Server passing traffic to client

sniper7kills

All,

I have a VPS (centos) that has a working VPN (I can connect to it and get to the internet). I'm now trying to forward that VPN outbound traffic to another VPN (also working).

I can get both the client and server to work, but not at the same time. As soon as the client starts I can't connect to my server.
I know it will probably be something stupid I'm missing and hopefully someone can spot what I'm doing wrong.

VPN Server

port 53
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log         openvpn-server.log
verb 3

Client

client
dev tun1
proto udp
remote us1.vpn.goldenfrog.com 1194
remote us2.vpn.goldenfrog.com 1194
remote us3.vpn.goldenfrog.com 1194
remote us4.vpn.goldenfrog.com 1194
remote-random
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca vyprVPN-ca.crt
auth-user-pass vyprVPN-login.txt
comp-lzo
log         openvpn-client.log
verb 3

I jumped onto IRC earlier and pekster was helping me out:

(4:37:45 PM) sniper7kills: Hey all, I was wondering if anyone has set up a server with a openvpn server routing traffic through an openvpn client
(4:45:38 PM) pekster: Nothing stops you from doing that, although you'd probably need some --client-connect script to handle the routing changes
(4:49:16 PM) propheticsquiddy left the room (quit: Quit: Leaving).
(4:53:42 PM) sniper7kills: Well I have it setup but once the openvpn client starts I lose the ability to connect with the server on eth0
(4:53:57 PM) sniper7kills: so I can't connect to the server
(4:55:10 PM) pekster: Right, becuase it's doing exactly what you've asked and routing _all_ traffic through the VPN. ie: you broke return routing for non-VPN (externally-sourced) requests
(4:55:37 PM) pekster: You'll need policy routing to fix that, which is defining routing on the server to send back anything that arrives on the physical interface to the LAN gateway, not via the VPN
(5:00:50 PM) sniper7kills: any chance you have a link with additional information? or would it just be an iptables route I should add?
(5:01:38 PM) pekster: 2nd routing table, a routing rule, and a couple of conntrack rules to set up the connection tracking/marking
(5:01:51 PM) pekster: Plus no rp_filter in your kernel
(5:02:30 PM) elfixit1 left the room (quit: Ping timeout: 276 seconds).
(5:07:23 PM) pekster: I'll see about throwing together a wiki page for that as none exists nwo

But while he throws together a wiki page, I was hoping someone else could help me out.

sniper7kills

Pekster got back to me with: https://community.openvpn.net/openvpn/wiki/Concepts-PolicyRouting-Linux

I've also set the server port back to default

So now, I've ran:

iptables -t mangle -A PREROUTING -m conntrack --ctstate NEW -i eth0 -j CONNMARK --set-mark 0x1
iptables -t mangle -A OUTPUT -m connmark --mark 0x1 -j CONNMARK --restore-mark

ip route add default via MY.DF.GW.IP table 100
ip rule add fwmark 0x1 table 100

Now I can connect to the server again but the TLS handshake is timing out.

Client Log:

Sun May 11 02:30:28 2014   pkcs11_protected_authentication = DISABLED
Sun May 11 02:30:28 2014   pkcs11_protected_authentication = DISABLED
Sun May 11 02:30:28 2014   pkcs11_protected_authentication = DISABLED
Sun May 11 02:30:28 2014   pkcs11_protected_authentication = DISABLED
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_private_mode = 00000000
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_cert_private = DISABLED
Sun May 11 02:30:28 2014   pkcs11_pin_cache_period = -1
Sun May 11 02:30:28 2014   pkcs11_id = '[UNDEF]'
Sun May 11 02:30:28 2014   pkcs11_id_management = DISABLED
Sun May 11 02:30:28 2014   server_network = 0.0.0.0
Sun May 11 02:30:28 2014   server_netmask = 0.0.0.0
Sun May 11 02:30:28 2014   server_network_ipv6 = ::
Sun May 11 02:30:28 2014   server_netbits_ipv6 = 0
Sun May 11 02:30:28 2014   server_bridge_ip = 0.0.0.0
Sun May 11 02:30:28 2014   server_bridge_netmask = 0.0.0.0
Sun May 11 02:30:28 2014   server_bridge_pool_start = 0.0.0.0
Sun May 11 02:30:28 2014   server_bridge_pool_end = 0.0.0.0
Sun May 11 02:30:28 2014   ifconfig_pool_defined = DISABLED
Sun May 11 02:30:28 2014   ifconfig_pool_start = 0.0.0.0
Sun May 11 02:30:28 2014   ifconfig_pool_end = 0.0.0.0
Sun May 11 02:30:28 2014   ifconfig_pool_netmask = 0.0.0.0
Sun May 11 02:30:28 2014   ifconfig_pool_persist_filename = '[UNDEF]'
Sun May 11 02:30:28 2014   ifconfig_pool_persist_refresh_freq = 600
Sun May 11 02:30:28 2014   ifconfig_ipv6_pool_defined = DISABLED
Sun May 11 02:30:28 2014   ifconfig_ipv6_pool_base = ::
Sun May 11 02:30:28 2014   ifconfig_ipv6_pool_netbits = 0
Sun May 11 02:30:28 2014   n_bcast_buf = 256
Sun May 11 02:30:28 2014   tcp_queue_limit = 64
Sun May 11 02:30:28 2014   real_hash_size = 256
Sun May 11 02:30:28 2014   virtual_hash_size = 256
Sun May 11 02:30:28 2014   client_connect_script = '[UNDEF]'
Sun May 11 02:30:28 2014   learn_address_script = '[UNDEF]'
Sun May 11 02:30:28 2014   client_disconnect_script = '[UNDEF]'
Sun May 11 02:30:28 2014   client_config_dir = '[UNDEF]'
Sun May 11 02:30:28 2014   ccd_exclusive = DISABLED
Sun May 11 02:30:28 2014   tmp_dir = 'C:\Users\SNIPER~1\AppData\Local\Temp\'
Sun May 11 02:30:28 2014   push_ifconfig_defined = DISABLED
Sun May 11 02:30:28 2014   push_ifconfig_local = 0.0.0.0
Sun May 11 02:30:28 2014   push_ifconfig_remote_netmask = 0.0.0.0
Sun May 11 02:30:28 2014   push_ifconfig_ipv6_defined = DISABLED
Sun May 11 02:30:28 2014   push_ifconfig_ipv6_local = ::/0
Sun May 11 02:30:28 2014   push_ifconfig_ipv6_remote = ::
Sun May 11 02:30:28 2014   enable_c2c = DISABLED
Sun May 11 02:30:28 2014   duplicate_cn = DISABLED
Sun May 11 02:30:28 2014   cf_max = 0
Sun May 11 02:30:28 2014   cf_per = 0
Sun May 11 02:30:28 2014   max_clients = 1024
Sun May 11 02:30:28 2014   max_routes_per_client = 256
Sun May 11 02:30:28 2014   auth_user_pass_verify_script = '[UNDEF]'
Sun May 11 02:30:28 2014   auth_user_pass_verify_script_via_file = DISABLED
Sun May 11 02:30:28 2014   client = ENABLED
Sun May 11 02:30:28 2014   pull = ENABLED
Sun May 11 02:30:28 2014   auth_user_pass_file = '[UNDEF]'
Sun May 11 02:30:28 2014   show_net_up = DISABLED
Sun May 11 02:30:28 2014   route_method = 0
Sun May 11 02:30:28 2014   ip_win32_defined = DISABLED
Sun May 11 02:30:28 2014   ip_win32_type = 3
Sun May 11 02:30:28 2014   dhcp_masq_offset = 0
Sun May 11 02:30:28 2014   dhcp_lease_time = 31536000
Sun May 11 02:30:28 2014   tap_sleep = 0
Sun May 11 02:30:28 2014   dhcp_options = DISABLED
Sun May 11 02:30:28 2014   dhcp_renew = DISABLED
Sun May 11 02:30:28 2014   dhcp_pre_release = DISABLED
Sun May 11 02:30:28 2014   dhcp_release = DISABLED
