Connection from Client to Server possible but no internet

stefanoneri

Hello,

I'm trying now for a few days to get openvpn running properly. Today I had first success and was able to connect to the openvpn server. I wanted to route all my internet traffic through my VPN-Server but except of google.com/de and openvpn.net, I cannot access any websites in the internet (this might be due to the fact, that I have a google and a openvpn.net DNS-Server in my server.conf). However, I need to have all Internet traffic routed through the VPN!

Can any of you guys help me?

thanks,
regards!

Client.conf

##############################################
# Client Config								 #
##############################################

client

dev tun

proto udp

remote xxx 1985
remote xxx 1985

resolv-retry infinite

nobind

persist-key
persist-tun

ca c:\\temp\\ca.crt
cert c:\\temp\\motte.crt
key c:\\temp\\motte.key

ns-cert-type server

comp-lzo

verb 3

Server.conf

#################################################
# Server Config                                 #
#################################################
local xxx
port 1985

proto udp

dev tun

//CERTS & KEY

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

route 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"


#push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option DNS 209.244.0.3"
push "dhcp-option DNS 209.244.0.4"
push "topology subnet"
topology subnet

keepalive 10 120

comp-lzo

max-clients 10

user nobody
group nogroup

persist-key
persist-tun

status /var/log/openvpn-status.log

log         /var/log/openvpn.log
#log-append /var/log/openvpn.log

verb 4

Server.log

Wed Sep 10 20:53:29 2014 us=699187 Current Parameter Settings:
Wed Sep 10 20:53:29 2014 us=699341   config = '/etc/openvpn/server.conf'
Wed Sep 10 20:53:29 2014 us=699406   mode = 1
Wed Sep 10 20:53:29 2014 us=699435   persist_config = DISABLED
Wed Sep 10 20:53:29 2014 us=699465   persist_mode = 1
Wed Sep 10 20:53:29 2014 us=699493   show_ciphers = DISABLED
Wed Sep 10 20:53:29 2014 us=699521   show_digests = DISABLED
Wed Sep 10 20:53:29 2014 us=699539   show_engines = DISABLED
Wed Sep 10 20:53:29 2014 us=699566   genkey = DISABLED
Wed Sep 10 20:53:29 2014 us=699594   key_pass_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=699612   show_tls_ciphers = DISABLED
Wed Sep 10 20:53:29 2014 us=699640 Connection profiles [default]:
Wed Sep 10 20:53:29 2014 us=699669   proto = udp
Wed Sep 10 20:53:29 2014 us=699696   local = 'xxx'
Wed Sep 10 20:53:29 2014 us=699724   local_port = 1985
Wed Sep 10 20:53:29 2014 us=699752   remote = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=699780   remote_port = 1985
Wed Sep 10 20:53:29 2014 us=699801   remote_float = DISABLED
Wed Sep 10 20:53:29 2014 us=699829   bind_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=699856   bind_local = ENABLED
Wed Sep 10 20:53:29 2014 us=699874   connect_retry_seconds = 5
Wed Sep 10 20:53:29 2014 us=699901   connect_timeout = 10
Wed Sep 10 20:53:29 2014 us=699935   connect_retry_max = 0
Wed Sep 10 20:53:29 2014 us=699966   socks_proxy_server = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=699994   socks_proxy_port = 0
Wed Sep 10 20:53:29 2014 us=700021   socks_proxy_retry = DISABLED
Wed Sep 10 20:53:29 2014 us=700040   tun_mtu = 1500
Wed Sep 10 20:53:29 2014 us=700058   tun_mtu_defined = ENABLED
Wed Sep 10 20:53:29 2014 us=700086   link_mtu = 1500
Wed Sep 10 20:53:29 2014 us=700104   link_mtu_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=700131   tun_mtu_extra = 0
Wed Sep 10 20:53:29 2014 us=700149   tun_mtu_extra_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=700177   mtu_discover_type = -1
Wed Sep 10 20:53:29 2014 us=700197   fragment = 0
Wed Sep 10 20:53:29 2014 us=700215   mssfix = 1450
Wed Sep 10 20:53:29 2014 us=700243   explicit_exit_notification = 0
Wed Sep 10 20:53:29 2014 us=700274 Connection profiles END
Wed Sep 10 20:53:29 2014 us=700303   remote_random = DISABLED
Wed Sep 10 20:53:29 2014 us=700331   ipchange = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700375   dev = 'tun'
Wed Sep 10 20:53:29 2014 us=700404   dev_type = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700425   dev_node = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700453   lladdr = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700480   topology = 3
Wed Sep 10 20:53:29 2014 us=700507   tun_ipv6 = DISABLED
Wed Sep 10 20:53:29 2014 us=700535   ifconfig_local = '10.8.0.1'
Wed Sep 10 20:53:29 2014 us=700562   ifconfig_remote_netmask = '255.255.255.0'
Wed Sep 10 20:53:29 2014 us=700590   ifconfig_noexec = DISABLED
Wed Sep 10 20:53:29 2014 us=700617   ifconfig_nowarn = DISABLED
Wed Sep 10 20:53:29 2014 us=700644   ifconfig_ipv6_local = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700671   ifconfig_ipv6_netbits = 0
