Hi,
I have a problem with properly configuring my openvpn. I started from configuring OpenVPN to work on my raspberry Pi using 1194 UDP port, and it works perfectly fine. But when I try to configure it to use 443 TCP port i can't browse any http websites (I can connect via SSH so some connections are working, but can't browse net.)
Here is my config files:
When I connect using 1194 UDP i don't have any problems, but when i try connecting using TCP 443, I can't browse the internet.
server2.conf
port 443
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
client-config-dir ccd2
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
tls-auth ta.key 0
cipher AES-128-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status2.log
log openvpn2.log
verb 4
mute 20
chroot /etc/openvpn/jail2
client.ovpn
client
dev tun
proto tcp
remote X.X.X.X 443
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert qq_lars.crt
key qq_lars.key
tls-auth ta.key 1
cipher AES-128-CBC
comp-lzo
verb 4
mute 20
openvpn2.log
Mon Oct 27 18:47:23 2014 us=584169 MULTI: multi_create_instance called
Mon Oct 27 18:47:23 2014 us=584291 Re-using SSL/TLS context
Mon Oct 27 18:47:23 2014 us=584335 LZO compression initialized
Mon Oct 27 18:47:23 2014 us=584492 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Oct 27 18:47:23 2014 us=584335 LZO compression initialized
Mon Oct 27 18:47:23 2014 us=584492 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Oct 27 18:47:23 2014 us=584541 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Oct 27 18:47:23 2014 us=584627 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-meth$
Mon Oct 27 18:47:23 2014 us=584659 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-aut$
Mon Oct 27 18:47:23 2014 us=584707 Local Options hash (VER=V4): 'a642654b'
Mon Oct 27 18:47:23 2014 us=584756 Expected Remote Options hash (VER=V4): '0bdd0804'
Mon Oct 27 18:47:23 2014 us=584810 TCP connection established with [AF_INET]XXX
Mon Oct 27 18:47:23 2014 us=584846 TCPv4_SERVER link local: [undef]
Mon Oct 27 18:47:23 2014 us=584882 TCPv4_SERVER link remote: [AF_INET]XXX
Mon Oct 27 18:47:24 2014 us=537836 XXX:54063 TLS: Initial packet from [AF_INET]XXX, sid=XXX
Mon Oct 27 18:47:26 2014 us=532777 XXX:54063 VERIFY OK: depth=1, /C=FR/ST=Paris/L=Paris/O=Dupa/OU=Dupa/CN=Dupa_CA/name=EasyRSA/emailAddress=dupa@dupa
Mon Oct 27 18:47:26 2014 us=533491 XXX:54063 VERIFY OK: depth=0, /C=FR/ST=Paris/L=Paris/O=Dupa/OU=Dupa/CN=qq_lars/name=EasyRSA/emailAddress=dupa@dupa
Mon Oct 27 18:47:26 2014 us=829960 XXX:54063 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 27 18:47:26 2014 us=830041 XXX:54063 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 27 18:47:26 2014 us=830079 XXX:54063 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 27 18:47:26 2014 us=830117 XXX:54063 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 27 18:47:27 2014 us=38117 XXX:54063 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Oct 27 18:47:27 2014 us=38222 XXX:54063 [qq_lars] Peer Connection Initiated with [AF_INET]XXX
Mon Oct 27 18:47:27 2014 us=38321 XXX:54063 OPTIONS IMPORT: reading client specific options from: ccd2/qq_lars
Mon Oct 27 18:47:27 2014 us=38532 XXX:54063 MULTI: Learn: 10.8.0.9 -> XXX
Mon Oct 27 18:47:27 2014 us=38573 XXX MULTI: primary virtual IP for XXX: 10.8.0.9
Mon Oct 27 18:47:29 2014 us=162473 XXX PUSH: Received control message: 'PUSH_REQUEST'
Mon Oct 27 18:47:29 2014 us=162550 XXX send_push_reply(): safe_cap=960
Mon Oct 27 18:47:29 2014 us=162649 XXX SENT CONTROL [qq_lars]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220$
Mon Oct 27 18:47:29 2014 us=406267 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=406428 XXX MULTI: bad source address from client [::], packet dropped
Mon Oct 27 18:47:29 2014 us=406545 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=406660 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=406771 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=406884 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=406996 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=407110 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=407222 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=407332 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=457627 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=457799 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=457898 XXX MULTI: bad source address from client [XXX], packet dropped
Mon Oct 27 18:47:29 2014 us=457967 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458032 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458178 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458257 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458323 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458386 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458450 XXX MULTI: bad source address from client [], packet dropped
Mon Oct 27 18:47:29 2014 us=458538 XXX NOTE: --mute triggered...
Mon Oct 27 18:49:49 2014 us=426608 XXX:54063 113 variation(s) on previous 20 message(s) suppressed by --mute
Mon Oct 27 18:49:49 2014 us=426688 XXX:54063 Connection reset, restarting [-1]
Mon Oct 27 18:49:49 2014 us=426723 XXX:54063 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Oct 27 18:49:49 2014 us=427011 TCP/UDP: Closing socket
server.conf
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
#tls-auth ta.key 0
cipher RC2-40-CBC
user nobody
group nogroup
#persist-key
#persist-tun
status openvpn-status.log
log openvpn.log
verb 1
mute 20
chroot /etc/openvpn/jail
client.conf
client
dev tun
proto udp
remote XXX 1194
resolv-retry infinite
nobind
#persist-key
#persist-tun
mute-replay-warnings
ca ca.crt
cert koper.crt
key koper.key
#tls-auth ta.key 1
cipher RC2-40-CBC
#comp-lzo
verb 1
mute 20
Best wishes!
