Nizhpot
Goal: route all traffic from one LAN (192.168.0) machine (W7) via VPN server far away to Internet
Client apparently sends IPv6 address in response to server read and server drops packet.
Error message in openvpn.log:
Mon Jun 9 13:11:05 2014 us=336040 key-001/63.226.81.167:51950 UDPv4 READ [165] from [AF_INET]63.226.81.167:51950: P_DATA_V1 kid=0 DATA len=164
Mon Jun 9 13:11:05 2014 us=336129 key-001/63.226.81.167:51950 MULTI: bad source address from client [fe80::307e:d05f:6926:d81f], packet dropped
How can this be prevented?
Tun IPconfig on client:
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-46-E1-A1-28
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::307e:d05f:6926:d81f%16(Preferred)
IPv4 Address. . . . . . . . . . . : 10.8.0.6(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Lease Obtained. . . . . . . . . . : Monday, June 09, 2014 1:22:28 PM
Lease Expires . . . . . . . . . . : Tuesday, June 09, 2015 1:22:28 PM
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . : 10.8.0.5
DHCPv6 IAID . . . . . . . . . . . : 251723590
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-04-3A-03-00-25-64-93-D6-7F
DNS Servers . . . . . . . . . . . : 8.8.8.8
75.75.76.76
NetBIOS over Tcpip. . . . . . . . : Enabled
There are other Tunnel interfaces on this machine
Tunnel adapter isatap.{7234C1E4-2638-4DB4-AA05-4DDB518E1FDB}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{A60122F4-E174-4F94-B46A-DC00BE5E2A8C}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1088:2eb2:3f57:fee6(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::1088:2eb2:3f57:fee6%12(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter isatap.{46E1A128-8B3C-4B1D-8329-CC9C97954720}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server:
server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/SDL-VPN-001.crt
key /etc/openvpn/keys/SDL-VPN-001.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 75.75.76.76"
client-config-dir ccd
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 6
client
dev tun
proto udp
remote 50.198.117.180 1194
resolv-retry infinite
nobind
persist-key
persist-tun
register-dns
ca ca.crt
cert key-001.crt
key key-001.key
ns-cert-type server
comp-lzo
verb 6
