I cannot reach the internet if I connect to my samba share

hjoska21

Hi,

I am a newbie, and currently I am testing openvpn on my LAN before using it in production.
The server is on opensuse 13.1, firewall currently is disabled. The client is on windows7, its version is 2.3.5.0.
dev tun is used. The goal: reach the samba shares with the remote windows clients through VPN tunel.

I am always able to connect to the server, and ping the server (10.8.0.1). I can make this connection to the
server's local address, and using its wan address too. I think that means the port forwarding on the router
is OK, and there is no problem with the clients firewall either.

If I run the client as a user who is a member of administrator, I can make a connection, and I am unable to connect
to the samba shares (\\10.8.0.1\Fserver), but everything works well.

If I run the client as administrator, I can connect to the samba shares, the LAN connections are OK,
but I am unable to reach the internet. I suppose I should reach it through the LAN gateway, as it normal without VPN connection.

The server config:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

The server log:

2014-12-03T11:33:35.866503+01:00 lineva openvpn[1318]: 192.168.0.20:54720 TLS: Initial packet from [AF_INET]192.168.0.20:54720, sid=39780356 651a3f92
2014-12-03T11:33:35.906060+01:00 lineva openvpn[1318]: 192.168.0.20:54720 VERIFY OK: depth=1, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=Victum HU, name=EasyRSA, emailAddress=hjoska21@gmail.com
2014-12-03T11:33:35.906454+01:00 lineva openvpn[1318]: 192.168.0.20:54720 VERIFY OK: depth=0, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=client1, name=EasyRSA, emailAddress=hjoska21@gmail.com
2014-12-03T11:33:35.921496+01:00 lineva openvpn[1318]: 192.168.0.20:54720 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-12-03T11:33:35.921893+01:00 lineva openvpn[1318]: 192.168.0.20:54720 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-12-03T11:33:35.922212+01:00 lineva openvpn[1318]: 192.168.0.20:54720 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-12-03T11:33:35.922522+01:00 lineva openvpn[1318]: 192.168.0.20:54720 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-12-03T11:33:35.922855+01:00 lineva openvpn[1318]: 192.168.0.20:54720 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2014-12-03T11:33:35.923172+01:00 lineva openvpn[1318]: 192.168.0.20:54720 [client1] Peer Connection Initiated with [AF_INET]192.168.0.20:54720
2014-12-03T11:33:35.923452+01:00 lineva openvpn[1318]: MULTI: new connection by client 'client1' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
2014-12-03T11:33:35.923728+01:00 lineva openvpn[1318]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
2014-12-03T11:33:35.924062+01:00 lineva openvpn[1318]: MULTI: Learn: 10.8.0.6 -> client1/192.168.0.20:54720
2014-12-03T11:33:35.924339+01:00 lineva openvpn[1318]: MULTI: primary virtual IP for client1/192.168.0.20:54720: 10.8.0.6
2014-12-03T11:33:38.158375+01:00 lineva openvpn[1318]: client1/192.168.0.20:54720 PUSH: Received control message: 'PUSH_REQUEST'
2014-12-03T11:33:38.159168+01:00 lineva openvpn[1318]: client1/192.168.0.20:54720 send_push_reply(): safe_cap=940
2014-12-03T11:33:38.159740+01:00 lineva openvpn[1318]: client1/192.168.0.20:54720 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
2014-12-03T11:33:38.701607+01:00 lineva dbus[561]: [system] Activating service name='org.freedesktop.PackageKit' (using servicehelper)
2014-12-03T11:33:38.738247+01:00 lineva dbus[561]: [system] Successfully activated service 'org.freedesktop.PackageKit'
2014-12-03T11:33:48.267967+01:00 lineva kernel: [ 8685.684024] perf samples too long (2507 > 2500), lowering kernel.perf_event_max_sample_rate to 50000
2014-12-03T11:35:15.394850+01:00 lineva nmbd[1182]: [2014/12/03 11:35:15.394722,  0] ../source3/nmbd/nmbd_browsesync.c:354(find_domain_master_name_query_fail)
2014-12-03T11:35:15.395621+01:00 lineva nmbd[1182]:   find_domain_master_name_query_fail:
2014-12-03T11:35:15.396178+01:00 lineva nmbd[1182]:   Unable to find the Domain Master Browser name DIGIT<1b> for the workgroup DIGIT.
2014-12-03T11:35:15.396707+01:00 lineva nmbd[1182]:   Unable to sync browse lists in this workgroup.

The client config:

client
remote 192.168.0.4 1194
ca ca.crt
cert client1.crt
key client1.key
comp-lzo yes
dev tun
proto udp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nobody
remote-cert-tls server

and the most important, the client log:

