OpenVPN on DD-WRT router can connect, no LAN/internet

whighfill

I am running DD-WRT on an Asus RT-N66U router.
Firmware version: DD-WRT v24-sp2 (03/13/14) mega - build 23720
I am trying to setup the DD-WRT to run as an OpenVPN server with all client internet traffic routed through the VPN. I used the web GUI on DD-WRT to setup the OpenVPN server.

The OpenVPN client I am testing with is an android phone connected only to 4G (wireless disabled) running OpenVPN for Android.

LAN behind the router is 192.168.40.0 series.

Prior to getting DD-WRT on my router, I was running OpenVPN server on a Win7 machine behind the router, and everything was working fine (port 1194 forwarded, firewall on Win7 was setup right, etc). Once I got DD-WRT on the router, I shutdown the OpenVPN server on the Win7 machine.

With OpenVPN server setup on the DD-WRT router, the client can connect. The client CAN ping
- VPN (10.8.0.1)
- router WAN IP.

The client CANNOT ping
- LAN behind the router (192.168.40.2 is a client on the LAN that cannot be pinged)
- google.com
- 8.8.8.8

The settings you see in the server config file below are generally what I had when I was running OpenVPN server on the Win7 machine. One difference I notice is the following:
successful Win7 server used:
push "redirect-gateway def1 bypass-dhcp"

DD-WRT server has:
push "redirect-gateway def1"

I don't know where to change this in the DD-WRT web GUI, or if it even matters (I still can't ping the LAN behind the router).

Any help would be appreciated. OK, here are the config, log files, and at the end is the output from running ifconfig on the client.
--------------
Server config: (NOTE that I got this from the DD-WRT Status Log, and it spits the config out in one paragraph. I tried to break it up into what one would expect for your ease of reading, but I'm a noob and probably didn't do it right in a couple spots)

dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet script-security 2
port 1194
proto udp
cipher bf-cbc
auth sha1
client-config-dir /tmp/openvpn/ccd
comp-lzo yes
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
push "redirect-gateway def1"
fast-io
tun-mtu 1300
mtu-disc yes
server 10.8.0.0 255.255.255.0
dev tun2 tun-ipv6
tls-auth /tmp/openvpn/ta.key 0
push "route 192.168.40.0 255.255.255.0"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
Clientlog

-----------------
Client config: (I stripped the certificate data out)

management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
setenv IV_GUI_VER "de.blinkt.openvpn 0.6.11"
machine-readable-output
client
verb 4
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote {deleted}.dnsdynamic.com 1194 udp
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</ca>
<key>
-----BEGIN RSA PRIVATE KEY-----

-----END RSA PRIVATE KEY-----

</key>
<cert>

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</cert>
comp-lzo
<tls-auth>
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----

</tls-auth>
key-direction 1
nobind
persist-tun
preresolve
management-query-proxy
ns-cert-type server
resolv-retry infinite

------------------
Server Log:

20140330 08:09:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:09:13 D MANAGEMENT: CMD 'state'
20140330 08:09:13 MANAGEMENT: Client disconnected
20140330 08:09:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:09:13 D MANAGEMENT: CMD 'state'
20140330 08:09:13 MANAGEMENT: Client disconnected
20140330 08:09:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:09:13 D MANAGEMENT: CMD 'state'
20140330 08:09:13 MANAGEMENT: Client disconnected
20140330 08:09:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:09:13 D MANAGEMENT: CMD 'status 2'
20140330 08:09:13 MANAGEMENT: Client disconnected
20140330 08:09:13 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:09:13 D MANAGEMENT: CMD 'log 500'
20140330 08:09:13 MANAGEMENT: Client disconnected
20140330 08:09:16 W 70.210.128.165:1384 WARNING: normally if you use --mssfix and/or --fragment you should also set --tun-mtu 1500 (currently it is 1300)
20140330 08:09:16 70.210.128.165:1384 TLS: Initial packet from [AF_INET]70.210.128.165:1384 sid=8dd67aca 0a6dd6c3
20140330 08:09:18 70.210.128.165:1384 VERIFY OK: depth=1 C=US ST={deleted} L={deleted} O={deleted} CN={deleted} name={deleted} emailAddress={deleted}
20140330 08:09:18 70.210.128.165:1384 VERIFY OK: depth=0 C=US ST={deleted} L={deleted} O={deleted} OU=changeme CN={deleted} name={deleted} emailAddress={deleted}
20140330 08:09:19 W 70.210.128.165:1384 WARNING: 'link-mtu' is used inconsistently local='link-mtu 1342' remote='link-mtu 1542'
20140330 08:09:19 W 70.210.128.165:1384 WARNING: 'tun-mtu' is used inconsistently local='tun-mtu 1300' remote='tun-mtu 1500'
20140330 08:09:19 70.210.128.165:1384 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140330 08:09:19 70.210.128.165:1384 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
20140330 08:09:19 70.210.128.165:1384 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140330 08:09:19 70.210.128.165:1384 NOTE: --mute triggered...
20140330 08:09:19 70.210.128.165:1384 2 variation(s) on previous 3 message(s) suppressed by --mute
20140330 08:09:19 I 70.210.128.165:1384 [client] Peer Connection Initiated with [AF_INET]70.210.128.165:1384
20140330 08:09:19 I client/70.210.128.165:1384 MULTI_sva: pool returned IPv4=10.8.0.2 IPv6=(Not enabled)
20140330 08:09:19 client/70.210.128.165:1384 MULTI: Learn: 10.8.0.2 -> client/70.210.128.165:1384
20140330 08:09:19 client/70.210.128.165:1384 MULTI: primary virtual IP for client/70.210.128.165:1384: 10.8.0.2
20140330 08:09:21 client/70.210.128.165:1384 PUSH: Received control message: 'PUSH_REQUEST'
20140330 08:09:21 I client/70.210.128.165:1384 send_push_reply(): safe_cap=940
20140330 08:09:21 client/70.210.128.165:1384 SENT CONTROL [client]: 'PUSH_REPLY redirect-gateway def1 route 192.168.40.0 255.255.255.0 dhcp-option DNS 208.67.222.222 dhcp-option DNS 208.67.220.220 route-gateway 10.8.0.1 topology subnet ping 10 ping-restart 120 ifconfig 10.8.0.2 255.255.255.0' (status=1)
20140330 08:12:34 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:12:35 D MANAGEMENT: CMD 'state'
20140330 08:12:35 MANAGEMENT: Client disconnected
20140330 08:12:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:12:35 D MANAGEMENT: CMD 'state'
20140330 08:12:35 MANAGEMENT: Client disconnected
20140330 08:12:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:12:35 D MANAGEMENT: CMD 'state'
20140330 08:12:35 MANAGEMENT: Client disconnected
20140330 08:12:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:12:35 D MANAGEMENT: CMD 'status 2'
20140330 08:12:35 MANAGEMENT: Client disconnected
20140330 08:12:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140330 08:12:35 D MANAGEMENT: CMD 'log 500'

-------------------
Client log:

2014-03-30 08:08:11 Running on DROID4 (maserati) motorola, Android API 16, version 0.6.11, official build
2014-03-30 08:08:11 Log cleared.
2014-03-30 08:08:38 Building configuration???
2014-03-30 08:08:45 started Socket Thread
2014-03-30 08:08:51 P:Initializing Google Breakpad!
2014-03-30 08:09:20 Current Parameter Settings:
2014-03-30 08:09:21 config = '/data/data/de.blinkt.openvpn/cache/android.conf'
2014-03-30 08:09:21 mode = 0
2014-03-30 08:09:21 show_ciphers = DISABLED
2014-03-30 08:09:21 show_digests = DISABLED
2014-03-30 08:09:21 show_engines = DISABLED
2014-03-30 08:09:21 genkey = DISABLED
2014-03-30 08:09:21 key_pass_file = '[UNDEF]'
2014-03-30 08:09:21 show_tls_ciphers = DISABLED
2014-03-30 08:09:21 connect_retry_max = 5
2014-03-30 08:09:21 Connection profiles [0]:
2014-03-30 08:09:21 proto = udp
2014-03-30 08:09:21 local = '[UNDEF]'
2014-03-30 08:09:21 local_port = '[UNDEF]'
2014-03-30 08:09:21 remote = '{deleted}.dnsdynamic.com'
2014-03-30 08:09:21 remote_port = '1194'
2014-03-30 08:09:21 remote_float = DISABLED
2014-03-30 08:09:21 bind_defined = DISABLED
2014-03-30 08:09:21 bind_local = DISABLED
2014-03-30 08:09:21 bind_ipv6_only = DISABLED
2014-03-30 08:09:21 connect_retry_seconds = 5
2014-03-30 08:09:21 connect_timeout = 10
2014-03-30 08:09:21 socks_proxy_server = '[UNDEF]'
2014-03-30 08:09:21 socks_proxy_port = '[UNDEF]'
2014-03-30 08:09:21 socks_proxy_retry = DISABLED
2014-03-30 08:09:21 tun_mtu = 1500
2014-03-30 08:09:21 tun_mtu_defined = ENABLED
2014-03-30 08:09:21 link_mtu = 1500
2014-03-30 08:09:21 link_mtu_defined = DISABLED
2014-03-30 08:09:21 tun_mtu_extra = 0
2014-03-30 08:09:21 tun_mtu_extra_defined = DISABLED
2014-03-30 08:09:21 mtu_discover_type = -1
2014-03-30 08:09:21 fragment = 0
2014-03-30 08:09:21 mssfix = 1450
2014-03-30 08:09:21 explicit_exit_notification = 0
2014-03-30 08:09:21 Connection profiles END
2014-03-30 08:09:21 remote_random = DISABLED
2014-03-30 08:09:21 ipchange = '[UNDEF]'
2014-03-30 08:09:21 dev = 'tun'
2014-03-30 08:09:21 dev_type = '[UNDEF]'
2014-03-30 08:09:21 dev_node = '[UNDEF]'
2014-03-30 08:09:21 lladdr = '[UNDEF]'
2014-03-30 08:09:21 topology = 1
2014-03-30 08:09:21 tun_ipv6 = DISABLED
2014-03-30 08:09:21 ifconfig_local = '[UNDEF]'
2014-03-30 08:09:21 ifconfig_remote_netmask = '[UNDEF]'
2014-03-30 08:09:21 ifconfig_noexec = DISABLED
2014-03-30 08:09:21 ifconfig_nowarn = DISABLED
2014-03-30 08:09:21 ifconfig_ipv6_local = '[UNDEF]'
2014-03-30 08:09:21 ifconfig_ipv6_netbits = 0
2014-03-30 08:09:21 ifconfig_ipv6_remote = '[UNDEF]'
2014-03-30 08:09:21 shaper = 0
2014-03-30 08:09:21 mtu_test = 0
2014-03-30 08:09:21 mlock = DISABLED
2014-03-30 08:09:21 keepalive_ping = 0
2014-03-30 08:09:21 keepalive_timeout = 0
2014-03-30 08:09:21 inactivity_timeout = 0
2014-03-30 08:09:21 ping_send_timeout = 0
2014-03-30 08:09:21 ping_rec_timeout = 0
2014-03-30 08:09:21 ping_rec_timeout_action = 0
2014-03-30 08:09:21 ping_timer_remote = DISABLED
2014-03-30 08:09:21 remap_sigusr1 = 0
2014-03-30 08:09:21 persist_tun = ENABLED
2014-03-30 08:09:21 persist_local_ip = DISABLED
2014-03-30 08:09:21 persist_remote_ip = DISABLED
2014-03-30 08:09:21 persist_key = DISABLED
2014-03-30 08:09:21 passtos = DISABLED
2014-03-30 08:09:21 resolve_retry_seconds = 1000000000
2014-03-30 08:09:21 resolve_in_advance = ENABLED
2014-03-30 08:09:21 username = '[UNDEF]'
2014-03-30 08:09:21 groupname = '[UNDEF]'
2014-03-30 08:09:21 chroot_dir = '[UNDEF]'
2014-03-30 08:09:21 cd_dir = '[UNDEF]'
2014-03-30 08:09:21 writepid = '[UNDEF]'
2014-03-30 08:09:21 up_script = '[UNDEF]'
2014-03-30 08:09:21 down_script = '[UNDEF]'
2014-03-30 08:09:21 down_pre = DISABLED
2014-03-30 08:09:21 up_restart = DISABLED
2014-03-30 08:09:21 up_delay = DISABLED
2014-03-30 08:09:21 daemon = DISABLED
2014-03-30 08:09:21 inetd = 0
2014-03-30 08:09:21 log = DISABLED
2014-03-30 08:09:21 suppress_timestamps = DISABLED
2014-03-30 08:09:21 machine_readable_output = ENABLED
2014-03-30 08:09:21 nice = 0
2014-03-30 08:09:21 verbosity = 4
2014-03-30 08:09:21 mute = 0
2014-03-30 08:09:21 gremlin = 0
