OpenVPN Server.conf

nayr

Hi all,

I have a weird problem occurring with my VPN, wondering if anyone might be able to help me out.

The issue is that I can connect to my VPN via my mobile with no problems at all, access to filestores as well as internet access is as should be. However if I use my laptop to connect to the VPN I can only access filestores (via ssh or afp) but not the internet. I enclose my .conf file to see if anyone can help out here. I believe it is to do with my routing but I'm not 100% sure. The VPN is running on a raspberry pi. Thanks in advance.

(NOTE: I have obscured my dns details in the DHCP-option line, in my conf file it appears as it should.)

local 192.168.0.3
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/serv.crt
key /etc/openvpn/easy-rsa/keys/serv.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0

ifconfig 10.8.0.1 10.8.0.2

# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"

# Add route to Client routing table for the OpenVPN Subnet
push "route 10.8.0.0 255.255.255.0"

# your local subnet
push "route 192.168.0.3 255.255.255.0"

push "dhcp-option DNS MyDynamicDnsDetailsHere"
#push "dhcp-option DNS 192.168.0.3"

push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1

nayr

Apologies, quite obviously new here, should have checked.

Client

client
dev tun
proto udp
remote OBSCURED.dnsdynamic.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 4
mute 20
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----

-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

Server

local 192.168.0.3
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/serv.crt
key /etc/openvpn/easy-rsa/keys/serv.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.0.3 255.255.255.0"
push "dhcp-option DNS MyDynamicDnsDetailsHere"
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 4

