44:33 2014 us=78707 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Mar 15 19:44:33 2014 us=78733 ifconfig_pool_read(), in='$USERNAME$,10.8.0.4', TODO: IPv6
Sat Mar 15 19:44:33 2014 us=78759 succeeded -> ifconfig_pool_set()
Sat Mar 15 19:44:33 2014 us=78776 IFCONFIG POOL LIST
Sat Mar 15 19:44:33 2014 us=78796 $USERNAME$,10.8.0.4
Sat Mar 15 19:44:33 2014 us=78837 Initialization Sequence Completed
Sat Mar 15 19:45:05 2014 us=534038 MULTI: multi_create_instance called
Sat Mar 15 19:45:05 2014 us=534156 $USERHOST$:54182 Re-using SSL/TLS context
Sat Mar 15 19:45:05 2014 us=534199 $USERHOST$:54182 LZO compression initialized
Sat Mar 15 19:45:05 2014 us=534425 $USERHOST$:54182 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 15 19:45:05 2014 us=534449 $USERHOST$:54182 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Mar 15 19:45:05 2014 us=534500 $USERHOST$:54182 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Mar 15 19:45:05 2014 us=534517 $USERHOST$:54182 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Mar 15 19:45:05 2014 us=534547 $USERHOST$:54182 Local Options hash (VER=V4): '530fdded'
Sat Mar 15 19:45:05 2014 us=534569 $USERHOST$:54182 Expected Remote Options hash (VER=V4): '41690919'
Sat Mar 15 19:45:05 2014 us=534623 $USERHOST$:54182 TLS: Initial packet from [AF_INET]$USERHOST$:54182, sid=437ead13 617e1654
Sat Mar 15 19:45:08 2014 us=18377 $USERHOST$:54182 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Sat Mar 15 19:45:08 2014 us=18622 $USERHOST$:54182 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=$USERNAME$/name=changeme/emailAddress=mail@host.domain
Sat Mar 15 19:45:11 2014 us=97764 $USERHOST$:54182 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 15 19:45:11 2014 us=97812 $USERHOST$:54182 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 15 19:45:11 2014 us=97874 $USERHOST$:54182 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 15 19:45:11 2014 us=97893 $USERHOST$:54182 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 15 19:45:11 2014 us=376667 $USERHOST$:54182 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Mar 15 19:45:11 2014 us=376780 $USERHOST$:54182 [$USERNAME$] Peer Connection Initiated with [AF_INET]$USERHOST$:54182
Sat Mar 15 19:45:11 2014 us=376828 $USERNAME$/$USERHOST$:54182 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=140a:77b7:205b:a0b8::205b:a0b8
Sat Mar 15 19:45:11 2014 us=376884 $USERNAME$/$USERHOST$:54182 MULTI: Learn: 10.8.0.6 -> $USERNAME$/$USERHOST$:54182
Sat Mar 15 19:45:11 2014 us=376903 $USERNAME$/$USERHOST$:54182 MULTI: primary virtual IP for $USERNAME$/$USERHOST$:54182: 10.8.0.6
Sat Mar 15 19:45:13 2014 us=823886 $USERNAME$/$USERHOST$:54182 PUSH: Received control message: 'PUSH_REQUEST'
Sat Mar 15 19:45:13 2014 us=823957 $USERNAME$/$USERHOST$:54182 send_push_reply(): safe_cap=960
Sat Mar 15 19:45:13 2014 us=824058 $USERNAME$/$USERHOST$:54182 SENT CONTROL [$USERNAME$]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sat Mar 15 19:47:37 2014 us=154706 $USERNAME$/$USERHOST$:54182 SIGTERM[soft,remote-exit] received, client-instance exiting
Client
Sat Mar 15 19:45:02 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sat Mar 15 19:45:02 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Mar 15 19:45:02 2014 Need hold release from management interface, waiting...