Wed Sep 10 20:53:29 2014 us=700698   ifconfig_ipv6_remote = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=700726   shaper = 0
Wed Sep 10 20:53:29 2014 us=700753   mtu_test = 0
Wed Sep 10 20:53:29 2014 us=700779   mlock = DISABLED
Wed Sep 10 20:53:29 2014 us=700800   keepalive_ping = 10
Wed Sep 10 20:53:29 2014 us=700827   keepalive_timeout = 120
Wed Sep 10 20:53:29 2014 us=700854   inactivity_timeout = 0
Wed Sep 10 20:53:29 2014 us=700881   ping_send_timeout = 10
Wed Sep 10 20:53:29 2014 us=700909   ping_rec_timeout = 240
Wed Sep 10 20:53:29 2014 us=700936   ping_rec_timeout_action = 2
Wed Sep 10 20:53:29 2014 us=700963   ping_timer_remote = DISABLED
Wed Sep 10 20:53:29 2014 us=700990   remap_sigusr1 = 0
Wed Sep 10 20:53:29 2014 us=701017   persist_tun = ENABLED
Wed Sep 10 20:53:29 2014 us=701034   persist_local_ip = DISABLED
Wed Sep 10 20:53:29 2014 us=701062   persist_remote_ip = DISABLED
Wed Sep 10 20:53:29 2014 us=701089   persist_key = ENABLED
Wed Sep 10 20:53:29 2014 us=701116   passtos = DISABLED
Wed Sep 10 20:53:29 2014 us=701144   resolve_retry_seconds = 1000000000
Wed Sep 10 20:53:29 2014 us=701188   username = 'nobody'
Wed Sep 10 20:53:29 2014 us=701220   groupname = 'nogroup'
Wed Sep 10 20:53:29 2014 us=701248   chroot_dir = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=701276   cd_dir = '/etc/openvpn'
Wed Sep 10 20:53:29 2014 us=701304   writepid = '/run/openvpn/server.pid'
Wed Sep 10 20:53:29 2014 us=701331   up_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=701372   down_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=701395   down_pre = DISABLED
Wed Sep 10 20:53:29 2014 us=701420   up_restart = DISABLED
Wed Sep 10 20:53:29 2014 us=701448   up_delay = DISABLED
Wed Sep 10 20:53:29 2014 us=701475   daemon = ENABLED
Wed Sep 10 20:53:29 2014 us=701502   inetd = 0
Wed Sep 10 20:53:29 2014 us=701530   log = ENABLED
Wed Sep 10 20:53:29 2014 us=701558   suppress_timestamps = DISABLED
Wed Sep 10 20:53:29 2014 us=701575   nice = 0
Wed Sep 10 20:53:29 2014 us=701603   verbosity = 4
Wed Sep 10 20:53:29 2014 us=701621   mute = 0
Wed Sep 10 20:53:29 2014 us=701648   gremlin = 0
Wed Sep 10 20:53:29 2014 us=701676   status_file = '/var/log/openvpn-status.log'
Wed Sep 10 20:53:29 2014 us=701703   status_file_version = 1
Wed Sep 10 20:53:29 2014 us=701731   status_file_update_freq = 60
Wed Sep 10 20:53:29 2014 us=701759   occ = ENABLED
Wed Sep 10 20:53:29 2014 us=701787   rcvbuf = 65536
Wed Sep 10 20:53:29 2014 us=701815   sndbuf = 65536
Wed Sep 10 20:53:29 2014 us=701833   mark = 0
Wed Sep 10 20:53:29 2014 us=701860   sockflags = 0
Wed Sep 10 20:53:29 2014 us=701888   fast_io = DISABLED
Wed Sep 10 20:53:29 2014 us=701916   lzo = 7
Wed Sep 10 20:53:29 2014 us=701943   route_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=701971   route_default_gateway = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=701999   route_default_metric = 0
Wed Sep 10 20:53:29 2014 us=702027   route_noexec = DISABLED
Wed Sep 10 20:53:29 2014 us=702054   route_delay = 0
Wed Sep 10 20:53:29 2014 us=702082   route_delay_window = 30
Wed Sep 10 20:53:29 2014 us=702110   route_delay_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=702138   route_nopull = DISABLED
Wed Sep 10 20:53:29 2014 us=702160   route_gateway_via_dhcp = DISABLED
Wed Sep 10 20:53:29 2014 us=702190   max_routes = 100
Wed Sep 10 20:53:29 2014 us=702217   allow_pull_fqdn = DISABLED
Wed Sep 10 20:53:29 2014 us=702247   route 10.8.0.0/255.255.255.0/nil/nil
Wed Sep 10 20:53:29 2014 us=702275   management_addr = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702303   management_port = 0
Wed Sep 10 20:53:29 2014 us=702323   management_user_pass = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702359   management_log_history_cache = 250
Wed Sep 10 20:53:29 2014 us=702389   management_echo_buffer_size = 100
Wed Sep 10 20:53:29 2014 us=702407   management_write_peer_info_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702425   management_client_user = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702444   management_client_group = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702462   management_flags = 0
Wed Sep 10 20:53:29 2014 us=702494   shared_secret_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702522   key_direction = 0
Wed Sep 10 20:53:29 2014 us=702550   ciphername_defined = ENABLED
Wed Sep 10 20:53:29 2014 us=702578   ciphername = 'BF-CBC'
Wed Sep 10 20:53:29 2014 us=702605   authname_defined = ENABLED
Wed Sep 10 20:53:29 2014 us=702632   authname = 'SHA1'
Wed Sep 10 20:53:29 2014 us=702659   prng_hash = 'SHA1'
Wed Sep 10 20:53:29 2014 us=702687   prng_nonce_secret_len = 16
Wed Sep 10 20:53:29 2014 us=702705   keysize = 0
Wed Sep 10 20:53:29 2014 us=702733   engine = DISABLED
Wed Sep 10 20:53:29 2014 us=702761   replay = ENABLED
Wed Sep 10 20:53:29 2014 us=702788   mute_replay_warnings = DISABLED
Wed Sep 10 20:53:29 2014 us=702817   replay_window = 64