Wed Dec 03 11:33:32 2014 us=331866 Current Parameter Settings:
Wed Dec 03 11:33:32 2014 us=331866   config = 'config1.ovpn'
Wed Dec 03 11:33:32 2014 us=331866   mode = 0
Wed Dec 03 11:33:32 2014 us=331866   show_ciphers = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   show_digests = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   show_engines = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   genkey = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   key_pass_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=331866   show_tls_ciphers = DISABLED
Wed Dec 03 11:33:32 2014 us=331866 Connection profiles [default]:
Wed Dec 03 11:33:32 2014 us=331866   proto = udp
Wed Dec 03 11:33:32 2014 us=331866   local = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=331866   local_port = 1194
Wed Dec 03 11:33:32 2014 us=331866   remote = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=331866   remote_port = 1194
Wed Dec 03 11:33:32 2014 us=331866   remote_float = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   bind_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   bind_local = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   connect_retry_seconds = 5
Wed Dec 03 11:33:32 2014 us=331866   connect_timeout = 10
Wed Dec 03 11:33:32 2014 us=331866   connect_retry_max = 0
Wed Dec 03 11:33:32 2014 us=331866   socks_proxy_server = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=331866   socks_proxy_port = 0
Wed Dec 03 11:33:32 2014 us=331866   socks_proxy_retry = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   tun_mtu = 1500
Wed Dec 03 11:33:32 2014 us=331866   tun_mtu_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   link_mtu = 1500
Wed Dec 03 11:33:32 2014 us=331866   link_mtu_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   tun_mtu_extra = 0
Wed Dec 03 11:33:32 2014 us=331866   tun_mtu_extra_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=331866   mtu_discover_type = -1
Wed Dec 03 11:33:32 2014 us=331866   fragment = 0
Wed Dec 03 11:33:32 2014 us=331866   mssfix = 1450
Wed Dec 03 11:33:32 2014 us=331866   explicit_exit_notification = 0
Wed Dec 03 11:33:32 2014 us=331866 Connection profiles [0]:
Wed Dec 03 11:33:32 2014 us=331866   proto = udp
Wed Dec 03 11:33:32 2014 us=331866   local = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=331866   local_port = 0
Wed Dec 03 11:33:32 2014 us=332866   remote = '192.168.0.4'
Wed Dec 03 11:33:32 2014 us=332866   remote_port = 1194
Wed Dec 03 11:33:32 2014 us=332866   remote_float = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   bind_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   bind_local = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   connect_retry_seconds = 5
Wed Dec 03 11:33:32 2014 us=332866   connect_timeout = 10
Wed Dec 03 11:33:32 2014 us=332866   connect_retry_max = 0
Wed Dec 03 11:33:32 2014 us=332866   socks_proxy_server = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   socks_proxy_port = 0
Wed Dec 03 11:33:32 2014 us=332866   socks_proxy_retry = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   tun_mtu = 1500
Wed Dec 03 11:33:32 2014 us=332866   tun_mtu_defined = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   link_mtu = 1500
Wed Dec 03 11:33:32 2014 us=332866   link_mtu_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   tun_mtu_extra = 0
Wed Dec 03 11:33:32 2014 us=332866   tun_mtu_extra_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   mtu_discover_type = -1
Wed Dec 03 11:33:32 2014 us=332866   fragment = 0
Wed Dec 03 11:33:32 2014 us=332866   mssfix = 1450
Wed Dec 03 11:33:32 2014 us=332866   explicit_exit_notification = 0
Wed Dec 03 11:33:32 2014 us=332866 Connection profiles END
Wed Dec 03 11:33:32 2014 us=332866   remote_random = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   ipchange = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   dev = 'tun'
Wed Dec 03 11:33:32 2014 us=332866   dev_type = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   dev_node = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   lladdr = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   topology = 1
Wed Dec 03 11:33:32 2014 us=332866   tun_ipv6 = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_local = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_remote_netmask = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_noexec = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_nowarn = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_ipv6_local = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_ipv6_netbits = 0
Wed Dec 03 11:33:32 2014 us=332866   ifconfig_ipv6_remote = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   shaper = 0
Wed Dec 03 11:33:32 2014 us=332866   mtu_test = 0
Wed Dec 03 11:33:32 2014 us=332866   mlock = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   keepalive_ping = 0
Wed Dec 03 11:33:32 2014 us=332866   keepalive_timeout = 0
Wed Dec 03 11:33:32 2014 us=332866   inactivity_timeout = 0
Wed Dec 03 11:33:32 2014 us=332866   ping_send_timeout = 0
Wed Dec 03 11:33:32 2014 us=332866   ping_rec_timeout = 0
Wed Dec 03 11:33:32 2014 us=332866   ping_rec_timeout_action = 0
Wed Dec 03 11:33:32 2014 us=332866   ping_timer_remote = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   remap_sigusr1 = 0
Wed Dec 03 11:33:32 2014 us=332866   persist_tun = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   persist_local_ip = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   persist_remote_ip = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   persist_key = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   passtos = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   resolve_retry_seconds = 1000000000
Wed Dec 03 11:33:32 2014 us=332866   username = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   groupname = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   chroot_dir = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   cd_dir = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   writepid = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   up_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   down_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   down_pre = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   up_restart = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   up_delay = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   daemon = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   inetd = 0
Wed Dec 03 11:33:32 2014 us=332866   log = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   suppress_timestamps = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   nice = 0
Wed Dec 03 11:33:32 2014 us=332866   verbosity = 4
Wed Dec 03 11:33:32 2014 us=332866   mute = 0
Wed Dec 03 11:33:32 2014 us=332866   status_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   status_file_version = 1
Wed Dec 03 11:33:32 2014 us=332866   status_file_update_freq = 60
Wed Dec 03 11:33:32 2014 us=332866   occ = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   rcvbuf = 0
Wed Dec 03 11:33:32 2014 us=332866   sndbuf = 0
Wed Dec 03 11:33:32 2014 us=332866   sockflags = 0
Wed Dec 03 11:33:32 2014 us=332866   fast_io = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   lzo = 3
