ERROR: received strange incoming packet with an address ....

kozi

Hi everbody!

I have OpenVPN server 2.3.2 running on Windows 7 64-bit.
For a several weeks everything was ok, I was able to connect from
other Windows clients, but some day I got following error:
"ERROR: received strange incoming packet with an address length of 2 -- we only accept address lengths of 0."
And now it repaets every time when I try to connect.
Can you help me?

see below my client log file:

Sun Mar 16 11:18:12 2014 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sun Mar 16 11:18:12 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Mar 16 11:18:12 2014 Need hold release from management interface, waiting...
Sun Mar 16 11:18:12 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Mar 16 11:18:12 2014 MANAGEMENT: CMD 'state on'
Sun Mar 16 11:18:12 2014 MANAGEMENT: CMD 'log all on'
Sun Mar 16 11:18:12 2014 MANAGEMENT: CMD 'hold off'
Sun Mar 16 11:18:12 2014 MANAGEMENT: CMD 'hold release'
Sun Mar 16 11:18:12 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Sun Mar 16 11:18:12 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 16 11:18:12 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 16 11:18:12 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Mar 16 11:18:12 2014 MANAGEMENT: >STATE:1394965092,RESOLVE,,,
Sun Mar 16 11:18:13 2014 UDPv4 link local (bound): [undef]
Sun Mar 16 11:18:13 2014 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Sun Mar 16 11:18:13 2014 MANAGEMENT: >STATE:1394965093,WAIT,,,
Sun Mar 16 11:18:13 2014 MANAGEMENT: >STATE:1394965093,AUTH,,,
Sun Mar 16 11:18:13 2014 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1194, sid=540ce1bb 65811083
Sun Mar 16 11:18:13 2014 VERIFY OK: depth=1, C=x, ST=x, L=x, O=x, OU=x, CN=x, name=x, emailAddress=x
Sun Mar 16 11:18:13 2014 VERIFY OK: nsCertType=SERVER
Sun Mar 16 11:18:13 2014 VERIFY OK: depth=0, C=x, ST=x, L=x, O=x, OU=x, CN=x, name=x, emailAddress=x
Sun Mar 16 11:18:13 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Mar 16 11:18:13 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 16 11:18:13 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Mar 16 11:18:13 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 16 11:18:13 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Mar 16 11:18:13 2014 [IMPROVIA] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
Sun Mar 16 11:18:14 2014 MANAGEMENT: >STATE:1394965094,GET_CONFIG,,,
Sun Mar 16 11:18:15 2014 SENT CONTROL [IMPROVIA]: 'PUSH_REQUEST' (status=1)
Sun Mar 16 11:18:15 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route-gateway 192.168.1.8,ping 10,ping-restart 120,ifconfig 192.168.1.128 255.255.255.0'
Sun Mar 16 11:18:15 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sun Mar 16 11:18:15 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sun Mar 16 11:18:15 2014 OPTIONS IMPORT: route options modified
Sun Mar 16 11:18:15 2014 OPTIONS IMPORT: route-related options modified
Sun Mar 16 11:18:15 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Mar 16 11:18:15 2014 MANAGEMENT: >STATE:1394965095,ASSIGN_IP,,192.168.1.128,
Sun Mar 16 11:18:15 2014 open_tun, tt->ipv6=0
Sun Mar 16 11:18:15 2014 TAP-WIN32 device [openVPN] opened: \\.\Global\{665DD318-E4B7-4316-8324-C0C004059B88}.tap
Sun Mar 16 11:18:15 2014 TAP-Windows Driver Version 9.9
Sun Mar 16 11:18:15 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.128/255.255.255.0 on interface {665DD318-E4B7-4316-8324-C0C004059B88} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Sun Mar 16 11:18:15 2014 Successful ARP Flush on interface [24] {665DD318-E4B7-4316-8324-C0C004059B88}
Sun Mar 16 11:18:17 2014 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sun Mar 16 11:18:17 2014 MANAGEMENT: >STATE:1394965097,ADD_ROUTES,,,
Sun Mar 16 11:18:17 2014 C:\windows\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 192.168.1.8
Sun Mar 16 11:18:17 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sun Mar 16 11:18:17 2014 Initialization Sequence Completed
Sun Mar 16 11:18:17 2014 MANAGEMENT: >STATE:1394965097,CONNECTED,SUCCESS,192.168.1.128,77.253.142.147
Sun Mar 16 11:18:46 2014 MANAGEMENT: Client disconnected
Sun Mar 16 11:18:46 2014 ERROR: received strange incoming packet with an address length of 2 -- we only accept address lengths of 0.
Sun Mar 16 11:18:46 2014 Exiting due to fatal error
Sun Mar 16 11:18:46 2014 C:\windows\system32\route.exe DELETE 192.168.1.0 MASK 255.255.255.0 192.168.1.8
Sun Mar 16 11:18:46 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sun Mar 16 11:18:46 2014 Closing TUN/TAP interface

kozi

SOLVED!!!

The reason was Windows Firewall on cilent.
Enough to disable firewall on TAP adapter and it works fine again.

kozi

Client is running Windows 7 Proffesional SP1.

