"redirect-gateway def1 bypass-dhcp"

interconit

Thank you OpenVPN forum for reviewing this opportunity to get my OpenVPN configuration setup correctly.

I've been able to connect OK between my OpenVPN client running on Windows 8 to my OpenVPN server 2.3.2 on Ubuntu 14.04.1 LTS.

However, I'm unable to configure the setting "redirect-gateway def1 bypass-dhcp" in server.conf to allow me to push internet and gateway traffic from my server.

When I uncomment this setting and restart the OpenVPN service, within 5-10 secs, my SSH connection to my server freezes and disconnects. I'm unable to ping to my server IP address without returning a connection failed error.

However, when I comment this setting, I can restart the service and connect to my client. Ping and SSH to my server IP address completes OK.

Please advise. There seems to be something misconfigured (see cat output below) in my server configuration which is causing something to crash. I've spent a few days looking over many forums, seeking help from my VPS provider support options, and they were unable to assist and suggested I post here.

I have about 15+ years experience working with Linux systems, however, networking issues can be tricky for me unless I have a fresh set of eyes.

root@root:/# openvpn --help
OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014

root@root:/# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
Release: 14.04
Codename: trusty

root@root:/# cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address x.x.210.130
gateway x.x.210.1

# DNS
dns-search members.linode.com
dns-nameservers 74.207.241.5 74.207.242.5

root@root:/# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTA BLISHED
ACCEPT all -- 10.8.0.0/24 anywhere
REJECT all -- anywhere anywhere reject-with icmp-p ort-unreachable
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTA BLISHED

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

root@root:/# cat /etc/rc.local
#!/bin/sh -e
#
# rc.local
# Tunneling All Connections through the VPN
# By deploying the following configuration, you will be able to forward
# all traffic from client machines through your server, and encrypt it
# with transport layer security (TLS/SSL) between the client machine and
# the server.

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A INPUT -i tap+ -j ACCEPT
iptables -A FORWARD -i tap+ -j ACCEPT
/etc/init.d/dnsmasq restart # forward DNS traffic through the VPN

exit 0

root@root:/# iptables-save
# Generated by iptables-save v1.4.21 on Thu Nov 20 19:58:02 2014
*security
:INPUT ACCEPT [140622:15667187]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [150523:21795852]
COMMIT
# Completed on Thu Nov 20 19:58:02 2014
# Generated by iptables-save v1.4.21 on Thu Nov 20 19:58:02 2014
*raw
😛REROUTING ACCEPT [142032:15770426]
:OUTPUT ACCEPT [150529:21796620]
COMMIT
# Completed on Thu Nov 20 19:58:02 2014
# Generated by iptables-save v1.4.21 on Thu Nov 20 19:58:02 2014
*nat
😛REROUTING ACCEPT [15650:830568]
:INPUT ACCEPT [14813:780061]
:OUTPUT ACCEPT [4598:334557]
😛OSTROUTING ACCEPT [4598:334557]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Thu Nov 20 19:58:02 2014
# Generated by iptables-save v1.4.21 on Thu Nov 20 19:58:02 2014
*mangle
😛REROUTING ACCEPT [142032:15770426]
:INPUT ACCEPT [140622:15667187]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [150529:21796620]
😛OSTROUTING ACCEPT [150529:21796620]
COMMIT
# Completed on Thu Nov 20 19:58:02 2014
# Generated by iptables-save v1.4.21 on Thu Nov 20 19:58:02 2014
*filter
:INPUT ACCEPT [40053:3409174]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [150502:21794832]
-A INPUT -i tun+ -j ACCEPT
-A INPUT -i tap+ -j ACCEPT
-A INPUT -i eth+ -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i tun+ -o eth0 -j ACCEPT
-A FORWARD -i tap+ -j ACCEPT
-A FORWARD -i eth+ -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Thu Nov 20 19:58:02 2014

root@root:/# cat /etc/openvpn/server.conf
;local a.b.c.d
################################################################################
port 49152
# I've changed the default VPN port to bypass restrictions by my ISP
################################################################################
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
###################################################################################
;push "redirect-gateway def1 bypass-dhcp"
# When commented, see openvpn log (output below): comment.redirect.gateway.log
# When uncommented, see openvpn log (output below): uncomment.redirect.gateway.log
###################################################################################
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 10.8.0.1"
;client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
log-append /etc/openvpn/log/openvpn.log
verb 9
;mute 20

#####################################################################################
#####################################################################################
# #
# When uncommented, see openvpn log (output below): uncomment.redirect.gateway.log #
# #
#####################################################################################
#####################################################################################