Wed Dec 03 11:33:32 2014 us=332866   route_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   route_default_gateway = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   route_default_metric = 0
Wed Dec 03 11:33:32 2014 us=332866   route_noexec = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   route_delay = 5
Wed Dec 03 11:33:32 2014 us=332866   route_delay_window = 30
Wed Dec 03 11:33:32 2014 us=332866   route_delay_defined = ENABLED
Wed Dec 03 11:33:32 2014 us=332866   route_nopull = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   route_gateway_via_dhcp = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   max_routes = 100
Wed Dec 03 11:33:32 2014 us=332866   allow_pull_fqdn = DISABLED
Wed Dec 03 11:33:32 2014 us=332866   management_addr = '127.0.0.1'
Wed Dec 03 11:33:32 2014 us=332866   management_port = 25341
Wed Dec 03 11:33:32 2014 us=332866   management_user_pass = 'stdin'
Wed Dec 03 11:33:32 2014 us=332866   management_log_history_cache = 250
Wed Dec 03 11:33:32 2014 us=332866   management_echo_buffer_size = 100
Wed Dec 03 11:33:32 2014 us=332866   management_write_peer_info_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=332866   management_client_user = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   management_client_group = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   management_flags = 4102
Wed Dec 03 11:33:32 2014 us=333866   shared_secret_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   key_direction = 0
Wed Dec 03 11:33:32 2014 us=333866   ciphername_defined = ENABLED
Wed Dec 03 11:33:32 2014 us=333866   ciphername = 'BF-CBC'
Wed Dec 03 11:33:32 2014 us=333866   authname_defined = ENABLED
Wed Dec 03 11:33:32 2014 us=333866   authname = 'SHA1'
Wed Dec 03 11:33:32 2014 us=333866   prng_hash = 'SHA1'
Wed Dec 03 11:33:32 2014 us=333866   prng_nonce_secret_len = 16
Wed Dec 03 11:33:32 2014 us=333866   keysize = 0
Wed Dec 03 11:33:32 2014 us=333866   engine = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   replay = ENABLED
Wed Dec 03 11:33:32 2014 us=333866   mute_replay_warnings = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   replay_window = 64
Wed Dec 03 11:33:32 2014 us=333866   replay_time = 15
Wed Dec 03 11:33:32 2014 us=333866   packet_id_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   use_iv = ENABLED
Wed Dec 03 11:33:32 2014 us=333866   test_crypto = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   tls_server = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   tls_client = ENABLED
Wed Dec 03 11:33:32 2014 us=333866   key_method = 2
Wed Dec 03 11:33:32 2014 us=333866   ca_file = 'ca.crt'
Wed Dec 03 11:33:32 2014 us=333866   ca_path = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   dh_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   cert_file = 'client1.crt'
Wed Dec 03 11:33:32 2014 us=333866   priv_key_file = 'client1.key'
Wed Dec 03 11:33:32 2014 us=333866   pkcs12_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   cryptoapi_cert = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   cipher_list = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   tls_verify = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   tls_export_cert = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   verify_x509_type = 0
Wed Dec 03 11:33:32 2014 us=333866   verify_x509_name = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   crl_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   ns_cert_type = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 160
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 136
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_ku[i] = 0
Wed Dec 03 11:33:32 2014 us=333866   remote_cert_eku = 'TLS Web Server Authentication'
Wed Dec 03 11:33:32 2014 us=333866   ssl_flags = 0
Wed Dec 03 11:33:32 2014 us=333866   tls_timeout = 2
Wed Dec 03 11:33:32 2014 us=333866   renegotiate_bytes = 0
Wed Dec 03 11:33:32 2014 us=333866   renegotiate_packets = 0
Wed Dec 03 11:33:32 2014 us=333866   renegotiate_seconds = 3600
Wed Dec 03 11:33:32 2014 us=333866   handshake_window = 60
Wed Dec 03 11:33:32 2014 us=333866   transition_window = 3600
Wed Dec 03 11:33:32 2014 us=333866   single_session = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   push_peer_info = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   tls_exit = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   tls_auth_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_protected_authentication = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_private_mode = 00000000
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=333866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_cert_private = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_pin_cache_period = -1
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_id = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=334866   pkcs11_id_management = DISABLED
Wed Dec 03 11:33:32 2014 us=334866   server_network = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=334866   server_netmask = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   server_network_ipv6 = ::
Wed Dec 03 11:33:32 2014 us=335866   server_netbits_ipv6 = 0
Wed Dec 03 11:33:32 2014 us=335866   server_bridge_ip = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   server_bridge_netmask = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   server_bridge_pool_start = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   server_bridge_pool_end = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_start = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_end = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_netmask = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_pool_persist_refresh_freq = 600
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_ipv6_pool_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_ipv6_pool_base = ::
Wed Dec 03 11:33:32 2014 us=335866   ifconfig_ipv6_pool_netbits = 0
Wed Dec 03 11:33:32 2014 us=335866   n_bcast_buf = 256
Wed Dec 03 11:33:32 2014 us=335866   tcp_queue_limit = 64
Wed Dec 03 11:33:32 2014 us=335866   real_hash_size = 256
Wed Dec 03 11:33:32 2014 us=335866   virtual_hash_size = 256
Wed Dec 03 11:33:32 2014 us=335866   client_connect_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   learn_address_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   client_disconnect_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   client_config_dir = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   ccd_exclusive = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   tmp_dir = 'C:\Users\joska\AppData\Local\Temp\'
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_local = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_remote_netmask = 0.0.0.0
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_ipv6_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_ipv6_local = ::/0
Wed Dec 03 11:33:32 2014 us=335866   push_ifconfig_ipv6_remote = ::
Wed Dec 03 11:33:32 2014 us=335866   enable_c2c = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   duplicate_cn = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   cf_max = 0
Wed Dec 03 11:33:32 2014 us=335866   cf_per = 0
Wed Dec 03 11:33:32 2014 us=335866   max_clients = 1024
Wed Dec 03 11:33:32 2014 us=335866   max_routes_per_client = 256