Logs

2014-05-10 13:50:03 OpenVPN 2.2.1 i386-apple-darwin10.8.0 [SSL] [LZO2] [PKCS11] [eurephia] built on Apr  8 2014
2014-05-10 13:50:03 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2014-05-10 13:50:03 *Tunnelblick: openvpnstart starting OpenVPN:
                    *                    /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn --cd /Library/Application Support/Tunnelblick/Users/Nayr/mac.tblk/Contents/Resources --daemon --management 127.0.0.1 1337 --config /Library/Application Support/Tunnelblick/Users/Nayr/mac.tblk/Contents/Resources/config.ovpn --log /Library/Application Support/Tunnelblick/Logs/-SUsers-SNayr-SLibrary-SApplication Support-STunnelblick-SConfigurations-Smac.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_817.1337.openvpn.log --management-query-passwords --management-hold --redirect-gateway def1 --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -f -ptADGNWradsgnw --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -f -ptADGNWradsgnw --up-restart
2014-05-10 13:50:03 *Tunnelblick: Established communication with OpenVPN
2014-05-10 13:50:10 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2014-05-10 13:50:10 Control Channel Authentication: tls-auth using INLINE static key file
2014-05-10 13:50:10 LZO compression initialized
2014-05-10 13:50:11 UDPv4 link local: [undef]
2014-05-10 13:50:11 UDPv4 link remote: OBSCURED.56.238:1194
2014-05-10 13:50:12 [OBSCURED] Peer Connection Initiated with OBSCURED.56.238:1194
2014-05-10 13:50:14 TUN/TAP device /dev/tun0 opened
2014-05-10 13:50:14 /sbin/ifconfig tun0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2014-05-10 13:50:14 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2014-05-10 13:50:14 /sbin/ifconfig tun0 10.8.0.10 10.8.0.9 mtu 1500 netmask 255.255.255.255 up
2014-05-10 13:50:14 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -f -ptADGNWradsgnw tun0 1500 1558 10.8.0.10 10.8.0.9 init
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: Retrieved from OpenVPN: name server(s) [ OBSCURED.dnsdynamic.com ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_DNS_CONFIG = No such key
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_SMB_CONFIG = No such key
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_DNS_CONFIG = <dictionary> { DomainName : OBSCURED ServerAddresses : <array> { OBSCURED.21.8 OBSCURED.21.3 } }
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_SMB_CONFIG = <dictionary> { NetBIOSNodeType : Hybrid WINSAddresses : <array> { OBSCURED.1.16 OBSCURED.1.17 } }
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: DYN_DNS_DN = openvpn; DYN_DNS_SA = OBSCURED.dnsdynamic.com; DYN_DNS_SD =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: DYN_SMB_NN = ; DYN_SMB_WG = ; DYN_SMB_WA =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_DNS_DN = ; MAN_DNS_SA = ; MAN_DNS_SD =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_SMB_NN = ; MAN_SMB_WG = ; MAN_SMB_WA =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_DNS_DN = OBSCURED.21.8 OBSCURED.21.3; CUR_DNS_SA = OBSCURED.21.8 OBSCURED.21.3; CUR_DNS_SD =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_SMB_NN = ; CUR_SMB_WG = ; CUR_SMB_WA = OBSCURED.1.16 OBSCURED.1.17
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: ServerAddresses were not aggregated because running on OS X 10.6 or higher
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually and 'Prepend domain name to search domains' was not selected
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: FIN_DNS_DN = openvpn; FIN_DNS_SA = OBSCURED.dnsdynamic.com; FIN_DNS_SD = openvpn
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: FIN_SMB_NN = ; FIN_SMB_WG = ; FIN_SMB_WA = OBSCURED.1.16 OBSCURED.1.17
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: OS X 10.7 and neither ServerAddresses nor SearchDomains were set manually, so will modify DNS settings using only State:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_DNS = ; SKP_DNS_SA = ; SKP_DNS_SD = ; SKP_DNS_DN =
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_SETUP_DNS = #
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_SMB = #; SKP_SMB_NN = #; SKP_SMB_WG = #; SKP_SMB_WA = #
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: /etc/resolve = domain OBSCURED nameserver OBSCURED.21.8 nameserver OBSCURED.21.3