I said SOLVED before , but it is not 🙁
I tried to connect from the same client computer to the other OpenVPN server and I have the same error as before.

hm.. what's going on

kozi

Hi,

server log:
Thu Mar 20 18:39:44 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Mar 20 18:39:44 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Mar 20 18:39:44 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Mar 20 18:39:44 2014 Diffie-Hellman initialized with 1024 bit key
Thu Mar 20 18:39:44 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu Mar 20 18:39:44 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 18:39:44 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 18:39:44 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 20 18:39:44 2014 open_tun, tt->ipv6=0
Thu Mar 20 18:39:44 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{2A89C570-298E-4AB2-A447-CA7584C4E111}.tap
Thu Mar 20 18:39:44 2014 TAP-Windows Driver Version 9.9
Thu Mar 20 18:39:44 2014 Sleeping for 10 seconds...
Thu Mar 20 18:39:54 2014 NOTE: FlushIpNetTable failed on interface [21] {2A89C570-298E-4AB2-A447-CA7584C4E111} (status=1168) : Element not found.
Thu Mar 20 18:39:54 2014 UDPv4 link local (bound): [undef]
Thu Mar 20 18:39:54 2014 UDPv4 link remote: [undef]
Thu Mar 20 18:39:54 2014 MULTI: multi_init called, r=256 v=256
Thu Mar 20 18:39:54 2014 IFCONFIG POOL: base=192.168.1.128 size=126, ipv6=0
Thu Mar 20 18:39:54 2014 Initialization Sequence Completed
Thu Mar 20 18:39:54 2014 xxx.xxx.xxx.xxx:1194 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1194, sid=434bea28 194c41ec
Thu Mar 20 18:39:54 2014 xxx.xxx.xxx.xxx:1194 VERIFY OK: depth=1, C=zz, ST=zzz, L=zzzz, O=zzzzz, OU=zzzz, CN=zzzz, name=zzzzzz, emailAddress=zzzzzzzz
Thu Mar 20 18:39:54 2014 xxx.xxx.xxx.xxx:1194 VERIFY OK: depth=0, C=zz, ST=zzzz, L=zzzz, O=zzzzz, OU=zzzz, CN=zzz, name=zzzzz, emailAddress=zzzzzzzz
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Mar 20 18:39:55 2014 xxx.xxx.xxx.xxx:1194 [yyy] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Mar 20 18:39:55 2014 yyy/xxx.xxx.xxx.xxx:1194 MULTI_sva: pool returned IPv4=192.168.1.128, IPv6=(Not enabled)
Thu Mar 20 18:39:57 2014 yyy/xxx.xxx.xxx.xxx:1194 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 20 18:39:57 2014 yyy/xxx.xxx.xxx.xxx:1194 send_push_reply(): safe_cap=940
Thu Mar 20 18:39:57 2014 yyy/xxx.xxx.xxx.xxx:1194 SENT CONTROL [yyy]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route-gateway 192.168.1.8,ping 10,ping-restart 120,ifconfig 192.168.1.128 255.255.255.0' (status=1)
Thu Mar 20 18:39:57 2014 yyy/xxx.xxx.xxx.xxx:1194 MULTI: Learn: 00:ff:66:5d:d3:18 -> yyy/xxx.xxx.xxx.xxx:1194

client config:
client
dev tap
proto udp
remote xxxx.xxxxx.xxxx 1194
resolv-retry infinite
;nobind
persist-key
persist-tun
ca ca.crt
cert xxxxx.crt
key xxxx.key
ns-cert-type server
tls-auth ta.key 1
cipher BF-CBC
comp-lzo
verb 3
;mute 20
route-method exe
mssfix 1500
route-delay 2

server config:
port 1194
proto udp
dev tap
ca ca.crt
cert xxxxx.crt
key xxxxx.key # This file should be kept secret
dh dh1024.pem
server-bridge 192.168.1.8 255.255.255.0 192.168.1.128 192.168.1.253
push "route 192.168.1.0 255.255.255.0"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth ta.key 0
cipher BF-CBC
comp-lzo
max-clients 100
persist-key
persist-tun
status openvpn-status.log
verb 3
script-security 2

kozi

Hi, see below

Windows IP Configuration

Host Name . . . . . . . . . . . . : xxxx
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Network Bridge:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : MAC Bridge Miniport
Physical Address. . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : xxxx::xxxxx:xxxx:xxxx:xxxxx%20(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.8(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 503512899
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-1E-EC-CD-00-23-7D-46-5D-EC
DNS Servers . . . . . . . . . . . : 192.168.1.254
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TeamViewer VPN Adapter
Physical Address. . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{AF4DC8A1-8330-4475-AEE4-D85869A0409A}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : xxxx:0:xxxx:xxxx:xxxxx:xxx:xxxxx:xxxx(Preferred)
Link-local IPv6 Address . . . . . : fe80::10ba:ff1:3f57:fef7%15(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{4603B2BF-61C8-46B9-8E28-77F6A44F938D}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

kozi

thx, i have changed it, but stiil the same:
when i connect it works for about 1 minute then it dissconects itself.

before it disconnected i manged to do ipconfig /all on client:

Karta Ethernet openVPN:

Sufiks DNS konkretnego połączenia :
Opis. . . . . . . . . . . . . . . : TAP-Windows Adapter V9
Adres fizyczny. . . . . . . . . . : xx-xx-xx-xx-xx-xx
DHCP włączone . . . . . . . . . . : Tak
Autokonfiguracja włączona . . . . : Tak
Adres IPv4. . . . . . . . . . . . . : 192.168.1.128(Preferowane)
Maska podsieci. . . . . . . . . . : 255.255.255.0
Dzierżawa uzyskana. . . . . . . . : 21 marca 2014 16:50:29
Dzierżawa wygasa. . . . . . . . . : 21 marca 2015 16:50:29
Brama domyślna. . . . . . . . . . :
Serwer DHCP . . . . . . . . . . . : 192.168.1.0
NetBIOS przez Tcpip . . . . . . . : Włączony

kozi

removed, nothing changed

kozi

ok, anyway thanks for your help