Wed Dec 03 11:33:32 2014 us=335866   auth_user_pass_verify_script = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   auth_user_pass_verify_script_via_file = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   client = ENABLED
Wed Dec 03 11:33:32 2014 us=335866   pull = ENABLED
Wed Dec 03 11:33:32 2014 us=335866   auth_user_pass_file = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   show_net_up = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   route_method = 0
Wed Dec 03 11:33:32 2014 us=335866   ip_win32_defined = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   ip_win32_type = 3
Wed Dec 03 11:33:32 2014 us=335866   dhcp_masq_offset = 0
Wed Dec 03 11:33:32 2014 us=335866   dhcp_lease_time = 31536000
Wed Dec 03 11:33:32 2014 us=335866   tap_sleep = 0
Wed Dec 03 11:33:32 2014 us=335866   dhcp_options = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   dhcp_renew = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   dhcp_pre_release = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   dhcp_release = DISABLED
Wed Dec 03 11:33:32 2014 us=335866   domain = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   netbios_scope = '[UNDEF]'
Wed Dec 03 11:33:32 2014 us=335866   netbios_node_type = 0
Wed Dec 03 11:33:32 2014 us=335866   disable_nbt = DISABLED
Wed Dec 03 11:33:32 2014 us=335866 OpenVPN 2.3.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Nov  7 2014
Wed Dec 03 11:33:32 2014 us=335866 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.05
Enter Management Password:
Wed Dec 03 11:33:32 2014 us=336866 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Dec 03 11:33:32 2014 us=336866 Need hold release from management interface, waiting...
Wed Dec 03 11:33:33 2014 us=299922 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Dec 03 11:33:33 2014 us=403927 MANAGEMENT: CMD 'state on'
Wed Dec 03 11:33:33 2014 us=404928 MANAGEMENT: CMD 'log all on'
Wed Dec 03 11:33:33 2014 us=495933 MANAGEMENT: CMD 'hold off'
Wed Dec 03 11:33:33 2014 us=497933 MANAGEMENT: CMD 'hold release'
Wed Dec 03 11:33:36 2014 us=63080 MANAGEMENT: CMD 'proxy NONE  '
Wed Dec 03 11:33:37 2014 us=189144 LZO compression initialized
Wed Dec 03 11:33:37 2014 us=189144 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 03 11:33:37 2014 us=189144 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 03 11:33:37 2014 us=189144 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 03 11:33:37 2014 us=189144 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Dec 03 11:33:37 2014 us=190144 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Dec 03 11:33:37 2014 us=190144 Local Options hash (VER=V4): '41690919'
Wed Dec 03 11:33:37 2014 us=190144 Expected Remote Options hash (VER=V4): '530fdded'
Wed Dec 03 11:33:37 2014 us=190144 UDPv4 link local: [undef]
Wed Dec 03 11:33:37 2014 us=190144 UDPv4 link remote: [AF_INET]192.168.0.4:1194
Wed Dec 03 11:33:37 2014 us=190144 MANAGEMENT: >STATE:1417602817,WAIT,,,
Wed Dec 03 11:33:37 2014 us=192144 MANAGEMENT: >STATE:1417602817,AUTH,,,
Wed Dec 03 11:33:37 2014 us=192144 TLS: Initial packet from [AF_INET]192.168.0.4:1194, sid=7fd064aa caab3885
Wed Dec 03 11:33:37 2014 us=212145 VERIFY OK: depth=1, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=Victum HU, name=EasyRSA, emailAddress=hjoska21@gmail.com
Wed Dec 03 11:33:37 2014 us=212145 Validating certificate key usage
Wed Dec 03 11:33:37 2014 us=212145 ++ Certificate has key usage  00a0, expects 00a0
Wed Dec 03 11:33:37 2014 us=212145 VERIFY KU OK
Wed Dec 03 11:33:37 2014 us=212145 Validating certificate extended key usage
Wed Dec 03 11:33:37 2014 us=212145 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Dec 03 11:33:37 2014 us=212145 VERIFY EKU OK
Wed Dec 03 11:33:37 2014 us=212145 VERIFY OK: depth=0, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=server, name=EasyRSA, emailAddress=hjoska21@gmail.com
Wed Dec 03 11:33:37 2014 us=246147 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 03 11:33:37 2014 us=246147 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 03 11:33:37 2014 us=246147 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 03 11:33:37 2014 us=246147 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 03 11:33:37 2014 us=246147 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 03 11:33:37 2014 us=246147 [server] Peer Connection Initiated with [AF_INET]192.168.0.4:1194
Wed Dec 03 11:33:38 2014 us=364211 MANAGEMENT: >STATE:1417602818,GET_CONFIG,,,
Wed Dec 03 11:33:39 2014 us=482275 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Dec 03 11:33:39 2014 us=483275 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Wed Dec 03 11:33:39 2014 us=483275 OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 03 11:33:39 2014 us=484275 OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 03 11:33:39 2014 us=484275 OPTIONS IMPORT: route options modified
Wed Dec 03 11:33:39 2014 us=511277 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 03 11:33:39 2014 us=511277 MANAGEMENT: >STATE:1417602819,ASSIGN_IP,,10.8.0.6,
Wed Dec 03 11:33:39 2014 us=511277 open_tun, tt->ipv6=0
Wed Dec 03 11:33:39 2014 us=511277 TAP-WIN32 device [Helyi kapcsolat 2] opened: \\.\Global\{05DD6F0D-AD43-4717-A054-8B9C597CACEC}.tap
Wed Dec 03 11:33:39 2014 us=512277 TAP-Windows Driver Version 9.21 
Wed Dec 03 11:33:39 2014 us=512277 TAP-Windows MTU=1500
Wed Dec 03 11:33:39 2014 us=513277 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {05DD6F0D-AD43-4717-A054-8B9C597CACEC} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Dec 03 11:33:39 2014 us=513277 Successful ARP Flush on interface [19] {05DD6F0D-AD43-4717-A054-8B9C597CACEC}
Wed Dec 03 11:33:44 2014 us=647571 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Dec 03 11:33:44 2014 us=647571 C:\Windows\system32\route.exe ADD 192.168.0.4 MASK 255.255.255.255 192.168.0.1 IF 11
Wed Dec 03 11:33:44 2014 us=648571 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Wed Dec 03 11:33:44 2014 us=648571 Route addition via IPAPI succeeded [adaptive]
Wed Dec 03 11:33:44 2014 us=648571 C:\Windows\system32\route.exe ADD 192.168.0.1 MASK 255.255.255.255 192.168.0.1 IF 11
Wed Dec 03 11:33:44 2014 us=648571 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Wed Dec 03 11:33:44 2014 us=648571 Route addition via IPAPI succeeded [adaptive]
Wed Dec 03 11:33:44 2014 us=648571 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 03 11:33:44 2014 us=652571 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 03 11:33:44 2014 us=652571 Route addition via IPAPI succeeded [adaptive]
Wed Dec 03 11:33:44 2014 us=653571 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Dec 03 11:33:44 2014 us=655571 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 03 11:33:44 2014 us=656571 Route addition via IPAPI succeeded [adaptive]
Wed Dec 03 11:33:44 2014 us=656571 MANAGEMENT: >STATE:1417602824,ADD_ROUTES,,,
Wed Dec 03 11:33:44 2014 us=656571 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Dec 03 11:33:44 2014 us=658571 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 03 11:33:44 2014 us=659571 Route addition via IPAPI succeeded [adaptive]
Wed Dec 03 11:33:44 2014 us=659571 Initialization Sequence Completed
Wed Dec 03 11:33:44 2014 us=659571 MANAGEMENT: >STATE:1417602824,CONNECTED,SUCCESS,10.8.0.6,192.168.0.4