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: scutil --dns BEFORE CHANGES = DNS configuration resolver #1 search domain[0] : OBSCURED nameserver[0] : OBSCURED.21.8 nameserver[1] : OBSCURED.21.3 resolver #2 domain : 1105394324.members.btmm.icloud.com options : pdns timeout : 5 order : 150000 resolver #3 domain : local options : mdns timeout : 5 order : 300000 resolver #4 domain : 254.169.in-addr.arpa options : mdns timeout : 5 order : 300200 resolver #5 domain : 8.e.f.ip6.arpa options : mdns timeout : 5 order : 300400 resolver #6 domain : 9.e.f.ip6.arpa options : mdns timeout : 5 order : 300600 resolver #7 domain : a.e.f.ip6.arpa options : mdns timeout : 5 order : 300800 resolver #8 domain : b.e.f.ip6.arpa options : mdns timeout : 5 order : 301000 DNS configuration (for scoped queries) resolver #1 search domain[0] : OBSCURED nameserver[0] : OBSCURED.21.8 nameserver[1] : OBSCURED.21.3 if_index : 5 (en1) flags : Scoped
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Configuration changes:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: ServerAddresses OBSCURED.dnsdynamic.com
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: SearchDomains openvpn
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: DomainName openvpn
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: #ADD Setup: ServerAddresses OBSCURED.dnsdynamic.com
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: #ADD Setup: SearchDomains openvpn
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: #ADD Setup: DomainName openvpn
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: NetBIOSName
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: Workgroup
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: WINSAddresses OBSCURED.1.16 OBSCURED.1.17
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:16 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Pause for configuration changes to be propagated to State:/Network/Global/DNS and .../SMB
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Configurations as read back after changes:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/.../DNS = <dictionary> { DomainName : openvpn SearchDomains : <array> { openvpn } ServerAddresses : <array> { OBSCURED.dnsdynamic.com } }
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/.../SMB = <dictionary> { NetBIOSNodeType : Hybrid WINSAddresses : <array> { OBSCURED.1.16 OBSCURED.1.17 } }
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Setup:/.../DNS = No such key
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Setup:/.../SMB = No such key
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/Network/Global/DNS = <dictionary> { DomainName : openvpn SearchDomains : <array> { openvpn } }
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/Network/Global/SMB = <dictionary> { NetBIOSNodeType : Hybrid WINSAddresses : <array> { OBSCURED.1.16 OBSCURED.1.17 } }
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Expected by process-network-changes:
2014-05-10 13:50:17 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/Network/OpenVPN/DNS = <dictionary> { DomainName : openvpn SearchDomains : <array> { openvpn } }
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG: State:/Network/OpenVPN/SMB = <dictionary> { NetBIOSNodeType : Hybrid WINSAddresses : <array> { OBSCURED.1.16 OBSCURED.1.17 } }
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG: /etc/resolve = search openvpn
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:18 *Tunnelblick: No 'connected.sh' script to execute
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG: scutil --dns AFTER CHANGES = DNS configuration resolver #1 search domain[0] : openvpn resolver #2 domain : 1105394324.members.btmm.icloud.com options : pdns timeout : 5 order : 150000 resolver #3 domain : local options : mdns timeout : 5 order : 300000 resolver #4 domain : 254.169.in-addr.arpa options : mdns timeout : 5 order : 300200 resolver #5 domain : 8.e.f.ip6.arpa options : mdns timeout : 5 order : 300400 resolver #6 domain : 9.e.f.ip6.arpa options : mdns timeout : 5 order : 300600 resolver #7 domain : a.e.f.ip6.arpa options : mdns timeout : 5 order : 300800 resolver #8 domain : b.e.f.ip6.arpa options : mdns timeout : 5 order : 301000 DNS configuration (for scoped queries) resolver #1 search domain[0] : openvpn if_index : 5 (en1) flags : Scoped
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: Saved the DNS and SMB configurations for later use
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: Flushed the DNS Cache
2014-05-10 13:50:18 *Tunnelblick client.up.tunnelblick.sh: Set up to monitor system configuration with process-network-changes
2014-05-10 13:50:22 *Tunnelblick process-network-changes: A system configuration change was ignored
2014-05-10 13:50:53 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2014-05-10 13:51:39 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's IP address after connecting.

