openvpn bridge set up on CentOS, no access to LAN

aepittman

I have set up two configurations on different CentOS 6 servers. One a tunnel and the other a bridge. Client machines can connect to to either machine and it's separate openvpn set up, but they are unable to access anything internal. I've searched and searched a I really don't know what's missing, so I would like to start with my bridge setup. I'm sure it's something simple that I'm going to kick myself when I finally get it figured out, but right now, I need some help.

The main object is to have client Win7 and Win Vista machines mount Samba shares to upload and download files. Plus, to access the internal mail server. We don't present a webclient to the internet.

info about my internal network:
network:10.0.0.0
netmask: 255.240.0.0
gateway 10.1.1.1
servers reside in the 10.1.1.x range
workstations and laptops are in the 10.2.1.x range
10.3.x.x thru 10.15.x.x are for growth

Here is my CentOS 6 bridge server set up:

ifcfg-br0:
DEVICE=br0
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=10.1.1.7
PREFIX=12
GATEWAY=10.1.1.1
DNS1=10.1.1.200
DNS2=8.8.8.8
DOMAIN=highlandscofc.org
DEFROUTE=yes
IPV4_FAILURE_FATAL=yes
IPV6INIT=no
NAME="System br0"
TYPE=Bridge
STP=yes
DELAY=5

ifcfg-eth1:
DEVICE=eth1
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=none
ETHTOOL_OPTS="autoneg off speed 100 duplex full"
NAME="System eth1"
BRIDGE=br0
HWADDR=00:1B:2F:35:85:63
PROMISC=yes

My bridge-star script gets started from within the /etc/init.d/openvpn start up script.
Here is what gets run:
#!/bin/bash

br="br0"
tap="tap0"
eth="eth1"

for t in $tap; do
openvpn --mktun --dev $t
done

for t in $tap; do
brctl addif $br $t
done

ifconfig $tap 0.0.0.0 promisc up

bridge info from the brctl command:
bridge name bridge id STP enabled interfaces
br0 8000.001b2f358563 yes eth1
tap0

My server.conf:
local 10.1.1.7
port 41194
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh2048.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.1.1.7 255.240.0.0 10.1.1.140 10.1.1.240
push "route 10.0.0.0 255.240.0.0"
push "dhcp-option DNS 10.1.1.200"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status /var/openvpn/openvpn-status.log
log /var/openvpn/openvpn.log
verb 6

On of the client config files:
client
dev tap0
proto udp
remote 999.888.777.666 41194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert xxxxxxxx.crt
key xxxxxxxx.key
comp-lzo
verb 6

My issue might be routing related, but if it is, I'm not seeing it. Thanks for any help you can provide.

aepittman

maikcat

firewall rules? (if any)
is ip forwarding enabled?
also eth1 must also be in promisc mode.

Michael.

aepittman

Hi,
To answer your questions:

The external router/firewall is working as expected because I am connecting to the vpn bridge server.
On the vpn bridge server, I have iptables turned off:

[root@vpn ~]# chkconfig --list | grep tables
ip6tables 0:off 1:off 2:off 3:off 4:off 5:off 6:off
iptables 0:off 1:off 2:off 3:off 4:off 5:off 6:off
[root@vpn ~]#

IP forwarding appears to be turned on as expected:

[root@vpn init.d]# cat /proc/sys/net/ipv4/ip_forward
1

[root@vpn init.d]# cat /etc/sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

And finally, the ifcfg-eth1 config file has the promisc mode set:

root@vpn network-scripts]# cat ./ifcfg-eth1
DEVICE=eth1
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=none
ETHTOOL_OPTS="autoneg off speed 100 duplex full"
NAME="System eth1"
BRIDGE=br0
HWADDR=00:1B:2F:35:85:63
PROMISC=yes
[root@vpn network-scripts]#

however when I run the netstat -i command, the P flag isn't set for eth1:

[root@vpn network-scripts]# netstat -i
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
br0 1500 0 277514843 0 0 0 275838149 0 0 0 BMRU
eth0 1500 0 6154 6 0 0 46 0 0 0 BMRU
eth1 1500 0 277513481 21233 0 0 276012561 0 0 4 BMRU
lo 16436 0 107 0 0 0 107 0 0 0 LRU
tap0 1500 0 0 0 0 0 2310060 0 1 0 BMPRU

If I use the "ip link" command and set it on and the run netstat -i, the P flag is set.