Wed Sep 10 20:53:29 2014 us=702845   replay_time = 15
Wed Sep 10 20:53:29 2014 us=702873   packet_id_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=702890   use_iv = ENABLED
Wed Sep 10 20:53:29 2014 us=702917   test_crypto = DISABLED
Wed Sep 10 20:53:29 2014 us=702935   tls_server = ENABLED
Wed Sep 10 20:53:29 2014 us=702963   tls_client = DISABLED
Wed Sep 10 20:53:29 2014 us=703013   key_method = 2
Wed Sep 10 20:53:29 2014 us=703043   ca_file = '/usr/share/doc/openvpn/examples/easy-rsa/keys/ca.crt'
Wed Sep 10 20:53:29 2014 us=703061   ca_path = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703089   dh_file = '/usr/share/doc/openvpn/examples/easy-rsa/keys/dh2048.pem'
Wed Sep 10 20:53:29 2014 us=703108   cert_file = '/usr/share/doc/openvpn/examples/easy-rsa/keys/server.crt'
Wed Sep 10 20:53:29 2014 us=703137   priv_key_file = '/usr/share/doc/openvpn/examples/easy-rsa/keys/server.key'
Wed Sep 10 20:53:29 2014 us=703165   pkcs12_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703192   cipher_list = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703217   tls_verify = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703246   tls_export_cert = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703265   verify_x509_type = 0
Wed Sep 10 20:53:29 2014 us=703292   verify_x509_name = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703319   crl_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703367   ns_cert_type = 0
Wed Sep 10 20:53:29 2014 us=703404   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703432   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703450   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703467   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703485   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703502   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703519   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703537   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703555   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703572   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703589   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703607   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703624   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703642   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703659   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703677   remote_cert_ku[i] = 0
Wed Sep 10 20:53:29 2014 us=703704   remote_cert_eku = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=703732   ssl_flags = 0
Wed Sep 10 20:53:29 2014 us=703760   tls_timeout = 2
Wed Sep 10 20:53:29 2014 us=703788   renegotiate_bytes = 0
Wed Sep 10 20:53:29 2014 us=703814   renegotiate_packets = 0
Wed Sep 10 20:53:29 2014 us=703841   renegotiate_seconds = 3600
Wed Sep 10 20:53:29 2014 us=703859   handshake_window = 60
Wed Sep 10 20:53:29 2014 us=703887   transition_window = 3600
Wed Sep 10 20:53:29 2014 us=703914   single_session = DISABLED
Wed Sep 10 20:53:29 2014 us=703932   push_peer_info = DISABLED
Wed Sep 10 20:53:29 2014 us=703958   tls_exit = DISABLED
Wed Sep 10 20:53:29 2014 us=703976   tls_auth_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=704005   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704023   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704041   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704059   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704077   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704095   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704113   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704130   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704148   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704166   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704184   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704202   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704220   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704237   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704255   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704273   pkcs11_protected_authentication = DISABLED
Wed Sep 10 20:53:29 2014 us=704300   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704319   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704375   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704395   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704413   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704430   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704448   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704466   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704484   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704502   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704519   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704552   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704572   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704590   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704608   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704626   pkcs11_private_mode = 00000000