What should I do to reach the web? Unfortunately I am not an experienced admin. Many thanks in advance for your help.

maikcat

the remote on client points to 192.168 network,

how exactly are you testing your setup?
did you enabled ip forwarding on openvpn server?
did you enabled NAT on openvpn server?
do you have apparmour enabled on opensuse?

Michael.

hjoska21

Hi Michael,

Thanks for your reply.

The clients and server are on the same LAN, openvpn server and the samba server are on the same machine. Everything works well. Then I start the openvpn client on a windows7 machine as an administrator and make connection. On my Cisco router the 1194 udp port forwarded to the openvpn server, so I can connect using the LAN and WAN address of the server too, but from this point I am unable to reach the internet from the client machine.

AppArmour have not configured yet, so I think it does not run.

Earlier the firewall was disabled. Now I set 'net.ipv4.ip_forward = 1' in /etc/sysctl.conf, and inserted 'iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE' line to /etc/rc.d/boot.local, and restarted the Linux. I did not do nothing more. The result is the same, internet unreachable from the client.

Are you saying after making connection all traffic must go through the openvpn server? Not the ones directed to the samba server only?

Joska

maikcat

The clients and server are on the same LAN, openvpn server and the samba server are on the same machine. Everything works well. Then I start the openvpn client on a windows7 machine as an administrator and make connection

never try to test a vpn configuration which pushes routes to client while on the same lan.

find an internet connection and test your setup while you are away from your lan.

Michael.

Traffic

Check your Windows 7 Firewall: Allow Netbios over your VPN network.

hjoska21

Hi Michael,

I changed my LAN IP address, locally everything fine, and connected from an another lan. Unfortunately everything is the same, I am able to connect to my remote samba share, but I am unable to surf the internet locally. The address of the two lan is different. The firewall on the openvpn server is disabled, and I can surf the internet on the server too.

Do all the traffic go through the tunel, or only one related to the samba share? If yes, that means the problem is with the routing on the server is not it? How can I setup the connection that only the samba share related traffic go through the tunel?