[root@vpn network-scripts]# ip link set eth1 promisc on
[root@vpn network-scripts]# netstat -i
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
br0 1500 0 277514946 0 0 0 275838249 0 0 0 BMRU
eth0 1500 0 6154 6 0 0 46 0 0 0 BMRU
eth1 1500 0 277513584 21233 0 0 276012661 0 0 4 BMPRU
lo 16436 0 107 0 0 0 107 0 0 0 LRU
tap0 1500 0 0 0 0 0 2310067 0 1 0 BMPRU
[root@vpn network-scripts]#

So it appears the the promisc parameter in the ifcfg-eth1 isn't being used or is being ignored.

Since the flag says it's on now, I will test tonight and see if it works. I will post an update after I test.

aepittman

aepittman

Well, unfortunately, I didn't get very far. The Win7 client connects successfully and receives an IP address of 10.1.1.40, but I can't ping much of anything.
I can't ping the IP address of the vpn bridge server, 10.1.1.7.
I can't ping the IP address of the Samba server, 10.1.1.77.
But for some unexplained reason, I can ping the default router, 10.1.1.1.

I tried starting a putty session and connecting to all of my Linux servers in my network, but was unsuccessful.

aepittman

maikcat

just checking...

1) on your 7 client are you running openvpn with admin rights?
2) on your centos what is the output of sestatus?

netstat as well ifconfig are deprecated and replaced by ip & ss commands...

Michael.

aepittman

Here is the result of the sestatus command on the vpn bridge server:

[root@vpn ~]# sestatus
SELinux status: disabled
[root@vpn ~]#

I will check the Win7 Laptop and update this post.

Traffic

aepittman wroteMy issue might be routing related, but if it is, I'm not seeing it

We cannot really see much either.. without your log files.

aepittman

Yes, I am running the client on the the Win7 laptop as administrator. I right click on the ICON and select the option "Run as administrator".

In addition, if I right click on the ICON, click on properties, click on advanced, the Run as administrator box is marked.

Since it's been requested that I post logs, here you go. I am only going to post the client info for now. Don???t want to make this post too unreadable. If you want to see the server log, please let me know and I will post it.