(NOTE: I have replaced the first two parts of actual IP addresses with "OBSCURED", let me know if this is hiding any vital information and I'll change it)

nayr

Sat May 10 16:31:56 2014 us=761085 Current Parameter Settings:
Sat May 10 16:31:56 2014 us=762019   config = '/etc/openvpn/server.conf'
Sat May 10 16:31:56 2014 us=762218   mode = 1
Sat May 10 16:31:56 2014 us=762379   persist_config = DISABLED
Sat May 10 16:31:56 2014 us=762539   persist_mode = 1
Sat May 10 16:31:56 2014 us=762697   show_ciphers = DISABLED
Sat May 10 16:31:56 2014 us=762853   show_digests = DISABLED
Sat May 10 16:31:56 2014 us=763010   show_engines = DISABLED
Sat May 10 16:31:56 2014 us=763167   genkey = DISABLED
Sat May 10 16:31:56 2014 us=763378   key_pass_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=763586   show_tls_ciphers = DISABLED
Sat May 10 16:31:56 2014 us=763747 Connection profiles [default]:
Sat May 10 16:31:56 2014 us=763909   proto = udp
Sat May 10 16:31:56 2014 us=764070   local = '192.168.0.3'
Sat May 10 16:31:56 2014 us=764230   local_port = 1194
Sat May 10 16:31:56 2014 us=764386   remote = '[UNDEF]'
Sat May 10 16:31:56 2014 us=764542   remote_port = 1194
Sat May 10 16:31:56 2014 us=764698   remote_float = DISABLED
Sat May 10 16:31:56 2014 us=764853   bind_defined = DISABLED
Sat May 10 16:31:56 2014 us=765009   bind_local = ENABLED
Sat May 10 16:31:56 2014 us=765170   connect_retry_seconds = 5
Sat May 10 16:31:56 2014 us=765329   connect_timeout = 10
Sat May 10 16:31:56 2014 us=765487   connect_retry_max = 0
Sat May 10 16:31:56 2014 us=765645   socks_proxy_server = '[UNDEF]'
Sat May 10 16:31:56 2014 us=765806   socks_proxy_port = 0
Sat May 10 16:31:56 2014 us=765963   socks_proxy_retry = DISABLED
Sat May 10 16:31:56 2014 us=766120 Connection profiles END
Sat May 10 16:31:56 2014 us=766276   remote_random = DISABLED
Sat May 10 16:31:56 2014 us=766435   ipchange = '[UNDEF]'
Sat May 10 16:31:56 2014 us=766589   dev = 'tun'
Sat May 10 16:31:56 2014 us=766742   dev_type = '[UNDEF]'
Sat May 10 16:31:56 2014 us=766899   dev_node = '[UNDEF]'
Sat May 10 16:31:56 2014 us=767050   lladdr = '[UNDEF]'
Sat May 10 16:31:56 2014 us=767207   topology = 1
Sat May 10 16:31:56 2014 us=767363   tun_ipv6 = DISABLED
Sat May 10 16:31:56 2014 us=767522   ifconfig_local = '10.8.0.1'
Sat May 10 16:31:56 2014 us=767682   ifconfig_remote_netmask = '10.8.0.2'
Sat May 10 16:31:56 2014 us=767840   ifconfig_noexec = DISABLED
Sat May 10 16:31:56 2014 us=767995   ifconfig_nowarn = DISABLED
Sat May 10 16:31:56 2014 us=768154   ifconfig_ipv6_local = '[UNDEF]'
Sat May 10 16:31:56 2014 us=768318   ifconfig_ipv6_netbits = 0
Sat May 10 16:31:56 2014 us=768476   ifconfig_ipv6_remote = '[UNDEF]'
Sat May 10 16:31:56 2014 us=768633   shaper = 0
Sat May 10 16:31:56 2014 us=768789   tun_mtu = 1500
Sat May 10 16:31:56 2014 us=768944   tun_mtu_defined = ENABLED
Sat May 10 16:31:56 2014 us=769101   link_mtu = 1500
Sat May 10 16:31:56 2014 us=769258   link_mtu_defined = DISABLED
Sat May 10 16:31:56 2014 us=769419   tun_mtu_extra = 0
Sat May 10 16:31:56 2014 us=769577   tun_mtu_extra_defined = DISABLED
Sat May 10 16:31:56 2014 us=769738   fragment = 0
Sat May 10 16:31:56 2014 us=769895   mtu_discover_type = -1
Sat May 10 16:31:56 2014 us=770054   mtu_test = 0
Sat May 10 16:31:56 2014 us=770208   mlock = DISABLED
Sat May 10 16:31:56 2014 us=770367   keepalive_ping = 10
Sat May 10 16:31:56 2014 us=770526   keepalive_timeout = 120
Sat May 10 16:31:56 2014 us=770685   inactivity_timeout = 0
Sat May 10 16:31:56 2014 us=770842   ping_send_timeout = 10
Sat May 10 16:31:56 2014 us=771000   ping_rec_timeout = 240
Sat May 10 16:31:56 2014 us=771159   ping_rec_timeout_action = 2
Sat May 10 16:31:56 2014 us=771357   ping_timer_remote = DISABLED
Sat May 10 16:31:56 2014 us=771559   remap_sigusr1 = 0
Sat May 10 16:31:56 2014 us=771909   explicit_exit_notification = 0
Sat May 10 16:31:56 2014 us=772090   persist_tun = ENABLED
