Hi, I am trying to connect to my home server from work and we have a http proxy (no authentication). I always get the error "HTTP proxy returned: 'HTTP/1.0 403 Forbidden'" and after that "HTTP proxy returned bad status". I am connecting to a debian server from a windows 7 client. The only ports allowed are 80 and 443.
Server configuration
local 192.168.1.102
dev tun
proto tcp
port 80
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/Hal.crt
key /etc/openvpn/easy-rsa/keys/Hal.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.1.102 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
push "redirect-gateway local def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 4
Client config
client
dev tun
proto tcp
http-proxy <yyyyy.yyy.yyy> <port>
remote <my ip address> 80
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 4
mute 20
route-method exe
route-delay 2
This is the client log
Wed Aug 20 22:09:15 2014 us=868589 Current Parameter Settings:
Wed Aug 20 22:09:15 2014 us=879589 config = 'Client1.ovpn'
Wed Aug 20 22:09:15 2014 us=879589 mode = 0
Wed Aug 20 22:09:15 2014 us=879589 show_ciphers = DISABLED
Wed Aug 20 22:09:15 2014 us=879589 show_digests = DISABLED
Wed Aug 20 22:09:15 2014 us=879589 show_engines = DISABLED
Wed Aug 20 22:09:15 2014 us=879589 genkey = DISABLED
Wed Aug 20 22:09:15 2014 us=879589 key_pass_file = '[UNDEF]'
Wed Aug 20 22:09:15 2014 us=880589 show_tls_ciphers = DISABLED
Wed Aug 20 22:09:15 2014 us=880589 Connection profiles [default]:
Wed Aug 20 22:09:15 2014 us=880589 proto = tcp-client
Wed Aug 20 22:09:15 2014 us=880589 local = '[UNDEF]'
Wed Aug 20 22:09:15 2014 us=880589 local_port = 0
Wed Aug 20 22:09:15 2014 us=880589 remote = '<my home ip>'
Wed Aug 20 22:09:15 2014 us=880589 remote_port = 80
Wed Aug 20 22:09:15 2014 us=880589 remote_float = DISABLED
Wed Aug 20 22:09:15 2014 us=880589 bind_defined = DISABLED
Wed Aug 20 22:09:15 2014 us=880589 bind_local = DISABLED
Wed Aug 20 22:09:15 2014 us=880589 connect_retry_seconds = 5
Wed Aug 20 22:09:15 2014 us=880589 connect_timeout = 10
Wed Aug 20 22:09:15 2014 us=880589 NOTE: --mute triggered...
Wed Aug 20 22:09:15 2014 us=880589 275 variation(s) on previous 20 message(s) suppressed by --mute
Wed Aug 20 22:09:15 2014 us=880589 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Wed Aug 20 22:09:15 2014 us=880589 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Wed Aug 20 22:09:15 2014 us=882589 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Aug 20 22:09:15 2014 us=882589 Need hold release from management interface, waiting...
Wed Aug 20 22:09:16 2014 us=328591 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Aug 20 22:09:16 2014 us=428591 MANAGEMENT: CMD 'state on'
Wed Aug 20 22:09:16 2014 us=428591 MANAGEMENT: CMD 'log all on'
Wed Aug 20 22:09:16 2014 us=478591 MANAGEMENT: CMD 'hold off'
Wed Aug 20 22:09:16 2014 us=478591 MANAGEMENT: CMD 'hold release'
Wed Aug 20 22:11:00 2014 us=120309 MANAGEMENT: CMD 'password [...]'
Wed Aug 20 22:11:00 2014 us=121309 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Aug 20 22:11:00 2014 us=121309 Control Channel Authentication: tls-auth using INLINE static key file
Wed Aug 20 22:11:00 2014 us=121309 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 20 22:11:00 2014 us=121309 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 20 22:11:00 2014 us=121309 LZO compression initialized
Wed Aug 20 22:11:00 2014 us=121309 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Wed Aug 20 22:11:00 2014 us=122309 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Aug 20 22:11:00 2014 us=122309 MANAGEMENT: >STATE:1408561860,RESOLVE,,,
Wed Aug 20 22:11:00 2014 us=130310 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Aug 20 22:11:00 2014 us=130310 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Wed Aug 20 22:11:00 2014 us=130310 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Wed Aug 20 22:11:00 2014 us=130310 Local Options hash (VER=V4): '0bdd0804'
Wed Aug 20 22:11:00 2014 us=130310 Expected Remote Options hash (VER=V4): 'a642654b'
Wed Aug 20 22:11:00 2014 us=130310 Attempting to establish TCP connection with [AF_INET]86.55.176.96:8080
Wed Aug 20 22:11:00 2014 us=130310 MANAGEMENT: >STATE:1408561860,TCP_CONNECT,,,
Wed Aug 20 22:11:00 2014 us=135310 TCP connection established with [AF_INET]86.55.176.96:8080
Wed Aug 20 22:11:00 2014 us=135310 Send to HTTP proxy: 'CONNECT <home ip>:80 HTTP/1.0'
Wed Aug 20 22:11:00 2014 us=139310 HTTP proxy returned: 'HTTP/1.0 403 Forbidden'
Wed Aug 20 22:11:00 2014 us=158311 HTTP proxy returned bad status
Wed Aug 20 22:11:00 2014 us=158311 TCP/UDP: Closing socket
Wed Aug 20 22:11:00 2014 us=159311 SIGTERM[soft,init_instance] received, process exiting
Wed Aug 20 22:11:00 2014 us=159311 MANAGEMENT: >STATE:1408561860,EXITING,init_instance,,
I apologize if the post if too long or if it had been responded before. Server log has nothing about that connection.