Tue Sep 30 18:49:16 2014 us=287457 Current Parameter Settings:
Tue Sep 30 18:49:16 2014 us=287457 config = 'client.ovpn'
Tue Sep 30 18:49:16 2014 us=287457 mode = 0
Tue Sep 30 18:49:16 2014 us=287457 show_ciphers = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 show_digests = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 show_engines = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 genkey = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 key_pass_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=287457 show_tls_ciphers = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 Connection profiles [default]:
Tue Sep 30 18:49:16 2014 us=287457 proto = udp
Tue Sep 30 18:49:16 2014 us=287457 local = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=287457 local_port = 0
Tue Sep 30 18:49:16 2014 us=287457 remote = '70.110.73.154'
Tue Sep 30 18:49:16 2014 us=287457 remote_port = 41194
Tue Sep 30 18:49:16 2014 us=287457 remote_float = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 bind_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 bind_local = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 connect_retry_seconds = 5
Tue Sep 30 18:49:16 2014 us=287457 connect_timeout = 10
Tue Sep 30 18:49:16 2014 us=287457 connect_retry_max = 0
Tue Sep 30 18:49:16 2014 us=287457 socks_proxy_server = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=287457 socks_proxy_port = 0
Tue Sep 30 18:49:16 2014 us=287457 socks_proxy_retry = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 tun_mtu = 1500
Tue Sep 30 18:49:16 2014 us=287457 tun_mtu_defined = ENABLED
Tue Sep 30 18:49:16 2014 us=287457 link_mtu = 1500
Tue Sep 30 18:49:16 2014 us=287457 link_mtu_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=287457 tun_mtu_extra = 32
Tue Sep 30 18:49:16 2014 us=303057 tun_mtu_extra_defined = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 mtu_discover_type = -1
Tue Sep 30 18:49:16 2014 us=303057 fragment = 0
Tue Sep 30 18:49:16 2014 us=303057 mssfix = 1450
Tue Sep 30 18:49:16 2014 us=303057 explicit_exit_notification = 0
Tue Sep 30 18:49:16 2014 us=303057 Connection profiles END
Tue Sep 30 18:49:16 2014 us=303057 remote_random = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 ipchange = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 dev = 'tap0'
Tue Sep 30 18:49:16 2014 us=303057 dev_type = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 dev_node = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 lladdr = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 topology = 1
Tue Sep 30 18:49:16 2014 us=303057 tun_ipv6 = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_local = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_remote_netmask = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_noexec = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_nowarn = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_ipv6_local = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_ipv6_netbits = 0
Tue Sep 30 18:49:16 2014 us=303057 ifconfig_ipv6_remote = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 shaper = 0
Tue Sep 30 18:49:16 2014 us=303057 mtu_test = 0
Tue Sep 30 18:49:16 2014 us=303057 mlock = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 keepalive_ping = 0
Tue Sep 30 18:49:16 2014 us=303057 keepalive_timeout = 0
Tue Sep 30 18:49:16 2014 us=303057 inactivity_timeout = 0
Tue Sep 30 18:49:16 2014 us=303057 ping_send_timeout = 0
Tue Sep 30 18:49:16 2014 us=303057 ping_rec_timeout = 0
Tue Sep 30 18:49:16 2014 us=303057 ping_rec_timeout_action = 0
Tue Sep 30 18:49:16 2014 us=303057 ping_timer_remote = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 remap_sigusr1 = 0
Tue Sep 30 18:49:16 2014 us=303057 persist_tun = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 persist_local_ip = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 persist_remote_ip = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 persist_key = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 passtos = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 resolve_retry_seconds = 1000000000
Tue Sep 30 18:49:16 2014 us=303057 username = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 groupname = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 chroot_dir = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 cd_dir = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 writepid = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 up_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 down_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 down_pre = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 up_restart = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 up_delay = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 daemon = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 inetd = 0
