Hi, I was searching a while for the correct config here in this forum and on other sites on the internet, but could not find any working solution for me. I got a tap configuration to work and it was fine since i got an iphone and wanted to connect from this device to my internal LAN at home with OPENVPN. The app says that iOS does not support tap. So i tried to change the configuration to tun (Routing) Here is my network configuration: Router (DLink), Port 1194 forwarded to 192.168.2.254: WAN-Port: 91.114.x.x nothing happened o i also tried to add the IP Address of my tap device manually in IPV4 settings => nothing happens o i tried to add the route manually with route.exe ADD 10.8.0.0 MASK 255.255.255.0 192.168.2.254 => nothing happens Do you have any other suggestions i can try? Here are my Logs from server and client after connection is up: [code] Sun Dec 07 14:15:21 2014 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014 Sun Dec 07 14:15:21 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08 Enter Management Password: Sun Dec 07 14:15:21 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341 Sun Dec 07 14:15:21 2014 Need hold release from management interface, waiting... Sun Dec 07 14:15:21 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341 Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'state on' Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'log all on' Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'hold off' Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'hold release' Sun Dec 07 14:15:22 2014 Diffie-Hellman initialized with 1024 bit key Sun Dec 07 14:15:22 2014 Socket Buffers: R=[8192->8192] S=[8192->8192] Sun Dec 07 14:15:22 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Dec 07 14:15:22 2014 MANAGEMENT: >STATE:1417958122,ASSIGN_IP,,10.8.0.1, Sun Dec 07 14:15:22 2014 open_tun, tt->ipv6=0 Sun Dec 07 14:15:22 2014 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap Sun Dec 07 14:15:22 2014 TAP-Windows Driver Version 9.9 Sun Dec 07 14:15:22 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000] Sun Dec 07 14:15:22 2014 Sleeping for 10 seconds... Sun Dec 07 14:15:32 2014 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index. Sun Dec 07 14:15:32 2014 MANAGEMENT: >STATE:1417958132,ADD_ROUTES,,, Sun Dec 07 14:15:32 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2 Sun Dec 07 14:15:32 2014 Route addition via IPAPI succeeded [adaptive] Sun Dec 07 14:15:32 2014 UDPv4 link local (bound): [undef] Sun Dec 07 14:15:32 2014 UDPv4 link remote: [undef] Sun Dec 07 14:15:32 2014 MULTI: multi_init called, r=256 v=256 Sun Dec 07 14:15:32 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Sun Dec 07 14:15:32 2014 Initialization Sequence Completed Sun Dec 07 14:15:32 2014 MANAGEMENT: >STATE:1417958132,CONNECTED,SUCCESS,10.8.0.1, Sun Dec 07 14:15:34 2014 89.144.x.x:43994 TLS: Initial packet from [AF_INET]89.144.x.x:43994, sid=0f4b5bbf 10f84b1c Sun Dec 07 14:15:35 2014 89.144.x.x:43994 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at Sun Dec 07 14:15:35 2014 89.144.x.x:43994 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542' Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Dec 07 14:15:36 2014 89.144.x.x:43994 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sun Dec 07 14:15:36 2014 89.144.x.x:43994 [notebook] Peer Connection Initiated with [AF_INET]89.144.x.x:43994 Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled) Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI: Learn: 10.8.0.6 -> notebook/89.144.x.x:43994 Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI: primary virtual IP for notebook/89.144.x.x:43994: 10.8.0.6 Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 PUSH: Received control