root@root:# cat /etc/openvpn/log/uncomment.redirect.gateway.log
Sun Nov 23 02:02:21 2014 us=42544 Current Parameter Settings:
Sun Nov 23 02:02:21 2014 us=42623 config = '/etc/openvpn/server.conf'
Sun Nov 23 02:02:21 2014 us=42636 mode = 1
Sun Nov 23 02:02:21 2014 us=42647 persist_config = DISABLED
Sun Nov 23 02:02:21 2014 us=42656 persist_mode = 1
Sun Nov 23 02:02:21 2014 us=42665 show_ciphers = DISABLED
Sun Nov 23 02:02:21 2014 us=42674 show_digests = DISABLED
Sun Nov 23 02:02:21 2014 us=42683 show_engines = DISABLED
Sun Nov 23 02:02:21 2014 us=42692 genkey = DISABLED
Sun Nov 23 02:02:21 2014 us=42701 key_pass_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42710 show_tls_ciphers = DISABLED
Sun Nov 23 02:02:21 2014 us=42719 Connection profiles [default]:
Sun Nov 23 02:02:21 2014 us=42729 proto = udp
Sun Nov 23 02:02:21 2014 us=42738 local = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42747 local_port = 49152
Sun Nov 23 02:02:21 2014 us=42756 remote = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42765 remote_port = 49152
Sun Nov 23 02:02:21 2014 us=42774 remote_float = DISABLED
Sun Nov 23 02:02:21 2014 us=42783 bind_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=42792 bind_local = ENABLED
Sun Nov 23 02:02:21 2014 us=42801 connect_retry_seconds = 5
Sun Nov 23 02:02:21 2014 us=42810 connect_timeout = 10
Sun Nov 23 02:02:21 2014 us=42819 connect_retry_max = 0
Sun Nov 23 02:02:21 2014 us=42829 socks_proxy_server = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42837 socks_proxy_port = 0
Sun Nov 23 02:02:21 2014 us=42846 socks_proxy_retry = DISABLED
Sun Nov 23 02:02:21 2014 us=42855 tun_mtu = 1500
Sun Nov 23 02:02:21 2014 us=42864 tun_mtu_defined = ENABLED
Sun Nov 23 02:02:21 2014 us=42873 link_mtu = 1500
Sun Nov 23 02:02:21 2014 us=42882 link_mtu_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=42891 tun_mtu_extra = 0
Sun Nov 23 02:02:21 2014 us=42900 tun_mtu_extra_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=42909 mtu_discover_type = -1
Sun Nov 23 02:02:21 2014 us=42918 fragment = 0
Sun Nov 23 02:02:21 2014 us=42927 mssfix = 1450
Sun Nov 23 02:02:21 2014 us=42936 explicit_exit_notification = 0
Sun Nov 23 02:02:21 2014 us=42945 Connection profiles END
Sun Nov 23 02:02:21 2014 us=42954 remote_random = DISABLED
Sun Nov 23 02:02:21 2014 us=42963 ipchange = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42972 dev = 'tun'
Sun Nov 23 02:02:21 2014 us=42980 dev_type = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42989 dev_node = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=42998 lladdr = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43007 topology = 1
Sun Nov 23 02:02:21 2014 us=43016 tun_ipv6 = DISABLED
Sun Nov 23 02:02:21 2014 us=43025 ifconfig_local = '10.8.0.1'
Sun Nov 23 02:02:21 2014 us=43034 ifconfig_remote_netmask = '10.8.0.2'
Sun Nov 23 02:02:21 2014 us=43043 ifconfig_noexec = DISABLED
Sun Nov 23 02:02:21 2014 us=43052 ifconfig_nowarn = DISABLED
Sun Nov 23 02:02:21 2014 us=43061 ifconfig_ipv6_local = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43070 ifconfig_ipv6_netbits = 0
Sun Nov 23 02:02:21 2014 us=43079 ifconfig_ipv6_remote = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43089 shaper = 0
Sun Nov 23 02:02:21 2014 us=43098 mtu_test = 0
Sun Nov 23 02:02:21 2014 us=43107 mlock = DISABLED
Sun Nov 23 02:02:21 2014 us=43116 keepalive_ping = 10
Sun Nov 23 02:02:21 2014 us=43125 keepalive_timeout = 120
Sun Nov 23 02:02:21 2014 us=43133 inactivity_timeout = 0
Sun Nov 23 02:02:21 2014 us=43142 ping_send_timeout = 10
Sun Nov 23 02:02:21 2014 us=43151 ping_rec_timeout = 240
Sun Nov 23 02:02:21 2014 us=43160 ping_rec_timeout_action = 2
Sun Nov 23 02:02:21 2014 us=43175 ping_timer_remote = DISABLED
Sun Nov 23 02:02:21 2014 us=43186 remap_sigusr1 = 0
Sun Nov 23 02:02:21 2014 us=43195 persist_tun = ENABLED
Sun Nov 23 02:02:21 2014 us=43204 persist_local_ip = DISABLED
Sun Nov 23 02:02:21 2014 us=43213 persist_remote_ip = DISABLED
Sun Nov 23 02:02:21 2014 us=43222 persist_key = ENABLED
Sun Nov 23 02:02:21 2014 us=43231 passtos = DISABLED
Sun Nov 23 02:02:21 2014 us=43240 resolve_retry_seconds = 1000000000
Sun Nov 23 02:02:21 2014 us=43249 username = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43265 groupname = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43275 chroot_dir = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43284 cd_dir = '/etc/openvpn'
Sun Nov 23 02:02:21 2014 us=43293 writepid = '/run/openvpn/server.pid'
Sun Nov 23 02:02:21 2014 us=43302 up_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43311 down_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43320 down_pre = DISABLED
Sun Nov 23 02:02:21 2014 us=43329 up_restart = DISABLED
Sun Nov 23 02:02:21 2014 us=43338 up_delay = DISABLED
Sun Nov 23 02:02:21 2014 us=43347 daemon = ENABLED
Sun Nov 23 02:02:21 2014 us=43356 inetd = 0
Sun Nov 23 02:02:21 2014 us=43365 log = ENABLED
Sun Nov 23 02:02:21 2014 us=43374 suppress_timestamps = DISABLED
Sun Nov 23 02:02:21 2014 us=43383 nice = 0
Sun Nov 23 02:02:21 2014 us=43392 verbosity = 4
Sun Nov 23 02:02:21 2014 us=43401 mute = 0
Sun Nov 23 02:02:21 2014 us=43410 gremlin = 0
Sun Nov 23 02:02:21 2014 us=43419 status_file = 'openvpn-status.log'
Sun Nov 23 02:02:21 2014 us=43428 status_file_version = 1
Sun Nov 23 02:02:21 2014 us=43437 status_file_update_freq = 60
Sun Nov 23 02:02:21 2014 us=43446 occ = ENABLED
Sun Nov 23 02:02:21 2014 us=43455 rcvbuf = 65536
Sun Nov 23 02:02:21 2014 us=43463 sndbuf = 65536
Sun Nov 23 02:02:21 2014 us=43472 mark = 0
Sun Nov 23 02:02:21 2014 us=43481 sockflags = 0
Sun Nov 23 02:02:21 2014 us=43490 fast_io = DISABLED
Sun Nov 23 02:02:21 2014 us=43499 lzo = 7
Sun Nov 23 02:02:21 2014 us=43508 route_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43517 route_default_gateway = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43526 route_default_metric = 0
Sun Nov 23 02:02:21 2014 us=43535 route_noexec = DISABLED
Sun Nov 23 02:02:21 2014 us=43544 route_delay = 0
Sun Nov 23 02:02:21 2014 us=43553 route_delay_window = 30
Sun Nov 23 02:02:21 2014 us=43562 route_delay_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=43571 route_nopull = DISABLED
Sun Nov 23 02:02:21 2014 us=43580 route_gateway_via_dhcp = DISABLED
Sun Nov 23 02:02:21 2014 us=43589 max_routes = 100
Sun Nov 23 02:02:21 2014 us=43598 allow_pull_fqdn = DISABLED
Sun Nov 23 02:02:21 2014 us=43608 route 10.8.0.0/255.255.255.0/nil/nil
Sun Nov 23 02:02:21 2014 us=43618 management_addr = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43627 management_port = 0
Sun Nov 23 02:02:21 2014 us=43636 management_user_pass = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43645 management_log_history_cache = 250
Sun Nov 23 02:02:21 2014 us=43654 management_echo_buffer_size = 100
Sun Nov 23 02:02:21 2014 us=43663 management_write_peer_info_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43672 management_client_user = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43681 management_client_group = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43690 management_flags = 0
Sun Nov 23 02:02:21 2014 us=43700 shared_secret_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43709 key_direction = 0
Sun Nov 23 02:02:21 2014 us=43718 ciphername_defined = ENABLED
Sun Nov 23 02:02:21 2014 us=43727 ciphername = 'BF-CBC'
Sun Nov 23 02:02:21 2014 us=43736 authname_defined = ENABLED
Sun Nov 23 02:02:21 2014 us=43745 authname = 'SHA1'
Sun Nov 23 02:02:21 2014 us=43754 prng_hash = 'SHA1'
Sun Nov 23 02:02:21 2014 us=43763 prng_nonce_secret_len = 16
Sun Nov 23 02:02:21 2014 us=43772 keysize = 0
Sun Nov 23 02:02:21 2014 us=43781 engine = DISABLED
Sun Nov 23 02:02:21 2014 us=43790 replay = ENABLED
Sun Nov 23 02:02:21 2014 us=43799 mute_replay_warnings = DISABLED
Sun Nov 23 02:02:21 2014 us=43808 replay_window = 64
Sun Nov 23 02:02:21 2014 us=43817 replay_time = 15
Sun Nov 23 02:02:21 2014 us=43826 packet_id_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43835 use_iv = ENABLED
Sun Nov 23 02:02:21 2014 us=43843 test_crypto = DISABLED
Sun Nov 23 02:02:21 2014 us=43852 tls_server = ENABLED
Sun Nov 23 02:02:21 2014 us=43861 tls_client = DISABLED
Sun Nov 23 02:02:21 2014 us=43870 key_method = 2
Sun Nov 23 02:02:21 2014 us=43879 ca_file = 'ca.crt'
Sun Nov 23 02:02:21 2014 us=43888 ca_path = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43903 dh_file = 'dh2048.pem'
Sun Nov 23 02:02:21 2014 us=43913 cert_file = 'server.crt'
Sun Nov 23 02:02:21 2014 us=43922 priv_key_file = 'server.key'
Sun Nov 23 02:02:21 2014 us=43931 pkcs12_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43940 cipher_list = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43949 tls_verify = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43958 tls_export_cert = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43967 verify_x509_type = 0
Sun Nov 23 02:02:21 2014 us=43976 verify_x509_name = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43985 crl_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=43994 ns_cert_type = 0
Sun Nov 23 02:02:21 2014 us=44004 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44013 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44022 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44030 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44039 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44048 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44057 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44066 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44075 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44084 remote_cert_ku = 0
Sun Nov 23 02:02:21 2014 us=44092 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44101 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44144 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44154 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44163 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44172 remote_cert_ku[i] = 0
Sun Nov 23 02:02:21 2014 us=44182 remote_cert_eku = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=44191 ssl_flags = 0
Sun Nov 23 02:02:21 2014 us=44200 tls_timeout = 2
Sun Nov 23 02:02:21 2014 us=44209 renegotiate_bytes = 0
Sun Nov 23 02:02:21 2014 us=44218 renegotiate_packets = 0
Sun Nov 23 02:02:21 2014 us=44227 renegotiate_seconds = 3600
Sun Nov 23 02:02:21 2014 us=44236 handshake_window = 60
Sun Nov 23 02:02:21 2014 us=44245 transition_window = 3600
Sun Nov 23 02:02:21 2014 us=44254 single_session = DISABLED
Sun Nov 23 02:02:21 2014 us=44263 push_peer_info = DISABLED
Sun Nov 23 02:02:21 2014 us=44272 tls_exit = DISABLED
Sun Nov 23 02:02:21 2014 us=44281 tls_auth_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=44290 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44299 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44308 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44317 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44327 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44336 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44344 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44354 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44363 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44372 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44381 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44390 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44399 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44407 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44416 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44425 pkcs11_protected_authentication = DISABLED
Sun Nov 23 02:02:21 2014 us=44435 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44444 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44453 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44462 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44471 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44480 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44489 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44498 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44514 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44524 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44533 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44542 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44551 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44560 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44569 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44578 pkcs11_private_mode = 00000000
Sun Nov 23 02:02:21 2014 us=44587 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44596 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44605 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44613 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44622 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44631 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44640 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44649 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44658 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44667 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44676 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44685 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44694 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44703 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44711 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44720 pkcs11_cert_private = DISABLED
Sun Nov 23 02:02:21 2014 us=44730 pkcs11_pin_cache_period = -1
Sun Nov 23 02:02:21 2014 us=44739 pkcs11_id = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=44748 pkcs11_id_management = DISABLED
Sun Nov 23 02:02:21 2014 us=44758 server_network = 10.8.0.0
Sun Nov 23 02:02:21 2014 us=44768 server_netmask = 255.255.255.0
Sun Nov 23 02:02:21 2014 us=44789 server_network_ipv6 = ::
Sun Nov 23 02:02:21 2014 us=44799 server_netbits_ipv6 = 0
Sun Nov 23 02:02:21 2014 us=44809 server_bridge_ip = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=44818 server_bridge_netmask = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=44828 server_bridge_pool_start = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=44838 server_bridge_pool_end = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=44847 push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun Nov 23 02:02:21 2014 us=44856 push_entry = 'dhcp-option DNS 10.8.0.1'
Sun Nov 23 02:02:21 2014 us=44865 push_entry = 'route 10.8.0.1'
Sun Nov 23 02:02:21 2014 us=44874 push_entry = 'topology net30'
Sun Nov 23 02:02:21 2014 us=44883 push_entry = 'ping 10'
Sun Nov 23 02:02:21 2014 us=44892 push_entry = 'ping-restart 120'
Sun Nov 23 02:02:21 2014 us=44901 ifconfig_pool_defined = ENABLED
Sun Nov 23 02:02:21 2014 us=44911 ifconfig_pool_start = 10.8.0.4
Sun Nov 23 02:02:21 2014 us=44921 ifconfig_pool_end = 10.8.0.251
Sun Nov 23 02:02:21 2014 us=44930 ifconfig_pool_netmask = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=44939 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Nov 23 02:02:21 2014 us=44949 ifconfig_pool_persist_refresh_freq = 600
Sun Nov 23 02:02:21 2014 us=44958 ifconfig_ipv6_pool_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=44967 ifconfig_ipv6_pool_base = ::
Sun Nov 23 02:02:21 2014 us=44977 ifconfig_ipv6_pool_netbits = 0
Sun Nov 23 02:02:21 2014 us=44986 n_bcast_buf = 256
Sun Nov 23 02:02:21 2014 us=44995 tcp_queue_limit = 64
Sun Nov 23 02:02:21 2014 us=45004 real_hash_size = 256
Sun Nov 23 02:02:21 2014 us=45013 virtual_hash_size = 256
Sun Nov 23 02:02:21 2014 us=45022 client_connect_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45031 learn_address_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45040 client_disconnect_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45049 client_config_dir = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45058 ccd_exclusive = DISABLED
Sun Nov 23 02:02:21 2014 us=45067 tmp_dir = '/tmp'
Sun Nov 23 02:02:21 2014 us=45076 push_ifconfig_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=45097 push_ifconfig_local = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=45108 push_ifconfig_remote_netmask = 0.0.0.0
Sun Nov 23 02:02:21 2014 us=45117 push_ifconfig_ipv6_defined = DISABLED
Sun Nov 23 02:02:21 2014 us=45127 push_ifconfig_ipv6_local = ::/0
Sun Nov 23 02:02:21 2014 us=45137 push_ifconfig_ipv6_remote = ::
Sun Nov 23 02:02:21 2014 us=45146 enable_c2c = DISABLED
Sun Nov 23 02:02:21 2014 us=45155 duplicate_cn = DISABLED
Sun Nov 23 02:02:21 2014 us=45164 cf_max = 0
Sun Nov 23 02:02:21 2014 us=45173 cf_per = 0
Sun Nov 23 02:02:21 2014 us=45183 max_clients = 1024
Sun Nov 23 02:02:21 2014 us=45192 max_routes_per_client = 256
Sun Nov 23 02:02:21 2014 us=45201 auth_user_pass_verify_script = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45211 auth_user_pass_verify_script_via_file = DISABLED
Sun Nov 23 02:02:21 2014 us=45220 port_share_host = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45229 port_share_port = 0
Sun Nov 23 02:02:21 2014 us=45238 client = DISABLED
Sun Nov 23 02:02:21 2014 us=45247 pull = DISABLED
Sun Nov 23 02:02:21 2014 us=45256 auth_user_pass_file = '[UNDEF]'
Sun Nov 23 02:02:21 2014 us=45267 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Sun Nov 23 02:02:21 2014 us=52083 Diffie-Hellman initialized with 2048 bit key
Sun Nov 23 02:02:21 2014 us=52448 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 23 02:02:21 2014 us=52478 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Nov 23 02:02:21 2014 us=52583 ROUTE_GATEWAY x.x.210.1/255.255.0.0 IFACE=eth0 HWADDR=f2:3c:91:89:ec:d9
Sun Nov 23 02:02:21 2014 us=57044 TUN/TAP device tun0 opened
Sun Nov 23 02:02:21 2014 us=57082 TUN/TAP TX queue length set to 100
Sun Nov 23 02:02:21 2014 us=57112 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Nov 23 02:02:21 2014 us=57147 /sbin/ip link set dev tun0 up mtu 1500
Sun Nov 23 02:02:21 2014 us=66905 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Nov 23 02:02:21 2014 us=77350 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Nov 23 02:02:21 2014 us=82886 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 23 02:02:21 2014 us=85847 UDPv4 link local (bound): [undef]
Sun Nov 23 02:02:21 2014 us=85897 UDPv4 link remote: [undef]
Sun Nov 23 02:02:21 2014 us=85915 MULTI: multi_init called, r=256 v=256
Sun Nov 23 02:02:21 2014 us=86019 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Nov 23 02:02:21 2014 us=86038 ifconfig_pool_read(), in='ClientWeb,10.8.0.4', TODO: IPv6
Sun Nov 23 02:02:21 2014 us=86067 succeeded -> ifconfig_pool_set()
Sun Nov 23 02:02:21 2014 us=86079 IFCONFIG POOL LIST
Sun Nov 23 02:02:21 2014 us=86091 ClientWeb,10.8.0.4
Sun Nov 23 02:02:21 2014 us=86134 Initialization Sequence Completed
Sun Nov 23 02:02:23 2014 us=309214 MULTI: multi_create_instance called
Sun Nov 23 02:02:23 2014 us=309327 x.x.210.130:41178 Re-using SSL/TLS context
Sun Nov 23 02:02:23 2014 us=309387 x.x.210.130:41178 LZO compression initialized
Sun Nov 23 02:02:23 2014 us=309722 x.x.210.130:41178 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 23 02:02:23 2014 us=309739 x.x.210.130:41178 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 23 02:02:23 2014 us=309793 x.x.210.130:41178 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Nov 23 02:02:23 2014 us=309816 x.x.210.130:41178 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Nov 23 02:02:23 2014 us=309879 x.x.210.130:41178 Local Options hash (VER=V4): '530fdded'
Sun Nov 23 02:02:23 2014 us=309898 x.x.210.130:41178 Expected Remote Options hash (VER=V4): '41690919'
Sun Nov 23 02:02:23 2014 us=309953 x.x.210.130:41178 TLS: Initial packet from [AF_INET]x.x.210.130:41178, sid=94526c29 14a71c01
Sun Nov 23 02:02:23 2014 us=338964 x.x.210.130:41178 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Interconit, OU=LLC, CN=interconit, name=John Smith, emailAddress=john.smith@example.com
Sun Nov 23 02:02:23 2014 us=339122 x.x.210.130:41178 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=ClientWeb, OU=MyOrganizationalUnit, CN=ClientWeb, name=John Smith, emailAddress=john@example.com
Sun Nov 23 02:02:23 2014 us=346822 x.x.210.130:41178 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 23 02:02:23 2014 us=346844 x.x.210.130:41178 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 23 02:02:23 2014 us=346893 x.x.210.130:41178 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 23 02:02:23 2014 us=346904 x.x.210.130:41178 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 23 02:02:23 2014 us=347422 x.x.210.130:41178 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Nov 23 02:02:23 2014 us=347458 x.x.210.130:41178 [ClientWeb] Peer Connection Initiated with [AF_INET]x.x.210.130:41178
Sun Nov 23 02:02:23 2014 us=347483 ClientWeb/x.x.210.130:41178 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Nov 23 02:02:23 2014 us=347518 ClientWeb/x.x.210.130:41178 MULTI: Learn: 10.8.0.6 -> ClientWeb/x.x.210.130:41178
Sun Nov 23 02:02:23 2014 us=347530 ClientWeb/x.x.210.130:41178 MULTI: primary virtual IP for ClientWeb/x.x.210.130:41178: 10.8.0.6
Sun Nov 23 02:02:25 2014 us=635684 ClientWeb/x.x.210.130:41178 PUSH: Received control message: 'PUSH_REQUEST'
Sun Nov 23 02:02:25 2014 us=635741 ClientWeb/x.x.210.130:41178 send_push_reply(): safe_cap=940
Sun Nov 23 02:02:25 2014 us=635772 ClientWeb/x.x.210.130:41178 SENT CONTROL [ClientWeb]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Nov 23 02:02:25 2014 us=891304 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:26 2014 us=351212 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:27 2014 us=274427 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:29 2014 us=121200 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:32 2014 us=807848 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:40 2014 us=181062 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:02:54 2014 us=954525 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:03:24 2014 us=501265 ClientWeb/x.x.210.130:41178 MULTI: bad source address from client [x.x.210.130], packet dropped
Sun Nov 23 02:03:36 2014 us=582921 event_wait : Interrupted system call (code=4)
Sun Nov 23 02:03:36 2014 us=583285 TCP/UDP: Closing socket
Sun Nov 23 02:03:36 2014 us=583353 /sbin/ip route del 10.8.0.0/24
Sun Nov 23 02:03:36 2014 us=585005 Closing TUN/TAP interface
Sun Nov 23 02:03:36 2014 us=585046 /sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Nov 23 02:03:36 2014 us=594203 SIGTERM[hard,] received, process exiting