Tue Sep 30 18:49:16 2014 us=303057 log = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 suppress_timestamps = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 nice = 0
Tue Sep 30 18:49:16 2014 us=303057 verbosity = 4
Tue Sep 30 18:49:16 2014 us=303057 mute = 0
Tue Sep 30 18:49:16 2014 us=303057 status_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 status_file_version = 1
Tue Sep 30 18:49:16 2014 us=303057 status_file_update_freq = 60
Tue Sep 30 18:49:16 2014 us=303057 occ = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 rcvbuf = 0
Tue Sep 30 18:49:16 2014 us=303057 sndbuf = 0
Tue Sep 30 18:49:16 2014 us=303057 sockflags = 0
Tue Sep 30 18:49:16 2014 us=303057 fast_io = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 lzo = 7
Tue Sep 30 18:49:16 2014 us=303057 route_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 route_default_gateway = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 route_default_metric = 0
Tue Sep 30 18:49:16 2014 us=303057 route_noexec = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 route_delay = 5
Tue Sep 30 18:49:16 2014 us=303057 route_delay_window = 30
Tue Sep 30 18:49:16 2014 us=303057 route_delay_defined = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 route_nopull = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 route_gateway_via_dhcp = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 max_routes = 100
Tue Sep 30 18:49:16 2014 us=303057 allow_pull_fqdn = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 management_addr = '127.0.0.1'
Tue Sep 30 18:49:16 2014 us=303057 management_port = 25340
Tue Sep 30 18:49:16 2014 us=303057 management_user_pass = 'stdin'
Tue Sep 30 18:49:16 2014 us=303057 management_log_history_cache = 250
Tue Sep 30 18:49:16 2014 us=303057 management_echo_buffer_size = 100
Tue Sep 30 18:49:16 2014 us=303057 management_write_peer_info_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 management_client_user = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 management_client_group = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 management_flags = 6
Tue Sep 30 18:49:16 2014 us=303057 shared_secret_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 key_direction = 0
Tue Sep 30 18:49:16 2014 us=303057 ciphername_defined = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 ciphername = 'BF-CBC'
Tue Sep 30 18:49:16 2014 us=303057 authname_defined = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 authname = 'SHA1'
Tue Sep 30 18:49:16 2014 us=303057 prng_hash = 'SHA1'
Tue Sep 30 18:49:16 2014 us=303057 prng_nonce_secret_len = 16
Tue Sep 30 18:49:16 2014 us=303057 keysize = 0
Tue Sep 30 18:49:16 2014 us=303057 engine = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 replay = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 mute_replay_warnings = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 replay_window = 64
Tue Sep 30 18:49:16 2014 us=303057 replay_time = 15
Tue Sep 30 18:49:16 2014 us=303057 packet_id_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 use_iv = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 test_crypto = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 tls_server = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 tls_client = ENABLED
Tue Sep 30 18:49:16 2014 us=303057 key_method = 2
Tue Sep 30 18:49:16 2014 us=303057 ca_file = 'ca.crt'
Tue Sep 30 18:49:16 2014 us=303057 ca_path = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 dh_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 cert_file = 'pittman.crt'
Tue Sep 30 18:49:16 2014 us=303057 priv_key_file = 'pittman.key'
Tue Sep 30 18:49:16 2014 us=303057 pkcs12_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 cryptoapi_cert = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 cipher_list = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 tls_verify = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 tls_export_cert = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 verify_x509_type = 0
Tue Sep 30 18:49:16 2014 us=303057 verify_x509_name = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 crl_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 ns_cert_type = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_ku[i] = 0
Tue Sep 30 18:49:16 2014 us=303057 remote_cert_eku = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 ssl_flags = 0
Tue Sep 30 18:49:16 2014 us=303057 tls_timeout = 2
Tue Sep 30 18:49:16 2014 us=303057 renegotiate_bytes = 0
Tue Sep 30 18:49:16 2014 us=303057 renegotiate_packets = 0
Tue Sep 30 18:49:16 2014 us=303057 renegotiate_seconds = 3600
Tue Sep 30 18:49:16 2014 us=303057 handshake_window = 60
Tue Sep 30 18:49:16 2014 us=303057 transition_window = 3600