Sun May 11 02:30:28 2014   domain = '[UNDEF]'
Sun May 11 02:30:28 2014   netbios_scope = '[UNDEF]'
Sun May 11 02:30:28 2014   netbios_node_type = 0
Sun May 11 02:30:28 2014   disable_nbt = DISABLED
Sun May 11 02:30:28 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May  2 2014
Sun May 11 02:30:28 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05
Sun May 11 02:30:28 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun May 11 02:30:28 2014 Need hold release from management interface, waiting...
Sun May 11 02:30:29 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun May 11 02:30:29 2014 MANAGEMENT: CMD 'state on'
Sun May 11 02:30:29 2014 MANAGEMENT: CMD 'log all on'
Sun May 11 02:30:30 2014 MANAGEMENT: CMD 'hold off'
Sun May 11 02:30:30 2014 MANAGEMENT: CMD 'hold release'
Sun May 11 02:30:30 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun May 11 02:30:30 2014 LZO compression initialized
Sun May 11 02:30:30 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun May 11 02:30:30 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun May 11 02:30:30 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun May 11 02:30:30 2014 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun May 11 02:30:30 2014 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun May 11 02:30:30 2014 Local Options hash (VER=V4): '41690919'
Sun May 11 02:30:30 2014 Expected Remote Options hash (VER=V4): '530fdded'
Sun May 11 02:30:30 2014 UDPv4 link local: [undef]
Sun May 11 02:30:30 2014 UDPv4 link remote: [AF_INET]162.248.163.202:1194
Sun May 11 02:30:30 2014 MANAGEMENT: >STATE:1399764630,WAIT,,,
Sun May 11 02:30:30 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:30:30 2014 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Sun May 11 02:30:32 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:30:36 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:30:44 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:31:00 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:31:30 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun May 11 02:31:30 2014 TLS Error: TLS handshake failed
Sun May 11 02:31:30 2014 TCP/UDP: Closing socket
Sun May 11 02:31:30 2014 SIGUSR1[soft,tls-error] received, process restarting
Sun May 11 02:31:30 2014 MANAGEMENT: >STATE:1399764690,RECONNECTING,tls-error,,
Sun May 11 02:31:30 2014 Restart pause, 2 second(s)
Sun May 11 02:31:32 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun May 11 02:31:32 2014 Re-using SSL/TLS context
Sun May 11 02:31:32 2014 LZO compression initialized
Sun May 11 02:31:32 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun May 11 02:31:32 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun May 11 02:31:32 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun May 11 02:31:32 2014 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun May 11 02:31:32 2014 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun May 11 02:31:32 2014 Local Options hash (VER=V4): '41690919'
Sun May 11 02:31:32 2014 Expected Remote Options hash (VER=V4): '530fdded'
Sun May 11 02:31:32 2014 UDPv4 link local: [undef]
Sun May 11 02:31:32 2014 UDPv4 link remote: [AF_INET]162.248.163.202:1194
Sun May 11 02:31:32 2014 MANAGEMENT: >STATE:1399764692,WAIT,,,
Sun May 11 02:31:32 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:31:32 2014 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Sun May 11 02:31:34 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:31:38 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 11 02:31:46 2014 UDPv4 WRITE [14] to [AF_INET]162.248.163.202:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0