Sat May 10 16:31:56 2014 us=772249   persist_local_ip = DISABLED
Sat May 10 16:31:56 2014 us=772406   persist_remote_ip = DISABLED
Sat May 10 16:31:56 2014 us=772563   persist_key = ENABLED
Sat May 10 16:31:56 2014 us=772720   mssfix = 1450
Sat May 10 16:31:56 2014 us=772901   passtos = DISABLED
Sat May 10 16:31:56 2014 us=773072   resolve_retry_seconds = 1000000000
Sat May 10 16:31:56 2014 us=773573   username = 'nobody'
Sat May 10 16:31:56 2014 us=773751   groupname = 'nogroup'
Sat May 10 16:31:56 2014 us=773910   chroot_dir = '[UNDEF]'
Sat May 10 16:31:56 2014 us=774069   cd_dir = '/etc/openvpn'
Sat May 10 16:31:56 2014 us=774227   writepid = '/var/run/openvpn.server.pid'
Sat May 10 16:31:56 2014 us=774381   up_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=774539   down_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=774698   down_pre = DISABLED
Sat May 10 16:31:56 2014 us=774855   up_restart = DISABLED
Sat May 10 16:31:56 2014 us=775009   up_delay = DISABLED
Sat May 10 16:31:56 2014 us=775163   daemon = ENABLED
Sat May 10 16:31:56 2014 us=775321   inetd = 0
Sat May 10 16:31:56 2014 us=775474   log = ENABLED
Sat May 10 16:31:56 2014 us=775629   suppress_timestamps = DISABLED
Sat May 10 16:31:56 2014 us=775787   nice = 0
Sat May 10 16:31:56 2014 us=775946   verbosity = 4
Sat May 10 16:31:56 2014 us=776103   mute = 0
Sat May 10 16:31:56 2014 us=776258   gremlin = 0
Sat May 10 16:31:56 2014 us=776416   status_file = '/var/log/openvpn-status.log'
Sat May 10 16:31:56 2014 us=776580   status_file_version = 1
Sat May 10 16:31:56 2014 us=776740   status_file_update_freq = 20
Sat May 10 16:31:56 2014 us=776896   occ = ENABLED
Sat May 10 16:31:56 2014 us=777057   rcvbuf = 65536
Sat May 10 16:31:56 2014 us=777212   sndbuf = 65536
Sat May 10 16:31:56 2014 us=777371   sockflags = 0
Sat May 10 16:31:56 2014 us=777526   fast_io = DISABLED
Sat May 10 16:31:56 2014 us=777687   lzo = 7
Sat May 10 16:31:56 2014 us=777842   route_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=778003   route_default_gateway = '[UNDEF]'
Sat May 10 16:31:56 2014 us=778163   route_default_metric = 0
Sat May 10 16:31:56 2014 us=778320   route_noexec = DISABLED
Sat May 10 16:31:56 2014 us=778478   route_delay = 0
Sat May 10 16:31:56 2014 us=778641   route_delay_window = 30
Sat May 10 16:31:56 2014 us=778804   route_delay_defined = DISABLED
Sat May 10 16:31:56 2014 us=778965   route_nopull = DISABLED
Sat May 10 16:31:56 2014 us=779124   route_gateway_via_dhcp = DISABLED
Sat May 10 16:31:56 2014 us=779289   max_routes = 100
Sat May 10 16:31:56 2014 us=779546   allow_pull_fqdn = DISABLED
Sat May 10 16:31:56 2014 us=779766   route 10.8.0.0/255.255.255.0/nil/nil
Sat May 10 16:31:56 2014 us=779946   management_addr = '[UNDEF]'
Sat May 10 16:31:56 2014 us=780112   management_port = 0
Sat May 10 16:31:56 2014 us=780272   management_user_pass = '[UNDEF]'
Sat May 10 16:31:56 2014 us=780437   management_log_history_cache = 250
Sat May 10 16:31:56 2014 us=780600   management_echo_buffer_size = 100
Sat May 10 16:31:56 2014 us=780762   management_write_peer_info_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=780928   management_client_user = '[UNDEF]'
Sat May 10 16:31:56 2014 us=781088   management_client_group = '[UNDEF]'
Sat May 10 16:31:56 2014 us=781253   management_flags = 0
Sat May 10 16:31:56 2014 us=781412   shared_secret_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=781577   key_direction = 1
Sat May 10 16:31:56 2014 us=782167   ciphername_defined = ENABLED
Sat May 10 16:31:56 2014 us=782585   ciphername = 'AES-128-CBC'
Sat May 10 16:31:56 2014 us=782756   authname_defined = ENABLED
Sat May 10 16:31:56 2014 us=782919   authname = 'SHA1'
Sat May 10 16:31:56 2014 us=783079   prng_hash = 'SHA1'
Sat May 10 16:31:56 2014 us=783240   prng_nonce_secret_len = 16
Sat May 10 16:31:56 2014 us=783400   keysize = 0
Sat May 10 16:31:56 2014 us=783561   engine = DISABLED
Sat May 10 16:31:56 2014 us=783721   replay = ENABLED