Tue Sep 30 18:49:16 2014 us=303057 single_session = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 push_peer_info = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 tls_exit = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 tls_auth_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_protected_authentication = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_private_mode = 00000000
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_cert_private = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_pin_cache_period = -1
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_id = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=303057 pkcs11_id_management = DISABLED
Tue Sep 30 18:49:16 2014 us=303057 server_network = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=303057 server_netmask = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 server_network_ipv6 = ::
Tue Sep 30 18:49:16 2014 us=318657 server_netbits_ipv6 = 0
Tue Sep 30 18:49:16 2014 us=318657 server_bridge_ip = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 server_bridge_netmask = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 server_bridge_pool_start = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 server_bridge_pool_end = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_start = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_end = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_netmask = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_pool_persist_refresh_freq = 600
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_ipv6_pool_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_ipv6_pool_base = ::
Tue Sep 30 18:49:16 2014 us=318657 ifconfig_ipv6_pool_netbits = 0
Tue Sep 30 18:49:16 2014 us=318657 n_bcast_buf = 256
Tue Sep 30 18:49:16 2014 us=318657 tcp_queue_limit = 64
Tue Sep 30 18:49:16 2014 us=318657 real_hash_size = 256
Tue Sep 30 18:49:16 2014 us=318657 virtual_hash_size = 256
Tue Sep 30 18:49:16 2014 us=318657 client_connect_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 learn_address_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 client_disconnect_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 client_config_dir = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 ccd_exclusive = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 tmp_dir = 'C:\Users\audio\AppData\Local\Temp\'
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_local = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_remote_netmask = 0.0.0.0
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_ipv6_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_ipv6_local = ::/0
Tue Sep 30 18:49:16 2014 us=318657 push_ifconfig_ipv6_remote = ::
Tue Sep 30 18:49:16 2014 us=318657 enable_c2c = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 duplicate_cn = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 cf_max = 0
Tue Sep 30 18:49:16 2014 us=318657 cf_per = 0
Tue Sep 30 18:49:16 2014 us=318657 max_clients = 1024
Tue Sep 30 18:49:16 2014 us=318657 max_routes_per_client = 256
Tue Sep 30 18:49:16 2014 us=318657 auth_user_pass_verify_script = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 auth_user_pass_verify_script_via_file = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 client = ENABLED
Tue Sep 30 18:49:16 2014 us=318657 pull = ENABLED
Tue Sep 30 18:49:16 2014 us=318657 auth_user_pass_file = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 show_net_up = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 route_method = 0
Tue Sep 30 18:49:16 2014 us=318657 ip_win32_defined = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 ip_win32_type = 3
Tue Sep 30 18:49:16 2014 us=318657 dhcp_masq_offset = 0
Tue Sep 30 18:49:16 2014 us=318657 dhcp_lease_time = 31536000
Tue Sep 30 18:49:16 2014 us=318657 tap_sleep = 0
Tue Sep 30 18:49:16 2014 us=318657 dhcp_options = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 dhcp_renew = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 dhcp_pre_release = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 dhcp_release = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 domain = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 netbios_scope = '[UNDEF]'
Tue Sep 30 18:49:16 2014 us=318657 netbios_node_type = 0
Tue Sep 30 18:49:16 2014 us=318657 disable_nbt = DISABLED
Tue Sep 30 18:49:16 2014 us=318657 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Tue Sep 30 18:49:16 2014 us=318657 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Tue Sep 30 18:49:16 2014 us=427857 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 30 18:49:16 2014 us=427857 Need hold release from management interface, waiting...
Tue Sep 30 18:49:16 2014 us=646257 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 30 18:49:16 2014 us=755457 MANAGEMENT: CMD 'state on'
Tue Sep 30 18:49:16 2014 us=755457 MANAGEMENT: CMD 'log all on'
Tue Sep 30 18:49:16 2014 us=895858 MANAGEMENT: CMD 'hold off'