And the Server Log:

Sat May 10 19:35:12 2014 us=598598 184.105.255.227:60663 Local Options hash (VER=V4): '530fdded'
Sat May 10 19:35:12 2014 us=598614 184.105.255.227:60663 Expected Remote Options hash (VER=V4): '41690919'
Sat May 10 19:35:12 2014 us=598628 184.105.255.227:60663 SENT PING
Sat May 10 19:35:12 2014 us=598646 184.105.255.227:60663 GET INST BY REAL: 184.105.255.227:60663 [created]
Sat May 10 19:35:12 2014 us=598663 184.105.255.227:60663 UDPv4 READ [14] from [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:12 2014 us=598676 184.105.255.227:60663 TLS: Initial packet from [AF_INET]184.105.255.227:60663, sid=5d8246b5 f9d4d04f
Sat May 10 19:35:12 2014 us=598703 184.105.255.227:60663 UDPv4 WRITE [26] to [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sat May 10 19:35:12 2014 us=714000 184.105.255.227:51295 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat May 10 19:35:12 2014 us=714051 184.105.255.227:51295 TLS Error: TLS handshake failed
Sat May 10 19:35:12 2014 us=714061 184.105.255.227:51295 PID packet_id_free
Sat May 10 19:35:12 2014 us=714105 184.105.255.227:51295 PID packet_id_free
Sat May 10 19:35:12 2014 us=714119 184.105.255.227:51295 PID packet_id_free
Sat May 10 19:35:12 2014 us=714135 184.105.255.227:51295 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:35:12 2014 us=714203 184.105.255.227:51295 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:35:12 2014 us=714223 184.105.255.227:51295 SIGUSR1[soft,tls-error] received, client-instance restarting
Sat May 10 19:35:12 2014 us=714231 MULTI: multi_close_instance called
Sat May 10 19:35:12 2014 us=714244 PID packet_id_free
Sat May 10 19:35:12 2014 us=714258 PID packet_id_free
Sat May 10 19:35:12 2014 us=714273 PID packet_id_free
Sat May 10 19:35:12 2014 us=714282 PID packet_id_free
Sat May 10 19:35:12 2014 us=714298 PID packet_id_free
Sat May 10 19:35:12 2014 us=714308 PID packet_id_free
Sat May 10 19:35:12 2014 us=714316 PID packet_id_free
Sat May 10 19:35:12 2014 us=714324 PID packet_id_free
Sat May 10 19:35:12 2014 us=714334 PID packet_id_free
Sat May 10 19:35:13 2014 us=724442 MULTI: REAP range 240 -> 256
Sat May 10 19:35:14 2014 us=656377 MULTI: REAP range 0 -> 16
Sat May 10 19:35:14 2014 us=656445 GET INST BY REAL: 184.105.255.227:60663 [succeeded]
Sat May 10 19:35:14 2014 us=656464 184.105.255.227:60663 UDPv4 READ [14] from [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:14 2014 us=656499 184.105.255.227:60663 UDPv4 WRITE [26] to [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sat May 10 19:35:15 2014 us=667616 MULTI: REAP range 16 -> 32
Sat May 10 19:35:16 2014 us=678777 MULTI: REAP range 32 -> 48
Sat May 10 19:35:17 2014 us=689932 MULTI: REAP range 48 -> 64
Sat May 10 19:35:18 2014 us=701090 MULTI: REAP range 64 -> 80
Sat May 10 19:35:18 2014 us=701203 184.105.255.227:60663 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:18 2014 us=772591 GET INST BY REAL: 184.105.255.227:60663 [succeeded]
Sat May 10 19:35:18 2014 us=772668 184.105.255.227:60663 UDPv4 READ [14] from [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:18 2014 us=772727 184.105.255.227:60663 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:60663: P_ACK_V1 kid=0 [ 0 ]
Sat May 10 19:35:19 2014 us=783830 MULTI: REAP range 80 -> 96
Sat May 10 19:35:20 2014 us=795001 MULTI: REAP range 96 -> 112
Sat May 10 19:35:21 2014 us=806205 MULTI: REAP range 112 -> 128
Sat May 10 19:35:22 2014 us=817355 MULTI: REAP range 128 -> 144
Sat May 10 19:35:23 2014 us=975653 MULTI: REAP range 144 -> 160
Sat May 10 19:35:25 2014 us=133952 MULTI: REAP range 160 -> 176