Wed Sep 10 20:53:29 2014 us=704654   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704672   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704690   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704707   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704725   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704743   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704761   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704779   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704797   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704815   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704833   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704850   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704868   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704886   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704904   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704922   pkcs11_cert_private = DISABLED
Wed Sep 10 20:53:29 2014 us=704948   pkcs11_pin_cache_period = -1
Wed Sep 10 20:53:29 2014 us=704975   pkcs11_id = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=705003   pkcs11_id_management = DISABLED
Wed Sep 10 20:53:29 2014 us=705032   server_network = 10.8.0.0
Wed Sep 10 20:53:29 2014 us=705062   server_netmask = 255.255.255.0
Wed Sep 10 20:53:29 2014 us=705097   server_network_ipv6 = ::
Wed Sep 10 20:53:29 2014 us=705116   server_netbits_ipv6 = 0
Wed Sep 10 20:53:29 2014 us=705144   server_bridge_ip = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=705163   server_bridge_netmask = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=705183   server_bridge_pool_start = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=705215   server_bridge_pool_end = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=705243   push_entry = 'redirect-gateway def1 bypass-dhcp'
Wed Sep 10 20:53:29 2014 us=705262   push_entry = 'remote-gateway 10.8.0.1'
Wed Sep 10 20:53:29 2014 us=705280   push_entry = 'dhcp-option DNS 8.8.8.8'
Wed Sep 10 20:53:29 2014 us=705298   push_entry = 'dhcp-option DNS 209.244.0.4'
Wed Sep 10 20:53:29 2014 us=705316   push_entry = 'topology subnet'
Wed Sep 10 20:53:29 2014 us=705335   push_entry = 'route-gateway 10.8.0.1'
Wed Sep 10 20:53:29 2014 us=705366   push_entry = 'topology subnet'
Wed Sep 10 20:53:29 2014 us=705385   push_entry = 'ping 10'
Wed Sep 10 20:53:29 2014 us=705402   push_entry = 'ping-restart 120'
Wed Sep 10 20:53:29 2014 us=705420   ifconfig_pool_defined = ENABLED
Wed Sep 10 20:53:29 2014 us=705451   ifconfig_pool_start = 10.8.0.2
Wed Sep 10 20:53:29 2014 us=705480   ifconfig_pool_end = 10.8.0.253
Wed Sep 10 20:53:29 2014 us=705508   ifconfig_pool_netmask = 255.255.255.0
Wed Sep 10 20:53:29 2014 us=705526   ifconfig_pool_persist_filename = 'ipp.txt'
Wed Sep 10 20:53:29 2014 us=705544   ifconfig_pool_persist_refresh_freq = 600
Wed Sep 10 20:53:29 2014 us=705572   ifconfig_ipv6_pool_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=705600   ifconfig_ipv6_pool_base = ::
Wed Sep 10 20:53:29 2014 us=705628   ifconfig_ipv6_pool_netbits = 0
Wed Sep 10 20:53:29 2014 us=705670   n_bcast_buf = 256
Wed Sep 10 20:53:29 2014 us=705699   tcp_queue_limit = 64
Wed Sep 10 20:53:29 2014 us=705727   real_hash_size = 256
Wed Sep 10 20:53:29 2014 us=705745   virtual_hash_size = 256
Wed Sep 10 20:53:29 2014 us=705772   client_connect_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=705800   learn_address_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=705828   client_disconnect_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=705855   client_config_dir = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=705883   ccd_exclusive = DISABLED
Wed Sep 10 20:53:29 2014 us=705910   tmp_dir = '/tmp'
Wed Sep 10 20:53:29 2014 us=705938   push_ifconfig_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=705966   push_ifconfig_local = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=705986   push_ifconfig_remote_netmask = 0.0.0.0
Wed Sep 10 20:53:29 2014 us=706004   push_ifconfig_ipv6_defined = DISABLED
Wed Sep 10 20:53:29 2014 us=706032   push_ifconfig_ipv6_local = ::/0
Wed Sep 10 20:53:29 2014 us=706061   push_ifconfig_ipv6_remote = ::
Wed Sep 10 20:53:29 2014 us=706088   enable_c2c = DISABLED
Wed Sep 10 20:53:29 2014 us=706115   duplicate_cn = DISABLED
Wed Sep 10 20:53:29 2014 us=706143   cf_max = 0
Wed Sep 10 20:53:29 2014 us=706170   cf_per = 0
Wed Sep 10 20:53:29 2014 us=706198   max_clients = 10
Wed Sep 10 20:53:29 2014 us=706225   max_routes_per_client = 256