Tue Sep 30 18:49:16 2014 us=895858 MANAGEMENT: CMD 'hold release'
Tue Sep 30 18:49:16 2014 us=927058 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 30 18:49:17 2014 us=535459 LZO compression initialized
Tue Sep 30 18:49:17 2014 us=535459 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Sep 30 18:49:17 2014 us=535459 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 30 18:49:17 2014 us=535459 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 30 18:49:17 2014 us=535459 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 30 18:49:17 2014 us=535459 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 30 18:49:17 2014 us=551059 Local Options hash (VER=V4): 'd79ca330'
Tue Sep 30 18:49:17 2014 us=551059 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Sep 30 18:49:17 2014 us=551059 UDPv4 link local: [undef]
Tue Sep 30 18:49:17 2014 us=551059 UDPv4 link remote: [AF_INET]70.110.73.154:41194
Tue Sep 30 18:49:17 2014 us=551059 MANAGEMENT: >STATE:1412117357,WAIT,,,
Tue Sep 30 18:49:17 2014 us=613459 MANAGEMENT: >STATE:1412117357,AUTH,,,
Tue Sep 30 18:49:17 2014 us=613459 TLS: Initial packet from [AF_INET]70.110.73.154:41194, sid=ec4a6c4a a618b38c
Tue Sep 30 18:49:18 2014 us=3460 VERIFY OK: depth=1, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=vpn.highlandscofc.org, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:49:18 2014 us=3460 VERIFY OK: depth=0, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=server, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:49:18 2014 us=658661 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:49:18 2014 us=658661 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:49:18 2014 us=658661 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:49:18 2014 us=658661 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:49:18 2014 us=658661 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Sep 30 18:49:18 2014 us=658661 [server] Peer Connection Initiated with [AF_INET]70.110.73.154:41194
Tue Sep 30 18:49:19 2014 us=813063 MANAGEMENT: >STATE:1412117359,GET_CONFIG,,,
Tue Sep 30 18:49:20 2014 us=234264 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:49:20 2014 us=296664 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.240.0.0,redirect-gateway,dhcp-option DNS 10.1.1.200,route-gateway 10.1.1.7,ping 10,ping-restart 120,ifconfig 10.1.1.140 255.240.0.0'
Tue Sep 30 18:49:20 2014 us=296664 OPTIONS IMPORT: timers and/or timeouts modified
Tue Sep 30 18:49:20 2014 us=296664 OPTIONS IMPORT: --ifconfig/up options modified
Tue Sep 30 18:49:20 2014 us=296664 OPTIONS IMPORT: route options modified
Tue Sep 30 18:49:20 2014 us=296664 OPTIONS IMPORT: route-related options modified
Tue Sep 30 18:49:20 2014 us=296664 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Sep 30 18:49:20 2014 us=390264 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Sep 30 18:49:20 2014 us=390264 MANAGEMENT: >STATE:1412117360,ASSIGN_IP,,10.1.1.140,
Tue Sep 30 18:49:20 2014 us=390264 open_tun, tt->ipv6=0
Tue Sep 30 18:49:20 2014 us=390264 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{377FD425-4717-41BF-B834-032EC522AA72}.tap
Tue Sep 30 18:49:20 2014 us=390264 TAP-Windows Driver Version 9.21
Tue Sep 30 18:49:20 2014 us=390264 TAP-Windows MTU=1500
Tue Sep 30 18:49:20 2014 us=390264 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.1.1.140/255.240.0.0 on interface {377FD425-4717-41BF-B834-032EC522AA72} [DHCP-serv: 10.0.0.0, lease-time: 31536000]
Tue Sep 30 18:49:20 2014 us=390264 DHCP option string: 06040a01 01c8
Tue Sep 30 18:49:20 2014 us=390264 Successful ARP Flush on interface [17] {377FD425-4717-41BF-B834-032EC522AA72}
Tue Sep 30 18:49:25 2014 us=257472 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Sep 30 18:49:25 2014 us=257472 C:\Windows\system32\route.exe ADD 70.110.73.154 MASK 255.255.255.255 192.168.1.1
Tue Sep 30 18:49:25 2014 us=257472 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Sep 30 18:49:25 2014 us=257472 Route addition via IPAPI succeeded [adaptive]
Tue Sep 30 18:49:25 2014 us=257472 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 192.168.1.1
Tue Sep 30 18:49:25 2014 us=257472 Route deletion via IPAPI succeeded [adaptive]
Tue Sep 30 18:49:25 2014 us=257472 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.1.1.7
Tue Sep 30 18:49:25 2014 us=273072 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Sep 30 18:49:25 2014 us=273072 Route addition via IPAPI succeeded [adaptive]
Tue Sep 30 18:49:25 2014 us=273072 MANAGEMENT: >STATE:1412117365,ADD_ROUTES,,,
Tue Sep 30 18:49:25 2014 us=273072 C:\Windows\system32\route.exe ADD 10.0.0.0 MASK 255.240.0.0 10.1.1.7
Tue Sep 30 18:49:25 2014 us=273072 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Sep 30 18:49:25 2014 us=273072 Route addition via IPAPI succeeded [adaptive]
Tue Sep 30 18:49:25 2014 us=273072 Initialization Sequence Completed