Joska

Just for being sure I enclose the new log files

Tue Dec 09 17:21:22 2014 us=982904 Current Parameter Settings:
Tue Dec 09 17:21:22 2014 us=982904   config = 'configd.ovpn'
Tue Dec 09 17:21:22 2014 us=982904   mode = 0
Tue Dec 09 17:21:22 2014 us=982904   show_ciphers = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   show_digests = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   show_engines = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   genkey = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   key_pass_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   show_tls_ciphers = DISABLED
Tue Dec 09 17:21:22 2014 us=982904 Connection profiles [default]:
Tue Dec 09 17:21:22 2014 us=982904   proto = udp
Tue Dec 09 17:21:22 2014 us=982904   local = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   local_port = 0
Tue Dec 09 17:21:22 2014 us=982904   remote = 'hjoska.ddns.net'
Tue Dec 09 17:21:22 2014 us=982904   remote_port = 1194
Tue Dec 09 17:21:22 2014 us=982904   remote_float = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   bind_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   bind_local = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   connect_retry_seconds = 5
Tue Dec 09 17:21:22 2014 us=982904   connect_timeout = 10
Tue Dec 09 17:21:22 2014 us=982904   connect_retry_max = 0
Tue Dec 09 17:21:22 2014 us=982904   socks_proxy_server = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   socks_proxy_port = 0
Tue Dec 09 17:21:22 2014 us=982904   socks_proxy_retry = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tun_mtu = 1500
Tue Dec 09 17:21:22 2014 us=982904   tun_mtu_defined = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   link_mtu = 1500
Tue Dec 09 17:21:22 2014 us=982904   link_mtu_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tun_mtu_extra = 0
Tue Dec 09 17:21:22 2014 us=982904   tun_mtu_extra_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   mtu_discover_type = -1
Tue Dec 09 17:21:22 2014 us=982904   fragment = 0
Tue Dec 09 17:21:22 2014 us=982904   mssfix = 1450
Tue Dec 09 17:21:22 2014 us=982904   explicit_exit_notification = 0
Tue Dec 09 17:21:22 2014 us=982904 Connection profiles END
Tue Dec 09 17:21:22 2014 us=982904   remote_random = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ipchange = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   dev = 'tun'
Tue Dec 09 17:21:22 2014 us=982904   dev_type = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   dev_node = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   lladdr = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   topology = 1
Tue Dec 09 17:21:22 2014 us=982904   tun_ipv6 = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_local = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_remote_netmask = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_noexec = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_nowarn = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_local = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_netbits = 0
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_remote = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   shaper = 0
Tue Dec 09 17:21:22 2014 us=982904   mtu_test = 0
Tue Dec 09 17:21:22 2014 us=982904   mlock = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   keepalive_ping = 0
Tue Dec 09 17:21:22 2014 us=982904   keepalive_timeout = 0
Tue Dec 09 17:21:22 2014 us=982904   inactivity_timeout = 0
Tue Dec 09 17:21:22 2014 us=982904   ping_send_timeout = 0
Tue Dec 09 17:21:22 2014 us=982904   ping_rec_timeout = 0
Tue Dec 09 17:21:22 2014 us=982904   ping_rec_timeout_action = 0
Tue Dec 09 17:21:22 2014 us=982904   ping_timer_remote = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   remap_sigusr1 = 0
Tue Dec 09 17:21:22 2014 us=982904   persist_tun = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   persist_local_ip = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   persist_remote_ip = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   persist_key = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   passtos = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   resolve_retry_seconds = 1000000000
Tue Dec 09 17:21:22 2014 us=982904   username = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   groupname = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   chroot_dir = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   cd_dir = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   writepid = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   up_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   down_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   down_pre = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   up_restart = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   up_delay = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   daemon = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   inetd = 0
Tue Dec 09 17:21:22 2014 us=982904   log = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   suppress_timestamps = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   nice = 0
Tue Dec 09 17:21:22 2014 us=982904   verbosity = 4
Tue Dec 09 17:21:22 2014 us=982904   mute = 0
Tue Dec 09 17:21:22 2014 us=982904   status_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   status_file_version = 1
Tue Dec 09 17:21:22 2014 us=982904   status_file_update_freq = 60
Tue Dec 09 17:21:22 2014 us=982904   occ = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   rcvbuf = 0
Tue Dec 09 17:21:22 2014 us=982904   sndbuf = 0
Tue Dec 09 17:21:22 2014 us=982904   sockflags = 0
Tue Dec 09 17:21:22 2014 us=982904   fast_io = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   lzo = 3
Tue Dec 09 17:21:22 2014 us=982904   route_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   route_default_gateway = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   route_default_metric = 0
Tue Dec 09 17:21:22 2014 us=982904   route_noexec = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   route_delay = 5
Tue Dec 09 17:21:22 2014 us=982904   route_delay_window = 30
Tue Dec 09 17:21:22 2014 us=982904   route_delay_defined = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   route_nopull = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   route_gateway_via_dhcp = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   max_routes = 100
Tue Dec 09 17:21:22 2014 us=982904   allow_pull_fqdn = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   management_addr = '127.0.0.1'
Tue Dec 09 17:21:22 2014 us=982904   management_port = 25341
Tue Dec 09 17:21:22 2014 us=982904   management_user_pass = 'stdin'
Tue Dec 09 17:21:22 2014 us=982904   management_log_history_cache = 250
Tue Dec 09 17:21:22 2014 us=982904   management_echo_buffer_size = 100
Tue Dec 09 17:21:22 2014 us=982904   management_write_peer_info_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   management_client_user = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   management_client_group = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   management_flags = 6
Tue Dec 09 17:21:22 2014 us=982904   shared_secret_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   key_direction = 0
Tue Dec 09 17:21:22 2014 us=982904   ciphername_defined = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   ciphername = 'BF-CBC'
Tue Dec 09 17:21:22 2014 us=982904   authname_defined = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   authname = 'SHA1'
Tue Dec 09 17:21:22 2014 us=982904   prng_hash = 'SHA1'
Tue Dec 09 17:21:22 2014 us=982904   prng_nonce_secret_len = 16
Tue Dec 09 17:21:22 2014 us=982904   keysize = 0
Tue Dec 09 17:21:22 2014 us=982904   engine = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   replay = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   mute_replay_warnings = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   replay_window = 64
Tue Dec 09 17:21:22 2014 us=982904   replay_time = 15
Tue Dec 09 17:21:22 2014 us=982904   packet_id_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   use_iv = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   test_crypto = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tls_server = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tls_client = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   key_method = 2
Tue Dec 09 17:21:22 2014 us=982904   ca_file = 'ca.crt'
Tue Dec 09 17:21:22 2014 us=982904   ca_path = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   dh_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   cert_file = 'client2.crt'
Tue Dec 09 17:21:22 2014 us=982904   priv_key_file = 'client2.key'
Tue Dec 09 17:21:22 2014 us=982904   pkcs12_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   cryptoapi_cert = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   cipher_list = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   tls_verify = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   tls_export_cert = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   verify_x509_type = 0
Tue Dec 09 17:21:22 2014 us=982904   verify_x509_name = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   crl_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ns_cert_type = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 160
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 136
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_ku[i] = 0
Tue Dec 09 17:21:22 2014 us=982904   remote_cert_eku = 'TLS Web Server Authentication'
Tue Dec 09 17:21:22 2014 us=982904   ssl_flags = 0
Tue Dec 09 17:21:22 2014 us=982904   tls_timeout = 2
Tue Dec 09 17:21:22 2014 us=982904   renegotiate_bytes = 0
Tue Dec 09 17:21:22 2014 us=982904   renegotiate_packets = 0
Tue Dec 09 17:21:22 2014 us=982904   renegotiate_seconds = 3600
Tue Dec 09 17:21:22 2014 us=982904   handshake_window = 60
Tue Dec 09 17:21:22 2014 us=982904   transition_window = 3600
Tue Dec 09 17:21:22 2014 us=982904   single_session = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   push_peer_info = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tls_exit = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tls_auth_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_protected_authentication = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_private_mode = 00000000
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_cert_private = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_pin_cache_period = -1
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_id = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   pkcs11_id_management = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   server_network = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   server_netmask = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   server_network_ipv6 = ::