Sat May 10 19:35:26 2014 us=292227 MULTI: REAP range 176 -> 192
Sat May 10 19:35:26 2014 us=292311 184.105.255.227:60663 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:27 2014 us=35199 MULTI: REAP range 192 -> 208
Sat May 10 19:35:27 2014 us=35284 GET INST BY REAL: 184.105.255.227:60663 [succeeded]
Sat May 10 19:35:27 2014 us=35319 184.105.255.227:60663 UDPv4 READ [14] from [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:27 2014 us=35396 184.105.255.227:60663 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:60663: P_ACK_V1 kid=0 [ 0 ]
Sat May 10 19:35:28 2014 us=193664 MULTI: REAP range 208 -> 224
Sat May 10 19:35:29 2014 us=352002 MULTI: REAP range 224 -> 240
Sat May 10 19:35:30 2014 us=510294 MULTI: REAP range 240 -> 256
Sat May 10 19:35:31 2014 us=668625 MULTI: REAP range 0 -> 16
Sat May 10 19:35:32 2014 us=826934 MULTI: REAP range 16 -> 32
Sat May 10 19:35:33 2014 us=870150 MULTI: REAP range 32 -> 48
Sat May 10 19:35:34 2014 us=913356 MULTI: REAP range 48 -> 64
Sat May 10 19:35:35 2014 us=956592 MULTI: REAP range 64 -> 80
Sat May 10 19:35:36 2014 us=999802 MULTI: REAP range 80 -> 96
Sat May 10 19:35:38 2014 us=42993 MULTI: REAP range 96 -> 112
Sat May 10 19:35:38 2014 us=43054 184.105.255.227:60663 SENT PING
Sat May 10 19:35:39 2014 us=86209 MULTI: REAP range 112 -> 128
Sat May 10 19:35:40 2014 us=129510 MULTI: REAP range 128 -> 144
Sat May 10 19:35:41 2014 us=172666 MULTI: REAP range 144 -> 160
Sat May 10 19:35:42 2014 us=215841 MULTI: REAP range 160 -> 176
Sat May 10 19:35:42 2014 us=215933 184.105.255.227:60663 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:43 2014 us=244092 MULTI: REAP range 176 -> 192
Sat May 10 19:35:43 2014 us=630828 GET INST BY REAL: 184.105.255.227:60663 [succeeded]
Sat May 10 19:35:43 2014 us=630888 184.105.255.227:60663 UDPv4 READ [14] from [AF_INET]184.105.255.227:60663: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:35:43 2014 us=630942 184.105.255.227:60663 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:60663: P_ACK_V1 kid=0 [ 0 ]
Sat May 10 19:35:44 2014 us=659094 MULTI: REAP range 192 -> 208
Sat May 10 19:35:45 2014 us=687391 MULTI: REAP range 208 -> 224
Sat May 10 19:35:46 2014 us=715583 MULTI: REAP range 224 -> 240
Sat May 10 19:35:47 2014 us=743736 MULTI: REAP range 240 -> 256
Sat May 10 19:35:48 2014 us=771902 MULTI: REAP range 0 -> 16
Sat May 10 19:35:49 2014 us=800064 MULTI: REAP range 16 -> 32
Sat May 10 19:35:50 2014 us=828232 MULTI: REAP range 32 -> 48
Sat May 10 19:35:51 2014 us=856390 MULTI: REAP range 48 -> 64
Sat May 10 19:35:52 2014 us=884557 MULTI: REAP range 64 -> 80
Sat May 10 19:35:54 2014 us=19856 MULTI: REAP range 80 -> 96
Sat May 10 19:35:54 2014 us=19919 184.105.255.227:60663 SENT PING
Sat May 10 19:35:55 2014 us=155120 MULTI: REAP range 96 -> 112
Sat May 10 19:35:56 2014 us=290417 MULTI: REAP range 112 -> 128
Sat May 10 19:35:57 2014 us=425707 MULTI: REAP range 128 -> 144
Sat May 10 19:35:58 2014 us=560962 MULTI: REAP range 144 -> 160
Sat May 10 19:35:59 2014 us=696283 MULTI: REAP range 160 -> 176
Sat May 10 19:36:00 2014 us=831618 MULTI: REAP range 176 -> 192
Sat May 10 19:36:01 2014 us=966900 MULTI: REAP range 192 -> 208
Sat May 10 19:36:03 2014 us=102212 MULTI: REAP range 208 -> 224
Sat May 10 19:36:04 2014 us=277518 MULTI: REAP range 224 -> 240
Sat May 10 19:36:04 2014 us=277585 184.105.255.227:60663 SENT PING
Sat May 10 19:36:05 2014 us=452902 MULTI: REAP range 240 -> 256
Sat May 10 19:36:06 2014 us=628239 MULTI: REAP range 0 -> 16
Sat May 10 19:36:07 2014 us=803559 MULTI: REAP range 16 -> 32