Tue Sep 30 18:49:25 2014 us=273072 MANAGEMENT: >STATE:1412117365,CONNECTED,SUCCESS,10.1.1.140,70.110.73.154
Tue Sep 30 18:51:20 2014 us=464675 [server] Inactivity timeout (--ping-restart), restarting
Tue Sep 30 18:51:20 2014 us=464675 TCP/UDP: Closing socket
Tue Sep 30 18:51:20 2014 us=464675 SIGUSR1[soft,ping-restart] received, process restarting
Tue Sep 30 18:51:20 2014 us=464675 MANAGEMENT: >STATE:1412117480,RECONNECTING,ping-restart,,
Tue Sep 30 18:51:20 2014 us=464675 Restart pause, 2 second(s)
Tue Sep 30 18:51:22 2014 us=492678 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 30 18:51:22 2014 us=492678 Re-using SSL/TLS context
Tue Sep 30 18:51:22 2014 us=492678 LZO compression initialized
Tue Sep 30 18:51:22 2014 us=492678 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Sep 30 18:51:22 2014 us=492678 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 30 18:51:22 2014 us=492678 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 30 18:51:22 2014 us=492678 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 30 18:51:22 2014 us=492678 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 30 18:51:22 2014 us=492678 Local Options hash (VER=V4): 'd79ca330'
Tue Sep 30 18:51:22 2014 us=492678 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Sep 30 18:51:22 2014 us=492678 UDPv4 link local: [undef]
Tue Sep 30 18:51:22 2014 us=492678 UDPv4 link remote: [AF_INET]70.110.73.154:41194
Tue Sep 30 18:51:22 2014 us=492678 MANAGEMENT: >STATE:1412117482,WAIT,,,
Tue Sep 30 18:51:22 2014 us=523878 MANAGEMENT: >STATE:1412117482,AUTH,,,
Tue Sep 30 18:51:22 2014 us=523878 TLS: Initial packet from [AF_INET]70.110.73.154:41194, sid=633855cc e72ebe0c
Tue Sep 30 18:51:22 2014 us=913879 VERIFY OK: depth=1, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=vpn.highlandscofc.org, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:51:22 2014 us=913879 VERIFY OK: depth=0, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=server, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:51:23 2014 us=569080 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:51:23 2014 us=569080 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:51:23 2014 us=569080 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:51:23 2014 us=569080 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:51:23 2014 us=569080 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Sep 30 18:51:23 2014 us=569080 [server] Peer Connection Initiated with [AF_INET]70.110.73.154:41194
Tue Sep 30 18:51:24 2014 us=754682 MANAGEMENT: >STATE:1412117484,GET_CONFIG,,,
Tue Sep 30 18:51:25 2014 us=846684 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:30 2014 us=121092 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:35 2014 us=456301 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:40 2014 us=120709 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:45 2014 us=206318 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:50 2014 us=120327 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:51:55 2014 us=283936 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:00 2014 us=213545 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:05 2014 us=111953 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:10 2014 us=166362 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:15 2014 us=111571 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:20 2014 us=119180 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:25 2014 us=282789 No reply from server after sending 12 push requests
Tue Sep 30 18:52:25 2014 us=282789 TCP/UDP: Closing socket
Tue Sep 30 18:52:25 2014 us=282789 SIGUSR1[soft,no-push-reply] received, process restarting
Tue Sep 30 18:52:25 2014 us=282789 MANAGEMENT: >STATE:1412117545,RECONNECTING,no-push-reply,,
Tue Sep 30 18:52:25 2014 us=282789 Restart pause, 2 second(s)
Tue Sep 30 18:52:27 2014 us=310792 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 30 18:52:27 2014 us=310792 Re-using SSL/TLS context
Tue Sep 30 18:52:27 2014 us=310792 LZO compression initialized
Tue Sep 30 18:52:27 2014 us=310792 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Sep 30 18:52:27 2014 us=310792 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 30 18:52:27 2014 us=310792 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 30 18:52:27 2014 us=310792 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 30 18:52:27 2014 us=310792 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 30 18:52:27 2014 us=310792 Local Options hash (VER=V4): 'd79ca330'
Tue Sep 30 18:52:27 2014 us=310792 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Sep 30 18:52:27 2014 us=310792 UDPv4 link local: [undef]
Tue Sep 30 18:52:27 2014 us=310792 UDPv4 link remote: [AF_INET]70.110.73.154:41194
Tue Sep 30 18:52:27 2014 us=310792 MANAGEMENT: >STATE:1412117547,WAIT,,,
Tue Sep 30 18:52:27 2014 us=357592 MANAGEMENT: >STATE:1412117547,AUTH,,,