Tue Dec 09 17:21:22 2014 us=982904   server_netbits_ipv6 = 0
Tue Dec 09 17:21:22 2014 us=982904   server_bridge_ip = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   server_bridge_netmask = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   server_bridge_pool_start = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   server_bridge_pool_end = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_start = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_end = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_netmask = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_pool_persist_refresh_freq = 600
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_pool_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_pool_base = ::
Tue Dec 09 17:21:22 2014 us=982904   ifconfig_ipv6_pool_netbits = 0
Tue Dec 09 17:21:22 2014 us=982904   n_bcast_buf = 256
Tue Dec 09 17:21:22 2014 us=982904   tcp_queue_limit = 64
Tue Dec 09 17:21:22 2014 us=982904   real_hash_size = 256
Tue Dec 09 17:21:22 2014 us=982904   virtual_hash_size = 256
Tue Dec 09 17:21:22 2014 us=982904   client_connect_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   learn_address_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   client_disconnect_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   client_config_dir = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   ccd_exclusive = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   tmp_dir = 'C:\Users\joska\AppData\Local\Temp\'
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_local = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_remote_netmask = 0.0.0.0
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_ipv6_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_ipv6_local = ::/0
Tue Dec 09 17:21:22 2014 us=982904   push_ifconfig_ipv6_remote = ::
Tue Dec 09 17:21:22 2014 us=982904   enable_c2c = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   duplicate_cn = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   cf_max = 0
Tue Dec 09 17:21:22 2014 us=982904   cf_per = 0
Tue Dec 09 17:21:22 2014 us=982904   max_clients = 1024
Tue Dec 09 17:21:22 2014 us=982904   max_routes_per_client = 256
Tue Dec 09 17:21:22 2014 us=982904   auth_user_pass_verify_script = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   auth_user_pass_verify_script_via_file = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   client = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   pull = ENABLED
Tue Dec 09 17:21:22 2014 us=982904   auth_user_pass_file = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   show_net_up = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   route_method = 0
Tue Dec 09 17:21:22 2014 us=982904   ip_win32_defined = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   ip_win32_type = 3
Tue Dec 09 17:21:22 2014 us=982904   dhcp_masq_offset = 0
Tue Dec 09 17:21:22 2014 us=982904   dhcp_lease_time = 31536000
Tue Dec 09 17:21:22 2014 us=982904   tap_sleep = 0
Tue Dec 09 17:21:22 2014 us=982904   dhcp_options = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   dhcp_renew = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   dhcp_pre_release = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   dhcp_release = DISABLED
Tue Dec 09 17:21:22 2014 us=982904   domain = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   netbios_scope = '[UNDEF]'
Tue Dec 09 17:21:22 2014 us=982904   netbios_node_type = 0
Tue Dec 09 17:21:22 2014 us=982904   disable_nbt = DISABLED
Tue Dec 09 17:21:22 2014 us=982904 OpenVPN 2.3.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Nov  7 2014
Tue Dec 09 17:21:22 2014 us=982904 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.05
Enter Management Password:
Tue Dec 09 17:21:22 2014 us=982904 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Tue Dec 09 17:21:22 2014 us=982904 Need hold release from management interface, waiting...
Tue Dec 09 17:21:23 2014 us=419705 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Tue Dec 09 17:21:23 2014 us=528905 MANAGEMENT: CMD 'state on'
Tue Dec 09 17:21:23 2014 us=528905 MANAGEMENT: CMD 'log all on'
Tue Dec 09 17:21:23 2014 us=638105 MANAGEMENT: CMD 'hold off'
Tue Dec 09 17:21:23 2014 us=638105 MANAGEMENT: CMD 'hold release'
Tue Dec 09 17:21:23 2014 us=809706 LZO compression initialized
Tue Dec 09 17:21:23 2014 us=809706 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Dec 09 17:21:23 2014 us=809706 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 09 17:21:23 2014 us=809706 MANAGEMENT: >STATE:1418142083,RESOLVE,,,
Tue Dec 09 17:21:23 2014 us=934506 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 09 17:21:23 2014 us=934506 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 09 17:21:23 2014 us=934506 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 09 17:21:23 2014 us=934506 Local Options hash (VER=V4): '41690919'
Tue Dec 09 17:21:23 2014 us=934506 Expected Remote Options hash (VER=V4): '530fdded'
Tue Dec 09 17:21:23 2014 us=934506 UDPv4 link local: [undef]
Tue Dec 09 17:21:23 2014 us=934506 UDPv4 link remote: [AF_INET]46.139.117.35:1194
Tue Dec 09 17:21:23 2014 us=934506 MANAGEMENT: >STATE:1418142083,WAIT,,,
Tue Dec 09 17:21:23 2014 us=965706 MANAGEMENT: >STATE:1418142083,AUTH,,,
Tue Dec 09 17:21:23 2014 us=965706 TLS: Initial packet from [AF_INET]46.139.117.35:1194, sid=908499cf f683bbed
Tue Dec 09 17:21:24 2014 us=106106 VERIFY OK: depth=1, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=Victum HU, name=EasyRSA, emailAddress=hjoska21@gmail.com
Tue Dec 09 17:21:24 2014 us=106106 Validating certificate key usage
Tue Dec 09 17:21:24 2014 us=106106 ++ Certificate has key usage  00a0, expects 00a0
Tue Dec 09 17:21:24 2014 us=106106 VERIFY KU OK
Tue Dec 09 17:21:24 2014 us=106106 Validating certificate extended key usage
Tue Dec 09 17:21:24 2014 us=106106 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Dec 09 17:21:24 2014 us=106106 VERIFY EKU OK
Tue Dec 09 17:21:24 2014 us=106106 VERIFY OK: depth=0, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=server, name=EasyRSA, emailAddress=hjoska21@gmail.com
Tue Dec 09 17:21:24 2014 us=402507 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 09 17:21:24 2014 us=402507 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 09 17:21:24 2014 us=402507 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 09 17:21:24 2014 us=402507 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 09 17:21:24 2014 us=402507 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Dec 09 17:21:24 2014 us=402507 [server] Peer Connection Initiated with [AF_INET]46.139.117.35:1194
Tue Dec 09 17:21:25 2014 us=572509 MANAGEMENT: >STATE:1418142085,GET_CONFIG,,,
Tue Dec 09 17:21:26 2014 us=742511 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Dec 09 17:21:26 2014 us=804911 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Tue Dec 09 17:21:26 2014 us=804911 OPTIONS IMPORT: timers and/or timeouts modified
Tue Dec 09 17:21:26 2014 us=804911 OPTIONS IMPORT: --ifconfig/up options modified
Tue Dec 09 17:21:26 2014 us=804911 OPTIONS IMPORT: route options modified
Tue Dec 09 17:21:26 2014 us=836111 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Dec 09 17:21:26 2014 us=836111 MANAGEMENT: >STATE:1418142086,ASSIGN_IP,,10.8.0.10,
Tue Dec 09 17:21:26 2014 us=836111 open_tun, tt->ipv6=0
Tue Dec 09 17:21:26 2014 us=836111 TAP-WIN32 device [Helyi kapcsolat 2] opened: \\.\Global\{47DBB650-1699-4AAA-B594-49AD7EF49F5E}.tap
Tue Dec 09 17:21:26 2014 us=836111 TAP-Windows Driver Version 9.21 
Tue Dec 09 17:21:26 2014 us=836111 TAP-Windows MTU=1500
Tue Dec 09 17:21:26 2014 us=836111 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {47DBB650-1699-4AAA-B594-49AD7EF49F5E} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Tue Dec 09 17:21:26 2014 us=836111 Successful ARP Flush on interface [20] {47DBB650-1699-4AAA-B594-49AD7EF49F5E}
Tue Dec 09 17:21:31 2014 us=141718 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Dec 09 17:21:31 2014 us=141718 C:\Windows\system32\route.exe ADD 46.139.117.35 MASK 255.255.255.255 192.168.0.1
Tue Dec 09 17:21:31 2014 us=141718 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Tue Dec 09 17:21:31 2014 us=141718 Route addition via IPAPI succeeded [adaptive]
Tue Dec 09 17:21:31 2014 us=141718 C:\Windows\system32\route.exe ADD 192.168.0.1 MASK 255.255.255.255 192.168.0.1 IF 15
Tue Dec 09 17:21:31 2014 us=141718 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Tue Dec 09 17:21:31 2014 us=141718 Route addition via IPAPI succeeded [adaptive]
Tue Dec 09 17:21:31 2014 us=141718 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Dec 09 17:21:31 2014 us=141718 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Dec 09 17:21:31 2014 us=141718 Route addition via IPAPI succeeded [adaptive]
Tue Dec 09 17:21:31 2014 us=141718 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Dec 09 17:21:31 2014 us=141718 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Dec 09 17:21:31 2014 us=141718 Route addition via IPAPI succeeded [adaptive]
Tue Dec 09 17:21:31 2014 us=141718 MANAGEMENT: >STATE:1418142091,ADD_ROUTES,,,
Tue Dec 09 17:21:31 2014 us=141718 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Tue Dec 09 17:21:31 2014 us=157318 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Dec 09 17:21:31 2014 us=157318 Route addition via IPAPI succeeded [adaptive]
Tue Dec 09 17:21:31 2014 us=157318 Initialization Sequence Completed
Tue Dec 09 17:21:31 2014 us=157318 MANAGEMENT: >STATE:1418142091,CONNECTED,SUCCESS,10.8.0.10,46.139.117.35
Tue Dec 09 17:22:18 2014 us=846602 TCP/UDP: Closing socket
Tue Dec 09 17:22:18 2014 us=846602 C:\Windows\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Tue Dec 09 17:22:18 2014 us=846602 Route deletion via IPAPI succeeded [adaptive]
Tue Dec 09 17:22:18 2014 us=846602 C:\Windows\system32\route.exe DELETE 46.139.117.35 MASK 255.255.255.255 192.168.0.1
Tue Dec 09 17:22:18 2014 us=846602 Route deletion via IPAPI succeeded [adaptive]
Tue Dec 09 17:22:18 2014 us=846602 C:\Windows\system32\route.exe DELETE 192.168.0.1 MASK 255.255.255.255 192.168.0.1
Tue Dec 09 17:22:18 2014 us=862202 Route deletion via IPAPI succeeded [adaptive]
Tue Dec 09 17:22:18 2014 us=862202 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Dec 09 17:22:18 2014 us=862202 Route deletion via IPAPI succeeded [adaptive]
Tue Dec 09 17:22:18 2014 us=862202 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Dec 09 17:22:18 2014 us=877802 Route deletion via IPAPI succeeded [adaptive]
Tue Dec 09 17:22:18 2014 us=877802 Closing TUN/TAP interface
Tue Dec 09 17:22:18 2014 us=877802 SIGTERM[hard,] received, process exiting
Tue Dec 09 17:22:18 2014 us=877802 MANAGEMENT: >STATE:1418142138,EXITING,SIGTERM,,