2014-03-30 08:09:21 status_file = '[UNDEF]'
2014-03-30 08:09:21 status_file_version = 1
2014-03-30 08:09:21 status_file_update_freq = 60
2014-03-30 08:09:21 occ = ENABLED
2014-03-30 08:09:21 rcvbuf = 65536
2014-03-30 08:09:21 sndbuf = 65536
2014-03-30 08:09:21 sockflags = 0
2014-03-30 08:09:21 fast_io = DISABLED
2014-03-30 08:09:21 comp.alg = 2
2014-03-30 08:09:21 comp.flags = 1
2014-03-30 08:09:21 route_script = '[UNDEF]'
2014-03-30 08:09:21 route_default_gateway = '[UNDEF]'
2014-03-30 08:09:21 route_default_metric = 0
2014-03-30 08:09:21 route_noexec = DISABLED
2014-03-30 08:09:21 route_delay = 0
2014-03-30 08:09:21 route_delay_window = 30
2014-03-30 08:09:21 route_delay_defined = DISABLED
2014-03-30 08:09:21 route_nopull = DISABLED
2014-03-30 08:09:21 route_gateway_via_dhcp = DISABLED
2014-03-30 08:09:21 allow_pull_fqdn = DISABLED
2014-03-30 08:09:21 management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'
2014-03-30 08:09:21 management_port = 'unix'
2014-03-30 08:09:21 management_user_pass = '[UNDEF]'
2014-03-30 08:09:21 management_log_history_cache = 250
2014-03-30 08:09:21 management_echo_buffer_size = 100
2014-03-30 08:09:21 management_write_peer_info_file = '[UNDEF]'
2014-03-30 08:09:21 management_client_user = '[UNDEF]'
2014-03-30 08:09:21 management_client_group = '[UNDEF]'
2014-03-30 08:09:21 management_flags = 4390
2014-03-30 08:09:21 shared_secret_file = '[UNDEF]'
2014-03-30 08:09:21 key_direction = 2
2014-03-30 08:09:21 ciphername_defined = ENABLED
2014-03-30 08:09:21 ciphername = 'BF-CBC'
2014-03-30 08:09:21 authname_defined = ENABLED
2014-03-30 08:09:21 authname = 'SHA1'
2014-03-30 08:09:21 prng_hash = 'SHA1'
2014-03-30 08:09:21 prng_nonce_secret_len = 16
2014-03-30 08:09:21 keysize = 0
2014-03-30 08:09:21 engine = DISABLED
2014-03-30 08:09:21 replay = ENABLED
2014-03-30 08:09:21 mute_replay_warnings = DISABLED
2014-03-30 08:09:21 replay_window = 64
2014-03-30 08:09:21 replay_time = 15
2014-03-30 08:09:21 packet_id_file = '[UNDEF]'
2014-03-30 08:09:21 use_iv = ENABLED
2014-03-30 08:09:21 test_crypto = DISABLED
2014-03-30 08:09:21 tls_server = DISABLED
2014-03-30 08:09:21 tls_client = ENABLED
2014-03-30 08:09:21 key_method = 2
2014-03-30 08:09:21 ca_file = '[[INLINE]]'
2014-03-30 08:09:21 ca_path = '[UNDEF]'
2014-03-30 08:09:21 dh_file = '[UNDEF]'
2014-03-30 08:09:21 cert_file = '[[INLINE]]'
2014-03-30 08:09:21 priv_key_file = '[[INLINE]]'
2014-03-30 08:09:21 pkcs12_file = '[UNDEF]'
2014-03-30 08:09:21 cipher_list = '[UNDEF]'
2014-03-30 08:09:21 tls_verify = '[UNDEF]'
2014-03-30 08:09:21 tls_export_cert = '[UNDEF]'
2014-03-30 08:09:21 verify_x509_type = 0
2014-03-30 08:09:21 verify_x509_name = '[UNDEF]'
2014-03-30 08:09:21 crl_file = '[UNDEF]'
2014-03-30 08:09:21 ns_cert_type = 1
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_ku[i] = 0
2014-03-30 08:09:21 remote_cert_eku = '[UNDEF]'
2014-03-30 08:09:21 ssl_flags = 0
2014-03-30 08:09:21 tls_timeout = 2
2014-03-30 08:09:21 renegotiate_bytes = 0
2014-03-30 08:09:21 renegotiate_packets = 0
2014-03-30 08:09:21 renegotiate_seconds = 3600
2014-03-30 08:09:21 handshake_window = 60
2014-03-30 08:09:21 transition_window = 3600
2014-03-30 08:09:21 single_session = DISABLED
2014-03-30 08:09:21 push_peer_info = DISABLED
2014-03-30 08:09:21 tls_exit = DISABLED
2014-03-30 08:09:21 tls_auth_file = '[[INLINE]]'
2014-03-30 08:09:21 client = ENABLED
2014-03-30 08:09:21 pull = ENABLED
2014-03-30 08:09:21 auth_user_pass_file = '[UNDEF]'
2014-03-30 08:09:21 OpenVPN 2.4-icsopenvpn [git:icsopenvpn_70-078981e61dfdf105] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [SNAPPY] [LZ4] [EPOLL] [MH] [IPv6] built on Mar 12 2014
2014-03-30 08:09:21 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2014-03-30 08:09:28 Network Status: CONNECTED LTE to mobile VZWINTERNET
2014-03-30 08:09:28 MANAGEMENT: CMD 'hold release'
2014-03-30 08:09:28 MANAGEMENT: CMD 'bytecount 2'
2014-03-30 08:09:28 MANAGEMENT: CMD 'state on'
2014-03-30 08:09:28 MANAGEMENT: >STATE:1396192168,RESOLVE,,,
2014-03-30 08:09:29 MANAGEMENT: CMD 'proxy NONE'