Sat May 10 19:36:08 2014 us=978917 MULTI: REAP range 32 -> 48
Sat May 10 19:36:10 2014 us=154268 MULTI: REAP range 48 -> 64
Sat May 10 19:36:11 2014 us=329570 MULTI: REAP range 64 -> 80
Sat May 10 19:36:12 2014 us=504895 MULTI: REAP range 80 -> 96
Sat May 10 19:36:12 2014 us=504971 184.105.255.227:60663 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat May 10 19:36:12 2014 us=504991 184.105.255.227:60663 TLS Error: TLS handshake failed
Sat May 10 19:36:12 2014 us=505006 184.105.255.227:60663 PID packet_id_free
Sat May 10 19:36:12 2014 us=505061 184.105.255.227:60663 PID packet_id_free
Sat May 10 19:36:12 2014 us=505080 184.105.255.227:60663 PID packet_id_free
Sat May 10 19:36:12 2014 us=505105 184.105.255.227:60663 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:12 2014 us=505159 184.105.255.227:60663 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:12 2014 us=505216 184.105.255.227:60663 SIGUSR1[soft,tls-error] received, client-instance restarting
Sat May 10 19:36:12 2014 us=505235 MULTI: multi_close_instance called
Sat May 10 19:36:12 2014 us=505254 PID packet_id_free
Sat May 10 19:36:12 2014 us=505279 PID packet_id_free
Sat May 10 19:36:12 2014 us=505296 PID packet_id_free
Sat May 10 19:36:12 2014 us=505310 PID packet_id_free
Sat May 10 19:36:12 2014 us=505334 PID packet_id_free
Sat May 10 19:36:12 2014 us=505350 PID packet_id_free
Sat May 10 19:36:12 2014 us=505365 PID packet_id_free
Sat May 10 19:36:12 2014 us=505379 PID packet_id_free
Sat May 10 19:36:12 2014 us=505394 PID packet_id_free
Sat May 10 19:36:14 2014 us=482562 MULTI: REAP range 96 -> 112
Sat May 10 19:36:14 2014 us=482628 MULTI: multi_create_instance called
Sat May 10 19:36:14 2014 us=482663 184.105.255.227:51065 Re-using SSL/TLS context
Sat May 10 19:36:14 2014 us=482678 184.105.255.227:51065 LZO compression initialized
Sat May 10 19:36:14 2014 us=482688 184.105.255.227:51065 MTU DYNAMIC mtu=0, flags=1, 0 -> 138
Sat May 10 19:36:14 2014 us=482705 184.105.255.227:51065 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:14 2014 us=482750 184.105.255.227:51065 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:14 2014 us=482764 184.105.255.227:51065 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:14 2014 us=482790 184.105.255.227:51065 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Sat May 10 19:36:14 2014 us=482804 184.105.255.227:51065 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 10 19:36:14 2014 us=482813 184.105.255.227:51065 MTU DYNAMIC mtu=1450, flags=2, 1542 -> 1450
Sat May 10 19:36:14 2014 us=482823 184.105.255.227:51065 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 10 19:36:14 2014 us=482950 184.105.255.227:51065 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat May 10 19:36:14 2014 us=482963 184.105.255.227:51065 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat May 10 19:36:14 2014 us=482982 184.105.255.227:51065 Local Options hash (VER=V4): '530fdded'
Sat May 10 19:36:14 2014 us=482997 184.105.255.227:51065 Expected Remote Options hash (VER=V4): '41690919'
Sat May 10 19:36:14 2014 us=483010 184.105.255.227:51065 SENT PING
Sat May 10 19:36:14 2014 us=483027 184.105.255.227:51065 GET INST BY REAL: 184.105.255.227:51065 [created]
Sat May 10 19:36:14 2014 us=483045 184.105.255.227:51065 UDPv4 READ [14] from [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:14 2014 us=483059 184.105.255.227:51065 TLS: Initial packet from [AF_INET]184.105.255.227:51065, sid=71d62d2e 41b48327