Sat May 10 16:31:56 2014 us=783879   mute_replay_warnings = DISABLED
Sat May 10 16:31:56 2014 us=784043   replay_window = 64
Sat May 10 16:31:56 2014 us=784207   replay_time = 15
Sat May 10 16:31:56 2014 us=784368   packet_id_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=784527   use_iv = ENABLED
Sat May 10 16:31:56 2014 us=784691   test_crypto = DISABLED
Sat May 10 16:31:56 2014 us=784848   tls_server = ENABLED
Sat May 10 16:31:56 2014 us=785008   tls_client = DISABLED
Sat May 10 16:31:56 2014 us=785167   key_method = 2
Sat May 10 16:31:56 2014 us=785428   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Sat May 10 16:31:56 2014 us=785598   ca_path = '[UNDEF]'
Sat May 10 16:31:56 2014 us=785763   dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Sat May 10 16:31:56 2014 us=785928   cert_file = '/etc/openvpn/easy-rsa/keys/serv.crt'
Sat May 10 16:31:56 2014 us=786093   priv_key_file = '/etc/openvpn/easy-rsa/keys/serv.key'
Sat May 10 16:31:56 2014 us=786251   pkcs12_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=786414   cipher_list = '[UNDEF]'
Sat May 10 16:31:56 2014 us=786575   tls_verify = '[UNDEF]'
Sat May 10 16:31:56 2014 us=786735   tls_export_cert = '[UNDEF]'
Sat May 10 16:31:56 2014 us=786898   tls_remote = '[UNDEF]'
Sat May 10 16:31:56 2014 us=787060   crl_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=787223   ns_cert_type = 0
Sat May 10 16:31:56 2014 us=787471   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=787647   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=787815   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=787979   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788142   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788304   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788463   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788621   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788779   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=788945   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789105   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789266   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789431   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789592   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789756   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=789917   remote_cert_ku[i] = 0
Sat May 10 16:31:56 2014 us=790079   remote_cert_eku = '[UNDEF]'
Sat May 10 16:31:56 2014 us=790239   tls_timeout = 2
Sat May 10 16:31:56 2014 us=790399   renegotiate_bytes = 0
Sat May 10 16:31:56 2014 us=790561   renegotiate_packets = 0
Sat May 10 16:31:56 2014 us=790719   renegotiate_seconds = 3600
Sat May 10 16:31:56 2014 us=790880   handshake_window = 60
Sat May 10 16:31:56 2014 us=791038   transition_window = 3600
Sat May 10 16:31:56 2014 us=791198   single_session = DISABLED
Sat May 10 16:31:56 2014 us=791354   push_peer_info = DISABLED
Sat May 10 16:31:56 2014 us=791512   tls_exit = DISABLED
Sat May 10 16:31:56 2014 us=791772   tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key'
Sat May 10 16:31:56 2014 us=791976   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=792147   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=792311   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=792473   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=792668   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=792845   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793010   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793173   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793341   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793504   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793667   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793832   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=793994   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=794158   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=794322   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=794486   pkcs11_protected_authentication = DISABLED