message: 'PUSH_REQUEST' Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 send_push_reply(): safe_cap=940 Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1) Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen [/code] and here the client log [code] Sun Dec 07 14:15:31 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014 Sun Dec 07 14:15:31 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08 Enter Management Password: Sun Dec 07 14:15:32 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Sun Dec 07 14:15:32 2014 UDPv4 link local: [undef] Sun Dec 07 14:15:32 2014 UDPv4 link remote: [AF_INET]91.114.x.x:1194 Sun Dec 07 14:15:34 2014 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1541' Sun Dec 07 14:15:34 2014 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo' Sun Dec 07 14:15:34 2014 [gandalf] Peer Connection Initiated with [AF_INET]91.114.x.x:1194 Sun Dec 07 14:15:37 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Dec 07 14:15:37 2014 open_tun, tt->ipv6=0 Sun Dec 07 14:15:37 2014 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}.tap Sun Dec 07 14:15:37 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Sun Dec 07 14:15:37 2014 Successful ARP Flush on interface [22] {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} Sun Dec 07 14:15:42 2014 Initialization Sequence Completed [/code] last but not least i think the routing table on my windows server could be interesting to find this bug... [code] =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 10 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 10.8.0.0 255.255.255.252 10.8.0.1 10.8.0.1 30 10.8.0.0 255.255.255.0 192.168.2.254 192.168.2.254 1 10.8.0.1 255.255.255.255 127.0.0.1 127.0.0.1 30 10.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 30 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 10 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 10 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 10 224.0.0.0 240.0.0.0 10.8.0.1 10.8.0.1 30 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 10 255.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 1 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 [/code] Please help me, iam sitting here several hours, trying several configs and cant get it to work! if you need any other information just say it... Thanks a lot Matthias

leave RRAS down for start, are these configs the current COMPLETE configs used? because this: [code]Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542' Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'[/code] reports mismatch on your configs... Michael.

Hi, Sorry i think there happened a mistake with copy paste... Here once more the configs and logs (verb 4 now, as it stands in the rules...) Server Log: [code] Mon Dec 08 15:40:12 2014 us=7125 Current Parameter Settings: Mon Dec 08 15:40:12 2014 us=7125 config = 'server_tun.ovpn' Mon Dec 08 15:40:12 2014 us=7125 mode = 1 Mon Dec 08 15:40:12 2014 us=7125 show_ciphers = DISABLED Mon Dec 08 15:40:12 2014 us=7125 show_digests = DISABLED Mon Dec 08 15:40:12 2014 us=7125 show_engines = DISABLED Mon Dec 08 15:40:12 2014 us=7125 genkey = DISABLED Mon Dec 08 15:40:12 2014 us=7125 key_pass_file = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 show_tls_ciphers = DISABLED Mon Dec 08 15:40:12 2014 us=7125 Connection profiles [default]: Mon Dec 08 15:40:12 2014 us=7125 proto = udp Mon Dec 08 15:40:12 2014 us=7125 local = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 local_port = 1194 Mon Dec 08 15:40:12 2014 us=7125 remote = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 remote_port = 1194 Mon Dec 08 15:40:12 2014 us=7125 remote_float = DISABLED Mon Dec 08 15:40:12 2014 us=7125 bind_defined = DISABLED Mon Dec 08 