Wed Sep 10 20:53:29 2014 us=706243   auth_user_pass_verify_script = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=706271   auth_user_pass_verify_script_via_file = DISABLED
Wed Sep 10 20:53:29 2014 us=706299   port_share_host = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=706317   port_share_port = 0
Wed Sep 10 20:53:29 2014 us=706334   client = DISABLED
Wed Sep 10 20:53:29 2014 us=706371   pull = DISABLED
Wed Sep 10 20:53:29 2014 us=706390   auth_user_pass_file = '[UNDEF]'
Wed Sep 10 20:53:29 2014 us=706411 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb  4 2014
Wed Sep 10 20:53:29 2014 us=724041 Diffie-Hellman initialized with 2048 bit key
Wed Sep 10 20:53:29 2014 us=725182 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Sep 10 20:53:29 2014 us=725253 Socket Buffers: R=[133120->131072] S=[133120->131072]
Wed Sep 10 20:53:29 2014 us=725507 ROUTE_GATEWAY ON_LINK IFACE=venet0 HWADDR=00:00:00:00:00:00
Wed Sep 10 20:53:29 2014 us=725555 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gate$
Wed Sep 10 20:53:29 2014 us=725585 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.8.0.0
Wed Sep 10 20:53:29 2014 us=731443 TUN/TAP device tun0 opened
Wed Sep 10 20:53:29 2014 us=731520 TUN/TAP TX queue length set to 100
Wed Sep 10 20:53:29 2014 us=731567 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 10 20:53:29 2014 us=731639 /sbin/ip link set dev tun0 up mtu 1500
Wed Sep 10 20:53:29 2014 us=745392 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Wed Sep 10 20:53:29 2014 us=762577 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Sep 10 20:53:29 2014 us=766797 GID set to nogroup
Wed Sep 10 20:53:29 2014 us=766883 UID set to nobody
Wed Sep 10 20:53:29 2014 us=766923 UDPv4 link local (bound): [AF_INET]xxx:1985
Wed Sep 10 20:53:29 2014 us=766940 UDPv4 link remote: [undef]
Wed Sep 10 20:53:29 2014 us=766955 MULTI: multi_init called, r=256 v=256
Wed Sep 10 20:53:29 2014 us=767038 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Wed Sep 10 20:53:29 2014 us=767062 ifconfig_pool_read(), in='motte,10.8.0.4', TODO: IPv6
Wed Sep 10 20:53:29 2014 us=767089 succeeded -> ifconfig_pool_set()
Wed Sep 10 20:53:29 2014 us=767108 IFCONFIG POOL LIST
Wed Sep 10 20:53:29 2014 us=767120 motte,10.8.0.4
Wed Sep 10 20:53:29 2014 us=767170 Initialization Sequence Completed
Wed Sep 10 20:53:33 2014 us=24133 MULTI: multi_create_instance called
Wed Sep 10 20:53:33 2014 us=24245 79.241.96.79:62483 Re-using SSL/TLS context
Wed Sep 10 20:53:33 2014 us=24313 79.241.96.79:62483 LZO compression initialized
Wed Sep 10 20:53:33 2014 us=24771 79.241.96.79:62483 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Sep 10 20:53:33 2014 us=24817 79.241.96.79:62483 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Sep 10 20:53:33 2014 us=24906 79.241.96.79:62483 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,au$
Wed Sep 10 20:53:33 2014 us=24937 79.241.96.79:62483 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher$
Wed Sep 10 20:53:33 2014 us=25002 79.241.96.79:62483 Local Options hash (VER=V4): '530fdded'
Wed Sep 10 20:53:33 2014 us=25044 79.241.96.79:62483 Expected Remote Options hash (VER=V4): '41690919'
Wed Sep 10 20:53:33 2014 us=25143 79.241.96.79:62483 TLS: Initial packet from [AF_INET]79.241.96.79:62483, sid=51e0f693 7047a2cd
Wed Sep 10 20:53:33 2014 us=550332 79.241.96.79:62483 VERIFY OK: depth=1, 
Wed Sep 10 20:53:33 2014 us=550868 79.241.96.79:62483 VERIFY OK: depth=0,
Wed Sep 10 20:53:33 2014 us=703251 79.241.96.79:62483 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 20:53:33 2014 us=703322 79.241.96.79:62483 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 20:53:33 2014 us=703457 79.241.96.79:62483 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 20:53:33 2014 us=703493 79.241.96.79:62483 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 20:53:33 2014 us=732280 79.241.96.79:62483 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Sep 10 20:53:33 2014 us=732363 79.241.96.79:62483 [motte] Peer Connection Initiated with [AF_INET]79.241.96.79:62483
Wed Sep 10 20:53:33 2014 us=732433 motte/79.241.96.79:62483 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Wed Sep 10 20:53:33 2014 us=732555 motte/79.241.96.79:62483 MULTI: Learn: 10.8.0.4 -> motte/79.241.96.79:62483
Wed Sep 10 20:53:33 2014 us=732581 motte/79.241.96.79:62483 MULTI: primary virtual IP for motte/79.241.96.79:62483: 10.8.0.4
Wed Sep 10 20:53:36 2014 us=72425 motte/79.241.96.79:62483 PUSH: Received control message: 'PUSH_REQUEST'
Wed Sep 10 20:53:36 2014 us=72520 motte/79.241.96.79:62483 send_push_reply(): safe_cap=940
Wed Sep 10 20:53:36 2014 us=72617 motte/79.241.96.79:62483 SENT CONTROL [motte]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,remote-gateway 10.8.0.1,dhcp-$
Wed Sep 10 20:53:36 2014 us=163534 motte/79.241.96.79:62483 MULTI: bad source address from client [fe80::745c:11df:5f9d:e6f7], packet dropped
...

