Dynamic DNS /openvpn cache

elessard84

(Sorry for me not so good english)

I use a dns address to follow my home/vpn server dynamique ip. On one of my client machine (and only one) the dns address don't work. Openvpn always try to connect to the old ip that the dns address was refering. If i put manualy the new ip insteed of the dns address all word fine. But if I open firefox and use the dns address i reach the new ip so I know that all my dns setting are OK. I tried wipe windows dns cache but that didn't work. Opendns probably have it's own dns cache? How can I wipe ip?

maikcat

--ping-restart n
Similar to --ping-exit, but trigger a SIGUSR1 restart after n seconds pass without reception of a ping or other packet from remote.

This option is useful in cases where the remote peer has a dynamic IP address and a low-TTL DNS name is used to track the IP address using a service such as http://dyndns.org/ + a dynamic DNS client such as ddclient.

If the peer cannot be reached, a restart will be triggered, causing the hostname used with --remote to be re-resolved (if --resolv-retry is also specified).

Michael.

elessard84

That's my config

remote *******.me 1194 (dns address that work with internet navigator(home web page) so you know all my dns setting are up and working)
;remote ***.***.***.*** 1194 (test made with the server ip; working)
client
dev tap
proto tcp
resolv-retry infinite
ping 15
ping-restart 300
persist-tun
persist-key
nobind
float
ca ca.crt
cert DIV4.crt
key DIV4.key
;tls-auth ta.key 1
ns-cert-type server
comp-lzo yes
;register-dns

My DNS address is working and the ip is refresed by my dynamic dns client. My probleme is openvpn when using the dns addreess always try to connect to the first ip that was push by that dns address. Like it use some kind of dns cache that was not refreshed. Like I said earlier I wiped windows dns cache in case; didn't work.

elessard84

Still need help :s

maikcat

which version of openvpn are you using?
can you post your clients log?

Michael.

elessard84

I use 2.3.2 and tried an old stable version too (2.2.2)
I also created a new dynamic dns address which worked fine for a few day before stopped working. The ip on the server didn't even change during that time and the dns address is still bind to the good ip (I double checked). What happen (you can't see it in the current log... I need to find a way to keep a longer history in my log) is that for a unknown raison openvpn resolve the dns adress with the wrong ip. And that wrong ip is the ip returned by the first dns address I used with that client (I used another server that was up and running for a wild for testing).

There the log but it's only show how unstable internet satellite connection are since it's show log only with IP (and not dns address) in the client config. I will try laterto swith back to the dns adress to have a more signifiant log. But for now the connection with the client is to slow for that (and the computer with is is at a few hour from here)

Wed Apr 09 14:34:05 2014 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Wed Apr 09 14:34:05 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:34:05 2014 TCP: connect to [AF_INET]xxx.xxx.85.3:1194 failed, will try again in 5 seconds: No Route to Host (WSAEHOSTUNREACH)
Wed Apr 09 14:34:31 2014 TCP: connect to [AF_INET]xxx.xxx.85.3:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
Wed Apr 09 14:34:36 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:34:36 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:34:36 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:35:36 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 09 14:35:36 2014 TLS Error: TLS handshake failed
Wed Apr 09 14:35:36 2014 Fatal TLS error (check_tls_errors_co), restarting
Wed Apr 09 14:35:36 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 09 14:35:41 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:35:41 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:35:41 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:35:41 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:36:41 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 09 14:36:41 2014 TLS Error: TLS handshake failed
Wed Apr 09 14:36:41 2014 Fatal TLS error (check_tls_errors_co), restarting
Wed Apr 09 14:36:41 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 09 14:36:46 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:36:46 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:36:46 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:36:46 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:37:47 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 09 14:37:47 2014 TLS Error: TLS handshake failed
Wed Apr 09 14:37:47 2014 Fatal TLS error (check_tls_errors_co), restarting
Wed Apr 09 14:37:47 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 09 14:37:52 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:37:52 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:37:52 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:37:52 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:38:52 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 09 14:38:52 2014 TLS Error: TLS handshake failed
Wed Apr 09 14:38:52 2014 Fatal TLS error (check_tls_errors_co), restarting
Wed Apr 09 14:38:52 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 09 14:38:57 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:38:57 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:38:57 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:38:57 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:39:28 2014 Connection reset, restarting [-1]
Wed Apr 09 14:39:28 2014 SIGUSR1[soft,connection-reset] received, process restarting
Wed Apr 09 14:39:33 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:39:33 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:39:33 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 14:39:33 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:39:47 2014 [ASUS] Peer Connection Initiated with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 14:39:50 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 09 14:39:50 2014 open_tun, tt->ipv6=0
Wed Apr 09 14:39:50 2014 TAP-WIN32 device [Connexion au réseau local] opened: \\.\Global\{C5D9EC31-646F-45EA-91FC-9423F3E6B40F}.tap
Wed Apr 09 14:39:50 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.3.202/255.255.255.0 on interface {C5D9EC31-646F-45EA-91FC-9423F3E6B40F} [DHCP-serv: 192.168.3.0, lease-time: 31536000]
Wed Apr 09 14:39:55 2014 Initialization Sequence Completed
Wed Apr 09 21:00:26 2014 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Wed Apr 09 21:00:26 2014 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Wed Apr 09 21:00:26 2014 Connection reset, restarting [-1]
Wed Apr 09 21:00:26 2014 SIGUSR1[soft,connection-reset] received, process restarting
Wed Apr 09 21:00:31 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 21:00:52 2014 TCP: connect to [AF_INET]xxx.xxx.85.3:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
Wed Apr 09 21:00:57 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 21:00:57 2014 TCPv4_CLIENT link local: [undef]
Wed Apr 09 21:00:57 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 21:01:11 2014 [ASUS] Peer Connection Initiated with [AF_INET]xxx.xxx.85.3:1194
Wed Apr 09 21:01:14 2014 Preserving previous TUN/TAP instance: Connexion au réseau local
Wed Apr 09 21:01:14 2014 Initialization Sequence Completed
Thu Apr 10 06:43:22 2014 Connection reset, restarting [-1]
Thu Apr 10 06:43:22 2014 SIGUSR1[soft,connection-reset] received, process restarting
Thu Apr 10 06:43:27 2014 Attempting to establish TCP connection with [AF_INET]xxx.xxx.85.3:1194
Thu Apr 10 06:43:27 2014 TCP connection established with [AF_INET]xxx.xxx.85.3:1194
Thu Apr 10 06:43:27 2014 TCPv4_CLIENT link local: [undef]
Thu Apr 10 06:43:27 2014 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.85.3:1194
Thu Apr 10 06:43:41 2014 [ASUS] Peer Connection Initiated with [AF_INET]xxx.xxx.85.3:1194
Thu Apr 10 06:43:45 2014 Preserving previous TUN/TAP instance: Connexion au réseau local
Thu Apr 10 06:43:45 2014 Initialization Sequence Completed

maikcat

I need to find a way to keep a longer history in my log) is that for a unknown raison openvpn resolve the dns adress with the wrong ip. And that wrong ip is the ip returned by the first dns address I used with that client

that was a bombshell.... 🙂

if dns returns wrong entries openvpn cant do nothing about it...

can you use dns servers that work correctly?

Michael.

elessard84

Only openvpn do that. Only openvpn have broken dns resolving. That why I'm clueless. On the same computer I can acces web page unsing the same dns address that I use in openvpn; That address return the good ip with my current dns setting. Despite this I tried using google DNS serveur and opendns server to but since that not the problem that didn't help at all.