2014-03-30 08:09:30 MANAGEMENT: CMD 'password [...]'
2014-03-30 08:09:30 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2014-03-30 08:09:30 Control Channel Authentication: tls-auth using INLINE static key file
2014-03-30 08:09:30 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-03-30 08:09:30 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-03-30 08:09:30 LZO compression initializing
2014-03-30 08:09:30 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
2014-03-30 08:09:30 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:393 ET:0 EL:0 ]
2014-03-30 08:09:30 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
2014-03-30 08:09:30 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
2014-03-30 08:09:30 Local Options hash (VER=V4): '504e774e'
2014-03-30 08:09:30 Expected Remote Options hash (VER=V4): '14168603'
2014-03-30 08:09:30 TCP/UDP: Preserving recently used remote address: [AF_INET]76.121.147.160:1194
2014-03-30 08:09:30 Socket Buffers: R=[112640->131072] S=[112640->131072]
2014-03-30 08:09:30 Protecting socket fd 5
2014-03-30 08:09:31 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2014-03-30 08:09:31 UDP link local: (not bound)
2014-03-30 08:09:31 UDP link remote: [AF_INET]76.121.147.160:1194
2014-03-30 08:09:31 MANAGEMENT: >STATE:1396192171,WAIT,,,
2014-03-30 08:09:31 MANAGEMENT: >STATE:1396192171,AUTH,,,
2014-03-30 08:09:31 TLS: Initial packet from [AF_INET]76.121.147.160:1194, sid=82f83b6e dd3ab30f
2014-03-30 08:09:32 VERIFY OK: depth=1, C=US, ST={deleted}, L={deleted}, O={deleted}, CN={deleted}, name={deleted}, emailAddress={deleted}
2014-03-30 08:09:32 VERIFY OK: nsCertType=SERVER
2014-03-30 08:09:32 VERIFY OK: depth=0, C=US, ST={deleted}, L={deleted}, O={deleted}, OU=changeme, CN=server, name={deleted}, emailAddress={deleted}
2014-03-30 08:09:33 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1342'
2014-03-30 08:09:33 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1300'
2014-03-30 08:09:33 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-03-30 08:09:33 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-03-30 08:09:33 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-03-30 08:09:33 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-03-30 08:09:33 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2014-03-30 08:09:33 [server] Peer Connection Initiated with [AF_INET]76.121.147.160:1194
2014-03-30 08:09:34 MANAGEMENT: >STATE:1396192174,GET_CONFIG,,,
2014-03-30 08:09:36 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2014-03-30 08:09:36 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 192.168.40.0 255.255.255.0,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
2014-03-30 08:09:36 OPTIONS IMPORT: timers and/or timeouts modified
2014-03-30 08:09:36 OPTIONS IMPORT: --ifconfig/up options modified
2014-03-30 08:09:36 OPTIONS IMPORT: route options modified
2014-03-30 08:09:36 OPTIONS IMPORT: route-related options modified
2014-03-30 08:09:36 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2014-03-30 08:09:36 ROUTE_GATEWAY 10.178.44.201
2014-03-30 08:09:36 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2014-03-30 08:09:36 MANAGEMENT: >STATE:1396192176,ASSIGN_IP,,10.8.0.2,
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-03-30 08:09:36 MANAGEMENT: >STATE:1396192176,ADD_ROUTES,,,
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2014-03-30 08:09:36 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2014-03-30 08:09:36 Opening tun interface:
2014-03-30 08:09:36 Local IPv4: 10.8.0.2/24 IPv6: null MTU: 1500
2014-03-30 08:09:36 DNS Server: 208.67.222.222, 208.67.220.220, Domain: null
2014-03-30 08:09:36 Routes: 0.0.0.0/1, 128.0.0.0/1, 192.168.40.0/24
2014-03-30 08:09:36 Routes excluded:
2014-03-30 08:09:36 VpnService routes installed: 0.0.0.0/1, 128.0.0.0/1, 192.168.40.0/24
2014-03-30 08:09:38 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2014-03-30 08:09:38 Initialization Sequence Completed
2014-03-30 08:09:38 MANAGEMENT: >STATE:1396192178,CONNECTED,SUCCESS,10.8.0.2,76.121.147.160

