Problem with routing all traffic through the VPN

Michael7

Greetings,
I have installed and configured the OpenVPN on my server and on my notebook.
It all fine and I can access from my notebook via tunnel to my server.

Then I have configured the solution with the HOWTO article "Routing all client traffic (including web-traffic) through the VPN.", but the traffic are not over the tunnel.

Can anyone tell me why?
Thank you!
Michael

Server config:

# Zertifikate
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\FREServer.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\FREServer.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"

# Server und Netzwerk
local 10.0.0.3 #LAN-Adresse des Servers
port 1194
proto udp
dev tap
server 10.0.0.0 255.255.255.0 #Subnetz
ifconfig-pool-persist ipp.txt
comp-lzo
persist-key
persist-tun
keepalive 10 120
push "redirect-gateway local def1"

# Log
status "C:\\Program Files\\OpenVPN\\log\\openvpn-status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
log-append "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 3

Client config:

# Zertifikate
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\MichaelNotebook.crt"
key "C:\\Program Files\\OpenVPN\\config\\MichaelNotebook.key"

# Client-Setup
client
dev tap
proto udp
remote test.dyndns.org 1194 #Hostname anpassen
resolv-retry infinite
nobind
persist-key
persist-tun
route-metric 512
route 0.0.0.0 0.0.0.0
comp-lzo
verb 3

Michael7

Traffic wrote
Michael7 wrote# Server und Netzwerk
local 10.0.0.3 #LAN-Adresse des Servers
server 10.0.0.0 255.255.255.0 #Subnetz
Your server LAN and VPN are conflicting ... Change your VPN to: server 10.8.0.0 255.255.255.0

I have change the value to 10.8.0.0 and restart the server.
But the IP address that I see by http://showip.net before and after connect the openVPN is allways the same?!

Michael7

The same as what ?

1. I open the internet-site http://showip.net and I see my IP addresse: Your IP Address is:89.144.239.31
2. I connect the Notebook via OpenVPN with my server.
3. I get the IP addresse 10.8.0.2
4. I can access to the data on my Server (Windows 2012 Essential)
5. I open the internet-site http://showip.net again and I see my IP addresse: Your IP Address is:89.144.239.31

=> and the IP addresse from step 1 and step 5 is the same!
Should not the IP address in step 1 and 5 be different?

Michael7

If I connected to my server via teamviewer, start the browser and go to http://showip.net, I get the IP addresse 212.88.10.91

Michael7

please post your logs

Thank you for your assistance!

Here the file from my server "openvpn.log"