Sat May 10 16:31:56 2014 us=794656   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=794826   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=794992   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=795156   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=795369   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=795668   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=795849   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796017   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796188   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796355   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796525   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796698   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=796863   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=797030   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=797197   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=797358   pkcs11_private_mode = 00000000
Sat May 10 16:31:56 2014 us=797522   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=797686   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=797848   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798009   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798171   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798335   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798496   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798660   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798824   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=798988   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799148   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799312   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799471   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799631   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799793   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=799958   pkcs11_cert_private = DISABLED
Sat May 10 16:31:56 2014 us=800120   pkcs11_pin_cache_period = -1
Sat May 10 16:31:56 2014 us=800280   pkcs11_id = '[UNDEF]'
Sat May 10 16:31:56 2014 us=800444   pkcs11_id_management = DISABLED
Sat May 10 16:31:56 2014 us=800653   server_network = 10.8.0.0
Sat May 10 16:31:56 2014 us=800836   server_netmask = 255.255.255.0
Sat May 10 16:31:56 2014 us=801058   server_network_ipv6 = ::
Sat May 10 16:31:56 2014 us=801233   server_netbits_ipv6 = 0
Sat May 10 16:31:56 2014 us=801413   server_bridge_ip = 0.0.0.0
Sat May 10 16:31:56 2014 us=801596   server_bridge_netmask = 0.0.0.0
Sat May 10 16:31:56 2014 us=801886   server_bridge_pool_start = 0.0.0.0
Sat May 10 16:31:56 2014 us=802079   server_bridge_pool_end = 0.0.0.0
Sat May 10 16:31:56 2014 us=802247   push_entry = 'route 10.8.0.1 255.255.255.255'
Sat May 10 16:31:56 2014 us=802412   push_entry = 'route 10.8.0.0 255.255.255.0'
Sat May 10 16:31:56 2014 us=802579   push_entry = 'route 192.168.0.3 255.255.255.0'
Sat May 10 16:31:56 2014 us=802743   push_entry = 'dhcp-option MyDnsServer'
Sat May 10 16:31:56 2014 us=802904   push_entry = 'redirect-gateway def1'
Sat May 10 16:31:56 2014 us=803068   push_entry = 'route 10.8.0.0 255.255.255.0'
Sat May 10 16:31:56 2014 us=803233   push_entry = 'topology net30'
Sat May 10 16:31:56 2014 us=803482   push_entry = 'ping 10'
Sat May 10 16:31:56 2014 us=803658   push_entry = 'ping-restart 120'
Sat May 10 16:31:56 2014 us=803829   ifconfig_pool_defined = ENABLED
Sat May 10 16:31:56 2014 us=804009   ifconfig_pool_start = 10.8.0.4
Sat May 10 16:31:56 2014 us=804193   ifconfig_pool_end = 10.8.0.251
Sat May 10 16:31:56 2014 us=804374   ifconfig_pool_netmask = 0.0.0.0
Sat May 10 16:31:56 2014 us=804537   ifconfig_pool_persist_filename = '[UNDEF]'
Sat May 10 16:31:56 2014 us=804704   ifconfig_pool_persist_refresh_freq = 600