###################################################################################
###################################################################################
# #
# When commented, see openvpn log (output below): comment.redirect.gateway.log #
# #
###################################################################################
###################################################################################

root@root:# cat /etc/openvpn/log/comment.redirect.gateway.log
Sun Nov 23 01:59:51 2014 us=486002 Current Parameter Settings:
Sun Nov 23 01:59:51 2014 us=486090 config = '/etc/openvpn/server.conf'
Sun Nov 23 01:59:51 2014 us=486103 mode = 1
Sun Nov 23 01:59:51 2014 us=486113 persist_config = DISABLED
Sun Nov 23 01:59:51 2014 us=486122 persist_mode = 1
Sun Nov 23 01:59:51 2014 us=486131 show_ciphers = DISABLED
Sun Nov 23 01:59:51 2014 us=486140 show_digests = DISABLED
Sun Nov 23 01:59:51 2014 us=486149 show_engines = DISABLED
Sun Nov 23 01:59:51 2014 us=486158 genkey = DISABLED
Sun Nov 23 01:59:51 2014 us=486167 key_pass_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486177 show_tls_ciphers = DISABLED
Sun Nov 23 01:59:51 2014 us=486186 Connection profiles [default]:
Sun Nov 23 01:59:51 2014 us=486195 proto = udp
Sun Nov 23 01:59:51 2014 us=486204 local = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486214 local_port = 49152
Sun Nov 23 01:59:51 2014 us=486223 remote = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486232 remote_port = 49152
Sun Nov 23 01:59:51 2014 us=486241 remote_float = DISABLED
Sun Nov 23 01:59:51 2014 us=486250 bind_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=486260 bind_local = ENABLED
Sun Nov 23 01:59:51 2014 us=486269 connect_retry_seconds = 5
Sun Nov 23 01:59:51 2014 us=486278 connect_timeout = 10
Sun Nov 23 01:59:51 2014 us=486287 connect_retry_max = 0
Sun Nov 23 01:59:51 2014 us=486296 socks_proxy_server = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486305 socks_proxy_port = 0
Sun Nov 23 01:59:51 2014 us=486315 socks_proxy_retry = DISABLED
Sun Nov 23 01:59:51 2014 us=486324 tun_mtu = 1500
Sun Nov 23 01:59:51 2014 us=486333 tun_mtu_defined = ENABLED
Sun Nov 23 01:59:51 2014 us=486342 link_mtu = 1500
Sun Nov 23 01:59:51 2014 us=486351 link_mtu_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=486359 tun_mtu_extra = 0
Sun Nov 23 01:59:51 2014 us=486368 tun_mtu_extra_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=486377 mtu_discover_type = -1
Sun Nov 23 01:59:51 2014 us=486386 fragment = 0
Sun Nov 23 01:59:51 2014 us=486395 mssfix = 1450
Sun Nov 23 01:59:51 2014 us=486404 explicit_exit_notification = 0
Sun Nov 23 01:59:51 2014 us=486414 Connection profiles END
Sun Nov 23 01:59:51 2014 us=486423 remote_random = DISABLED
Sun Nov 23 01:59:51 2014 us=486432 ipchange = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486441 dev = 'tun'
Sun Nov 23 01:59:51 2014 us=486450 dev_type = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486459 dev_node = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486468 lladdr = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486477 topology = 1
Sun Nov 23 01:59:51 2014 us=486486 tun_ipv6 = DISABLED
Sun Nov 23 01:59:51 2014 us=486495 ifconfig_local = '10.8.0.1'
Sun Nov 23 01:59:51 2014 us=486504 ifconfig_remote_netmask = '10.8.0.2'
Sun Nov 23 01:59:51 2014 us=486513 ifconfig_noexec = DISABLED
Sun Nov 23 01:59:51 2014 us=486522 ifconfig_nowarn = DISABLED
Sun Nov 23 01:59:51 2014 us=486531 ifconfig_ipv6_local = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486540 ifconfig_ipv6_netbits = 0
Sun Nov 23 01:59:51 2014 us=486549 ifconfig_ipv6_remote = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486558 shaper = 0
Sun Nov 23 01:59:51 2014 us=486567 mtu_test = 0
Sun Nov 23 01:59:51 2014 us=486575 mlock = DISABLED
Sun Nov 23 01:59:51 2014 us=486584 keepalive_ping = 10
Sun Nov 23 01:59:51 2014 us=486593 keepalive_timeout = 120
Sun Nov 23 01:59:51 2014 us=486602 inactivity_timeout = 0
Sun Nov 23 01:59:51 2014 us=486611 ping_send_timeout = 10
Sun Nov 23 01:59:51 2014 us=486620 ping_rec_timeout = 240
Sun Nov 23 01:59:51 2014 us=486629 ping_rec_timeout_action = 2
Sun Nov 23 01:59:51 2014 us=486638 ping_timer_remote = DISABLED
Sun Nov 23 01:59:51 2014 us=486647 remap_sigusr1 = 0
Sun Nov 23 01:59:51 2014 us=486656 persist_tun = ENABLED
Sun Nov 23 01:59:51 2014 us=486665 persist_local_ip = DISABLED
Sun Nov 23 01:59:51 2014 us=486674 persist_remote_ip = DISABLED
Sun Nov 23 01:59:51 2014 us=486683 persist_key = ENABLED
Sun Nov 23 01:59:51 2014 us=486692 passtos = DISABLED
Sun Nov 23 01:59:51 2014 us=486702 resolve_retry_seconds = 1000000000
Sun Nov 23 01:59:51 2014 us=486718 username = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486727 groupname = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486736 chroot_dir = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486745 cd_dir = '/etc/openvpn'
Sun Nov 23 01:59:51 2014 us=486754 writepid = '/run/openvpn/server.pid'
Sun Nov 23 01:59:51 2014 us=486763 up_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486772 down_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486781 down_pre = DISABLED
Sun Nov 23 01:59:51 2014 us=486800 up_restart = DISABLED
Sun Nov 23 01:59:51 2014 us=486810 up_delay = DISABLED
Sun Nov 23 01:59:51 2014 us=486820 daemon = ENABLED
Sun Nov 23 01:59:51 2014 us=486829 inetd = 0
Sun Nov 23 01:59:51 2014 us=486837 log = ENABLED
Sun Nov 23 01:59:51 2014 us=486846 suppress_timestamps = DISABLED
Sun Nov 23 01:59:51 2014 us=486855 nice = 0
Sun Nov 23 01:59:51 2014 us=486864 verbosity = 4
Sun Nov 23 01:59:51 2014 us=486873 mute = 0
Sun Nov 23 01:59:51 2014 us=486882 gremlin = 0
Sun Nov 23 01:59:51 2014 us=486891 status_file = 'openvpn-status.log'
Sun Nov 23 01:59:51 2014 us=486900 status_file_version = 1
Sun Nov 23 01:59:51 2014 us=486909 status_file_update_freq = 60
Sun Nov 23 01:59:51 2014 us=486918 occ = ENABLED
Sun Nov 23 01:59:51 2014 us=486927 rcvbuf = 65536
Sun Nov 23 01:59:51 2014 us=486936 sndbuf = 65536
Sun Nov 23 01:59:51 2014 us=486945 mark = 0
Sun Nov 23 01:59:51 2014 us=486954 sockflags = 0
Sun Nov 23 01:59:51 2014 us=486962 fast_io = DISABLED
Sun Nov 23 01:59:51 2014 us=486971 lzo = 7
Sun Nov 23 01:59:51 2014 us=486980 route_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486989 route_default_gateway = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=486998 route_default_metric = 0
Sun Nov 23 01:59:51 2014 us=487007 route_noexec = DISABLED
Sun Nov 23 01:59:51 2014 us=487016 route_delay = 0
Sun Nov 23 01:59:51 2014 us=487025 route_delay_window = 30
Sun Nov 23 01:59:51 2014 us=487034 route_delay_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=487043 route_nopull = DISABLED
Sun Nov 23 01:59:51 2014 us=487052 route_gateway_via_dhcp = DISABLED
Sun Nov 23 01:59:51 2014 us=487061 max_routes = 100
Sun Nov 23 01:59:51 2014 us=487070 allow_pull_fqdn = DISABLED
Sun Nov 23 01:59:51 2014 us=487080 route 10.8.0.0/255.255.255.0/nil/nil
Sun Nov 23 01:59:51 2014 us=487090 management_addr = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487099 management_port = 0
Sun Nov 23 01:59:51 2014 us=487108 management_user_pass = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487117 management_log_history_cache = 250
Sun Nov 23 01:59:51 2014 us=487126 management_echo_buffer_size = 100
Sun Nov 23 01:59:51 2014 us=487135 management_write_peer_info_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487144 management_client_user = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487153 management_client_group = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487162 management_flags = 0
Sun Nov 23 01:59:51 2014 us=487172 shared_secret_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487181 key_direction = 0
Sun Nov 23 01:59:51 2014 us=487190 ciphername_defined = ENABLED
Sun Nov 23 01:59:51 2014 us=487198 ciphername = 'BF-CBC'
Sun Nov 23 01:59:51 2014 us=487208 authname_defined = ENABLED
Sun Nov 23 01:59:51 2014 us=487217 authname = 'SHA1'
Sun Nov 23 01:59:51 2014 us=487225 prng_hash = 'SHA1'
Sun Nov 23 01:59:51 2014 us=487235 prng_nonce_secret_len = 16
Sun Nov 23 01:59:51 2014 us=487244 keysize = 0
Sun Nov 23 01:59:51 2014 us=487252 engine = DISABLED
Sun Nov 23 01:59:51 2014 us=487261 replay = ENABLED
Sun Nov 23 01:59:51 2014 us=487270 mute_replay_warnings = DISABLED
Sun Nov 23 01:59:51 2014 us=487279 replay_window = 64
Sun Nov 23 01:59:51 2014 us=487288 replay_time = 15
Sun Nov 23 01:59:51 2014 us=487297 packet_id_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487306 use_iv = ENABLED
Sun Nov 23 01:59:51 2014 us=487315 test_crypto = DISABLED
Sun Nov 23 01:59:51 2014 us=487324 tls_server = ENABLED
Sun Nov 23 01:59:51 2014 us=487333 tls_client = DISABLED
Sun Nov 23 01:59:51 2014 us=487348 key_method = 2
Sun Nov 23 01:59:51 2014 us=487357 ca_file = 'ca.crt'
Sun Nov 23 01:59:51 2014 us=487366 ca_path = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487375 dh_file = 'dh2048.pem'
Sun Nov 23 01:59:51 2014 us=487384 cert_file = 'server.crt'
Sun Nov 23 01:59:51 2014 us=487393 priv_key_file = 'server.key'
Sun Nov 23 01:59:51 2014 us=487402 pkcs12_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487411 cipher_list = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487420 tls_verify = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487429 tls_export_cert = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487438 verify_x509_type = 0
Sun Nov 23 01:59:51 2014 us=487447 verify_x509_name = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487488 crl_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487500 ns_cert_type = 0
Sun Nov 23 01:59:51 2014 us=487509 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487518 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487527 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487536 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487545 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487554 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487563 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487571 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487580 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487589 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487598 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487607 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487616 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487625 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487634 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487643 remote_cert_ku[i] = 0
Sun Nov 23 01:59:51 2014 us=487652 remote_cert_eku = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487661 ssl_flags = 0
Sun Nov 23 01:59:51 2014 us=487670 tls_timeout = 2
Sun Nov 23 01:59:51 2014 us=487679 renegotiate_bytes = 0
Sun Nov 23 01:59:51 2014 us=487688 renegotiate_packets = 0
Sun Nov 23 01:59:51 2014 us=487697 renegotiate_seconds = 3600
Sun Nov 23 01:59:51 2014 us=487706 handshake_window = 60
Sun Nov 23 01:59:51 2014 us=487715 transition_window = 3600
Sun Nov 23 01:59:51 2014 us=487724 single_session = DISABLED
Sun Nov 23 01:59:51 2014 us=487733 push_peer_info = DISABLED
Sun Nov 23 01:59:51 2014 us=487742 tls_exit = DISABLED
Sun Nov 23 01:59:51 2014 us=487751 tls_auth_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=487760 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487769 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487778 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487787 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487796 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487805 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487814 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487823 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487832 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487841 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487850 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487859 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487868 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487877 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487886 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487895 pkcs11_protected_authentication = DISABLED
Sun Nov 23 01:59:51 2014 us=487905 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487914 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487923 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487932 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487941 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487956 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487965 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487974 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487983 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=487992 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488001 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488010 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488018 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488027 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488036 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488045 pkcs11_private_mode = 00000000
Sun Nov 23 01:59:51 2014 us=488054 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488063 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488072 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488081 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488090 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488098 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488107 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488116 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488125 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488134 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488143 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488151 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488160 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488169 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488178 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488187 pkcs11_cert_private = DISABLED
Sun Nov 23 01:59:51 2014 us=488196 pkcs11_pin_cache_period = -1
Sun Nov 23 01:59:51 2014 us=488205 pkcs11_id = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488214 pkcs11_id_management = DISABLED
Sun Nov 23 01:59:51 2014 us=488224 server_network = 10.8.0.0
Sun Nov 23 01:59:51 2014 us=488233 server_netmask = 255.255.255.0
Sun Nov 23 01:59:51 2014 us=488245 server_network_ipv6 = ::
Sun Nov 23 01:59:51 2014 us=488254 server_netbits_ipv6 = 0
Sun Nov 23 01:59:51 2014 us=488264 server_bridge_ip = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488273 server_bridge_netmask = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488283 server_bridge_pool_start = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488293 server_bridge_pool_end = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488302 push_entry = 'dhcp-option DNS 10.8.0.1'
Sun Nov 23 01:59:51 2014 us=488311 push_entry = 'route 10.8.0.1'
Sun Nov 23 01:59:51 2014 us=488320 push_entry = 'topology net30'
Sun Nov 23 01:59:51 2014 us=488329 push_entry = 'ping 10'
Sun Nov 23 01:59:51 2014 us=488338 push_entry = 'ping-restart 120'
Sun Nov 23 01:59:51 2014 us=488347 ifconfig_pool_defined = ENABLED
Sun Nov 23 01:59:51 2014 us=488357 ifconfig_pool_start = 10.8.0.4
Sun Nov 23 01:59:51 2014 us=488366 ifconfig_pool_end = 10.8.0.251
Sun Nov 23 01:59:51 2014 us=488376 ifconfig_pool_netmask = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488385 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Nov 23 01:59:51 2014 us=488394 ifconfig_pool_persist_refresh_freq = 600
Sun Nov 23 01:59:51 2014 us=488404 ifconfig_ipv6_pool_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=488413 ifconfig_ipv6_pool_base = ::
Sun Nov 23 01:59:51 2014 us=488422 ifconfig_ipv6_pool_netbits = 0
Sun Nov 23 01:59:51 2014 us=488431 n_bcast_buf = 256
Sun Nov 23 01:59:51 2014 us=488440 tcp_queue_limit = 64
Sun Nov 23 01:59:51 2014 us=488449 real_hash_size = 256
Sun Nov 23 01:59:51 2014 us=488458 virtual_hash_size = 256
Sun Nov 23 01:59:51 2014 us=488467 client_connect_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488476 learn_address_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488485 client_disconnect_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488494 client_config_dir = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488508 ccd_exclusive = DISABLED
Sun Nov 23 01:59:51 2014 us=488518 tmp_dir = '/tmp'
Sun Nov 23 01:59:51 2014 us=488527 push_ifconfig_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=488537 push_ifconfig_local = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488546 push_ifconfig_remote_netmask = 0.0.0.0
Sun Nov 23 01:59:51 2014 us=488556 push_ifconfig_ipv6_defined = DISABLED
Sun Nov 23 01:59:51 2014 us=488565 push_ifconfig_ipv6_local = ::/0
Sun Nov 23 01:59:51 2014 us=488575 push_ifconfig_ipv6_remote = ::
Sun Nov 23 01:59:51 2014 us=488584 enable_c2c = DISABLED
Sun Nov 23 01:59:51 2014 us=488593 duplicate_cn = DISABLED
Sun Nov 23 01:59:51 2014 us=488603 cf_max = 0
Sun Nov 23 01:59:51 2014 us=488612 cf_per = 0
Sun Nov 23 01:59:51 2014 us=488621 max_clients = 1024
Sun Nov 23 01:59:51 2014 us=488630 max_routes_per_client = 256
Sun Nov 23 01:59:51 2014 us=488639 auth_user_pass_verify_script = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488648 auth_user_pass_verify_script_via_file = DISABLED
Sun Nov 23 01:59:51 2014 us=488657 port_share_host = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488666 port_share_port = 0
Sun Nov 23 01:59:51 2014 us=488675 client = DISABLED
Sun Nov 23 01:59:51 2014 us=488684 pull = DISABLED
Sun Nov 23 01:59:51 2014 us=488693 auth_user_pass_file = '[UNDEF]'
Sun Nov 23 01:59:51 2014 us=488703 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Sun Nov 23 01:59:51 2014 us=494496 Diffie-Hellman initialized with 2048 bit key
Sun Nov 23 01:59:51 2014 us=494835 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 23 01:59:51 2014 us=494864 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Nov 23 01:59:51 2014 us=494965 ROUTE_GATEWAY x.x.210.1/255.255.0.0 IFACE=eth0 HWADDR=f2:3c:91:89:ec:d9
Sun Nov 23 01:59:51 2014 us=498690 TUN/TAP device tun0 opened
Sun Nov 23 01:59:51 2014 us=498717 TUN/TAP TX queue length set to 100
Sun Nov 23 01:59:51 2014 us=498736 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Nov 23 01:59:51 2014 us=498757 /sbin/ip link set dev tun0 up mtu 1500
Sun Nov 23 01:59:51 2014 us=503716 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Nov 23 01:59:51 2014 us=511098 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Nov 23 01:59:51 2014 us=517574 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 23 01:59:51 2014 us=520398 UDPv4 link local (bound): [undef]
Sun Nov 23 01:59:51 2014 us=520463 UDPv4 link remote: [undef]
Sun Nov 23 01:59:51 2014 us=520483 MULTI: multi_init called, r=256 v=256
Sun Nov 23 01:59:51 2014 us=520578 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Nov 23 01:59:51 2014 us=520598 ifconfig_pool_read(), in='ClientWeb,10.8.0.4', TODO: IPv6
Sun Nov 23 01:59:51 2014 us=520632 succeeded -> ifconfig_pool_set()
Sun Nov 23 01:59:51 2014 us=520644 IFCONFIG POOL LIST
Sun Nov 23 01:59:51 2014 us=520655 ClientWeb,10.8.0.4
Sun Nov 23 01:59:51 2014 us=520692 Initialization Sequence Completed
Sun Nov 23 01:59:53 2014 us=979213 MULTI: multi_create_instance called
Sun Nov 23 01:59:53 2014 us=979325 x.x.210.130:46540 Re-using SSL/TLS context
Sun Nov 23 01:59:53 2014 us=979415 x.x.210.130:46540 LZO compression initialized
Sun Nov 23 01:59:53 2014 us=979911 x.x.210.130:46540 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 23 01:59:53 2014 us=979949 x.x.210.130:46540 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 23 01:59:53 2014 us=980042 x.x.210.130:46540 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Nov 23 01:59:53 2014 us=980082 x.x.210.130:46540 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Nov 23 01:59:53 2014 us=980127 x.x.210.130:46540 Local Options hash (VER=V4): '530fdded'
Sun Nov 23 01:59:53 2014 us=980160 x.x.210.130:46540 Expected Remote Options hash (VER=V4): '41690919'
Sun Nov 23 01:59:53 2014 us=980244 x.x.210.130:46540 TLS: Initial packet from [AF_INET]x.x.210.130:46540, sid=c0f11220 02b01a94
Sun Nov 23 01:59:54 2014 us=13835 x.x.210.130:46540 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Interconit, OU=LLC, CN=interconit, name=John Smith, emailAddress=john.smith@example.com
Sun Nov 23 01:59:54 2014 us=14010 x.x.210.130:46540 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=ClientWeb, OU=MyOrganizationalUnit, CN=ClientWeb, name=John Smith, emailAddress=john@example.com
Sun Nov 23 01:59:54 2014 us=21716 x.x.210.130:46540 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 23 01:59:54 2014 us=21738 x.x.210.130:46540 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 23 01:59:54 2014 us=21788 x.x.210.130:46540 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 23 01:59:54 2014 us=21799 x.x.210.130:46540 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 23 01:59:54 2014 us=22321 x.x.210.130:46540 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Nov 23 01:59:54 2014 us=22344 x.x.210.130:46540 [ClientWeb] Peer Connection Initiated with [AF_INET]x.x.210.130:46540
Sun Nov 23 01:59:54 2014 us=22369 ClientWeb/x.x.210.130:46540 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Nov 23 01:59:54 2014 us=22404 ClientWeb/x.x.210.130:46540 MULTI: Learn: 10.8.0.6 -> ClientWeb/x.x.210.130:46540
Sun Nov 23 01:59:54 2014 us=22416 ClientWeb/x.x.210.130:46540 MULTI: primary virtual IP for ClientWeb/x.x.210.130:46540: 10.8.0.6
Sun Nov 23 01:59:56 2014 us=537379 ClientWeb/x.x.210.130:46540 PUSH: Received control message: 'PUSH_REQUEST'
Sun Nov 23 01:59:56 2014 us=537431 ClientWeb/x.x.210.130:46540 send_push_reply(): safe_cap=940
Sun Nov 23 01:59:56 2014 us=537478 ClientWeb/x.x.210.130:46540 SENT CONTROL [ClientWeb]: 'PUSH_REPLY,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

