Bad Source Address Without IP Address (i see only a MAC)

csibe

Hi Everybody!

I have Googled several hours... but nothing helped for me. Sorry to bother you, guys. But i need help from a real person, not from tutorials, docs.

I know that i must add a route but i cant see the subnet because get only this:

openvpn.log:

Tue Aug 26 19:07:24 2014 us=909373 MULTI_sva: pool returned IPv4=37.17.173.10, IPv6=6d5c:7cb7:546c:94bf:386f:94bf:ad21:77b7
Tue Aug 26 19:07:24 2014 us=909522 MULTI: Learn: 37.17.173.10 -> csib/78.92.146.183:50928
Tue Aug 26 19:07:24 2014 us=909565 MULTI: primary virtual IP for csib/78.92.146.183:50928: 37.17.173.10
RTue Aug 26 19:07:26 2014 us=925357 csib/78.92.146.183:50928 PUSH: Received control message: 'PUSH_REQUEST'
Tue Aug 26 19:07:26 2014 us=925441 csib/78.92.146.183:50928 send_push_reply(): safe_cap=960
Tue Aug 26 19:07:26 2014 us=925575 csib/78.92.146.183:50928 SENT CONTROL [csib]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 37.17.173.0 255.255.255.0,route 37.17.173.1,topology net30,ping 1800,ping-restart 4000,ifconfig 37.17.173.10 37.17.173.9' (status=1)
WWWWWRRRRRTue Aug 26 19:07:26 2014 us=994713 csib/78.92.146.183:50928 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
RTue Aug 26 19:07:27 2014 us=100090 csib/78.92.146.183:50928 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped

So i only see the MAC address. I checked arp -a but there is no matching ip.

The aim is: I have a VPS server, wanted to set a VPN on it to surf the internet encripted. I know that i must add routes but absolutely no idea what should i add. :/

Forward:

net.ipv4.ip_forward = 1

server.conf:

push "redirect-gateway def1 bypass-dhcp"
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/neutron.crt
key /etc/openvpn/certs/neutron.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 37.17.173.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "route 37.17.173.0 255.255.255.0"
route 37.17.173.0 255.255.255.0
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
log openvpn.log
status openvpn-status.log
verb 5
mute 20

The problem:
There is no interent connection because of the problem above. This is my first try to set it. So i am going to be soo happy is someone tells me what to do.

I changed the IPs in server.conf sooo many times, know that it is a mess now. But i am totally get tanged up in it.
(The 37.17.173.0 subnet is my VPS server's subnet.)

Thank you guys!

Welcome,
Aron

csibe

Thank you!

openvpn.log (changed the IP in server.conf, to you adviced):

Tue Aug 26 20:01:45 2014 us=348339 csib/78.92.146.183:57472 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=1c7a:72b7:2497:94bf:89a:94bf:c842:a2b8
Tue Aug 26 20:01:45 2014 us=348470 csib/78.92.146.183:57472 MULTI: Learn: 10.8.0.6 -> csib/78.92.146.183:57472
Tue Aug 26 20:01:45 2014 us=348510 csib/78.92.146.183:57472 MULTI: primary virtual IP for csib/78.92.146.183:57472: 10.8.0.6
RTue Aug 26 20:01:47 2014 us=438090 csib/78.92.146.183:57472 PUSH: Received control message: 'PUSH_REQUEST'
Tue Aug 26 20:01:47 2014 us=438130 csib/78.92.146.183:57472 send_push_reply(): safe_cap=960
Tue Aug 26 20:01:47 2014 us=438180 csib/78.92.146.183:57472 SENT CONTROL [csib]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 37.17.173.0 255.255.255.0,route 10.8.0.1,topology net30,ping 1800,ping-restart 4000,ifconfig 10.8.0.6 10.8.0.5' (status=1)
WWWWWRRRRRTue Aug 26 20:01:47 2014 us=515710 csib/78.92.146.183:57472 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
RTue Aug 26 20:01:47 2014 us=519494 csib/78.92.146.183:57472 MULTI: bad source address from client [::], packet dropped
RTue Aug 26 20:01:47 2014 us=523942 csib/78.92.146.183:57472 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
RTue Aug 26 20:01:47 2014 us=523993 csib/78.92.146.183:57472 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped

Problem:
There is still no internet connection if i connect to.

openvpn-status.log:

OpenVPN CLIENT LIST
Updated,Tue Aug 26 20:05:46 2014
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
csib,78.92.146.183:57472,17127,7756,Tue Aug 26 20:01:44 2014
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,csib,78.92.146.183:57472,Tue Aug 26 20:01:45 2014
GLOBAL STATS
Max bcast/mcast queue length,0
END

server.conf (updated):

push "redirect-gateway def1 bypass-dhcp"
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/neutron.crt
key /etc/openvpn/certs/neutron.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
;push "route 37.17.173.0 255.255.255.0"
;route 37.17.173.0 255.255.255.0
route 10.8.0.0 255.255.255.0
push "route 10.8.0.0 255.255.255.0"
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
log openvpn.log
status openvpn-status.log
verb 5
mute 20

client.ovpn

client
remote 37.17.173.41
ca ca.crt
cert csib.crt
key csib.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun
proto udp
tls-auth ta.key 1
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup

client.log:

Tue Aug 26 20:10:38 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 26 20:10:38 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Aug 26 20:10:38 2014 UDPv4 link local: [undef]
Tue Aug 26 20:10:38 2014 UDPv4 link remote: [AF_INET]37.17.173.41:1194
Tue Aug 26 20:10:38 2014 [neutron] Peer Connection Initiated with [AF_INET]37.17.173.41:1194
Tue Aug 26 20:10:40 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Aug 26 20:10:40 2014 open_tun, tt->ipv6=0
Tue Aug 26 20:10:40 2014 TAP-WIN32 device [Helyi kapcsolat] opened: \\.\Global\{BA020F45-415C-42BF-AA23-5F5919D095AF}.tap
Tue Aug 26 20:10:40 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {BA020F45-415C-42BF-AA23-5F5919D095AF} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue Aug 26 20:10:40 2014 Successful ARP Flush on interface [23] {BA020F45-415C-42BF-AA23-5F5919D095AF}
Tue Aug 26 20:10:45 2014 Initialization Sequence Completed
Tue Aug 26 20:11:13 2014 SIGTERM[hard,] received, process exiting

My router:
I hope these logs help to determine my problem. My client is behind a router, which is located at 192.168.0.1

csibe

Okay, thank you. Sorry! I fixed.

server.conf:

port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/neutron.crt
key /etc/openvpn/certs/neutron.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#;push "route 37.17.173.0 255.255.255.0"
#;route 37.17.173.0 255.255.255.0
#;route 10.8.0.0 255.255.255.0
#;push "route 10.8.0.0 255.255.255.0"
client-config-dir ccd
route 192.168.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
log openvpn.log
status openvpn-status.log
verb 4
mute 20

openvpn.log:

Tue Aug 26 23:04:23 2014 us=886007 78.92.146.183:59898 [csib] Peer Connection Initiated with [AF_INET]78.92.146.183:59898
Tue Aug 26 23:04:23 2014 us=886076 csib/78.92.146.183:59898 OPTIONS IMPORT: reading client specific options from: ccd/csib
Tue Aug 26 23:04:23 2014 us=886171 csib/78.92.146.183:59898 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=2180:8:8004:3704:1cf0:d6bf:e01e:c3b7
Tue Aug 26 23:04:23 2014 us=886221 csib/78.92.146.183:59898 MULTI: Learn: 10.8.0.6 -> csib/78.92.146.183:59898
Tue Aug 26 23:04:23 2014 us=886235 csib/78.92.146.183:59898 MULTI: primary virtual IP for csib/78.92.146.183:59898: 10.8.0.6
Tue Aug 26 23:04:23 2014 us=886248 csib/78.92.146.183:59898 MULTI: internal route 192.168.0.0/24 -> csib/78.92.146.183:59898
Tue Aug 26 23:04:23 2014 us=886263 csib/78.92.146.183:59898 MULTI: Learn: 192.168.0.0/24 -> csib/78.92.146.183:59898
Tue Aug 26 23:04:23 2014 us=886280 csib/78.92.146.183:59898 REMOVE PUSH ROUTE: 'route 192.168.0.0 255.255.255.0'
Tue Aug 26 23:04:26 2014 us=46672 csib/78.92.146.183:59898 PUSH: Received control message: 'PUSH_REQUEST'
Tue Aug 26 23:04:26 2014 us=46736 csib/78.92.146.183:59898 send_push_reply(): safe_cap=960
Tue Aug 26 23:04:26 2014 us=46784 csib/78.92.146.183:59898 SENT CONTROL [csib]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 1800,ping-restart 4000,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Tue Aug 26 23:04:26 2014 us=118727 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=142648 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=142824 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=182189 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=190139 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=202154 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=244014 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=246492 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=246645 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=350963 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=351150 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=351243 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=351393 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=351485 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=354343 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=358204 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=362169 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=362225 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=366095 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=370296 csib/78.92.146.183:59898 MULTI: bad source address from client [fe80::20f5:a9d9:50c5:340e], packet dropped
Tue Aug 26 23:04:26 2014 us=462726 csib/78.92.146.183:59898 NOTE: --mute triggered...