Sat May 10 16:31:56 2014 us=804868   ifconfig_ipv6_pool_defined = DISABLED
Sat May 10 16:31:56 2014 us=805042   ifconfig_ipv6_pool_base = ::
Sat May 10 16:31:56 2014 us=805206   ifconfig_ipv6_pool_netbits = 0
Sat May 10 16:31:56 2014 us=805363   n_bcast_buf = 256
Sat May 10 16:31:56 2014 us=805521   tcp_queue_limit = 64
Sat May 10 16:31:56 2014 us=805681   real_hash_size = 256
Sat May 10 16:31:56 2014 us=805840   virtual_hash_size = 256
Sat May 10 16:31:56 2014 us=806081   client_connect_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=806251   learn_address_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=806414   client_disconnect_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=806579   client_config_dir = '[UNDEF]'
Sat May 10 16:31:56 2014 us=806736   ccd_exclusive = DISABLED
Sat May 10 16:31:56 2014 us=806887   tmp_dir = '/tmp'
Sat May 10 16:31:56 2014 us=807046   push_ifconfig_defined = DISABLED
Sat May 10 16:31:56 2014 us=807227   push_ifconfig_local = 0.0.0.0
Sat May 10 16:31:56 2014 us=807405   push_ifconfig_remote_netmask = 0.0.0.0
Sat May 10 16:31:56 2014 us=807571   push_ifconfig_ipv6_defined = DISABLED
Sat May 10 16:31:56 2014 us=807751   push_ifconfig_ipv6_local = ::/0
Sat May 10 16:31:56 2014 us=807926   push_ifconfig_ipv6_remote = ::
Sat May 10 16:31:56 2014 us=808090   enable_c2c = ENABLED
Sat May 10 16:31:56 2014 us=808249   duplicate_cn = ENABLED
Sat May 10 16:31:56 2014 us=808409   cf_max = 0
Sat May 10 16:31:56 2014 us=808567   cf_per = 0
Sat May 10 16:31:56 2014 us=808722   max_clients = 1024
Sat May 10 16:31:56 2014 us=808880   max_routes_per_client = 256
Sat May 10 16:31:56 2014 us=809042   auth_user_pass_verify_script = '[UNDEF]'
Sat May 10 16:31:56 2014 us=809206   auth_user_pass_verify_script_via_file = DISABLED
Sat May 10 16:31:56 2014 us=809369   ssl_flags = 0
Sat May 10 16:31:56 2014 us=809531   port_share_host = '[UNDEF]'
Sat May 10 16:31:56 2014 us=809695   port_share_port = 0
Sat May 10 16:31:56 2014 us=809854   client = DISABLED
Sat May 10 16:31:56 2014 us=810011   pull = DISABLED
Sat May 10 16:31:56 2014 us=810171   auth_user_pass_file = '[UNDEF]'
Sat May 10 16:31:56 2014 us=810351 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Sat May 10 16:31:56 2014 us=812457 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat May 10 16:31:56 2014 us=812746 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 10 16:31:56 2014 us=853208 Diffie-Hellman initialized with 1024 bit key
Sat May 10 16:31:56 2014 us=866946 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Sat May 10 16:31:56 2014 us=867403 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 10 16:31:56 2014 us=867688 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 10 16:31:56 2014 us=867976 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat May 10 16:31:56 2014 us=868337 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat May 10 16:31:56 2014 us=869922 ROUTE default_gateway=192.168.0.1
Sat May 10 16:31:56 2014 us=883136 TUN/TAP device tun0 opened
Sat May 10 16:31:56 2014 us=883617 TUN/TAP TX queue length set to 100
Sat May 10 16:31:56 2014 us=883872 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat May 10 16:31:56 2014 us=884280 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sat May 10 16:31:56 2014 us=904357 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sat May 10 16:31:56 2014 us=922768 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 10 16:31:56 2014 us=938686 GID set to nogroup
Sat May 10 16:31:56 2014 us=939276 UID set to nobody
Sat May 10 16:31:56 2014 us=939792 UDPv4 link local (bound): [AF_INET]192.168.0.3:1194
Sat May 10 16:31:56 2014 us=939990 UDPv4 link remote: [undef]
Sat May 10 16:31:56 2014 us=940204 MULTI: multi_init called, r=256 v=256
Sat May 10 16:31:56 2014 us=941094 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat May 10 16:31:56 2014 us=941617 Initialization Sequence Completed

Thanks again.