interconit

According to the OpenVPN FAQ:

http://openvpn.net/index.php/open-source/faq/79-client/317-qmulti-bad-source-address-from-client--packet-droppedq-or-qget-inst-by-virt-failedq.html

"MULTI: bad source address from client , packet dropped" or "GET INST BY VIRT: [failed]"?

These errors occur because OpenVPN doesn't have an internal route for x.x.210.130. Consequently, it doesn't know how to route the packet to this machine, so it drops the packet.

However, when I set the following:

root@root:cat /etc/openvpn/server.conf
client-config-dir ccd
route x.x.210.130 255.255.255.0

root@root:cat /etc/openvpn/ccd/ClientWeb
iroute x.x.210.130 255.255.255.0

Then, issue a OpenVPN restart directive, server freezes after about 5-10 secs. Unable to ping from client to server.

root@root:# cat /etc/openvpn/log/client-config-dir-openvpn.log
Tue Nov 25 05:14:01 2014 us=464946 Current Parameter Settings:
Tue Nov 25 05:14:01 2014 us=465037 config = '/etc/openvpn/server.conf'
Tue Nov 25 05:14:01 2014 us=465051 mode = 1
Tue Nov 25 05:14:01 2014 us=465061 persist_config = DISABLED
Tue Nov 25 05:14:01 2014 us=465070 persist_mode = 1
Tue Nov 25 05:14:01 2014 us=465079 show_ciphers = DISABLED
Tue Nov 25 05:14:01 2014 us=465089 show_digests = DISABLED
Tue Nov 25 05:14:01 2014 us=465098 show_engines = DISABLED
Tue Nov 25 05:14:01 2014 us=465107 genkey = DISABLED
Tue Nov 25 05:14:01 2014 us=465116 key_pass_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465125 show_tls_ciphers = DISABLED
Tue Nov 25 05:14:01 2014 us=465135 Connection profiles [default]:
Tue Nov 25 05:14:01 2014 us=465145 proto = udp
Tue Nov 25 05:14:01 2014 us=465154 local = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465164 local_port = 49152
Tue Nov 25 05:14:01 2014 us=465173 remote = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465182 remote_port = 49152
Tue Nov 25 05:14:01 2014 us=465191 remote_float = DISABLED
Tue Nov 25 05:14:01 2014 us=465200 bind_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=465209 bind_local = ENABLED
Tue Nov 25 05:14:01 2014 us=465219 connect_retry_seconds = 5
Tue Nov 25 05:14:01 2014 us=465228 connect_timeout = 10
Tue Nov 25 05:14:01 2014 us=465237 connect_retry_max = 0
Tue Nov 25 05:14:01 2014 us=465246 socks_proxy_server = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465256 socks_proxy_port = 0
Tue Nov 25 05:14:01 2014 us=465265 socks_proxy_retry = DISABLED
Tue Nov 25 05:14:01 2014 us=465275 tun_mtu = 1500
Tue Nov 25 05:14:01 2014 us=465284 tun_mtu_defined = ENABLED
Tue Nov 25 05:14:01 2014 us=465293 link_mtu = 1500
Tue Nov 25 05:14:01 2014 us=465302 link_mtu_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=465312 tun_mtu_extra = 0
Tue Nov 25 05:14:01 2014 us=465321 tun_mtu_extra_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=465330 mtu_discover_type = -1
Tue Nov 25 05:14:01 2014 us=465339 fragment = 0
Tue Nov 25 05:14:01 2014 us=465349 mssfix = 1450
Tue Nov 25 05:14:01 2014 us=465358 explicit_exit_notification = 0
Tue Nov 25 05:14:01 2014 us=465367 Connection profiles END
Tue Nov 25 05:14:01 2014 us=465376 remote_random = DISABLED
Tue Nov 25 05:14:01 2014 us=465386 ipchange = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465395 dev = 'tun'
Tue Nov 25 05:14:01 2014 us=465404 dev_type = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465413 dev_node = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465422 lladdr = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465431 topology = 1
Tue Nov 25 05:14:01 2014 us=465441 tun_ipv6 = DISABLED
Tue Nov 25 05:14:01 2014 us=465450 ifconfig_local = '10.8.0.1'
Tue Nov 25 05:14:01 2014 us=465459 ifconfig_remote_netmask = '10.8.0.2'
Tue Nov 25 05:14:01 2014 us=465468 ifconfig_noexec = DISABLED
Tue Nov 25 05:14:01 2014 us=465477 ifconfig_nowarn = DISABLED
Tue Nov 25 05:14:01 2014 us=465486 ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465496 ifconfig_ipv6_netbits = 0
Tue Nov 25 05:14:01 2014 us=465505 ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465514 shaper = 0
Tue Nov 25 05:14:01 2014 us=465523 mtu_test = 0
Tue Nov 25 05:14:01 2014 us=465532 mlock = DISABLED
Tue Nov 25 05:14:01 2014 us=465542 keepalive_ping = 10
Tue Nov 25 05:14:01 2014 us=465551 keepalive_timeout = 120
Tue Nov 25 05:14:01 2014 us=465560 inactivity_timeout = 0
Tue Nov 25 05:14:01 2014 us=465575 ping_send_timeout = 10
Tue Nov 25 05:14:01 2014 us=465586 ping_rec_timeout = 240
Tue Nov 25 05:14:01 2014 us=465595 ping_rec_timeout_action = 2
Tue Nov 25 05:14:01 2014 us=465604 ping_timer_remote = DISABLED
Tue Nov 25 05:14:01 2014 us=465613 remap_sigusr1 = 0
Tue Nov 25 05:14:01 2014 us=465623 persist_tun = ENABLED
Tue Nov 25 05:14:01 2014 us=465632 persist_local_ip = DISABLED
Tue Nov 25 05:14:01 2014 us=465641 persist_remote_ip = DISABLED
Tue Nov 25 05:14:01 2014 us=465650 persist_key = ENABLED
Tue Nov 25 05:14:01 2014 us=465659 passtos = DISABLED
Tue Nov 25 05:14:01 2014 us=465669 resolve_retry_seconds = 1000000000
Tue Nov 25 05:14:01 2014 us=465724 username = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465737 groupname = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465746 chroot_dir = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465755 cd_dir = '/etc/openvpn'
Tue Nov 25 05:14:01 2014 us=465764 writepid = '/run/openvpn/interconit.pid'
Tue Nov 25 05:14:01 2014 us=465774 up_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465783 down_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=465792 down_pre = DISABLED
Tue Nov 25 05:14:01 2014 us=465801 up_restart = DISABLED
Tue Nov 25 05:14:01 2014 us=465811 up_delay = DISABLED
Tue Nov 25 05:14:01 2014 us=465820 daemon = ENABLED
Tue Nov 25 05:14:01 2014 us=465829 inetd = 0
Tue Nov 25 05:14:01 2014 us=465839 log = ENABLED
Tue Nov 25 05:14:01 2014 us=465857 suppress_timestamps = DISABLED
Tue Nov 25 05:14:01 2014 us=465868 nice = 0
Tue Nov 25 05:14:01 2014 us=465878 verbosity = 4
Tue Nov 25 05:14:01 2014 us=465887 mute = 0
Tue Nov 25 05:14:01 2014 us=465896 gremlin = 0
Tue Nov 25 05:14:01 2014 us=465905 status_file = 'openvpn-status.log'
Tue Nov 25 05:14:01 2014 us=465914 status_file_version = 1
Tue Nov 25 05:14:01 2014 us=465923 status_file_update_freq = 60
Tue Nov 25 05:14:01 2014 us=465933 occ = ENABLED
Tue Nov 25 05:14:01 2014 us=465942 rcvbuf = 65536
Tue Nov 25 05:14:01 2014 us=465951 sndbuf = 65536
Tue Nov 25 05:14:01 2014 us=465960 mark = 0
Tue Nov 25 05:14:01 2014 us=465969 sockflags = 0
Tue Nov 25 05:14:01 2014 us=465978 fast_io = DISABLED
Tue Nov 25 05:14:01 2014 us=465988 lzo = 7
Tue Nov 25 05:14:01 2014 us=465997 route_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466006 route_default_gateway = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466016 route_default_metric = 0
Tue Nov 25 05:14:01 2014 us=466025 route_noexec = DISABLED
Tue Nov 25 05:14:01 2014 us=466034 route_delay = 0
Tue Nov 25 05:14:01 2014 us=466044 route_delay_window = 30
Tue Nov 25 05:14:01 2014 us=466053 route_delay_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=466062 route_nopull = DISABLED
Tue Nov 25 05:14:01 2014 us=466072 route_gateway_via_dhcp = DISABLED
Tue Nov 25 05:14:01 2014 us=466081 max_routes = 100
Tue Nov 25 05:14:01 2014 us=466090 allow_pull_fqdn = DISABLED
Tue Nov 25 05:14:01 2014 us=466101 route x.x.210.130/255.255.255.0/nil/nil
Tue Nov 25 05:14:01 2014 us=466110 route 10.8.0.0/255.255.255.0/nil/nil
Tue Nov 25 05:14:01 2014 us=466119 management_addr = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466129 management_port = 0
Tue Nov 25 05:14:01 2014 us=466138 management_user_pass = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466147 management_log_history_cache = 250
Tue Nov 25 05:14:01 2014 us=466156 management_echo_buffer_size = 100
Tue Nov 25 05:14:01 2014 us=466166 management_write_peer_info_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466175 management_client_user = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466184 management_client_group = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466193 management_flags = 0
Tue Nov 25 05:14:01 2014 us=466203 shared_secret_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466212 key_direction = 0
Tue Nov 25 05:14:01 2014 us=466221 ciphername_defined = ENABLED
Tue Nov 25 05:14:01 2014 us=466231 ciphername = 'BF-CBC'
Tue Nov 25 05:14:01 2014 us=466240 authname_defined = ENABLED
Tue Nov 25 05:14:01 2014 us=466249 authname = 'SHA1'
Tue Nov 25 05:14:01 2014 us=466258 prng_hash = 'SHA1'
Tue Nov 25 05:14:01 2014 us=466267 prng_nonce_secret_len = 16
Tue Nov 25 05:14:01 2014 us=466277 keysize = 0
Tue Nov 25 05:14:01 2014 us=466286 engine = DISABLED
Tue Nov 25 05:14:01 2014 us=466295 replay = ENABLED
Tue Nov 25 05:14:01 2014 us=466304 mute_replay_warnings = DISABLED
Tue Nov 25 05:14:01 2014 us=466313 replay_window = 64
Tue Nov 25 05:14:01 2014 us=466322 replay_time = 15
Tue Nov 25 05:14:01 2014 us=466331 packet_id_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466340 use_iv = ENABLED
Tue Nov 25 05:14:01 2014 us=466349 test_crypto = DISABLED
Tue Nov 25 05:14:01 2014 us=466358 tls_server = ENABLED
Tue Nov 25 05:14:01 2014 us=466374 tls_client = DISABLED
Tue Nov 25 05:14:01 2014 us=466384 key_method = 2
Tue Nov 25 05:14:01 2014 us=466393 ca_file = 'ca.crt'
Tue Nov 25 05:14:01 2014 us=466402 ca_path = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466412 dh_file = 'dh2048.pem'
Tue Nov 25 05:14:01 2014 us=466421 cert_file = 'interconit.crt'
Tue Nov 25 05:14:01 2014 us=466430 priv_key_file = 'interconit.key'
Tue Nov 25 05:14:01 2014 us=466440 pkcs12_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466449 cipher_list = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466458 tls_verify = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466467 tls_export_cert = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466476 verify_x509_type = 0
Tue Nov 25 05:14:01 2014 us=466485 verify_x509_name = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466495 crl_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466504 ns_cert_type = 0
Tue Nov 25 05:14:01 2014 us=466513 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466522 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466531 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466540 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466550 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466559 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466568 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466577 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466586 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466595 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466604 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466613 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466622 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466631 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466640 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466650 remote_cert_ku[i] = 0
Tue Nov 25 05:14:01 2014 us=466659 remote_cert_eku = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466668 ssl_flags = 0
Tue Nov 25 05:14:01 2014 us=466677 tls_timeout = 2
Tue Nov 25 05:14:01 2014 us=466686 renegotiate_bytes = 0
Tue Nov 25 05:14:01 2014 us=466695 renegotiate_packets = 0
Tue Nov 25 05:14:01 2014 us=466704 renegotiate_seconds = 3600
Tue Nov 25 05:14:01 2014 us=466713 handshake_window = 60
Tue Nov 25 05:14:01 2014 us=466722 transition_window = 3600
Tue Nov 25 05:14:01 2014 us=466731 single_session = DISABLED