15:40:12 2014 us=7125 bind_local = ENABLED Mon Dec 08 15:40:12 2014 us=7125 connect_retry_seconds = 5 Mon Dec 08 15:40:12 2014 us=7125 connect_timeout = 10 Mon Dec 08 15:40:12 2014 us=7125 connect_retry_max = 0 Mon Dec 08 15:40:12 2014 us=7125 socks_proxy_server = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 socks_proxy_port = 0 Mon Dec 08 15:40:12 2014 us=7125 socks_proxy_retry = DISABLED Mon Dec 08 15:40:12 2014 us=7125 tun_mtu = 1500 Mon Dec 08 15:40:12 2014 us=7125 tun_mtu_defined = ENABLED Mon Dec 08 15:40:12 2014 us=7125 link_mtu = 1500 Mon Dec 08 15:40:12 2014 us=7125 link_mtu_defined = DISABLED Mon Dec 08 15:40:12 2014 us=7125 tun_mtu_extra = 0 Mon Dec 08 15:40:12 2014 us=7125 tun_mtu_extra_defined = DISABLED Mon Dec 08 15:40:12 2014 us=7125 mtu_discover_type = -1 Mon Dec 08 15:40:12 2014 us=7125 fragment = 0 Mon Dec 08 15:40:12 2014 us=7125 mssfix = 1450 Mon Dec 08 15:40:12 2014 us=7125 explicit_exit_notification = 0 Mon Dec 08 15:40:12 2014 us=7125 Connection profiles END Mon Dec 08 15:40:12 2014 us=7125 remote_random = DISABLED Mon Dec 08 15:40:12 2014 us=7125 ipchange = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 dev = 'tun' Mon Dec 08 15:40:12 2014 us=7125 dev_type = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 dev_node = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 lladdr = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 topology = 1 Mon Dec 08 15:40:12 2014 us=7125 tun_ipv6 = DISABLED Mon Dec 08 15:40:12 2014 us=7125 ifconfig_local = '10.8.0.1' Mon Dec 08 15:40:12 2014 us=7125 ifconfig_remote_netmask = '10.8.0.2' Mon Dec 08 15:40:12 2014 us=7125 ifconfig_noexec = DISABLED Mon Dec 08 15:40:12 2014 us=7125 ifconfig_nowarn = DISABLED Mon Dec 08 15:40:12 2014 us=7125 ifconfig_ipv6_local = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 ifconfig_ipv6_netbits = 0 Mon Dec 08 15:40:12 2014 us=7125 ifconfig_ipv6_remote = '[UNDEF]' Mon Dec 08 15:40:12 2014 us=7125 NOTE: --mute triggered... Mon Dec 08 15:40:12 2014 us=7125 241 variation(s) on previous 50 message(s) suppressed by --mute Mon Dec 08 15:40:12 2014 us=7125 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014 Mon Dec 08 15:40:12 2014 us=7125 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08 Enter Management Password: Mon Dec 08 15:40:12 2014 us=7125 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341 Mon Dec 08 15:40:12 2014 us=7125 Need hold release from management interface, waiting... Mon Dec 08 15:40:12 2014 us=397750 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341 Mon Dec 08 15:40:12 2014 us=507125 MANAGEMENT: CMD 'state on' Mon Dec 08 15:40:12 2014 us=507125 MANAGEMENT: CMD 'log all on' Mon Dec 08 15:40:12 2014 us=554000 MANAGEMENT: CMD 'hold off' Mon Dec 08 15:40:12 2014 us=554000 MANAGEMENT: CMD 'hold release' Mon Dec 08 15:40:12 2014 us=725875 Diffie-Hellman initialized with 1024 bit key Mon Dec 08 15:40:12 2014 us=725875 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ] Mon Dec 08 15:40:12 2014 us=725875 Socket Buffers: R=[8192->8192] S=[8192->8192] Mon Dec 08 15:40:12 2014 us=741500 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mon Dec 08 15:40:12 2014 us=741500 MANAGEMENT: >STATE:1418049612,ASSIGN_IP,,10.8.0.1, Mon Dec 08 15:40:12 2014 us=741500 open_tun, tt->ipv6=0 Mon Dec 08 15:40:12 2014 us=741500 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap Mon Dec 08 15:40:12 2014 us=741500 NOTE: could not get adapter index for {587FE367-DC7B-407F-9F14-2525BED1CCE2} Mon Dec 08 15:40:12 2014 us=741500 TAP-Windows Driver Version 9.9 Mon Dec 08 15:40:12 2014 us=741500 TAP-Windows MTU=1500 Mon Dec 08 15:40:12 2014 us=741500 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000] Mon Dec 08 15:40:12 2014 us=741500 Sleeping for 10 