Sat May 10 19:36:14 2014 us=483085 184.105.255.227:51065 UDPv4 WRITE [26] to [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sat May 10 19:36:15 2014 us=506253 MULTI: REAP range 112 -> 128
Sat May 10 19:36:16 2014 us=529446 MULTI: REAP range 128 -> 144
Sat May 10 19:36:16 2014 us=529534 184.105.255.227:51065 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:16 2014 us=740349 GET INST BY REAL: 184.105.255.227:51065 [succeeded]
Sat May 10 19:36:16 2014 us=740409 184.105.255.227:51065 UDPv4 READ [14] from [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:16 2014 us=740463 184.105.255.227:51065 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:51065: P_ACK_V1 kid=0 [ 0 ]
Sat May 10 19:36:17 2014 us=763596 MULTI: REAP range 144 -> 160
Sat May 10 19:36:18 2014 us=786786 MULTI: REAP range 160 -> 176
Sat May 10 19:36:19 2014 us=809925 MULTI: REAP range 176 -> 192
Sat May 10 19:36:20 2014 us=833073 MULTI: REAP range 192 -> 208
Sat May 10 19:36:20 2014 us=833155 184.105.255.227:51065 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:21 2014 us=255931 MULTI: REAP range 208 -> 224
Sat May 10 19:36:21 2014 us=256001 GET INST BY REAL: 184.105.255.227:51065 [succeeded]
Sat May 10 19:36:21 2014 us=256022 184.105.255.227:51065 UDPv4 READ [14] from [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:21 2014 us=256075 184.105.255.227:51065 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:51065: P_ACK_V1 kid=0 [ 0 ]
Sat May 10 19:36:22 2014 us=279203 MULTI: REAP range 224 -> 240
Sat May 10 19:36:23 2014 us=302376 MULTI: REAP range 240 -> 256
Sat May 10 19:36:24 2014 us=325533 MULTI: REAP range 0 -> 16
Sat May 10 19:36:25 2014 us=481838 MULTI: REAP range 16 -> 32
Sat May 10 19:36:26 2014 us=638127 MULTI: REAP range 32 -> 48
Sat May 10 19:36:27 2014 us=794457 MULTI: REAP range 48 -> 64
Sat May 10 19:36:28 2014 us=891098 MULTI: REAP range 64 -> 80
Sat May 10 19:36:28 2014 us=891168 GET INST BY REAL: 184.105.255.227:51065 [succeeded]
Sat May 10 19:36:28 2014 us=891221 184.105.255.227:51065 UDPv4 READ [14] from [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:28 2014 us=891258 184.105.255.227:51065 UDPv4 WRITE [26] to [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sat May 10 19:36:30 2014 us=47529 MULTI: REAP range 80 -> 96
Sat May 10 19:36:31 2014 us=204448 MULTI: REAP range 96 -> 112
Sat May 10 19:36:32 2014 us=360747 MULTI: REAP range 112 -> 128
Sat May 10 19:36:33 2014 us=517030 MULTI: REAP range 128 -> 144
Sat May 10 19:36:34 2014 us=673332 MULTI: REAP range 144 -> 160
Sat May 10 19:36:35 2014 us=845632 MULTI: REAP range 160 -> 176
Sat May 10 19:36:37 2014 us=17945 MULTI: REAP range 176 -> 192
Sat May 10 19:36:38 2014 us=190270 MULTI: REAP range 192 -> 208
Sat May 10 19:36:38 2014 us=190333 184.105.255.227:51065 SENT PING
Sat May 10 19:36:39 2014 us=362576 MULTI: REAP range 208 -> 224
Sat May 10 19:36:40 2014 us=534872 MULTI: REAP range 224 -> 240
Sat May 10 19:36:41 2014 us=707227 MULTI: REAP range 240 -> 256
Sat May 10 19:36:42 2014 us=879521 MULTI: REAP range 0 -> 16
Sat May 10 19:36:44 2014 us=51815 MULTI: REAP range 16 -> 32
Sat May 10 19:36:44 2014 us=52020 184.105.255.227:51065 UDPv4 WRITE [14] to [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:45 2014 us=168331 MULTI: REAP range 32 -> 48
Sat May 10 19:36:45 2014 us=522916 GET INST BY REAL: 184.105.255.227:51065 [succeeded]
Sat May 10 19:36:45 2014 us=522968 184.105.255.227:51065 UDPv4 READ [14] from [AF_INET]184.105.255.227:51065: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat May 10 19:36:45 2014 us=523018 184.105.255.227:51065 UDPv4 WRITE [22] to [AF_INET]184.105.255.227:51065: P_ACK_V1 kid=0 [ 0 ]