Tue Sep 30 18:52:27 2014 us=357592 TLS: Initial packet from [AF_INET]70.110.73.154:41194, sid=35f42aaf b918636f
Tue Sep 30 18:52:27 2014 us=778793 VERIFY OK: depth=1, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=vpn.highlandscofc.org, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:52:27 2014 us=778793 VERIFY OK: depth=0, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=server, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:52:28 2014 us=496394 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:52:28 2014 us=496394 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:52:28 2014 us=496394 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:52:28 2014 us=496394 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:52:28 2014 us=496394 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Sep 30 18:52:28 2014 us=496394 [server] Peer Connection Initiated with [AF_INET]70.110.73.154:41194
Tue Sep 30 18:52:29 2014 us=557196 MANAGEMENT: >STATE:1412117549,GET_CONFIG,,,
Tue Sep 30 18:52:30 2014 us=243597 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:35 2014 us=110806 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:40 2014 us=430415 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:45 2014 us=110423 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:50 2014 us=118032 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:52:55 2014 us=110041 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:00 2014 us=304850 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:05 2014 us=109659 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:10 2014 us=148467 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:15 2014 us=202876 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:20 2014 us=272885 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:25 2014 us=764095 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:30 2014 us=615703 No reply from server after sending 12 push requests
Tue Sep 30 18:53:30 2014 us=615703 TCP/UDP: Closing socket
Tue Sep 30 18:53:30 2014 us=615703 SIGUSR1[soft,no-push-reply] received, process restarting
Tue Sep 30 18:53:30 2014 us=615703 MANAGEMENT: >STATE:1412117610,RECONNECTING,no-push-reply,,
Tue Sep 30 18:53:30 2014 us=615703 Restart pause, 2 second(s)
Tue Sep 30 18:53:32 2014 us=643707 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 30 18:53:32 2014 us=643707 Re-using SSL/TLS context
Tue Sep 30 18:53:32 2014 us=643707 LZO compression initialized
Tue Sep 30 18:53:32 2014 us=643707 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Sep 30 18:53:32 2014 us=643707 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 30 18:53:32 2014 us=643707 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 30 18:53:32 2014 us=643707 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 30 18:53:32 2014 us=643707 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 30 18:53:32 2014 us=643707 Local Options hash (VER=V4): 'd79ca330'
Tue Sep 30 18:53:32 2014 us=643707 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Sep 30 18:53:32 2014 us=643707 UDPv4 link local: [undef]
Tue Sep 30 18:53:32 2014 us=643707 UDPv4 link remote: [AF_INET]70.110.73.154:41194
Tue Sep 30 18:53:32 2014 us=643707 MANAGEMENT: >STATE:1412117612,WAIT,,,
Tue Sep 30 18:53:32 2014 us=674907 MANAGEMENT: >STATE:1412117612,AUTH,,,
Tue Sep 30 18:53:32 2014 us=674907 TLS: Initial packet from [AF_INET]70.110.73.154:41194, sid=b8c24c3f 6878adac
Tue Sep 30 18:53:33 2014 us=49308 VERIFY OK: depth=1, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=vpn.highlandscofc.org, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:53:33 2014 us=64908 VERIFY OK: depth=0, C=US, ST=FL, L=Lakeland, O=Highlandscofc, OU=HCOC, CN=server, name=Highlands, emailAddress=alan.pittman@mail-highlandscofc.org
Tue Sep 30 18:53:33 2014 us=688909 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:53:33 2014 us=688909 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:53:33 2014 us=688909 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 18:53:33 2014 us=688909 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 18:53:33 2014 us=688909 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Sep 30 18:53:33 2014 us=688909 [server] Peer Connection Initiated with [AF_INET]70.110.73.154:41194
Tue Sep 30 18:53:34 2014 us=266110 MANAGEMENT: >STATE:1412117614,GET_CONFIG,,,
Tue Sep 30 18:53:35 2014 us=108511 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:41 2014 us=67722 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:46 2014 us=480931 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:51 2014 us=223340 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:53:56 2014 us=558549 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 18:54:01 2014 us=659758 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)