seconds... Mon Dec 08 15:40:22 2014 us=741500 MANAGEMENT: >STATE:1418049622,ADD_ROUTES,,, Mon Dec 08 15:40:22 2014 us=741500 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2 Mon Dec 08 15:40:22 2014 us=741500 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2 Mon Dec 08 15:40:22 2014 us=741500 Route addition via IPAPI failed [adaptive] Mon Dec 08 15:40:22 2014 us=741500 Route addition fallback to route.exe Mon Dec 08 15:40:22 2014 us=741500 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem Mon Dec 08 15:40:22 2014 us=788375 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ] Mon Dec 08 15:40:22 2014 us=788375 UDPv4 link local (bound): [undef] Mon Dec 08 15:40:22 2014 us=788375 UDPv4 link remote: [undef] Mon Dec 08 15:40:22 2014 us=788375 MULTI: multi_init called, r=256 v=256 Mon Dec 08 15:40:22 2014 us=788375 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Mon Dec 08 15:40:22 2014 us=788375 Initialization Sequence Completed Mon Dec 08 15:40:22 2014 us=788375 MANAGEMENT: >STATE:1418049622,CONNECTED,SUCCESS,10.8.0.1, Mon Dec 08 15:42:54 2014 us=475875 MULTI: multi_create_instance called Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Re-using SSL/TLS context Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ] Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ] Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Local Options hash (VER=V4): '239669a8' Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Expected Remote Options hash (VER=V4): '3514370b' Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 TLS: Initial packet from [AF_INET]89.144.x.x:44044, sid=b45ff3fa e64218d8 Mon Dec 08 15:42:55 2014 us=522750 89.144.x.x:44044 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at Mon Dec 08 15:42:55 2014 us=522750 89.144.x.x:44044 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Dec 08 15:42:55 2014 us=772750 89.144.x.x:44044 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Dec 08 15:42:55 2014 us=772750 89.144.x.x:44044 [notebook] Peer Connection Initiated with [AF_INET]89.144.x.x:44044 Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled) Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI: Learn: 10.8.0.6 -> notebook/89.144.x.x:44044 Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI: primary virtual IP for notebook/89.144.x.x:44044: 10.8.0.6 Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 PUSH: Received control message: 'PUSH_REQUEST' Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 send_push_reply(): safe_cap=940 Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1) Mon Dec 08 15:42:58 2014 us=913375 notebook/89.144.x.x:44044 MULTI: bad source address from client [??+??], packet dropped [/code] Client log: [code] Mon Dec 08 15:42:53 2014 us=475895 Current Parameter Settings: Mon Dec 08 15:42:53 2014 us=476895 config = 'Matthias.ovpn' Mon Dec 08 15:42:53 2014 us=476895 mode = 0 Mon Dec 08 15:42:53 2014 us=476895 show_ciphers = DISABLED Mon Dec 08 15:42:53 2014 us=476895 show_digests = DISABLED Mon Dec 08 15:42:53 2014 us=476895 show_engines = DISABLED Mon Dec 08 15:42:53 2014 us=476895 genkey = DISABLED Mon Dec 08 15:42:53 2014 us=477894 key_pass_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 show_tls_ciphers = DISABLED Mon Dec 08 15:42:53 2014 us=477894 Connection profiles [default]: Mon Dec 08 15:42:53 2014 us=477894 proto = udp Mon Dec 08 15:42:53 2014 us=477894 local = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 local_port = 1194 Mon Dec 08 15:42:53 2014 us=477894 remote = '91.114.x.x' Mon Dec 08 15:42:53 2014 us=477894 remote_port = 1194 Mon Dec 08 15:42:53 2014 us=477894 remote_float = DISABLED Mon Dec 08 15:42:53 2014 us=477894 bind_defined = DISABLED Mon Dec 08 15:42:53 2014 us=477894 