---------------------------
Client ifconfig table:

ifb0 Link encap:Ethernet HWaddr 02:A4:55:47:D7:FE
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ifb1 Link encap:Ethernet HWaddr 2A:0C:F5:6B:55:24
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ip6tnl0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:1452 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:3339 errors:0 dropped:0 overruns:0 frame:0
TX packets:3339 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:306202 (299.0 KiB) TX bytes:306202 (299.0 KiB)

mmi0 Link encap:Ethernet HWaddr 02:21:00:1D:38:FB
inet6 addr: fe80::30:aa6b:f801/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1428 Metric:1
RX packets:1114 errors:0 dropped:0 overruns:0 frame:0
TX packets:533 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:304867 (297.7 KiB) TX bytes:229556 (224.1 KiB)

mmi1 Link encap:Ethernet HWaddr 02:21:00:1D:3C:FB
inet6 addr: fe80::30:ab01:9e01/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1428 Metric:1
RX packets:101899 errors:0 dropped:0 overruns:0 frame:0
TX packets:108331 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:71955183 (68.6 MiB) TX bytes:14011907 (13.3 MiB)

mmi2 Link encap:Ethernet HWaddr 02:21:00:1D:40:FB
BROADCAST MTU:1428 Metric:1
RX packets:803 errors:0 dropped:0 overruns:0 frame:0
TX packets:57 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:129206 (126.1 KiB) TX bytes:7027 (6.8 KiB)

mmi3 Link encap:Ethernet HWaddr 02:21:00:1D:44:FB
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

qmi0 Link encap:Ethernet HWaddr 7A:48:64:4B:3C:B3
BROADCAST MULTICAST MTU:1428 Metric:1
RX packets:758 errors:0 dropped:0 overruns:0 frame:0
TX packets:834 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:259394 (253.3 KiB) TX bytes:98576 (96.2 KiB)

qmi1 Link encap:Ethernet HWaddr 06:05:B1:6D:2F:2B
BROADCAST MULTICAST MTU:1428 Metric:1
RX packets:2843 errors:0 dropped:0 overruns:0 frame:0
TX packets:10383 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1088071 (1.0 MiB) TX bytes:1531049 (1.4 MiB)

qmi2 Link encap:Ethernet HWaddr 0E:20:26:6F:E6:5A
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

qmi3 Link encap:Ethernet HWaddr 5A:E5:B2:7A:B4:B9
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

rmnet0 Link encap:Ethernet HWaddr 02:21:00:1D:38:FB
inet6 addr: 2600:100f:811e:2fdc::101/64 Scope:Global
UP BROADCAST RUNNING NOARP MTU:1428 Metric:1
RX packets:95 errors:0 dropped:0 overruns:0 frame:0
TX packets:84 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:52477 (51.2 KiB) TX bytes:50776 (49.5 KiB)

rmnet1 Link encap:Ethernet HWaddr 02:21:00:1D:3C:FB
inet addr:10.178.44.203 Bcast:0.0.0.0 Mask:255.255.255.254
inet6 addr: 2600:100f:b111:ad7f::103/64 Scope:Global
UP BROADCAST RUNNING NOARP MTU:1428 Metric:1
RX packets:523 errors:0 dropped:0 overruns:0 frame:0
TX packets:2811 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:173601 (169.5 KiB) TX bytes:364715 (356.1 KiB)

sit0 Link encap:UNSPEC HWaddr 00-00-00-00-FF-FE-00-00-00-00-00-00-00-00-00-00
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.2 P-t-P:10.8.0.2 Mask:255.255.255.0
UP POINTOPOINT RUNNING MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:2267 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:145979 (142.5 KiB)

usb0 Link encap:Ethernet HWaddr 2A:4D:4C:8C:CA:F4
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

usb1 Link encap:Ethernet HWaddr 02:21:00:1D:34:FB
inet addr:192.168.157.1 Bcast:192.168.157.7 Mask:255.255.255.248
inet6 addr: fe80::21:ff:fe1d:34fb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4737 errors:0 dropped:0 overruns:0 frame:0
TX packets:6863 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:604958 (590.7 KiB) TX bytes:1078396 (1.0 MiB)

whighfill

I failed to mention that I also added the following commands to the DD-WRT router firewall.

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

maikcat

please post the output of:

iptables -L -t nat

on your openvpn server

Michael.

whighfill

Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT icmp -- anywhere c-76-121-147-160.hsd1.wa.comcast.net to:192.168.40.1
TRIGGER 0 -- anywhere c-76-121-147-160.hsd1.wa.comcast.net TRIGGER type:dnat match:0 relate:0
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT 0 -- 192.168.40.0/24 anywhere to:76.121.147.160
MASQUERADE 0 -- anywhere anywhere mark match 0x80000000/0x80000000

whighfill

Just an update:
I am able to ping 192.168.40.1 in this setup (don't know why I didn't think to check that earlier).

whighfill

I set up a couple other clients on the LAN (old android phones I had to charge up, IP addresses of 192.168.40.20 and 192.168.40.8). When I connect to the OpenVPN from outside (as described in the original post), the OpenVPN client is able to ping both of those IP addresses (192.168.40.20 and 192.168.40.8) but not the Win7 machine (192.168.40.2). The Win7 machine (192.168.40.2) is able to ping 10.8.0.2 (the OpenVPN client). I'm guessing this means the issue with the LAN clients is really just an issue with the one Win7 client (192.168.40.2) and is likely a firewall issue on that specific client...?