2014-12-09T17:21:23.166995+01:00 lineva openvpn[1292]: MULTI: multi_create_instance called
2014-12-09T17:21:23.167819+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Re-using SSL/TLS context
2014-12-09T17:21:23.168495+01:00 lineva openvpn[1292]: 46.139.115.63:53954 LZO compression initialized
2014-12-09T17:21:23.169188+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
2014-12-09T17:21:23.169749+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
2014-12-09T17:21:23.170329+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2014-12-09T17:21:23.170882+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2014-12-09T17:21:23.171501+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Local Options hash (VER=V4): '530fdded'
2014-12-09T17:21:23.172099+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Expected Remote Options hash (VER=V4): '41690919'
2014-12-09T17:21:23.172664+01:00 lineva openvpn[1292]: 46.139.115.63:53954 TLS: Initial packet from [AF_INET]46.139.115.63:53954, sid=92d4b4c8 1bd0e7ce
2014-12-09T17:21:23.528433+01:00 lineva openvpn[1292]: 46.139.115.63:53954 VERIFY OK: depth=1, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=Victum HU, name=EasyRSA, emailAddress=hjoska21@gmail.com
2014-12-09T17:21:23.529158+01:00 lineva openvpn[1292]: 46.139.115.63:53954 VERIFY OK: depth=0, C=HU, ST=Hungary, L=Budapest\09, O=Victum, OU=Victum, CN=client2, name=EasyRSA, emailAddress=hjoska21@gmail.com
2014-12-09T17:21:23.612687+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-12-09T17:21:23.613523+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-12-09T17:21:23.614130+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-12-09T17:21:23.614691+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-12-09T17:21:23.634807+01:00 lineva openvpn[1292]: 46.139.115.63:53954 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2014-12-09T17:21:23.635521+01:00 lineva openvpn[1292]: 46.139.115.63:53954 [client2] Peer Connection Initiated with [AF_INET]46.139.115.63:53954
2014-12-09T17:21:23.636104+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
2014-12-09T17:21:23.636709+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI: Learn: 10.8.0.10 -> client2/46.139.115.63:53954
2014-12-09T17:21:23.637310+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI: primary virtual IP for client2/46.139.115.63:53954: 10.8.0.10
2014-12-09T17:21:26.029306+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 PUSH: Received control message: 'PUSH_REQUEST'
2014-12-09T17:21:26.030160+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 send_push_reply(): safe_cap=940
2014-12-09T17:21:26.030865+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 SENT CONTROL [client2]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9' (status=1)
2014-12-09T17:21:26.203274+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI: bad source address from client [fe80::c895:683b:4145:4ecd], packet dropped
2014-12-09T17:21:26.339831+01:00 lineva openvpn[1292]: message repeated 6 times: [ client2/46.139.115.63:53954 MULTI: bad source address from client [fe80::c895:683b:4145:4ecd], packet dropped]
2014-12-09T17:21:26.366432+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI: bad source address from client [::], packet dropped
2014-12-09T17:21:26.371522+01:00 lineva openvpn[1292]: client2/46.139.115.63:53954 MULTI: bad source address from client [fe80::c895:683b:4145:4ecd], packet dropped
2014-12-09T17:22:17.075196+01:00 lineva openvpn[1292]: message repeated 49 times

maikcat

some things to check:

post the output of:

tracert 8.8.8.8

on your client with the vpn client connected

also on your server post the output of:

iptables -L -t nat -v
iptables -L -v
ifconfig

Michael.

hjoska21

Hi Micheal,

Thanks for your help. Anyway, the problem is solved. The only thing to do was commenting out the line

push "redirect-gateway def1 bypass-dhcp"

in the server config. It redirects the client traffic through the VPN tunnel, which is an unwanted thing in my case. Of course it is an open question why not the client traffic reached the internet through the VPN, perhaps I should use "push "dhcp-option DNS 208.67.222.222"" option in the server config file.

I tried the VPN trough a client connected to independent lan, but everything works fine using the same lan too, there was no IP conflict during the test. Internet, lan traffic, VPN worked on both the server and the client (except reaching the samba server trough the lan and VPN the same time).

Joska