client.log (full, sorry, it is long):

Tue Aug 26 22:55:53 2014 us=678877 Current Parameter Settings:
Tue Aug 26 22:55:53 2014 us=679878   config = 'client.ovpn'
Tue Aug 26 22:55:53 2014 us=679878   mode = 0
Tue Aug 26 22:55:53 2014 us=679878   show_ciphers = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   show_digests = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   show_engines = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   genkey = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   key_pass_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   show_tls_ciphers = DISABLED
Tue Aug 26 22:55:53 2014 us=679878 Connection profiles [default]:
Tue Aug 26 22:55:53 2014 us=679878   proto = udp
Tue Aug 26 22:55:53 2014 us=679878   local = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   local_port = 0
Tue Aug 26 22:55:53 2014 us=679878   remote = '37.17.173.41'
Tue Aug 26 22:55:53 2014 us=679878   remote_port = 1194
Tue Aug 26 22:55:53 2014 us=679878   remote_float = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   bind_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   bind_local = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   connect_retry_seconds = 5
Tue Aug 26 22:55:53 2014 us=679878   connect_timeout = 10
Tue Aug 26 22:55:53 2014 us=679878   connect_retry_max = 0
Tue Aug 26 22:55:53 2014 us=679878   socks_proxy_server = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   socks_proxy_port = 0
Tue Aug 26 22:55:53 2014 us=679878   socks_proxy_retry = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   tun_mtu = 1500
Tue Aug 26 22:55:53 2014 us=679878   tun_mtu_defined = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   link_mtu = 1500
Tue Aug 26 22:55:53 2014 us=679878   link_mtu_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   tun_mtu_extra = 0
Tue Aug 26 22:55:53 2014 us=679878   tun_mtu_extra_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   mtu_discover_type = -1
Tue Aug 26 22:55:53 2014 us=679878   fragment = 0
Tue Aug 26 22:55:53 2014 us=679878   mssfix = 1450
Tue Aug 26 22:55:53 2014 us=679878   explicit_exit_notification = 0
Tue Aug 26 22:55:53 2014 us=679878 Connection profiles END
Tue Aug 26 22:55:53 2014 us=679878   remote_random = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   ipchange = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   dev = 'tun'
Tue Aug 26 22:55:53 2014 us=679878   dev_type = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   dev_node = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   lladdr = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   topology = 1
Tue Aug 26 22:55:53 2014 us=679878   tun_ipv6 = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_local = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_remote_netmask = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_noexec = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_nowarn = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_ipv6_local = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_ipv6_netbits = 0
Tue Aug 26 22:55:53 2014 us=679878   ifconfig_ipv6_remote = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   shaper = 0
Tue Aug 26 22:55:53 2014 us=679878   mtu_test = 0
Tue Aug 26 22:55:53 2014 us=679878   mlock = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   keepalive_ping = 0
Tue Aug 26 22:55:53 2014 us=679878   keepalive_timeout = 0
Tue Aug 26 22:55:53 2014 us=679878   inactivity_timeout = 0
Tue Aug 26 22:55:53 2014 us=679878   ping_send_timeout = 0
Tue Aug 26 22:55:53 2014 us=679878   ping_rec_timeout = 0
Tue Aug 26 22:55:53 2014 us=679878   ping_rec_timeout_action = 0
Tue Aug 26 22:55:53 2014 us=679878   ping_timer_remote = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   remap_sigusr1 = 0
Tue Aug 26 22:55:53 2014 us=679878   persist_tun = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   persist_local_ip = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   persist_remote_ip = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   persist_key = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   passtos = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   resolve_retry_seconds = 1000000000