Tue Nov 25 05:14:01 2014 us=466740 push_peer_info = DISABLED
Tue Nov 25 05:14:01 2014 us=466749 tls_exit = DISABLED
Tue Nov 25 05:14:01 2014 us=466758 tls_auth_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=466768 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466777 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466786 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466795 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466804 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466813 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466822 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466831 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466841 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466850 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466859 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466868 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466877 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466886 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466895 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466904 pkcs11_protected_authentication = DISABLED
Tue Nov 25 05:14:01 2014 us=466914 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466923 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466932 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466942 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466956 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466966 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466976 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466985 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=466994 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467003 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467012 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467021 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467031 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467040 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467049 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467058 pkcs11_private_mode = 00000000
Tue Nov 25 05:14:01 2014 us=467068 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467077 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467086 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467095 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467105 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467114 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467123 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467132 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467142 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467151 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467160 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467169 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467178 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467187 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467196 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467205 pkcs11_cert_private = DISABLED
Tue Nov 25 05:14:01 2014 us=467214 pkcs11_pin_cache_period = -1
Tue Nov 25 05:14:01 2014 us=467223 pkcs11_id = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467232 pkcs11_id_management = DISABLED
Tue Nov 25 05:14:01 2014 us=467242 server_network = 10.8.0.0
Tue Nov 25 05:14:01 2014 us=467252 server_netmask = 255.255.255.0
Tue Nov 25 05:14:01 2014 us=467264 server_network_ipv6 = ::
Tue Nov 25 05:14:01 2014 us=467274 server_netbits_ipv6 = 0
Tue Nov 25 05:14:01 2014 us=467284 server_bridge_ip = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467293 server_bridge_netmask = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467303 server_bridge_pool_start = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467313 server_bridge_pool_end = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467322 push_entry = 'redirect-gateway def1 bypass-dhcp'
Tue Nov 25 05:14:01 2014 us=467332 push_entry = 'dhcp-option DNS 10.8.0.1'
Tue Nov 25 05:14:01 2014 us=467341 push_entry = 'route 10.8.0.1'
Tue Nov 25 05:14:01 2014 us=467350 push_entry = 'topology net30'
Tue Nov 25 05:14:01 2014 us=467360 push_entry = 'ping 10'
Tue Nov 25 05:14:01 2014 us=467369 push_entry = 'ping-restart 120'
Tue Nov 25 05:14:01 2014 us=467378 ifconfig_pool_defined = ENABLED
Tue Nov 25 05:14:01 2014 us=467395 ifconfig_pool_start = 10.8.0.4
Tue Nov 25 05:14:01 2014 us=467407 ifconfig_pool_end = 10.8.0.251
Tue Nov 25 05:14:01 2014 us=467421 ifconfig_pool_netmask = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467431 ifconfig_pool_persist_filename = 'ipp.txt'
Tue Nov 25 05:14:01 2014 us=467441 ifconfig_pool_persist_refresh_freq = 600
Tue Nov 25 05:14:01 2014 us=467451 ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=467460 ifconfig_ipv6_pool_base = ::
Tue Nov 25 05:14:01 2014 us=467470 ifconfig_ipv6_pool_netbits = 0
Tue Nov 25 05:14:01 2014 us=467479 n_bcast_buf = 256
Tue Nov 25 05:14:01 2014 us=467488 tcp_queue_limit = 64
Tue Nov 25 05:14:01 2014 us=467498 real_hash_size = 256
Tue Nov 25 05:14:01 2014 us=467507 virtual_hash_size = 256
Tue Nov 25 05:14:01 2014 us=467516 client_connect_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467525 learn_address_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467540 client_disconnect_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467550 client_config_dir = 'ccd'
Tue Nov 25 05:14:01 2014 us=467559 ccd_exclusive = DISABLED
Tue Nov 25 05:14:01 2014 us=467568 tmp_dir = '/tmp'
Tue Nov 25 05:14:01 2014 us=467578 push_ifconfig_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=467588 push_ifconfig_local = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467598 push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 25 05:14:01 2014 us=467607 push_ifconfig_ipv6_defined = DISABLED
Tue Nov 25 05:14:01 2014 us=467617 push_ifconfig_ipv6_local = ::/0
Tue Nov 25 05:14:01 2014 us=467627 push_ifconfig_ipv6_remote = ::
Tue Nov 25 05:14:01 2014 us=467636 enable_c2c = DISABLED
Tue Nov 25 05:14:01 2014 us=467645 duplicate_cn = DISABLED
Tue Nov 25 05:14:01 2014 us=467655 cf_max = 0
Tue Nov 25 05:14:01 2014 us=467664 cf_per = 0
Tue Nov 25 05:14:01 2014 us=467673 max_clients = 1024
Tue Nov 25 05:14:01 2014 us=467682 max_routes_per_client = 256
Tue Nov 25 05:14:01 2014 us=467691 auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467700 auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 25 05:14:01 2014 us=467710 port_share_host = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467719 port_share_port = 0
Tue Nov 25 05:14:01 2014 us=467728 client = DISABLED
Tue Nov 25 05:14:01 2014 us=467737 pull = DISABLED
Tue Nov 25 05:14:01 2014 us=467746 auth_user_pass_file = '[UNDEF]'
Tue Nov 25 05:14:01 2014 us=467757 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Tue Nov 25 05:14:01 2014 us=473506 Diffie-Hellman initialized with 2048 bit key
Tue Nov 25 05:14:01 2014 us=473858 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 25 05:14:01 2014 us=473888 Socket Buffers: R=[212992->131072] S=[212992->131072]
Tue Nov 25 05:14:01 2014 us=474003 ROUTE_GATEWAY x.x.210.1/255.255.0.0 IFACE=eth0 HWADDR=f2:3c:91:89:ec:d9
Tue Nov 25 05:14:01 2014 us=477991 TUN/TAP device tun0 opened
Tue Nov 25 05:14:01 2014 us=478017 TUN/TAP TX queue length set to 100
Tue Nov 25 05:14:01 2014 us=478035 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov 25 05:14:01 2014 us=478057 /sbin/ip link set dev tun0 up mtu 1500
Tue Nov 25 05:14:01 2014 us=483105 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Tue Nov 25 05:14:01 2014 us=489261 /sbin/ip route add x.x.210.130/24 via 10.8.0.2
RTNETLINK answers: Invalid argument
Tue Nov 25 05:14:01 2014 us=493485 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Nov 25 05:14:01 2014 us=493537 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Tue Nov 25 05:14:01 2014 us=498067 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 25 05:14:01 2014 us=501825 UDPv4 link local (bound): [undef]
Tue Nov 25 05:14:01 2014 us=501870 UDPv4 link remote: [undef]
Tue Nov 25 05:14:01 2014 us=501887 MULTI: multi_init called, r=256 v=256
Tue Nov 25 05:14:01 2014 us=501994 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Tue Nov 25 05:14:01 2014 us=502012 ifconfig_pool_read(), in='ClientWeb,10.8.0.4', TODO: IPv6
Tue Nov 25 05:14:01 2014 us=502040 succeeded -> ifconfig_pool_set()
Tue Nov 25 05:14:01 2014 us=502052 IFCONFIG POOL LIST
Tue Nov 25 05:14:01 2014 us=502063 ClientWeb,10.8.0.4
Tue Nov 25 05:14:01 2014 us=502103 Initialization Sequence Completed
Tue Nov 25 05:14:03 2014 us=801888 MULTI: multi_create_instance called
Tue Nov 25 05:14:03 2014 us=801975 x.x.210.130:46876 Re-using SSL/TLS context
Tue Nov 25 05:14:03 2014 us=802065 x.x.210.130:46876 LZO compression initialized
Tue Nov 25 05:14:03 2014 us=802420 x.x.210.130:46876 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 25 05:14:03 2014 us=802438 x.x.210.130:46876 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 25 05:14:03 2014 us=802509 x.x.210.130:46876 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Nov 25 05:14:03 2014 us=802538 x.x.210.130:46876 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Nov 25 05:14:03 2014 us=802575 x.x.210.130:46876 Local Options hash (VER=V4): '530fdded'
Tue Nov 25 05:14:03 2014 us=802589 x.x.210.130:46876 Expected Remote Options hash (VER=V4): '41690919'
Tue Nov 25 05:14:03 2014 us=802630 x.x.210.130:46876 TLS: Initial packet from [AF_INET]x.x.210.130:46876, sid=41b1effd 748cd072
Tue Nov 25 05:14:03 2014 us=830571 x.x.210.130:46876 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Interconit, OU=LLC, CN=interconit, name=John Smith, emailAddress=john.smith@example.com
Tue Nov 25 05:14:03 2014 us=830742 x.x.210.130:46876 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=ClientWeb, OU=MyOrganizationalUnit, CN=Clientweb, name=John Smith, emailAddress=john@example.com
Tue Nov 25 05:14:03 2014 us=839138 x.x.210.130:46876 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 25 05:14:03 2014 us=839179 x.x.210.130:46876 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 25 05:14:03 2014 us=839229 x.x.210.130:46876 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 25 05:14:03 2014 us=839241 x.x.210.130:46876 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 25 05:14:03 2014 us=839929 x.x.210.130:46876 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Nov 25 05:14:03 2014 us=839960 x.x.210.130:46876 [ClientWeb] Peer Connection Initiated with [AF_INET]x.x.210.130:46876
Tue Nov 25 05:14:03 2014 us=840012 ClientWeb/x.x.210.130:46876 OPTIONS IMPORT: reading client specific options from: ccd/ClientWeb
Tue Nov 25 05:14:03 2014 us=840088 ClientWeb/x.x.210.130:46876 Options error: in --iroute x.x.210.130 255.255.255.0 : Bad network/subnet specification
Tue Nov 25 05:14:03 2014 us=840126 ClientWeb/x.x.210.130:46876 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Nov 25 05:14:03 2014 us=840163 ClientWeb/x.x.210.130:46876 MULTI: Learn: 10.8.0.6 -> ClientWeb/x.x.210.130:46876
Tue Nov 25 05:14:03 2014 us=840175 ClientWeb/x.x.210.130:46876 MULTI: primary virtual IP for ClientWeb/x.x.210.130:46876: 10.8.0.6
Tue Nov 25 05:14:06 2014 us=198712 ClientWeb/x.x.210.130:46876 PUSH: Received control message: 'PUSH_REQUEST'
Tue Nov 25 05:14:06 2014 us=198764 ClientWeb/x.x.210.130:46876 send_push_reply(): safe_cap=940
Tue Nov 25 05:14:06 2014 us=198794 ClientWeb/x.x.210.130:46876 SENT CONTROL [ClientWeb]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Please advise. Where is my problem?