Client.log

Wed Sep 10 21:16:31 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Sep 10 21:16:31 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Sep 10 21:16:31 2014 LZO compression initialized
Wed Sep 10 21:16:31 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Sep 10 21:16:31 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Sep 10 21:16:31 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Sep 10 21:16:31 2014 Local Options hash (VER=V4): '41690919'
Wed Sep 10 21:16:31 2014 Expected Remote Options hash (VER=V4): '530fdded'
Wed Sep 10 21:16:31 2014 UDPv4 link local: [undef]
Wed Sep 10 21:16:31 2014 UDPv4 link remote: xxx:1985
Wed Sep 10 21:16:31 2014 TLS: Initial packet from xxx:1985, sid=ce0c003a 471d209d
Wed Sep 10 21:16:31 2014 VERIFY OK: depth=1, 
Wed Sep 10 21:16:31 2014 VERIFY OK: nsCertType=SERVER
Wed Sep 10 21:16:31 2014 VERIFY OK: depth=0, 
Wed Sep 10 21:16:32 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 21:16:32 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 21:16:32 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 21:16:32 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 21:16:32 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Sep 10 21:16:32 2014 [server] Peer Connection Initiated with 212.227.88.46:1985
Wed Sep 10 21:16:34 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Sep 10 21:16:34 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,remote-gateway 10.8.0.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 209.244.0.4,topology subnet,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0'
Wed Sep 10 21:16:34 2014 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:2: remote-gateway (2.2.2)
Wed Sep 10 21:16:34 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 10 21:16:34 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 10 21:16:34 2014 OPTIONS IMPORT: route options modified
Wed Sep 10 21:16:34 2014 OPTIONS IMPORT: route-related options modified
Wed Sep 10 21:16:34 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Sep 10 21:16:34 2014 ROUTE default_gateway=192.168.2.1
Wed Sep 10 21:16:34 2014 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{0015D721-B5B4-4E14-9AAD-01DA5E4A3173}.tap
Wed Sep 10 21:16:34 2014 TAP-Win32 Driver Version 9.9 
Wed Sep 10 21:16:34 2014 TAP-Win32 MTU=1500
Wed Sep 10 21:16:34 2014 Set TAP-Win32 TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Wed Sep 10 21:16:34 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {0015D721-B5B4-4E14-9AAD-01DA5E4A3173} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Sep 10 21:16:34 2014 Successful ARP Flush on interface [25] {0015D721-B5B4-4E14-9AAD-01DA5E4A3173}
Wed Sep 10 21:16:39 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Sep 10 21:16:39 2014 C:\WINDOWS\system32\route.exe ADD 212.227.88.46 MASK 255.255.255.255 192.168.2.1
Wed Sep 10 21:16:39 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 10 21:16:39 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 21:16:39 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Sep 10 21:16:39 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Sep 10 21:16:39 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 21:16:39 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Sep 10 21:16:39 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Sep 10 21:16:39 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 21:16:39 2014 Initialization Sequence Completed

stefanoneri

There is an error, but I could not figure out whether it is connected to my problem:

Wed Sep 10 20:53:29 2014 us=725555 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gate$
Wed Sep 10 20:53:29 2014 us=725585 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.8.0.0