Tue Aug 26 22:55:53 2014 us=679878   username = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   groupname = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   chroot_dir = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   cd_dir = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   writepid = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   up_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   down_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   down_pre = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   up_restart = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   up_delay = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   daemon = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   inetd = 0
Tue Aug 26 22:55:53 2014 us=679878   log = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   suppress_timestamps = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   nice = 0
Tue Aug 26 22:55:53 2014 us=679878   verbosity = 4
Tue Aug 26 22:55:53 2014 us=679878   mute = 0
Tue Aug 26 22:55:53 2014 us=679878   status_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   status_file_version = 1
Tue Aug 26 22:55:53 2014 us=679878   status_file_update_freq = 60
Tue Aug 26 22:55:53 2014 us=679878   occ = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   rcvbuf = 0
Tue Aug 26 22:55:53 2014 us=679878   sndbuf = 0
Tue Aug 26 22:55:53 2014 us=679878   sockflags = 0
Tue Aug 26 22:55:53 2014 us=679878   fast_io = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   lzo = 3
Tue Aug 26 22:55:53 2014 us=679878   route_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   route_default_gateway = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   route_default_metric = 0
Tue Aug 26 22:55:53 2014 us=679878   route_noexec = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   route_delay = 5
Tue Aug 26 22:55:53 2014 us=679878   route_delay_window = 30
Tue Aug 26 22:55:53 2014 us=679878   route_delay_defined = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   route_nopull = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   route_gateway_via_dhcp = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   max_routes = 100
Tue Aug 26 22:55:53 2014 us=679878   allow_pull_fqdn = DISABLED
Tue Aug 26 22:55:53 2014 us=679878   [redirect_default_gateway local=0]
Tue Aug 26 22:55:53 2014 us=679878   management_addr = '127.0.0.1'
Tue Aug 26 22:55:53 2014 us=679878   management_port = 25340
Tue Aug 26 22:55:53 2014 us=679878   management_user_pass = 'stdin'
Tue Aug 26 22:55:53 2014 us=679878   management_log_history_cache = 250
Tue Aug 26 22:55:53 2014 us=679878   management_echo_buffer_size = 100
Tue Aug 26 22:55:53 2014 us=679878   management_write_peer_info_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   management_client_user = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   management_client_group = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   management_flags = 6
Tue Aug 26 22:55:53 2014 us=679878   shared_secret_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=679878   key_direction = 2
Tue Aug 26 22:55:53 2014 us=679878   ciphername_defined = ENABLED
Tue Aug 26 22:55:53 2014 us=679878   ciphername = 'DES-EDE3-CBC'
Tue Aug 26 22:55:53 2014 us=680878   authname_defined = ENABLED
Tue Aug 26 22:55:53 2014 us=680878   authname = 'SHA1'
Tue Aug 26 22:55:53 2014 us=680878   prng_hash = 'SHA1'
Tue Aug 26 22:55:53 2014 us=680878   prng_nonce_secret_len = 16
Tue Aug 26 22:55:53 2014 us=680878   keysize = 0
Tue Aug 26 22:55:53 2014 us=680878   engine = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   replay = ENABLED
Tue Aug 26 22:55:53 2014 us=680878   mute_replay_warnings = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   replay_window = 64
Tue Aug 26 22:55:53 2014 us=680878   replay_time = 15
Tue Aug 26 22:55:53 2014 us=680878   packet_id_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   use_iv = ENABLED
Tue Aug 26 22:55:53 2014 us=680878   test_crypto = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   tls_server = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   tls_client = ENABLED
Tue Aug 26 22:55:53 2014 us=680878   key_method = 2
Tue Aug 26 22:55:53 2014 us=680878   ca_file = 'ca.crt'
Tue Aug 26 22:55:53 2014 us=680878   ca_path = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   dh_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   cert_file = 'csib.crt'
Tue Aug 26 22:55:53 2014 us=680878   priv_key_file = 'csib.key'