Errors:
Tue Nov 25 05:14:01 2014 us=489261 /sbin/ip route add x.x.210.130/24 via 10.8.0.2
RTNETLINK answers: Invalid argument
Tue Nov 25 05:14:01 2014 us=493485 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Nov 25 05:14:03 2014 us=840088 ClientWeb/x.x.210.130:46876 Options error: in --iroute x.x.210.130 255.255.255.0 : Bad network/subnet specification

maikcat

you need to set 32 bit mask for the iroute statement if you use route-to-host.

Michael.

interconit

Thanks. My log file is error free now.

A fresh pair of eyes please.

When issue a restart service cmd for openvpn, it generates the following log. However, after about 5-10 seconds, my VPS freezes. I'm unable to ping the server ip address. SSH connection fails too.

When I comment "redirect-gateway" command, restart, everything returns OK. Ping and SSH OK too.

Please advise. What might be causing this? Every thing I do doesn't solve the root of the problem. Why is my server crashing at that configuration line?

root@root:/etc/openvpn/log# cat openvpn.log
Sun Nov 30 03:00:06 2014 us=235657 Current Parameter Settings:
Sun Nov 30 03:00:06 2014 us=235743 config = '/etc/openvpn/server.conf'
Sun Nov 30 03:00:06 2014 us=235756 mode = 1
Sun Nov 30 03:00:06 2014 us=235766 persist_config = DISABLED
Sun Nov 30 03:00:06 2014 us=235775 persist_mode = 1
Sun Nov 30 03:00:06 2014 us=235784 show_ciphers = DISABLED
Sun Nov 30 03:00:06 2014 us=235793 show_digests = DISABLED
Sun Nov 30 03:00:06 2014 us=235802 show_engines = DISABLED
Sun Nov 30 03:00:06 2014 us=235811 genkey = DISABLED
Sun Nov 30 03:00:06 2014 us=235820 key_pass_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=235830 show_tls_ciphers = DISABLED
Sun Nov 30 03:00:06 2014 us=235839 Connection profiles [default]:
Sun Nov 30 03:00:06 2014 us=235849 proto = udp
Sun Nov 30 03:00:06 2014 us=235858 local = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=235867 local_port = 49152
Sun Nov 30 03:00:06 2014 us=235876 remote = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=235885 remote_port = 49152
Sun Nov 30 03:00:06 2014 us=235894 remote_float = DISABLED
Sun Nov 30 03:00:06 2014 us=235903 bind_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=235912 bind_local = ENABLED
Sun Nov 30 03:00:06 2014 us=235921 connect_retry_seconds = 5
Sun Nov 30 03:00:06 2014 us=235931 connect_timeout = 10
Sun Nov 30 03:00:06 2014 us=235940 connect_retry_max = 0
Sun Nov 30 03:00:06 2014 us=235949 socks_proxy_server = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=235958 socks_proxy_port = 0
Sun Nov 30 03:00:06 2014 us=235968 socks_proxy_retry = DISABLED
Sun Nov 30 03:00:06 2014 us=235977 tun_mtu = 1500
Sun Nov 30 03:00:06 2014 us=235986 tun_mtu_defined = ENABLED
Sun Nov 30 03:00:06 2014 us=235995 link_mtu = 1500
Sun Nov 30 03:00:06 2014 us=236004 link_mtu_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=236013 tun_mtu_extra = 0
Sun Nov 30 03:00:06 2014 us=236022 tun_mtu_extra_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=236031 mtu_discover_type = -1
Sun Nov 30 03:00:06 2014 us=236040 fragment = 0
Sun Nov 30 03:00:06 2014 us=236049 mssfix = 1450
Sun Nov 30 03:00:06 2014 us=236058 explicit_exit_notification = 0
Sun Nov 30 03:00:06 2014 us=236067 Connection profiles END
Sun Nov 30 03:00:06 2014 us=236076 remote_random = DISABLED
Sun Nov 30 03:00:06 2014 us=236085 ipchange = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236094 dev = 'tun'
Sun Nov 30 03:00:06 2014 us=236103 dev_type = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236111 dev_node = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236120 lladdr = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236129 topology = 1
Sun Nov 30 03:00:06 2014 us=236138 tun_ipv6 = DISABLED
Sun Nov 30 03:00:06 2014 us=236147 ifconfig_local = '10.8.0.1'
Sun Nov 30 03:00:06 2014 us=236156 ifconfig_remote_netmask = '10.8.0.2'
Sun Nov 30 03:00:06 2014 us=236165 ifconfig_noexec = DISABLED
Sun Nov 30 03:00:06 2014 us=236174 ifconfig_nowarn = DISABLED
Sun Nov 30 03:00:06 2014 us=236185 ifconfig_ipv6_local = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236201 ifconfig_ipv6_netbits = 0
Sun Nov 30 03:00:06 2014 us=236215 ifconfig_ipv6_remote = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236229 shaper = 0
Sun Nov 30 03:00:06 2014 us=236242 mtu_test = 0
Sun Nov 30 03:00:06 2014 us=236257 mlock = DISABLED
Sun Nov 30 03:00:06 2014 us=236271 keepalive_ping = 10
Sun Nov 30 03:00:06 2014 us=236287 keepalive_timeout = 120
Sun Nov 30 03:00:06 2014 us=236300 inactivity_timeout = 0
Sun Nov 30 03:00:06 2014 us=236315 ping_send_timeout = 10
Sun Nov 30 03:00:06 2014 us=236325 ping_rec_timeout = 240
Sun Nov 30 03:00:06 2014 us=236334 ping_rec_timeout_action = 2
Sun Nov 30 03:00:06 2014 us=236343 ping_timer_remote = DISABLED
Sun Nov 30 03:00:06 2014 us=236352 remap_sigusr1 = 0
Sun Nov 30 03:00:06 2014 us=236361 persist_tun = ENABLED
Sun Nov 30 03:00:06 2014 us=236370 persist_local_ip = DISABLED
Sun Nov 30 03:00:06 2014 us=236379 persist_remote_ip = DISABLED
Sun Nov 30 03:00:06 2014 us=236388 persist_key = ENABLED
Sun Nov 30 03:00:06 2014 us=236397 passtos = DISABLED
Sun Nov 30 03:00:06 2014 us=236406 resolve_retry_seconds = 1000000000
Sun Nov 30 03:00:06 2014 us=236421 username = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236431 groupname = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236440 chroot_dir = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236449 cd_dir = '/etc/openvpn'
Sun Nov 30 03:00:06 2014 us=236458 writepid = '/run/openvpn/server.pid'
Sun Nov 30 03:00:06 2014 us=236467 up_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236476 down_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236485 down_pre = DISABLED
Sun Nov 30 03:00:06 2014 us=236494 up_restart = DISABLED
Sun Nov 30 03:00:06 2014 us=236503 up_delay = DISABLED
Sun Nov 30 03:00:06 2014 us=236512 daemon = ENABLED
Sun Nov 30 03:00:06 2014 us=236521 inetd = 0
Sun Nov 30 03:00:06 2014 us=236530 log = ENABLED
Sun Nov 30 03:00:06 2014 us=236539 suppress_timestamps = DISABLED
Sun Nov 30 03:00:06 2014 us=236549 nice = 0
Sun Nov 30 03:00:06 2014 us=236558 verbosity = 4
Sun Nov 30 03:00:06 2014 us=236567 mute = 0
Sun Nov 30 03:00:06 2014 us=236576 gremlin = 0
Sun Nov 30 03:00:06 2014 us=236585 status_file = 'openvpn-status.log'
Sun Nov 30 03:00:06 2014 us=236594 status_file_version = 1
Sun Nov 30 03:00:06 2014 us=236603 status_file_update_freq = 60
Sun Nov 30 03:00:06 2014 us=236612 occ = ENABLED
Sun Nov 30 03:00:06 2014 us=236621 rcvbuf = 65536
Sun Nov 30 03:00:06 2014 us=236630 sndbuf = 65536
Sun Nov 30 03:00:06 2014 us=236639 mark = 0
Sun Nov 30 03:00:06 2014 us=236647 sockflags = 0
Sun Nov 30 03:00:06 2014 us=236656 fast_io = DISABLED
Sun Nov 30 03:00:06 2014 us=236665 lzo = 7
Sun Nov 30 03:00:06 2014 us=236674 route_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236683 route_default_gateway = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236692 route_default_metric = 0
Sun Nov 30 03:00:06 2014 us=236701 route_noexec = DISABLED
Sun Nov 30 03:00:06 2014 us=236710 route_delay = 0
Sun Nov 30 03:00:06 2014 us=236719 route_delay_window = 30
Sun Nov 30 03:00:06 2014 us=236728 route_delay_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=236737 route_nopull = DISABLED
Sun Nov 30 03:00:06 2014 us=236746 route_gateway_via_dhcp = DISABLED
Sun Nov 30 03:00:06 2014 us=236755 max_routes = 100
Sun Nov 30 03:00:06 2014 us=236765 allow_pull_fqdn = DISABLED
Sun Nov 30 03:00:06 2014 us=236774 route x.y.210.130/255.255.255.255/nil/nil
Sun Nov 30 03:00:06 2014 us=236784 route 10.8.0.0/255.255.255.0/nil/nil
Sun Nov 30 03:00:06 2014 us=236793 management_addr = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236802 management_port = 0
Sun Nov 30 03:00:06 2014 us=236811 management_user_pass = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236821 management_log_history_cache = 250
Sun Nov 30 03:00:06 2014 us=236830 management_echo_buffer_size = 100
Sun Nov 30 03:00:06 2014 us=236839 management_write_peer_info_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236848 management_client_user = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236857 management_client_group = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236866 management_flags = 0
Sun Nov 30 03:00:06 2014 us=236875 shared_secret_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=236924 key_direction = 0
Sun Nov 30 03:00:06 2014 us=236937 ciphername_defined = ENABLED
Sun Nov 30 03:00:06 2014 us=236946 ciphername = 'BF-CBC'
Sun Nov 30 03:00:06 2014 us=236956 authname_defined = ENABLED
Sun Nov 30 03:00:06 2014 us=236965 authname = 'SHA1'
Sun Nov 30 03:00:06 2014 us=236973 prng_hash = 'SHA1'
Sun Nov 30 03:00:06 2014 us=236983 prng_nonce_secret_len = 16
Sun Nov 30 03:00:06 2014 us=236992 keysize = 0
Sun Nov 30 03:00:06 2014 us=237001 engine = DISABLED
Sun Nov 30 03:00:06 2014 us=237010 replay = ENABLED
Sun Nov 30 03:00:06 2014 us=237019 mute_replay_warnings = DISABLED
Sun Nov 30 03:00:06 2014 us=237028 replay_window = 64
Sun Nov 30 03:00:06 2014 us=237037 replay_time = 15
Sun Nov 30 03:00:06 2014 us=237046 packet_id_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237055 use_iv = ENABLED
Sun Nov 30 03:00:06 2014 us=237069 test_crypto = DISABLED
Sun Nov 30 03:00:06 2014 us=237084 tls_server = ENABLED
Sun Nov 30 03:00:06 2014 us=237107 tls_client = DISABLED
Sun Nov 30 03:00:06 2014 us=237119 key_method = 2
Sun Nov 30 03:00:06 2014 us=237128 ca_file = 'ca.crt'
Sun Nov 30 03:00:06 2014 us=237137 ca_path = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237146 dh_file = 'dh2048.pem'
Sun Nov 30 03:00:06 2014 us=237155 cert_file = 'server.crt'
Sun Nov 30 03:00:06 2014 us=237164 priv_key_file = 'server.key'
Sun Nov 30 03:00:06 2014 us=237174 pkcs12_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237183 cipher_list = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237192 tls_verify = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237201 tls_export_cert = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237210 verify_x509_type = 0
Sun Nov 30 03:00:06 2014 us=237219 verify_x509_name = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237228 crl_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237237 ns_cert_type = 0
Sun Nov 30 03:00:06 2014 us=237247 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237256 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237265 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237274 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237283 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237292 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237301 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237310 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237319 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237328 remote_cert_ku = 0
Sun Nov 30 03:00:06 2014 us=237342 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237357 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237372 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237382 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237391 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237400 remote_cert_ku[i] = 0
Sun Nov 30 03:00:06 2014 us=237409 remote_cert_eku = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237418 ssl_flags = 0
Sun Nov 30 03:00:06 2014 us=237427 tls_timeout = 2
Sun Nov 30 03:00:06 2014 us=237436 renegotiate_bytes = 0
Sun Nov 30 03:00:06 2014 us=237445 renegotiate_packets = 0
Sun Nov 30 03:00:06 2014 us=237455 renegotiate_seconds = 3600
Sun Nov 30 03:00:06 2014 us=237464 handshake_window = 60
Sun Nov 30 03:00:06 2014 us=237473 transition_window = 3600
Sun Nov 30 03:00:06 2014 us=237482 single_session = DISABLED
Sun Nov 30 03:00:06 2014 us=237491 push_peer_info = DISABLED
Sun Nov 30 03:00:06 2014 us=237500 tls_exit = DISABLED