Sat Mar 15 19:45:03 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Mar 15 19:45:03 2014 MANAGEMENT: CMD 'state on'
Sat Mar 15 19:45:03 2014 MANAGEMENT: CMD 'log all on'
Sat Mar 15 19:45:03 2014 MANAGEMENT: CMD 'hold off'
Sat Mar 15 19:45:03 2014 MANAGEMENT: CMD 'hold release'
Sat Mar 15 19:45:03 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Mar 15 19:45:03 2014 UDPv4 link local: [undef]
Sat Mar 15 19:45:03 2014 UDPv4 link remote: [AF_INET]$VPNSERVERADDRESS$:212
Sat Mar 15 19:45:03 2014 MANAGEMENT: >STATE:1394898303,WAIT,,,
Sat Mar 15 19:45:03 2014 MANAGEMENT: >STATE:1394898303,AUTH,,,
Sat Mar 15 19:45:03 2014 TLS: Initial packet from [AF_INET]$VPNSERVERADDRESS$:212, sid=688cc795 b78b82c7
Sat Mar 15 19:45:04 2014 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Sat Mar 15 19:45:04 2014 VERIFY OK: nsCertType=SERVER
Sat Mar 15 19:45:04 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Sat Mar 15 19:45:09 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 15 19:45:09 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 15 19:45:09 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 15 19:45:09 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 15 19:45:09 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Mar 15 19:45:09 2014 [changeme] Peer Connection Initiated with [AF_INET]$VPNSERVERADDRESS$:212
Sat Mar 15 19:45:10 2014 MANAGEMENT: >STATE:1394898310,GET_CONFIG,,,
Sat Mar 15 19:45:11 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Sat Mar 15 19:45:11 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat Mar 15 19:45:11 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 15 19:45:11 2014 OPTIONS IMPORT: explicit notify parm(s) modified
Sat Mar 15 19:45:11 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 15 19:45:11 2014 OPTIONS IMPORT: route options modified
Sat Mar 15 19:45:11 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 15 19:45:11 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Mar 15 19:45:11 2014 MANAGEMENT: >STATE:1394898311,ASSIGN_IP,,10.8.0.6,
Sat Mar 15 19:45:11 2014 open_tun, tt->ipv6=0
Sat Mar 15 19:45:11 2014 TAP-WIN32 device [Подключение по локальной сети 4] opened: \\.\Global\{EBB949F1-6E38-4E4F-9427-76F7064C6C55}.tap
Sat Mar 15 19:45:11 2014 TAP-Windows Driver Version 9.9
Sat Mar 15 19:45:11 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {EBB949F1-6E38-4E4F-9427-76F7064C6C55} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Mar 15 19:45:11 2014 Successful ARP Flush on interface [43] {EBB949F1-6E38-4E4F-9427-76F7064C6C55}
Sat Mar 15 19:45:16 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sat Mar 15 19:45:16 2014 C:\Windows\system32\route.exe ADD $VPNSERVERADDRESS$ MASK 255.255.255.255 192.168.1.1
Sat Mar 15 19:45:16 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Sat Mar 15 19:45:16 2014 Route addition via IPAPI succeeded [adaptive]
Sat Mar 15 19:45:16 2014 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 14
Sat Mar 15 19:45:16 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Sat Mar 15 19:45:16 2014 Route addition via IPAPI succeeded [adaptive]
Sat Mar 15 19:45:16 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Mar 15 19:45:16 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Mar 15 19:45:16 2014 Route addition via IPAPI succeeded [adaptive]
Sat Mar 15 19:45:16 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Mar 15 19:45:16 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Mar 15 19:45:16 2014 Route addition via IPAPI succeeded [adaptive]
Sat Mar 15 19:45:16 2014 MANAGEMENT: >STATE:1394898316,ADD_ROUTES,,,
Sat Mar 15 19:45:16 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat Mar 15 19:45:16 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Mar 15 19:45:16 2014 Route addition via IPAPI succeeded [adaptive]
Sat Mar 15 19:45:16 2014 Initialization Sequence Completed
Sat Mar 15 19:45:16 2014 MANAGEMENT: >STATE:1394898316,CONNECTED,SUCCESS,10.8.0.6,$VPNSERVERADDRESS$
Sat Mar 15 19:47:34 2014 SIGTERM received, sending exit notification to peer
Sat Mar 15 19:47:37 2014 C:\Windows\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat Mar 15 19:47:37 2014 Route deletion via IPAPI succeeded [adaptive]
Sat Mar 15 19:47:37 2014 C:\Windows\system32\route.exe DELETE $VPNSERVERADDRESS$ MASK 255.255.255.255 192.168.1.1
Sat Mar 15 19:47:37 2014 Route deletion via IPAPI succeeded [adaptive]
Sat Mar 15 19:47:37 2014 C:\Windows\system32\route.exe DELETE 192.168.1.1 MASK 255.255.255.255 192.168.1.1
Sat Mar 15 19:47:37 2014 Route deletion via IPAPI succeeded [adaptive]
Sat Mar 15 19:47:37 2014 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Mar 15 19:47:37 2014 Route deletion via IPAPI succeeded [adaptive]
Sat Mar 15 19:47:37 2014 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Mar 15 19:47:37 2014 Route deletion via IPAPI succeeded [adaptive]
Sat Mar 15 19:47:37 2014 Closing TUN/TAP interface
Sat Mar 15 19:47:37 2014 SIGTERM[soft,exit-with-notification] received, process exiting
Sat Mar 15 19:47:37 2014 MANAGEMENT: >STATE:1394898457,EXITING,exit-with-notification,,