Wed Aug 20 20:57:21 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May  2 2014
Wed Aug 20 20:57:21 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05
Wed Aug 20 20:57:22 2014 Diffie-Hellman initialized with 1024 bit key
Wed Aug 20 20:57:22 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Aug 20 20:57:22 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 20 20:57:22 2014 open_tun, tt->ipv6=0
Wed Aug 20 20:57:22 2014 TAP-WIN32 device [LAN-Verbindung] opened: \\.\Global\{B133F153-E5EB-4F2B-B976-3F7A94B68B5E}.tap
Wed Aug 20 20:57:22 2014 TAP-Windows Driver Version 9.9 
Wed Aug 20 20:57:22 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {B133F153-E5EB-4F2B-B976-3F7A94B68B5E} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Wed Aug 20 20:57:22 2014 Sleeping for 10 seconds...
Wed Aug 20 20:57:32 2014 Successful ARP Flush on interface [17] {B133F153-E5EB-4F2B-B976-3F7A94B68B5E}
Wed Aug 20 20:57:32 2014 UDPv4 link local (bound): [AF_INET]10.0.0.3:1194
Wed Aug 20 20:57:32 2014 UDPv4 link remote: [undef]
Wed Aug 20 20:57:32 2014 MULTI: multi_init called, r=256 v=256
Wed Aug 20 20:57:32 2014 IFCONFIG POOL: base=10.8.0.2 size=253, ipv6=0
Wed Aug 20 20:57:32 2014 ifconfig_pool_read(), in='MichaelNotebook,10.8.0.2', TODO: IPv6
Wed Aug 20 20:57:32 2014 succeeded -> ifconfig_pool_set()
Wed Aug 20 20:57:32 2014 IFCONFIG POOL LIST
Wed Aug 20 20:57:32 2014 MichaelNotebook,10.8.0.2
Wed Aug 20 20:57:32 2014 Initialization Sequence Completed
Wed Aug 20 20:59:12 2014 89.144.222.52:39223 TLS: Initial packet from [AF_INET]89.144.222.52:39223, sid=fa211070 528dbec5
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 VERIFY OK: depth=1, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 VERIFY OK: depth=0, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=MichaelNotebook, name=MichaelNotebook, emailAddress=michael@xxxxx.com
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Aug 20 20:59:14 2014 89.144.222.52:39223 [MichaelNotebook] Peer Connection Initiated with [AF_INET]89.144.222.52:39223
Wed Aug 20 20:59:14 2014 MichaelNotebook/89.144.222.52:39223 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Wed Aug 20 20:59:17 2014 MichaelNotebook/89.144.222.52:39223 PUSH: Received control message: 'PUSH_REQUEST'
Wed Aug 20 20:59:17 2014 MichaelNotebook/89.144.222.52:39223 send_push_reply(): safe_cap=940
Wed Aug 20 20:59:17 2014 MichaelNotebook/89.144.222.52:39223 SENT CONTROL [MichaelNotebook]: 'PUSH_REPLY,redirect-gateway local def1,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Wed Aug 20 20:59:17 2014 MichaelNotebook/89.144.222.52:39223 MULTI: Learn: 00:ff:79:3b:eb:5f -> MichaelNotebook/89.144.222.52:39223