Sun Nov 30 03:00:06 2014 us=237509 tls_auth_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237518 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237527 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237536 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237545 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237554 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237563 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237572 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237581 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237590 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237599 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237608 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237617 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237626 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237635 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237644 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237653 pkcs11_protected_authentication = DISABLED
Sun Nov 30 03:00:06 2014 us=237662 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237671 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237680 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237689 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237704 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237714 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237723 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237732 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237741 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237750 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237759 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237768 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237778 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237787 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237796 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237805 pkcs11_private_mode = 00000000
Sun Nov 30 03:00:06 2014 us=237814 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237823 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237831 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237840 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237849 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237858 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237867 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237876 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237885 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237893 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237902 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237911 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237920 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237929 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237938 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237947 pkcs11_cert_private = DISABLED
Sun Nov 30 03:00:06 2014 us=237956 pkcs11_pin_cache_period = -1
Sun Nov 30 03:00:06 2014 us=237965 pkcs11_id = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=237974 pkcs11_id_management = DISABLED
Sun Nov 30 03:00:06 2014 us=237984 server_network = 10.8.0.0
Sun Nov 30 03:00:06 2014 us=237994 server_netmask = 255.255.255.0
Sun Nov 30 03:00:06 2014 us=238018 server_network_ipv6 = ::
Sun Nov 30 03:00:06 2014 us=238028 server_netbits_ipv6 = 0
Sun Nov 30 03:00:06 2014 us=238037 server_bridge_ip = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238047 server_bridge_netmask = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238057 server_bridge_pool_start = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238066 server_bridge_pool_end = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238075 push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun Nov 30 03:00:06 2014 us=238084 push_entry = 'dhcp-option DNS 10.8.0.1'
Sun Nov 30 03:00:06 2014 us=238093 push_entry = 'route 10.8.0.1'
Sun Nov 30 03:00:06 2014 us=238102 push_entry = 'topology net30'
Sun Nov 30 03:00:06 2014 us=238111 push_entry = 'ping 10'
Sun Nov 30 03:00:06 2014 us=238121 push_entry = 'ping-restart 120'
Sun Nov 30 03:00:06 2014 us=238130 ifconfig_pool_defined = ENABLED
Sun Nov 30 03:00:06 2014 us=238147 ifconfig_pool_start = 10.8.0.4
Sun Nov 30 03:00:06 2014 us=238165 ifconfig_pool_end = 10.8.0.251
Sun Nov 30 03:00:06 2014 us=238188 ifconfig_pool_netmask = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238200 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Nov 30 03:00:06 2014 us=238210 ifconfig_pool_persist_refresh_freq = 600
Sun Nov 30 03:00:06 2014 us=238219 ifconfig_ipv6_pool_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=238229 ifconfig_ipv6_pool_base = ::
Sun Nov 30 03:00:06 2014 us=238238 ifconfig_ipv6_pool_netbits = 0
Sun Nov 30 03:00:06 2014 us=238247 n_bcast_buf = 256
Sun Nov 30 03:00:06 2014 us=238256 tcp_queue_limit = 64
Sun Nov 30 03:00:06 2014 us=238265 real_hash_size = 256
Sun Nov 30 03:00:06 2014 us=238275 virtual_hash_size = 256
Sun Nov 30 03:00:06 2014 us=238284 client_connect_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238293 learn_address_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238307 client_disconnect_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238317 client_config_dir = 'ccd'
Sun Nov 30 03:00:06 2014 us=238326 ccd_exclusive = DISABLED
Sun Nov 30 03:00:06 2014 us=238335 tmp_dir = '/tmp'
Sun Nov 30 03:00:06 2014 us=238344 push_ifconfig_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=238354 push_ifconfig_local = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238364 push_ifconfig_remote_netmask = 0.0.0.0
Sun Nov 30 03:00:06 2014 us=238373 push_ifconfig_ipv6_defined = DISABLED
Sun Nov 30 03:00:06 2014 us=238383 push_ifconfig_ipv6_local = ::/0
Sun Nov 30 03:00:06 2014 us=238392 push_ifconfig_ipv6_remote = ::
Sun Nov 30 03:00:06 2014 us=238401 enable_c2c = DISABLED
Sun Nov 30 03:00:06 2014 us=238412 duplicate_cn = DISABLED
Sun Nov 30 03:00:06 2014 us=238427 cf_max = 0
Sun Nov 30 03:00:06 2014 us=238442 cf_per = 0
Sun Nov 30 03:00:06 2014 us=238457 max_clients = 1024
Sun Nov 30 03:00:06 2014 us=238466 max_routes_per_client = 256
Sun Nov 30 03:00:06 2014 us=238475 auth_user_pass_verify_script = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238484 auth_user_pass_verify_script_via_file = DISABLED
Sun Nov 30 03:00:06 2014 us=238493 port_share_host = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238503 port_share_port = 0
Sun Nov 30 03:00:06 2014 us=238512 client = DISABLED
Sun Nov 30 03:00:06 2014 us=238521 pull = DISABLED
Sun Nov 30 03:00:06 2014 us=238530 auth_user_pass_file = '[UNDEF]'
Sun Nov 30 03:00:06 2014 us=238540 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Sun Nov 30 03:00:06 2014 us=244516 Diffie-Hellman initialized with 2048 bit key
Sun Nov 30 03:00:06 2014 us=244930 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 30 03:00:06 2014 us=244961 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Nov 30 03:00:06 2014 us=245075 ROUTE_GATEWAY 173.255.210.1/255.255.0.0 IFACE=eth0 HWADDR=f2:3c:91:89:ec:d9
Sun Nov 30 03:00:06 2014 us=248605 TUN/TAP device tun0 opened
Sun Nov 30 03:00:06 2014 us=248632 TUN/TAP TX queue length set to 100
Sun Nov 30 03:00:06 2014 us=248650 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Nov 30 03:00:06 2014 us=248670 /sbin/ip link set dev tun0 up mtu 1500
Sun Nov 30 03:00:06 2014 us=253831 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Nov 30 03:00:06 2014 us=263013 /sbin/ip route add x.y.210.130/32 via 10.8.0.2
Sun Nov 30 03:00:06 2014 us=268448 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Nov 30 03:00:06 2014 us=277852 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 30 03:00:06 2014 us=282202 UDPv4 link local (bound): [undef]
Sun Nov 30 03:00:06 2014 us=282256 UDPv4 link remote: [undef]
Sun Nov 30 03:00:06 2014 us=282272 MULTI: multi_init called, r=256 v=256
Sun Nov 30 03:00:06 2014 us=282366 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Nov 30 03:00:06 2014 us=282387 ifconfig_pool_read(), in='client,10.8.0.4', TODO: IPv6
Sun Nov 30 03:00:06 2014 us=282417 succeeded -> ifconfig_pool_set()
Sun Nov 30 03:00:06 2014 us=282429 IFCONFIG POOL LIST
Sun Nov 30 03:00:06 2014 us=282441 client,10.8.0.4
Sun Nov 30 03:00:06 2014 us=282476 Initialization Sequence Completed
Sun Nov 30 03:00:08 2014 us=570476 MULTI: multi_create_instance called
Sun Nov 30 03:00:08 2014 us=570558 x.y.210.130:46126 Re-using SSL/TLS context
Sun Nov 30 03:00:08 2014 us=570606 x.y.210.130:46126 LZO compression initialized
Sun Nov 30 03:00:08 2014 us=570934 x.y.210.130:46126 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Nov 30 03:00:08 2014 us=570952 x.y.210.130:46126 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Nov 30 03:00:08 2014 us=571009 x.y.210.130:46126 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Nov 30 03:00:08 2014 us=571029 x.y.210.130:46126 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Nov 30 03:00:08 2014 us=571077 x.y.210.130:46126 Local Options hash (VER=V4): '530fdded'
Sun Nov 30 03:00:08 2014 us=571093 x.y.210.130:46126 Expected Remote Options hash (VER=V4): '41690919'
Sun Nov 30 03:00:08 2014 us=571126 x.y.210.130:46126 TLS: Initial packet from [AF_INET]x.y.210.130:46126, sid=2773b372 cef8b8ec
Sun Nov 30 03:00:08 2014 us=599700 x.y.210.130:46126 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Interconit, OU=LLC, CN=interconit, name=John Smith, emailAddress=john.smith@example.com
Sun Nov 30 03:00:08 2014 us=599882 x.y.210.130:46126 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=ClientWeb, OU=MyOrganizationalUnit, CN=client, name=John Smith, emailAddress=john@example.com
Sun Nov 30 03:00:08 2014 us=607639 x.y.210.130:46126 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 30 03:00:08 2014 us=607669 x.y.210.130:46126 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 30 03:00:08 2014 us=607718 x.y.210.130:46126 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Nov 30 03:00:08 2014 us=607730 x.y.210.130:46126 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Nov 30 03:00:08 2014 us=608350 x.y.210.130:46126 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Nov 30 03:00:08 2014 us=608375 x.y.210.130:46126 [client] Peer Connection Initiated with [AF_INET]x.y.210.130:46126
Sun Nov 30 03:00:08 2014 us=608842 haleyweb/x.y.210.130:46126 OPTIONS IMPORT: reading client specific options from: ccd/client
Sun Nov 30 03:00:08 2014 us=609125 haleyweb/x.y.210.130:46126 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Nov 30 03:00:08 2014 us=609163 haleyweb/x.y.210.130:46126 MULTI: Learn: 10.8.0.6 -> client/x.y.210.130:46126
Sun Nov 30 03:00:08 2014 us=609175 haleyweb/x.y.210.130:46126 MULTI: primary virtual IP for client/x.y.210.130:46126: 10.8.0.6
Sun Nov 30 03:00:08 2014 us=609186 haleyweb/x.y.210.130:46126 MULTI: internal route x.y.210.130 -> client/x.y.210.130:46126
Sun Nov 30 03:00:08 2014 us=609198 haleyweb/x.y.210.130:46126 MULTI: Learn: x.y.210.130 -> client/x.y.210.130:46126
Sun Nov 30 03:00:10 2014 us=972975 haleyweb/x.y.210.130:46126 PUSH: Received control message: 'PUSH_REQUEST'
Sun Nov 30 03:00:10 2014 us=973013 haleyweb/x.y.210.130:46126 send_push_reply(): safe_cap=940
Sun Nov 30 03:00:10 2014 us=973038 haleyweb/x.y.210.130:46126 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

maikcat

Please advise. What might be causing this? Every thing I do doesn't solve the root of the problem. Why is my server crashing at that configuration line?

its NOT server side problem,f.e start openvpn server WITH redirect-gateway enabled
but DO NOT start your client,does this affects your ssh session?

also try adding to your server a static route regarding your clients real ip BEFORE starting openvpn.

if the above works,policy based routing is the key...