bind_local = ENABLED Mon Dec 08 15:42:53 2014 us=477894 connect_retry_seconds = 5 Mon Dec 08 15:42:53 2014 us=477894 connect_timeout = 10 Mon Dec 08 15:42:53 2014 us=477894 connect_retry_max = 0 Mon Dec 08 15:42:53 2014 us=477894 socks_proxy_server = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 socks_proxy_port = 0 Mon Dec 08 15:42:53 2014 us=477894 socks_proxy_retry = DISABLED Mon Dec 08 15:42:53 2014 us=477894 tun_mtu = 1500 Mon Dec 08 15:42:53 2014 us=477894 tun_mtu_defined = ENABLED Mon Dec 08 15:42:53 2014 us=477894 link_mtu = 1500 Mon Dec 08 15:42:53 2014 us=477894 link_mtu_defined = DISABLED Mon Dec 08 15:42:53 2014 us=477894 tun_mtu_extra = 0 Mon Dec 08 15:42:53 2014 us=477894 tun_mtu_extra_defined = DISABLED Mon Dec 08 15:42:53 2014 us=477894 mtu_discover_type = -1 Mon Dec 08 15:42:53 2014 us=477894 fragment = 0 Mon Dec 08 15:42:53 2014 us=477894 mssfix = 1450 Mon Dec 08 15:42:53 2014 us=477894 explicit_exit_notification = 0 Mon Dec 08 15:42:53 2014 us=477894 Connection profiles END Mon Dec 08 15:42:53 2014 us=477894 remote_random = DISABLED Mon Dec 08 15:42:53 2014 us=477894 ipchange = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 dev = 'tun' Mon Dec 08 15:42:53 2014 us=477894 dev_type = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 dev_node = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 lladdr = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 topology = 1 Mon Dec 08 15:42:53 2014 us=477894 tun_ipv6 = DISABLED Mon Dec 08 15:42:53 2014 us=477894 ifconfig_local = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 ifconfig_remote_netmask = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 ifconfig_noexec = DISABLED Mon Dec 08 15:42:53 2014 us=477894 ifconfig_nowarn = DISABLED Mon Dec 08 15:42:53 2014 us=477894 ifconfig_ipv6_local = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 ifconfig_ipv6_netbits = 0 Mon Dec 08 15:42:53 2014 us=477894 ifconfig_ipv6_remote = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 shaper = 0 Mon Dec 08 15:42:53 2014 us=477894 mtu_test = 0 Mon Dec 08 15:42:53 2014 us=477894 mlock = DISABLED Mon Dec 08 15:42:53 2014 us=477894 keepalive_ping = 0 Mon Dec 08 15:42:53 2014 us=477894 keepalive_timeout = 0 Mon Dec 08 15:42:53 2014 us=477894 inactivity_timeout = 0 Mon Dec 08 15:42:53 2014 us=477894 ping_send_timeout = 0 Mon Dec 08 15:42:53 2014 us=477894 ping_rec_timeout = 0 Mon Dec 08 15:42:53 2014 us=477894 ping_rec_timeout_action = 0 Mon Dec 08 15:42:53 2014 us=477894 ping_timer_remote = DISABLED Mon Dec 08 15:42:53 2014 us=477894 remap_sigusr1 = 0 Mon Dec 08 15:42:53 2014 us=477894 persist_tun = DISABLED Mon Dec 08 15:42:53 2014 us=477894 persist_local_ip = DISABLED Mon Dec 08 15:42:53 2014 us=477894 persist_remote_ip = DISABLED Mon Dec 08 15:42:53 2014 us=477894 persist_key = DISABLED Mon Dec 08 15:42:53 2014 us=477894 passtos = DISABLED Mon Dec 08 15:42:53 2014 us=477894 resolve_retry_seconds = 1000000000 Mon Dec 08 15:42:53 2014 us=477894 username = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 groupname = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 chroot_dir = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 cd_dir = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 writepid = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 up_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 down_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 down_pre = DISABLED Mon Dec 08 15:42:53 2014 us=477894 up_restart = DISABLED Mon Dec 08 15:42:53 2014 us=477894 up_delay = DISABLED Mon Dec 08 15:42:53 2014 us=477894 daemon = DISABLED Mon Dec 08 15:42:53 2014 us=477894 inetd = 0 Mon Dec 08 15:42:53 2014 us=477894 log = ENABLED Mon Dec 08 15:42:53 2014 us=477894 suppress_timestamps = DISABLED Mon Dec 08 15:42:53 2014 us=477894 nice = 0 Mon Dec 08 15:42:53 2014 us=477894 verbosity = 4 Mon Dec 08 15:42:53 2014 us=477894 mute = 0 Mon Dec 08 15:42:53 2014 us=477894 status_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 status_file_version = 1 Mon Dec 08 15:42:53 2014 us=477894 status_file_update_freq = 60 Mon Dec 08 15:42:53 2014 us=477894 occ = ENABLED Mon Dec 08 15:42:53 2014 us=477894 rcvbuf = 0 Mon Dec 08 15:42:53 2014 us=477894 sndbuf = 0 Mon Dec 08 15:42:53 2014 us=477894 sockflags = 0 Mon Dec 08 15:42:53 2014 us=477894 fast_io = DISABLED Mon Dec 08 15:42:53 2014 us=477894 lzo = 0 Mon Dec 08 15:42:53 2014 us=477894 route_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 route_default_gateway = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 route_default_metric = 0 Mon Dec 08 15:42:53 2014 us=477894 route_noexec = DISABLED Mon Dec 08 15:42:53 2014 us=477894 route_delay = 5 Mon Dec 08 15:42:53 2014 us=477894 route_delay_window = 30 Mon Dec 08 15:42:53 2014 us=477894 route_delay_defined = ENABLED Mon Dec 08 15:42:53 2014 us=477894 route_nopull = DISABLED Mon Dec 08 15:42:53 2014 us=477894 route_gateway_via_dhcp = DISABLED Mon Dec 08 15:42:53 2014 us=477894 max_routes = 100 Mon Dec 08 15:42:53 2014 us=477894 allow_pull_fqdn = DISABLED Mon Dec 08 15:42:53 2014 us=477894 management_addr = '127.0.0.1' Mon Dec 08 15:42:53 2014 us=477894 management_port = 25340 Mon Dec 08 15:42:53 2014 us=477894 management_user_pass = 'stdin' Mon Dec 08 15:42:53 2014 us=477894 management_log_history_cache = 250 Mon Dec 08 15:42:53 2014 us=477894 management_echo_buffer_size = 100 Mon Dec 08 15:42:53 2014 us=477894 management_write_peer_info_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=477894 management_client_user = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 management_client_group = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 management_flags = 6 Mon Dec 08 15:42:53 2014 us=478894 shared_secret_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 key_direction = 0 Mon Dec 08 15:42:53 2014 us=478894 ciphername_defined = ENABLED Mon Dec 08 15:42:53 2014 us=478894 ciphername = 'BF-CBC' Mon Dec 08 15:42:53 2014 us=478894 authname_defined = ENABLED Mon Dec 08 15:42:53 2014 us=478894 authname = 'SHA1' Mon Dec 08 15:42:53 2014 us=478894 prng_hash = 'SHA1' Mon Dec 08 15:42:53 2014 us=478894 prng_nonce_secret_len = 16 Mon Dec 08 15:42:53 2014 us=478894 keysize = 0 Mon Dec 08 15:42:53 2014 us=478894 engine = DISABLED Mon Dec 08 15:42:53 2014 us=478894 replay = ENABLED Mon Dec 08 15:42:53 2014 us=478894 mute_replay_warnings = DISABLED Mon Dec 08 15:42:53 2014 us=478894 replay_window = 64 Mon Dec 08 15:42:53 2014 us=478894 replay_time = 15 Mon Dec 08 15:42:53 2014 us=478894 packet_id_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 use_iv = ENABLED Mon Dec 08 15:42:53 2014 us=478894 test_crypto = DISABLED Mon Dec 08 15:42:53 2014 us=478894 tls_server = DISABLED Mon Dec 08 15:42:53 2014 us=478894 tls_client = ENABLED Mon Dec 08 15:42:53 2014 us=478894 key_method = 2 Mon Dec 08 15:42:53 2014 us=478894 ca_file = 'ca.crt' Mon Dec 08 15:42:53 2014 us=478894 ca_path = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 dh_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 cert_file = 'Matthias.crt' Mon Dec 08 15:42:53 2014 us=478894 priv_key_file = 'Matthias.key' Mon Dec 08 15:42:53 2014 us=478894 pkcs12_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 cryptoapi_cert = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 cipher_list = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 tls_verify = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 tls_export_cert = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 verify_x509_type = 