Btw. thats my /etc/rc.local

sysctl -w net.ipv4.ip_forward=1
iptables -A FORWARD -o eth0 -i tun0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -A INPUT -p udp --dport 1985 -j ACCEPT

stefanoneri

I just updated the software (and am able to connect to my server). This is the current client.log

Wed Sep 10 22:26:52 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Wed Sep 10 22:26:52 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Wed Sep 10 22:26:52 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Sep 10 22:26:52 2014 Need hold release from management interface, waiting...
Wed Sep 10 22:26:52 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Sep 10 22:26:52 2014 MANAGEMENT: CMD 'state on'
Wed Sep 10 22:26:52 2014 MANAGEMENT: CMD 'log all on'
Wed Sep 10 22:26:52 2014 MANAGEMENT: CMD 'hold off'
Wed Sep 10 22:26:52 2014 MANAGEMENT: CMD 'hold release'
Wed Sep 10 22:26:52 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 10 22:26:53 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Sep 10 22:26:53 2014 UDPv4 link local: [undef]
Wed Sep 10 22:26:53 2014 UDPv4 link remote: [AF_INET]xxx:1985
Wed Sep 10 22:26:53 2014 MANAGEMENT: >STATE:1410380813,WAIT,,,
Wed Sep 10 22:26:53 2014 MANAGEMENT: >STATE:1410380813,AUTH,,,
Wed Sep 10 22:26:53 2014 TLS: Initial packet from [AF_INET]xxx:1985, sid=4f8bb8c7 8e8667cf
Wed Sep 10 22:26:53 2014 VERIFY OK: depth=1, 
Wed Sep 10 22:26:53 2014 VERIFY OK: depth=0, 
Wed Sep 10 22:26:53 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 22:26:53 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 22:26:53 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 22:26:53 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 22:26:53 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Sep 10 22:26:53 2014 [server] Peer Connection Initiated with [AF_INET]xxx:1985
Wed Sep 10 22:26:54 2014 MANAGEMENT: >STATE:1410380814,GET_CONFIG,,,
Wed Sep 10 22:26:55 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Sep 10 22:26:55 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 209.244.0.4,topology subnet,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0'
Wed Sep 10 22:26:55 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 10 22:26:55 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 10 22:26:55 2014 OPTIONS IMPORT: route options modified
Wed Sep 10 22:26:55 2014 OPTIONS IMPORT: route-related options modified
Wed Sep 10 22:26:55 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Sep 10 22:26:55 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 10 22:26:55 2014 MANAGEMENT: >STATE:1410380815,ASSIGN_IP,,10.8.0.4,
Wed Sep 10 22:26:55 2014 open_tun, tt->ipv6=0
Wed Sep 10 22:26:55 2014 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{BFB16D5B-A3FB-4502-8FA7-D89FC358677D}.tap
Wed Sep 10 22:26:55 2014 TAP-Windows Driver Version 9.21 
Wed Sep 10 22:26:55 2014 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Wed Sep 10 22:26:55 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {BFB16D5B-A3FB-4502-8FA7-D89FC358677D} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Sep 10 22:26:55 2014 Successful ARP Flush on interface [25] {BFB16D5B-A3FB-4502-8FA7-D89FC358677D}
Wed Sep 10 22:27:00 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Sep 10 22:27:00 2014 C:\Windows\system32\route.exe ADD xxx MASK 255.255.255.255 192.168.2.1
Wed Sep 10 22:27:00 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 10 22:27:00 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 22:27:00 2014 C:\Windows\system32\route.exe ADD 192.168.2.1 MASK 255.255.255.255 192.168.2.1 IF 10
Wed Sep 10 22:27:00 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 10 22:27:00 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 22:27:00 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Sep 10 22:27:00 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 10 22:27:00 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 22:27:00 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Sep 10 22:27:00 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 10 22:27:00 2014 Route addition via IPAPI succeeded [adaptive]
Wed Sep 10 22:27:00 2014 Initialization Sequence Completed
Wed Sep 10 22:27:00 2014 MANAGEMENT: >STATE:1410380820,CONNECTED,SUCCESS,10.8.0.4,xxx