The OpenVPN client (10.8.0.2) is still not able to connect to the internet (ie, can't ping 8.8.8.8) when connected to the OpenVPN.

whighfill

So the OpenVPN client (10.8.0.2) still can't connect to the internet through the OpenVPN connection, but I did get it able to connect to the Win7 machine on the remote LAN (192.168.40.2). I thought I'd share for others...

On the Win7 machine behind the LAN (192.168.40.2) that I wasn't able to ping or view files on, under Windows Firewall with Advanced Security, I added 10.8.0.0/24 as a subnet for the Private profile under
File and Printer Sharing (Echo Request - ICMPv4-In)
File and Printer Sharing (SMB-In)

This is found for each rule under Properties -> Scope -> Remote IP address

I can now browse the Win7 files from the OpenVPN client. The OpenVPN client still can't get to the internet, though. If anybody has ideas on that, I'd appreciate it.

maikcat

post your win7 client routing table & dns server entries

Michael.

whighfill

Here is the output from "netstat -rn". I don't know what you mean by dns server entries, but I'm willing to learn if you can point me in the right direction.

===========================================================================
Interface List
 11...84 2b 2b a9 d0 71 ......Broadcom NetLink (TM) Gigabit Ethernet
  1...........................Software Loopback Interface 1
 14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.40.1     192.168.40.2    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.40.0    255.255.255.0         On-link      192.168.40.2    276
     192.168.40.2  255.255.255.255         On-link      192.168.40.2    276
   192.168.40.255  255.255.255.255         On-link      192.168.40.2    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.40.2    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.40.2    276
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
          0.0.0.0          0.0.0.0     192.168.40.1  Default
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 14     58 ::/0                     On-link
  1    306 ::1/128                  On-link
 14     58 2001::/32                On-link
 14    306 2001:0:9d38:6abd:30db:187f:b386:6c5f/128
                                    On-link
 11    276 fe80::/64                On-link
 14    306 fe80::/64                On-link
 14    306 fe80::30db:187f:b386:6c5f/128
                                    On-link
 11    276 fe80::d4da:b96:6570:65b2/128
                                    On-link
  1    306 ff00::/8                 On-link
 14    306 ff00::/8                 On-link
 11    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
 If Metric Network Destination      Gateway
  0 4294967295 2620:9b::/96             On-link
  0   9000 ::/0                     2620:9b::1900:1
===========================================================================

whighfill

So that previous post I just put up is the routing table from the Win7 machine on the 192.168.40.0 LAN. It isn't having problems connecting to the internet, so I thought perhaps you were looking for the routing table from the OpenVPN client that is having problems connecting to the internet (through the OpenVPN connection). Below is the routing table from the OpenVPN client:

u0_a30@cdma_maserati:/ $ netstat -rn
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 192.168.157.1:41493 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41492 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41494 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41503 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41499 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41497 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41498 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41495 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41500 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41504 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41496 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41502 192.168.157.2:3265 ESTABLISHED
tcp 0 0 192.168.157.1:41501 192.168.157.2:3265 ESTABLISHED
udp 0 0 10.8.0.2:10498 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:7172 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:40970 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:65291 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:2336 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:47651 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:23333 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:34856 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:14142 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:21587 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:23134 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:28778 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:39531 208.67.222.222:53 ESTABLISHED
udp 0 0 10.166.178.201:56431 76.121.147.160:1194 ESTABLISHED
udp 0 0 10.8.0.2:34672 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:27769 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:23674 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:10107 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:47503 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:54938 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:28572 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:33189 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:65198 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:13744 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:23480 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:29382 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:10454 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:4824 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:5347 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:27374 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:30455 208.67.220.220:53 ESTABLISHED
udp 0 0 10.8.0.2:24830 208.67.222.222:53 ESTABLISHED
udp 0 0 10.8.0.2:4607 208.67.220.220:53 ESTABLISHED
tcp6 0 0 ::ffff:127.0.0.1:25637 :::* LISTEN
tcp6 0 0 ::ffff:10.166.178.201:2588 :::* LISTEN
tcp6 0 0 ::ffff:10.166.178.201:44255 ::ffff:192.55.24.46:5222 ESTABLISHED
tcp6 0 0 2600:100f:b103:614d::103:40641 2001:4860:400b:c01::bc:5228 ESTABLISHED
tcp6 23 0 ::ffff:10.166.178.201:49242 ::ffff:69.7.41.236:443 ESTABLISHED
udp6 0 0 ::ffff:10.166.178.201:2588 :::* CLOSE
udp6 0 0 2600:100f:8122:256::101:5060 :::* CLOSE
udp6 0 0 ::ffff:127.0.0.1:59622 :::* CLOSE
u0_a30@cdma_maserati:/ $

maikcat

please post the output of netstat -nr AFTER vpn is up on one of your problematic clients.