Michael.

interconit

Thank you very much. You are correct. This has been the problem the entire time. Disable client.conf and this fixes the problem.

I'm unclear on the second part. Where should I add the client information (i.e. static route) before starting OpenVPN?

Finally, 99% towards the solution. Just one last step...

maikcat

I'm unclear on the second part. Where should I add the client information (i.e. static route) before starting OpenVPN?

do 2 things

on your client:

add a static route for your server before you start openvpn,
f.e lets say that your clients router is 192.168.1.1 and your openvpn's server ip is 1.1.1.1 then add to your client

route add 1.1.1.1 mask 255.255.255.255 gw 192.168.1.1

on your server lets say that your CLIENTS real ip is 2.2.2.2 and openvpn's server gateway is 192.168.2.1 then add to your server

route add 2.2.2.2 mask 255.255.255.255 gw 192.168.2.1

Michael.

interconit

Thanks again for all your help. I really appreciate it.

I've tried this a few times. Various others fixes. Still crashing. It want to be clear that I'm using the correct IP addresses that you've suggested.

root@interconit:/etc/openvpn# cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address x.y.z.130
gateway x.y.z.1
# DNS
dns-search members.linode.com
dns-nameservers 74.207.241.5 74.207.242.5

# static route (i.e. OpenVPN)
up route add -net 192.168.1.100 gw x.y.z.1 dev eth0

c:\Users\Default> ipconfig

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::c497:40bc:4bb0:8ae0%3
IPv4 Address. . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

root@root:cat /etc/openvpn/log/openvpn.log
Tue Dec 2 05:52:26 2014 us=317824 ROUTE_GATEWAY x.y.z.1/255.255.0.0 IFACE=eth0 HWADDR=f2:3c:91:89:ec:d9
Tue Dec 2 05:52:26 2014 us=324908 TUN/TAP device tun0 opened
Tue Dec 2 05:52:26 2014 us=324934 TUN/TAP TX queue length set to 100
Tue Dec 2 05:52:26 2014 us=324958 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Dec 2 05:52:26 2014 us=324979 /sbin/ip link set dev tun0 up mtu 1500
Tue Dec 2 05:52:26 2014 us=329588 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Tue Dec 2 05:52:26 2014 us=334233 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Tue Dec 2 05:52:26 2014 us=345167 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 2 05:52:26 2014 us=352279 UDPv4 link local (bound): [undef]
Tue Dec 2 05:52:26 2014 us=352326 UDPv4 link remote: [undef]
Tue Dec 2 05:52:26 2014 us=352342 MULTI: multi_init called, r=256 v=256
Tue Dec 2 05:52:26 2014 us=352431 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Tue Dec 2 05:52:26 2014 us=352760 ifconfig_pool_read(), in='haleyweb,10.8.0.4', TODO: IPv6
Tue Dec 2 05:52:26 2014 us=352795 succeeded -> ifconfig_pool_set()
Tue Dec 2 05:52:26 2014 us=352809 IFCONFIG POOL LIST
Tue Dec 2 05:52:26 2014 us=352820 haleyweb,10.8.0.4
Tue Dec 2 05:52:26 2014 us=352855 Initialization Sequence Completed

This line in my network/interfaces file:
up route add -net 192.168.1.100 gw x.y.z.1 dev eth0

AND when I re-insert the client.conf file into my /etc/openvpn folder are still causing issues (i.e. crashes VPS, must perform rescue)

What is my client's REAL IP address?

A> The one listed in the ccd/client file which is currently set the same as my server IP address (x.y.z.130)?

root@root: cat /etc/openvpn/ccd/haleyweb
iroute x.y.z.130 255.255.255.255

B> The one returned using ipconfig in Windows 8 cmd.

IPv4 Address. . . . . . . . . . . : 192.168.1.100

C> Or the one listed in the OpenVPN log:

Tue Dec 2 05:52:26 2014 us=352809 IFCONFIG POOL LIST
Tue Dec 2 05:52:26 2014 us=352820 haleyweb,10.8.0.4

And the OpenVPN server's gateway? Is this the same listed in my server's network configuration?

# The primary network interface
auto eth0
iface eth0 inet static
address x.y.z.130
gateway x.y.z.1

Last, when I add to my server, can I put this in /etc/network/interfaces AS (Ubuntu 14 LTS)??

up route add -net [CLIENT_IP] gw [SERVER_GATEWAY] dev eth0

I've been at this for the past few hours trying various configurations. My head is getting lost a bit. I apologize for any silly questions.

There seems to be something wrong mostly when adding the client.conf file and restarting OpenVPN service.

When client.conf is removed from the configuration, my OpenVPN log file appears normal, error free. Network interface doesn't crash either.

Going through many forums, tech support with my VPS, IRC, etc., you are the only one who has pinpointed what seems to be the actual reason why my network interface continues to crash then painstakingly must rescue the server again and again.

interconit

This is my current route table:

root@roott: cat /etc/openvpn/route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default gw-li220.linode 0.0.0.0 UG 0 0 0 eth0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 * 255.255.255.255 UH 0 0 0 tun0
x.y.0.0 * 255.255.0.0 U 0 0 0 eth0
li220-130.membe 10.8.0.2 255.255.255.255 UGH 0 0 0 tun0

maikcat

What is my client's REAL IP address?

open in a web browser www.whatismyip.com and see the ip reported back.

Michael.

interconit

Almost there! (I think)

Seems the only issue now is once OpenVPN client connects to server, I'm unable to send or receive IP traffic to the Internet.

OpenVPN error log returns:
Tue Dec 2 20:59:15 2014 us=643287 haleyweb/183.93.198.7:52808 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped

root@interconit:~# cat /etc/openvpn/ccd/haleyweb
iroute 173.255.210.130 255.255.255.255
iroute 183.93.198.7 255.255.255.255

173.255.210.130 is my server IP.
183.93.198.7 is my client IP returned by whatismyip.com

interconit

Server route:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.8.0.5 128.0.0.0 UG 0 0 0 tun1
default gw-li220.linode 0.0.0.0 UG 0 0 0 eth0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun1
10.8.0.2 * 255.255.255.255 UH 0 0 0 tun0
10.8.0.5 * 255.255.255.255 UH 0 0 0 tun1
128.0.0.0 10.8.0.5 128.0.0.0 UG 0 0 0 tun1
173.255.0.0 * 255.255.0.0 U 0 0 0 eth0
li220-130.membe 10.8.0.2 255.255.255.255 UGH 0 0 0 tun0
183.93.198.7 gw-li220.linode 255.255.255.255 UGH 0 0 0 eth0

Client route:

===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 172.16.248.1 172.16.250.147 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
172.16.248.0 255.255.248.0 On-link 172.16.250.147 286
172.16.250.147 255.255.255.255 On-link 172.16.250.147 286
172.16.250.147 255.255.255.255 173.255.210.130 172.16.250.147 31
172.16.255.255 255.255.255.255 On-link 172.16.250.147 286
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 172.16.250.147 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 172.16.250.147 286
===========================================================================

Traffic

interconit wroteroot@interconit:~# cat /etc/openvpn/ccd/haleyweb
iroute 173.255.210.130 255.255.255.255
iroute 183.93.198.7 255.255.255.255

173.255.210.130 is my server IP.
183.93.198.7 is my client IP returned by whatismyip.com

This is wrong ...

The --iroute statement requires only the private IP of the client machine or subnet. Not the client public IP or any server IP.
The default mask for --iroute is /32 but you can specify another as required.

See --iroute in The Manual v23x

interconit

192.168.1.100 <-- My private client IP
117.150.12.203 <-- My public client IP

Using your suggestions, I'm still getting a packet drop error. (i.e. MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped)

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::c497:40bc:4bb0:8ae0%3
IPv4 Address. . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

root@root:~# cat /etc/openvpn/server.conf
client-config-dir ccd
route 192.168.1.100 255.255.255.255

root@root:~# cat /etc/openvpn/ccd/haleyweb
iroute 192.168.1.100 255.255.255.255

Sat Dec 6 00:03:35 2014 us=697174 OPTIONS IMPORT: reading client specific options from: ccd/haleyweb
Sat Dec 6 00:03:35 2014 us=697322 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sat Dec 6 00:03:35 2014 us=697437 MULTI: Learn: 10.8.0.6 -> haleyweb/117.150.12.203:26261
Sat Dec 6 00:03:35 2014 us=697517 MULTI: primary virtual IP for haleyweb/117.150.12.203:26261: 10.8.0.6
Sat Dec 6 00:03:35 2014 us=697591 MULTI: internal route 192.168.1.100 -> haleyweb/117.150.12.203:26261
Sat Dec 6 00:03:35 2014 us=697658 MULTI: Learn: 192.168.1.100 -> haleyweb/117.150.12.203:26261
Sat Dec 6 00:03:37 2014 us=713921 haleyweb/117.150.12.203:26261 PUSH: Received control message: 'PUSH_REQUEST'
Sat Dec 6 00:03:37 2014 us=714375 haleyweb/117.150.12.203:26261 send_push_reply(): safe_cap=940
Sat Dec 6 00:03:37 2014 us=714622 haleyweb/117.150.12.203:26261 SENT CONTROL [haleyweb]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sat Dec 6 00:03:38 2014 us=240402 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=263999 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=312287 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=366335 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=449230 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=451444 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=551290 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [::], packet dropped
Sat Dec 6 00:03:38 2014 us=551576 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=551710 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=677851 haleyweb/117.150.12.203:26261 MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped
Sat Dec 6 00:03:38 2014 us=678165 haleyweb/117.150.12.203:26261 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_000000000] 0:11 0:10 t=1417853018[0] r=[0,64,15,1,1] sl=[53,11,64,528]

Traffic

interconit wroteUsing your suggestions, I'm still getting a packet drop error. (i.e. MULTI: bad source address from client [fe80::b800:9b82:47f1:5dd4], packet dropped)

This is IPv6 and can be ignored as you are not using it. Or you can disable IPv6 on your client.

interconit

Thanks again for all your help. Actually, when I go further up the log file, the problem is occuring before I login with my client.

After OpenVPN restarts on the server, the last entry in my server log are:

Sat Dec 6 04:46:23 2014 us=775231 haleyweb/173.255.210.130:53793 MULTI: bad source address from client [173.255.210.130], packet dropped
Sat Dec 6 04:46:23 2014 us=775399 haleyweb/173.255.210.130:53793 MULTI: bad source address from client [173.255.210.130], packet dropped

My client connects to OpenVPN on my server, but all internet traffic stops / cannot connect from my client to anything...

192.168.1.100 <-- My private client IP
117.150.12.203 <-- My public client IP

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::c497:40bc:4bb0:8ae0%3
IPv4 Address. . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

root@root:~# cat /etc/openvpn/server.conf
client-config-dir ccd
route 192.168.1.100 255.255.255.255

root@root:~# cat /etc/openvpn/ccd/haleyweb
iroute 192.168.1.100 255.255.255.255

Traffic

interconit wroteSat Dec 6 04:46:23 2014 us=775399 haleyweb/173.255.210.130:53793 MULTI: bad source address from client [173.255.210.130], packet dropped

I presume this is your client internet address ?

interconit

173.255.210.130 is my OpenVPN server address...

Traffic

Traffic wrotebad source address from client [173.255.210.130], packet dropped

interconit wrote173.255.210.130 is my OpenVPN server address...

Some sort of routing loop ? If your VPN works then I would just ignore it ...

interconit

My OpenVPN server and client seem to connect to each other OK now.

The problem is when I try to connect to IP traffic from my client (i.e. web browser, ping, ssh) through my OpenVPN connection, I'm unable to make any connection.

Once I disconnect from my OpenVPN session, IP traffic works as before through my ISP settings.

I've spent all day looking at this. Just need a fresh pair of eyes. Where do I need to check?