And here the file openvpn-status.log

OpenVPN CLIENT LIST
Updated,Wed Aug 20 21:02:44 2014
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
MichaelNotebook,89.144.222.52:39223,62690,5585,Wed Aug 20 20:59:12 2014
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
00:ff:79:3b:eb:5f,MichaelNotebook,89.144.222.52:39223,Wed Aug 20 20:59:17 2014
GLOBAL STATS
Max bcast/mcast queue length,0
END

Michael7

The client log file is empty.

Michael7

Are you running OpenVPN as Administrator on your client ?

How can I see, whether OpenVPN is running with administrator privilegs?
I click only of the icon "OpenVPN GUI" and click on connect and then I get the 10.8.0.2 IP address.

Michael7

Thank you, now I have a client log file:

See:

Thu Aug 21 14:43:11 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Aug 21 14:43:11 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Thu Aug 21 14:43:11 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 21 14:43:11 2014 Need hold release from management interface, waiting...
Thu Aug 21 14:43:12 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 21 14:43:12 2014 MANAGEMENT: CMD 'state on'
Thu Aug 21 14:43:12 2014 MANAGEMENT: CMD 'log all on'
Thu Aug 21 14:43:12 2014 MANAGEMENT: CMD 'hold off'
Thu Aug 21 14:43:12 2014 MANAGEMENT: CMD 'hold release'
Thu Aug 21 14:43:12 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Aug 21 14:43:12 2014 Socket Buffers: R=[128000->128000] S=[64512->64512]
Thu Aug 21 14:43:12 2014 MANAGEMENT: >STATE:1408624992,RESOLVE,,,
Thu Aug 21 14:43:12 2014 UDPv4 link local: [undef]
Thu Aug 21 14:43:12 2014 UDPv4 link remote: [AF_INET]178.191.70.144:1194
Thu Aug 21 14:43:12 2014 MANAGEMENT: >STATE:1408624992,WAIT,,,
Thu Aug 21 14:43:12 2014 MANAGEMENT: >STATE:1408624992,AUTH,,,
Thu Aug 21 14:43:12 2014 TLS: Initial packet from [AF_INET]178.191.70.144:1194, sid=9ca6b41f c36c8654
Thu Aug 21 14:43:14 2014 VERIFY OK: depth=1, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 14:43:14 2014 VERIFY OK: depth=0, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 14:43:15 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 14:43:15 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 14:43:15 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 14:43:15 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 14:43:15 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 21 14:43:15 2014 [FREServer] Peer Connection Initiated with [AF_INET]178.191.70.144:1194
Thu Aug 21 14:43:16 2014 MANAGEMENT: >STATE:1408624996,GET_CONFIG,,,
Thu Aug 21 14:43:17 2014 SENT CONTROL [FREServer]: 'PUSH_REQUEST' (status=1)
Thu Aug 21 14:43:17 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway local def1,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Thu Aug 21 14:43:17 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 21 14:43:17 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 21 14:43:17 2014 OPTIONS IMPORT: route options modified
Thu Aug 21 14:43:17 2014 OPTIONS IMPORT: route-related options modified
Thu Aug 21 14:43:17 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 21 14:43:17 2014 MANAGEMENT: >STATE:1408624997,ASSIGN_IP,,10.8.0.2,
Thu Aug 21 14:43:17 2014 open_tun, tt->ipv6=0
Thu Aug 21 14:43:17 2014 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{793BEB5F-8259-4143-A187-24DD219C0185}.tap
Thu Aug 21 14:43:17 2014 TAP-Windows Driver Version 9.9 
Thu Aug 21 14:43:17 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {793BEB5F-8259-4143-A187-24DD219C0185} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Thu Aug 21 14:43:17 2014 Successful ARP Flush on interface [25] {793BEB5F-8259-4143-A187-24DD219C0185}
Thu Aug 21 14:43:22 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Aug 21 14:43:22 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 14:43:22 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 14:43:22 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 14:43:22 2014 Route addition fallback to route.exe
Thu Aug 21 14:43:22 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 14:43:22 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 14:43:22 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 14:43:22 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 14:43:22 2014 Route addition fallback to route.exe
Thu Aug 21 14:43:22 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 14:43:22 2014 MANAGEMENT: >STATE:1408625002,ADD_ROUTES,,,
Thu Aug 21 14:43:22 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.8.0.1 METRIC 512
Thu Aug 21 14:43:22 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 14:43:22 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 14:43:22 2014 Route addition fallback to route.exe
Thu Aug 21 14:43:22 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 14:43:22 2014 Initialization Sequence Completed
Thu Aug 21 14:43:22 2014 MANAGEMENT: >STATE:1408625002,CONNECTED,SUCCESS,10.8.0.2,178.191.70.144

Michael7

So, now I have changed the server and the client config file by your instructions.
I think we are now one step further.

If I try to access to a homepage (e.g. showip.net) the site is not display. After many seconds, the error occured "Timeout, the requested page takes too long to respond"

I think, my notebook tried to access the site to the tunnel!?

As you are using a Dyn-DNS name to locate the IP of your server, do you know if your router supports loopback connections ?

Yes, I use Dyn-DNS.
I don't know if my router support loopback connections. Normally, in which menu on my router must I look to see, whether my router support loopback connection?

Regards

Here my new client log file with changed parameter:

Thu Aug 21 15:57:22 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Aug 21 15:57:22 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Thu Aug 21 15:57:22 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 21 15:57:22 2014 Need hold release from management interface, waiting...
Thu Aug 21 15:57:22 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 21 15:57:22 2014 MANAGEMENT: CMD 'state on'
Thu Aug 21 15:57:22 2014 MANAGEMENT: CMD 'log all on'
Thu Aug 21 15:57:22 2014 MANAGEMENT: CMD 'hold off'
Thu Aug 21 15:57:22 2014 MANAGEMENT: CMD 'hold release'
Thu Aug 21 15:57:22 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Aug 21 15:57:23 2014 Socket Buffers: R=[128000->128000] S=[64512->64512]
Thu Aug 21 15:57:23 2014 MANAGEMENT: >STATE:1408629443,RESOLVE,,,
Thu Aug 21 15:57:23 2014 UDPv4 link local: [undef]
Thu Aug 21 15:57:23 2014 UDPv4 link remote: [AF_INET]178.191.70.144:1194
Thu Aug 21 15:57:23 2014 MANAGEMENT: >STATE:1408629443,WAIT,,,
Thu Aug 21 15:57:23 2014 MANAGEMENT: >STATE:1408629443,AUTH,,,
Thu Aug 21 15:57:23 2014 TLS: Initial packet from [AF_INET]178.191.70.144:1194, sid=6246c697 304d82dd
Thu Aug 21 15:57:24 2014 VERIFY OK: depth=1, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 15:57:24 2014 VERIFY OK: depth=0, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 15:57:26 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 15:57:26 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 15:57:26 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 15:57:26 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 15:57:26 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 21 15:57:26 2014 [FREServer] Peer Connection Initiated with [AF_INET]178.191.70.144:1194
Thu Aug 21 15:57:27 2014 MANAGEMENT: >STATE:1408629447,GET_CONFIG,,,
Thu Aug 21 15:57:28 2014 SENT CONTROL [FREServer]: 'PUSH_REQUEST' (status=1)
Thu Aug 21 15:57:28 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bybass-dhcp,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Thu Aug 21 15:57:28 2014 Options error: unknown --redirect-gateway flag: bybass-dhcp
Thu Aug 21 15:57:28 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 21 15:57:28 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 21 15:57:28 2014 OPTIONS IMPORT: route options modified
Thu Aug 21 15:57:28 2014 OPTIONS IMPORT: route-related options modified
Thu Aug 21 15:57:28 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 21 15:57:28 2014 MANAGEMENT: >STATE:1408629448,ASSIGN_IP,,10.8.0.2,
Thu Aug 21 15:57:28 2014 open_tun, tt->ipv6=0
Thu Aug 21 15:57:28 2014 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{793BEB5F-8259-4143-A187-24DD219C0185}.tap
Thu Aug 21 15:57:28 2014 TAP-Windows Driver Version 9.9 
Thu Aug 21 15:57:28 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {793BEB5F-8259-4143-A187-24DD219C0185} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Thu Aug 21 15:57:28 2014 Successful ARP Flush on interface [25] {793BEB5F-8259-4143-A187-24DD219C0185}
Thu Aug 21 15:57:33 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Thu Aug 21 15:57:33 2014 C:\Windows\system32\route.exe ADD 178.191.70.144 MASK 255.255.255.255 10.24.161.195
Thu Aug 21 15:57:33 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Thu Aug 21 15:57:33 2014 Route addition via IPAPI succeeded [adaptive]
Thu Aug 21 15:57:33 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 15:57:33 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 15:57:33 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 15:57:33 2014 Route addition fallback to route.exe
Thu Aug 21 15:57:33 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 15:57:33 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 15:57:33 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 15:57:33 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 15:57:33 2014 Route addition fallback to route.exe
Thu Aug 21 15:57:33 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 15:57:33 2014 Initialization Sequence Completed
Thu Aug 21 15:57:33 2014 MANAGEMENT: >STATE:1408629453,CONNECTED,SUCCESS,10.8.0.2,178.191.70.144
Thu Aug 21 16:02:34 2014 C:\Windows\system32\route.exe DELETE 178.191.70.144 MASK 255.255.255.255 10.24.161.195
Thu Aug 21 16:02:34 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Aug 21 16:02:34 2014 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 16:02:34 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Aug 21 16:02:34 2014 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 16:02:34 2014 Route deletion via IPAPI succeeded [adaptive]
Thu Aug 21 16:02:34 2014 Closing TUN/TAP interface
Thu Aug 21 16:02:34 2014 SIGTERM[hard,] received, process exiting
Thu Aug 21 16:02:34 2014 MANAGEMENT: >STATE:1408629754,EXITING,SIGTERM,,

Michael7

Hello,
now I have change "bass" to "pass", but it is the same: no access to the internet.
The router in my home-lan has the IP address 10.0.0.138 and I can't also access from my notebook to the router.