Tue Aug 26 22:55:53 2014 us=680878   pkcs12_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   cryptoapi_cert = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   cipher_list = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   tls_verify = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   tls_export_cert = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   verify_x509_type = 0
Tue Aug 26 22:55:53 2014 us=680878   verify_x509_name = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   crl_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   ns_cert_type = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_ku[i] = 0
Tue Aug 26 22:55:53 2014 us=680878   remote_cert_eku = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   ssl_flags = 0
Tue Aug 26 22:55:53 2014 us=680878   tls_timeout = 2
Tue Aug 26 22:55:53 2014 us=680878   renegotiate_bytes = 0
Tue Aug 26 22:55:53 2014 us=680878   renegotiate_packets = 0
Tue Aug 26 22:55:53 2014 us=680878   renegotiate_seconds = 3600
Tue Aug 26 22:55:53 2014 us=680878   handshake_window = 60
Tue Aug 26 22:55:53 2014 us=680878   transition_window = 3600
Tue Aug 26 22:55:53 2014 us=680878   single_session = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   push_peer_info = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   tls_exit = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   tls_auth_file = 'ta.key'
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_protected_authentication = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_private_mode = 00000000
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_cert_private = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_pin_cache_period = -1
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_id = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=680878   pkcs11_id_management = DISABLED
Tue Aug 26 22:55:53 2014 us=680878   server_network = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=680878   server_netmask = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   server_network_ipv6 = ::
Tue Aug 26 22:55:53 2014 us=681876   server_netbits_ipv6 = 0
Tue Aug 26 22:55:53 2014 us=681876   server_bridge_ip = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   server_bridge_netmask = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   server_bridge_pool_start = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   server_bridge_pool_end = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_start = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_end = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_netmask = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_pool_persist_refresh_freq = 600
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_ipv6_pool_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_ipv6_pool_base = ::
Tue Aug 26 22:55:53 2014 us=681876   ifconfig_ipv6_pool_netbits = 0
Tue Aug 26 22:55:53 2014 us=681876   n_bcast_buf = 256
Tue Aug 26 22:55:53 2014 us=681876   tcp_queue_limit = 64
Tue Aug 26 22:55:53 2014 us=681876   real_hash_size = 256
Tue Aug 26 22:55:53 2014 us=681876   virtual_hash_size = 256
Tue Aug 26 22:55:53 2014 us=681876   client_connect_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=681876   learn_address_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=681876   client_disconnect_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=681876   client_config_dir = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=681876   ccd_exclusive = DISABLED
Tue Aug 26 22:55:53 2014 us=681876   tmp_dir = 'C:\Users\RON~1\AppData\Local\Temp\'
Tue Aug 26 22:55:53 2014 us=681876   push_ifconfig_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=681876   push_ifconfig_local = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=681876   push_ifconfig_remote_netmask = 0.0.0.0
Tue Aug 26 22:55:53 2014 us=682881   push_ifconfig_ipv6_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   push_ifconfig_ipv6_local = ::/0
Tue Aug 26 22:55:53 2014 us=682881   push_ifconfig_ipv6_remote = ::
Tue Aug 26 22:55:53 2014 us=682881   enable_c2c = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   duplicate_cn = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   cf_max = 0
Tue Aug 26 22:55:53 2014 us=682881   cf_per = 0
Tue Aug 26 22:55:53 2014 us=682881   max_clients = 1024
Tue Aug 26 22:55:53 2014 us=682881   max_routes_per_client = 256
Tue Aug 26 22:55:53 2014 us=682881   auth_user_pass_verify_script = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=682881   auth_user_pass_verify_script_via_file = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   client = ENABLED
