can't connect

yaskos

hello i have installed openvpn server in debain and client on windows 7 when i connected with the private ip adress like 192.168.1.3 the client connect without probleme but when i change ip address with my public addres there is not connection i have this log
Thu Jul 03 06:26:10 2014 OpenVPNAS 2.1.1oOAS Win32-MSVC++ [SSL] [LZO2] built on Jul 29 2010
Thu Jul 03 06:26:10 2014 MANAGEMENT: Connected to management server at 127.0.0.1:55218
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'log on'
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'state on'
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'echo on'
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'bytecount 5'
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'hold off'
Thu Jul 03 06:26:10 2014 MANAGEMENT: CMD 'hold release'
Thu Jul 03 06:26:10 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jul 03 06:26:10 2014 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jul 03 06:26:10 2014 Control Channel Authentication: tls-auth using INLINE static key file
Thu Jul 03 06:26:10 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 03 06:26:10 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 03 06:26:10 2014 LZO compression initialized
Thu Jul 03 06:26:10 2014 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Thu Jul 03 06:26:10 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jul 03 06:26:10 2014 MANAGEMENT: >STATE:1404361570,RESOLVE,,,
Thu Jul 03 06:26:10 2014 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jul 03 06:26:10 2014 Local Options hash (VER=V4): '2f2c6498'
Thu Jul 03 06:26:10 2014 Expected Remote Options hash (VER=V4): '9915e4a2'
Thu Jul 03 06:26:10 2014 Attempting to establish TCP connection with 41.205.13.27:443
Thu Jul 03 06:26:10 2014 MANAGEMENT: >STATE:1404361570,TCP_CONNECT,,,
Thu Jul 03 06:26:10 2014 TCP connection established with 41.205.13.27:443
Thu Jul 03 06:26:10 2014 TCPv4_CLIENT link local: [undef]
Thu Jul 03 06:26:10 2014 TCPv4_CLIENT link remote: 41.205.13.27:443
Thu Jul 03 06:26:10 2014 MANAGEMENT: >STATE:1404361570,WAIT,,,
Thu Jul 03 06:26:10 2014 Connection reset, restarting [-1]
Thu Jul 03 06:26:10 2014 TCP/UDP: Closing socket
Thu Jul 03 06:26:10 2014 SIGUSR1[soft,connection-reset] received, process restarting
Thu Jul 03 06:26:10 2014 MANAGEMENT: >STATE:1404361570,RECONNECTING,connection-reset,,
Thu Jul 03 06:26:10 2014 Restart pause, 5 second(s)
Thu Jul 03 06:26:15 2014 MANAGEMENT: CMD 'http-proxy-fallback-disable'

please i need help

maikcat

first you the opensource version on your win7.

second post configs used

third tell us more about how/what you are testing

ps: are you testing while you are in the same network with openvpn server?

Michael.

yaskos

yes in the same network the client connect but when i try to connect in other network like internet i can't connect

maikcat

first you the opensource version on your win7.

oops mistake..i meant first use the opensource version on your win7.

where are the configs....?

if you are trying to access the openvpn server side via internet,

did you forward the openvpn port on your internet router?
i noticed that you use 443 port which is usually https,are you sharing the port with an web server?

post logs please.

Michael.

yaskos

thanks for your request please can you send me a link for the open source openvpn client of windows 7? yes i forward on port 443 when i test the forwading in the web site "canyouseeme.org" the forward is ok.now i post my config below

    # Client
    client
    dev tun
    proto tcp-client
    remote 41.x.x.x 443
    resolv-retry infinite
    cipher AES-256-CBC
    ; client-config-dir ccd
    # Cles
    ca ca.crt
    cert client1.crt
    key client1.key
    tls-auth ta.key 1
    key-direction 1
    # Securite
    nobind
    persist-key
    persist-tun
    comp-lzo
    verb 3

server config
# Serveur TCP/22
mode server
proto tcp
#proto udp
port 443
dev tun
# Cles et certificats
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
tls-auth ta.key 1
key-direction 0
cipher AES-256-CBC
# Reseau
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
# Securite
user nobody
group nogroup
chroot /etc/openvpn/jail
persist-key
persist-tun
comp-lzo
# Log
verb 9
mute 20
status openvpn-status.log
log-append /var/log/openvpn.log

ok thanks

maikcat

can you send me a link for the open source openvpn client of windows 7?

http://openvpn.net/index.php/download/community-downloads.html

also remove key-direction directive on both configs and use

tls-auth ta.key 0

on server side and

tls-auth ta.key 1

on clients

also...

where are logs...? :?

yaskos

i make a change but i have this

Mon Jul 7 10:16:26 2014 Re-using SSL/TLS context
Mon Jul 7 10:16:26 2014 LZO compression initialized
Mon Jul 7 10:16:26 2014 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 7 10:16:26 2014 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Jul 7 10:16:26 2014 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 7 10:16:26 2014 Local Options hash (VER=V4): '2f2c6498'
Mon Jul 7 10:16:26 2014 Expected Remote Options hash (VER=V4): '9915e4a2'
Mon Jul 7 10:16:26 2014 Attempting to establish TCP connection with [AF_INET]41.205.6.159:443 [nonblock]
Mon Jul 7 10:16:27 2014 TCP connection established with [AF_INET]41.205.6.159:443
Mon Jul 7 10:16:27 2014 TCPv4_CLIENT link local: [undef]
Mon Jul 7 10:16:27 2014 TCPv4_CLIENT link remote: [AF_INET]41.205.6.159:443
Mon Jul 7 10:16:27 2014 Connection reset, restarting [-1]
Mon Jul 7 10:16:27 2014 TCP/UDP: Closing socket
Mon Jul 7 10:16:27 2014 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 7 10:16:27 2014 Restart pause, 5 second(s)
^CMon Jul 7 10:16:29 2014 SIGINT[hard,init_instance] received, process exiting

this is my test on canyouseeme.org

Success: I can see your service on 41.205.6.159 on port (443)
Your ISP is not blocking port 443
i dont realy know where is the probleme
thanks

maikcat

server logs....?

also if you try to telnet from your client to your openvpn servers ip/port 443,do you recieve anything?

Michael.

yaskos

please can you send me at my email ngty49@yahoo.fr

how to configure openvpn server and client in sample configuration?
thanks