and the server.log

Wed Sep 10 22:40:11 2014 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb  4 2014
Wed Sep 10 22:40:11 2014 Diffie-Hellman initialized with 2048 bit key
Wed Sep 10 22:40:11 2014 Socket Buffers: R=[133120->131072] S=[133120->131072]
Wed Sep 10 22:40:11 2014 ROUTE_GATEWAY ON_LINK IFACE=venet0 HWADDR=00:00:00:00:00:00
Wed Sep 10 22:40:11 2014 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --i$
Wed Sep 10 22:40:11 2014 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.8.0.0
Wed Sep 10 22:40:11 2014 TUN/TAP device tun0 opened
Wed Sep 10 22:40:11 2014 TUN/TAP TX queue length set to 100
Wed Sep 10 22:40:11 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 10 22:40:11 2014 /sbin/ip link set dev tun0 up mtu 1500
Wed Sep 10 22:40:11 2014 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Wed Sep 10 22:40:11 2014 GID set to nogroup
Wed Sep 10 22:40:11 2014 UID set to nobody
Wed Sep 10 22:40:11 2014 UDPv4 link local (bound): [AF_INET]xxx:1985
Wed Sep 10 22:40:11 2014 UDPv4 link remote: [undef]
Wed Sep 10 22:40:11 2014 MULTI: multi_init called, r=256 v=256
Wed Sep 10 22:40:11 2014 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Wed Sep 10 22:40:11 2014 ifconfig_pool_read(), in='motte,10.8.0.4', TODO: IPv6
Wed Sep 10 22:40:11 2014 succeeded -> ifconfig_pool_set()
Wed Sep 10 22:40:11 2014 IFCONFIG POOL LIST
Wed Sep 10 22:40:11 2014 motte,10.8.0.4
Wed Sep 10 22:40:11 2014 Initialization Sequence Completed
Wed Sep 10 22:40:17 2014 79.241.96.79:54884 TLS: Initial packet from [AF_INET]79.241.96.79:54884, sid=586becb3 82f22ea4
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 VERIFY OK: depth=1, 
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 VERIFY OK: depth=0, 
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Sep 10 22:40:18 2014 79.241.96.79:54884 [motte] Peer Connection Initiated with [AF_INET]79.241.96.79:54884
Wed Sep 10 22:40:18 2014 motte/79.241.96.79:54884 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Wed Sep 10 22:40:18 2014 motte/79.241.96.79:54884 MULTI: Learn: 10.8.0.4 -> motte/79.241.96.79:54884
Wed Sep 10 22:40:18 2014 motte/79.241.96.79:54884 MULTI: primary virtual IP for motte/79.241.96.79:54884: 10.8.0.4
Wed Sep 10 22:40:20 2014 motte/79.241.96.79:54884 PUSH: Received control message: 'PUSH_REQUEST'
Wed Sep 10 22:40:20 2014 motte/79.241.96.79:54884 send_push_reply(): safe_cap=940
Wed Sep 10 22:40:20 2014 motte/79.241.96.79:54884 SENT CONTROL [motte]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DN$
Wed Sep 10 22:40:25 2014 motte/79.241.96.79:54884 PUSH: Received control message: 'PUSH_REQUEST'

Still having this error:

Wed Sep 10 21:55:20 2014 us=647508 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gate$
Wed Sep 10 21:55:20 2014 us=647533 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.8.0.0

and still no internet except of google, openvpn.net and facebook ...

(Client.ovpn:)

##############################################
# CLIENT									 #
##############################################

client

dev tun

proto udp

remote xxx 1985
remote xxx 1985

resolv-retry infinite

nobind

persist-key
persist-tun

ca c:\\temp\\ca.crt
cert c:\\temp\\motte.crt
key c:\\temp\\motte.key

comp-lzo

verb 3

Server.conf unchanged...

stefanoneri

I just xed out the server ip. As I wrote, I am able to get an connection from client to server.
Edt:I have added "udp" to my remote xxx 1985 but still nothing happens. Probably that has worked without "udp" there since I was using "proto udp" in my config.

Server's ifconfig:

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.1  P-t-P:10.8.0.1  Mask:255.255.255.0
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:205 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:11386 (11.3 KB)  TX bytes:0 (0.0 B)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:127.0.0.1  P-t-P:127.0.0.1  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:9163 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7519 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1548486 (1.5 MB)  TX bytes:1186968 (1.1 MB)

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:xxx  P-t-P:212.227.88.46  Bcast:xxx Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1

Routing:

root@s17848807:~# route -v
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.8.0.0        *               255.255.255.0   U     0      0        0 tun0
default         *               0.0.0.0         U     0      0        0 venet0

stefanoneri

Isn't it this one:

venet0:0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:xxx  P-t-P:xxx Bcast:xxx Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1

where xxx is standing for a public IP over which I can reach the server? Additionally, would it make sene that the server is reachable and connection via openvpn is possible without having an internet IP? I mean, my server is a VPS and I can also reach the webserver under the xd ip...

stefanoneri

I just solved it!!!

Since I had venet0 instead of eth0, all iptable entries have been wrong!

I added:

sysctl -w net.ipv4.ip_forward=1
iptables -A FORWARD -o venet0 -i tun0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -o venet0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j MASQUERADE
iptables -t nat -A POSTROUTING -o venet0 -j SNAT --to-source serverip

Now it works!