Tue Aug 26 22:55:53 2014 us=682881   pull = ENABLED
Tue Aug 26 22:55:53 2014 us=682881   auth_user_pass_file = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=682881   show_net_up = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   route_method = 0
Tue Aug 26 22:55:53 2014 us=682881   ip_win32_defined = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   ip_win32_type = 3
Tue Aug 26 22:55:53 2014 us=682881   dhcp_masq_offset = 0
Tue Aug 26 22:55:53 2014 us=682881   dhcp_lease_time = 31536000
Tue Aug 26 22:55:53 2014 us=682881   tap_sleep = 0
Tue Aug 26 22:55:53 2014 us=682881   dhcp_options = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   dhcp_renew = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   dhcp_pre_release = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   dhcp_release = DISABLED
Tue Aug 26 22:55:53 2014 us=682881   domain = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=682881   netbios_scope = '[UNDEF]'
Tue Aug 26 22:55:53 2014 us=682881   netbios_node_type = 0
Tue Aug 26 22:55:53 2014 us=682881   disable_nbt = DISABLED
Tue Aug 26 22:55:53 2014 us=682881 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Tue Aug 26 22:55:53 2014 us=682881 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Tue Aug 26 22:55:53 2014 us=682881 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Aug 26 22:55:53 2014 us=682881 Need hold release from management interface, waiting...
Tue Aug 26 22:55:54 2014 us=80169 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Aug 26 22:55:54 2014 us=181236 MANAGEMENT: CMD 'state on'
Tue Aug 26 22:55:54 2014 us=181236 MANAGEMENT: CMD 'log all on'
Tue Aug 26 22:55:54 2014 us=277297 MANAGEMENT: CMD 'hold off'
Tue Aug 26 22:55:54 2014 us=278297 MANAGEMENT: CMD 'hold release'
Tue Aug 26 22:55:54 2014 us=278297 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 26 22:55:54 2014 us=408381 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Aug 26 22:55:54 2014 us=408381 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 26 22:55:54 2014 us=408381 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 26 22:55:54 2014 us=408381 LZO compression initialized
Tue Aug 26 22:55:54 2014 us=408381 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Aug 26 22:55:54 2014 us=408381 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 26 22:55:54 2014 us=408381 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 26 22:55:54 2014 us=408381 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher DES-EDE3-CBC,auth SHA1,keysize 192,tls-auth,key-method 2,tls-client'
Tue Aug 26 22:55:54 2014 us=408381 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher DES-EDE3-CBC,auth SHA1,keysize 192,tls-auth,key-method 2,tls-server'
Tue Aug 26 22:55:54 2014 us=408381 Local Options hash (VER=V4): '53f7fc82'
Tue Aug 26 22:55:54 2014 us=408381 Expected Remote Options hash (VER=V4): 'b5edb94e'
Tue Aug 26 22:55:54 2014 us=408381 UDPv4 link local: [undef]
Tue Aug 26 22:55:54 2014 us=408381 UDPv4 link remote: [AF_INET]37.17.173.41:1194
Tue Aug 26 22:55:54 2014 us=408381 MANAGEMENT: >STATE:1409086554,WAIT,,,
Tue Aug 26 22:55:54 2014 us=423391 MANAGEMENT: >STATE:1409086554,AUTH,,,
Tue Aug 26 22:55:54 2014 us=423391 TLS: Initial packet from [AF_INET]37.17.173.41:1194, sid=aef1a171 94787800
Tue Aug 26 22:55:54 2014 us=580520 VERIFY OK: depth=1, C=HU, ST=HU, L=Szeged, OU=changeme, CN=changeme, name=changeme, emailAddress=csibtsib@gmail.com
Tue Aug 26 22:55:54 2014 us=580520 VERIFY OK: depth=0, C=HU, ST=HU, L=Szeged, OU=changeme, CN=neutron, name=changeme, emailAddress=csibtsib@gmail.com
Tue Aug 26 22:55:54 2014 us=816678 Data Channel Encrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Tue Aug 26 22:55:54 2014 us=816678 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 26 22:55:54 2014 us=816678 Data Channel Decrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Tue Aug 26 22:55:54 2014 us=816678 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 26 22:55:54 2014 us=816678 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Aug 26 22:55:54 2014 us=816678 [neutron] Peer Connection Initiated with [AF_INET]37.17.173.41:1194
Tue Aug 26 22:55:55 2014 us=970448 MANAGEMENT: >STATE:1409086555,GET_CONFIG,,,
Tue Aug 26 22:55:57 2014 us=123216 SENT CONTROL [neutron]: 'PUSH_REQUEST' (status=1)
Tue Aug 26 22:55:57 2014 us=141251 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway def1 bypass-dhcp,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ping 1800,ping-restart 4000,ifconfig 10.8.0.6 10.8.0.5'