also post their dns servers list (resolv.conf for linux)

Michael.

whighfill

This is the output of netstat -nr from the problematic OpenVPN client AFTER the vpn is up on it. At the bottom is the dns server list (output of getprop net.dns1 and net.dns2)

u0_a30@cdma_maserati:/ $ netstat -nr
Proto Recv-Q Send-Q Local Address          Foreign Address        State
tcp       0      0 192.168.157.1:53274    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53272    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53275    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53278    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53266    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53276    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53277    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53271    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53268    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53270    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53269    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53267    192.168.157.2:3265     ESTABLISHED
tcp       0      0 192.168.157.1:53273    192.168.157.2:3265     ESTABLISHED
udp       0      0 10.8.0.2:29952         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:58117         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:59660         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:30989         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:55309         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:6414          208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:59926         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:14358         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:15647         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:20006         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:22828         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:64561         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:44596         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:24636         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:1598          208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:50498         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:33608         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:19785         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:54089         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:62027         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:24652         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:1615          208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:37714         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:49246         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:59241         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:30831         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:2676          208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:49014         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:33147         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:54151         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:55949         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:23187         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:33942         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:56215         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:50328         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:19362         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:2219          208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:26029         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:44465         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:51138         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:16834         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:20165         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:7366          208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:61383         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:24266         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:37854         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:53471         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:41186         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:37607         208.67.220.220:53      ESTABLISHED
udp       0      0 10.179.57.42:47082     76.121.147.160:1194    ESTABLISHED
udp       0      0 10.8.0.2:27886         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:64751         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:61940         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:33016         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:55288         208.67.222.222:53      ESTABLISHED
udp       0      0 10.8.0.2:60153         208.67.220.220:53      ESTABLISHED
udp       0      0 10.8.0.2:54012         208.67.220.220:53      ESTABLISHED
tcp6       0      0 ::ffff:10.179.57.42:2588 :::*                   LISTEN
tcp6       0      0 ::ffff:10.179.57.42:60446 ::ffff:173.252.102.16:443 ESTABLISHED
tcp6       0      0 ::ffff:10.179.57.42:35264 ::ffff:69.7.41.236:443 FIN_WAIT2
tcp6       0      0 ::ffff:10.179.57.42:50247 ::ffff:74.125.239.153:80 ESTABLISHED
tcp6       0      1 ::ffff:10.179.57.42:36394 ::ffff:216.157.12.18:80 CLOSE_WAIT
tcp6       0      0 2600:100f:b021:c0fb::103:42516 2607:f8b0:4005:802::1001:443 ESTABLISHED
tcp6       0      0 ::ffff:10.179.57.42:43308 ::ffff:74.125.239.137:443 ESTABLISHED
tcp6       0      0 2600:100f:b021:c0fb::103:57297 2607:f8b0:400e:c02::be:443 ESTABLISHED
tcp6       0      0 ::ffff:192.168.40.11:41909 ::ffff:23.3.105.185:80 TIME_WAIT
tcp6       0      0 2600:100f:b021:c0fb::103:34068 2607:f8b0:400e:c02::bc:5228 ESTABLISHED
udp6       0      0 :::39941               :::*                   CLOSE
udp6       0      0 ::ffff:10.179.57.42:2588 :::*                   CLOSEudp6       0      0 :::36901               :::*                   CLOSE
udp6       0      0 :::38952               :::*                   CLOSE
udp6       0      0 2600:100f:8011:b491::101:5060 :::*                   CLOSE
udp6       0      0 ::ffff:127.0.0.1:38867 :::*                   CLOSE
u0_a30@cdma_maserati:/ $ getprop net.dns1
208.67.222.222
u0_a30@cdma_maserati:/ $ getprop net.dns2
208.67.220.220

maikcat

-nr produces this? :S

what exactly is your client?

i was looking output like windows netstat -nr produces...

Michael.

whighfill

The OpenVPN client I am testing with is an android phone on 4G (wireless disabled). I thought I mentioned this in the original post, but it could easily be overlooked.

I do not have a Win7 client I can take off the internal LAN and test on OpenVPN from outside of the LAN.