My current client log is

Thu Aug 21 21:30:32 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Aug 21 21:30:32 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Thu Aug 21 21:30:32 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 21 21:30:32 2014 Need hold release from management interface, waiting...
Thu Aug 21 21:30:33 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 21 21:30:33 2014 MANAGEMENT: CMD 'state on'
Thu Aug 21 21:30:33 2014 MANAGEMENT: CMD 'log all on'
Thu Aug 21 21:30:33 2014 MANAGEMENT: CMD 'hold off'
Thu Aug 21 21:30:33 2014 MANAGEMENT: CMD 'hold release'
Thu Aug 21 21:30:33 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Aug 21 21:30:33 2014 Socket Buffers: R=[128000->128000] S=[64512->64512]
Thu Aug 21 21:30:33 2014 MANAGEMENT: >STATE:1408649433,RESOLVE,,,
Thu Aug 21 21:30:34 2014 UDPv4 link local: [undef]
Thu Aug 21 21:30:34 2014 UDPv4 link remote: [AF_INET]178.190.60.102:1194
Thu Aug 21 21:30:34 2014 MANAGEMENT: >STATE:1408649434,WAIT,,,
Thu Aug 21 21:30:35 2014 MANAGEMENT: >STATE:1408649435,AUTH,,,
Thu Aug 21 21:30:35 2014 TLS: Initial packet from [AF_INET]178.190.60.102:1194, sid=6b49993c db1886dc
Thu Aug 21 21:30:36 2014 VERIFY OK: depth=1, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 21:30:36 2014 VERIFY OK: depth=0, C=AT, ST=Vienna, L=Vienna, O=xxxxx Consulting, OU=changeme, CN=FREServer, name=FREServer, emailAddress=michael@xxxxx.com
Thu Aug 21 21:30:37 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 21:30:37 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 21:30:37 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Aug 21 21:30:37 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 21 21:30:37 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 21 21:30:37 2014 [FREServer] Peer Connection Initiated with [AF_INET]178.190.60.102:1194
Thu Aug 21 21:30:38 2014 MANAGEMENT: >STATE:1408649438,GET_CONFIG,,,
Thu Aug 21 21:30:39 2014 SENT CONTROL [FREServer]: 'PUSH_REQUEST' (status=1)
Thu Aug 21 21:30:39 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Thu Aug 21 21:30:39 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 21 21:30:39 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 21 21:30:39 2014 OPTIONS IMPORT: route options modified
Thu Aug 21 21:30:39 2014 OPTIONS IMPORT: route-related options modified
Thu Aug 21 21:30:39 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 21 21:30:39 2014 MANAGEMENT: >STATE:1408649439,ASSIGN_IP,,10.8.0.2,
Thu Aug 21 21:30:39 2014 open_tun, tt->ipv6=0
Thu Aug 21 21:30:39 2014 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{793BEB5F-8259-4143-A187-24DD219C0185}.tap
Thu Aug 21 21:30:39 2014 TAP-Windows Driver Version 9.9 
Thu Aug 21 21:30:39 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {793BEB5F-8259-4143-A187-24DD219C0185} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Thu Aug 21 21:30:39 2014 Successful ARP Flush on interface [25] {793BEB5F-8259-4143-A187-24DD219C0185}
Thu Aug 21 21:30:44 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Thu Aug 21 21:30:44 2014 C:\Windows\system32\route.exe ADD 178.190.60.102 MASK 255.255.255.255 10.24.4.174
Thu Aug 21 21:30:44 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Thu Aug 21 21:30:44 2014 Route addition via IPAPI succeeded [adaptive]
Thu Aug 21 21:30:44 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 21:30:44 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 21:30:44 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 21:30:44 2014 Route addition fallback to route.exe
Thu Aug 21 21:30:44 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 21:30:44 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Aug 21 21:30:44 2014 ROUTE: route addition failed using CreateIpForwardEntry: Ein oder mehrere Argumente sind ungültig.   [status=160 if_index=25]
Thu Aug 21 21:30:44 2014 Route addition via IPAPI failed [adaptive]
Thu Aug 21 21:30:44 2014 Route addition fallback to route.exe
Thu Aug 21 21:30:44 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 21 21:30:44 2014 Initialization Sequence Completed
Thu Aug 21 21:30:44 2014 MANAGEMENT: >STATE:1408649444,CONNECTED,SUCCESS,10.8.0.2,178.190.60.102

Michael7

Hi Traffic,

do you have an idea why the forwarding does not work for me?

Thank you very much!
Michael

Michael7

Hi,

Try adding route-method exe to your client config.

I hope I have correct added to the config file, but he does not send the traffic through the tunnel.

Regards Michael

# Zertifikate
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\MichaelNotebook.crt"
key "C:\\Program Files\\OpenVPN\\config\\MichaelNotebook.key"

# Client-Setup
client
dev tap
proto udp
remote xxx.dyndns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
redirect-gateway
route-gateway 10.0.0.138
push "dhcp-option DNS 10.0.0.138"
route-method exe