Tue Aug 26 22:55:57 2014 us=141251 OPTIONS IMPORT: timers and/or timeouts modified
Tue Aug 26 22:55:57 2014 us=141251 OPTIONS IMPORT: --ifconfig/up options modified
Tue Aug 26 22:55:57 2014 us=141251 OPTIONS IMPORT: route options modified
Tue Aug 26 22:55:57 2014 us=141251 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Aug 26 22:55:57 2014 us=155257 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Aug 26 22:55:57 2014 us=156258 MANAGEMENT: >STATE:1409086557,ASSIGN_IP,,10.8.0.6,
Tue Aug 26 22:55:57 2014 us=156258 open_tun, tt->ipv6=0
Tue Aug 26 22:55:57 2014 us=157258 TAP-WIN32 device [Helyi kapcsolat] opened: \\.\Global\{BA020F45-415C-42BF-AA23-5F5919D095AF}.tap
Tue Aug 26 22:55:57 2014 us=157258 TAP-Windows Driver Version 9.21 
Tue Aug 26 22:55:57 2014 us=157258 TAP-Windows MTU=1500
Tue Aug 26 22:55:57 2014 us=158259 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {BA020F45-415C-42BF-AA23-5F5919D095AF} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue Aug 26 22:55:57 2014 us=158259 DHCP option string: 06100808 08080808 04040808 08080808 0404
Tue Aug 26 22:55:57 2014 us=159258 Successful ARP Flush on interface [23] {BA020F45-415C-42BF-AA23-5F5919D095AF}
Tue Aug 26 22:56:02 2014 us=77553 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Tue Aug 26 22:56:02 2014 us=77553 C:\Windows\system32\route.exe ADD 37.17.173.41 MASK 255.255.255.255 192.168.0.1
Tue Aug 26 22:56:02 2014 us=78553 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=78553 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=79552 C:\Windows\system32\route.exe ADD 192.168.0.1 MASK 255.255.255.255 192.168.0.1 IF 3
Tue Aug 26 22:56:02 2014 us=79552 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=79552 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=79552 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue Aug 26 22:56:02 2014 us=81553 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=81553 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=81553 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue Aug 26 22:56:02 2014 us=85559 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=85559 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=85559 MANAGEMENT: >STATE:1409086562,ADD_ROUTES,,,
Tue Aug 26 22:56:02 2014 us=85559 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Tue Aug 26 22:56:02 2014 us=89558 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=89558 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=89558 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Tue Aug 26 22:56:02 2014 us=91559 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Aug 26 22:56:02 2014 us=91559 Route addition via IPAPI succeeded [adaptive]
Tue Aug 26 22:56:02 2014 us=91559 Initialization Sequence Completed
Tue Aug 26 22:56:02 2014 us=91559 MANAGEMENT: >STATE:1409086562,CONNECTED,SUCCESS,10.8.0.6,37.17.173.41

Sorry if it is too long.

Thank you to take up my problem!

csibe

Thanks, i will check the link asap.

Here is the iptables --list 's output:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
fail2ban-ssh  tcp  --  anywhere             anywhere             multiport dports ssh
ACCEPT     udp  --  anywhere             anywhere             state NEW udp dpt:openvpn
ACCEPT     udp  --  anywhere             anywhere             state NEW udp dpt:openvpn
ACCEPT     udp  --  anywhere             anywhere             state NEW udp dpt:openvpn

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  192.168.88.0/24      anywhere
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  192.168.88.0/24      anywhere
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  10.8.0.0/24          anywhere
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  10.8.0.0/24          anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain fail2ban-ssh (1 references)
target     prot opt source               destination
DROP       all  --  200.166.195.52       anywhere
RETURN     all  --  anywhere             anywhere

csibe

So! Finally i found to problem. I share it with you, maybe helps someone.

There were 2 main problems:
iptables and comp-lzo.

At first, for me this is NOT worked:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

Instead i must use this:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to <serverpublicip>

Then i turned off:

comp-lzo

And now, everything working normally. Thanks the help guys!