0 Mon Dec 08 15:42:53 2014 us=478894 verify_x509_name = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 crl_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 ns_cert_type = 1 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_ku[i] = 0 Mon Dec 08 15:42:53 2014 us=478894 remote_cert_eku = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 ssl_flags = 0 Mon Dec 08 15:42:53 2014 us=478894 tls_timeout = 2 Mon Dec 08 15:42:53 2014 us=478894 renegotiate_bytes = 0 Mon Dec 08 15:42:53 2014 us=478894 renegotiate_packets = 0 Mon Dec 08 15:42:53 2014 us=478894 renegotiate_seconds = 3600 Mon Dec 08 15:42:53 2014 us=478894 handshake_window = 60 Mon Dec 08 15:42:53 2014 us=478894 transition_window = 3600 Mon Dec 08 15:42:53 2014 us=478894 single_session = DISABLED Mon Dec 08 15:42:53 2014 us=478894 push_peer_info = DISABLED Mon Dec 08 15:42:53 2014 us=478894 tls_exit = DISABLED Mon Dec 08 15:42:53 2014 us=478894 tls_auth_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_protected_authentication = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_private_mode = 00000000 Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=478894 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_cert_private = DISABLED Mon Dec 08 15:42:53 2014 us=479893 pkcs11_pin_cache_period = -1 Mon Dec 08 15:42:53 2014 us=479893 pkcs11_id = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=479893 pkcs11_id_management = DISABLED Mon Dec 08 15:42:53 2014 us=479893 server_network = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=479893 server_netmask = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 server_network_ipv6 = :: Mon Dec 08 15:42:53 2014 us=487888 server_netbits_ipv6 = 0 Mon Dec 08 15:42:53 2014 us=487888 server_bridge_ip = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 server_bridge_netmask = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 server_bridge_pool_start = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 server_bridge_pool_end = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_defined = DISABLED Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_start = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_end = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_netmask = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_persist_filename = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 ifconfig_pool_persist_refresh_freq = 600 Mon Dec 08 15:42:53 2014 us=487888 ifconfig_ipv6_pool_defined = DISABLED Mon Dec 08 15:42:53 2014 us=487888 ifconfig_ipv6_pool_base = :: Mon Dec 08 15:42:53 2014 us=487888 ifconfig_ipv6_pool_netbits = 0 Mon Dec 08 15:42:53 2014 us=487888 n_bcast_buf = 256 Mon Dec 08 15:42:53 2014 us=487888 tcp_queue_limit = 64 Mon Dec 08 15:42:53 2014 us=487888 real_hash_size = 256 Mon Dec 08 15:42:53 2014 us=487888 virtual_hash_size = 256 Mon Dec 08 15:42:53 2014 us=487888 client_connect_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 learn_address_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 client_disconnect_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 client_config_dir = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 ccd_exclusive = DISABLED Mon Dec 08 15:42:53 2014 us=487888 tmp_dir = 'C:\Users\MATTHI~1.SEE\AppData\Local\Temp\' Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_defined = DISABLED Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_local = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_remote_netmask = 0.0.0.0 Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_ipv6_defined = DISABLED Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_ipv6_local = ::/0 Mon Dec 08 15:42:53 2014 us=487888 push_ifconfig_ipv6_remote = :: Mon Dec 08 15:42:53 2014 us=487888 enable_c2c = DISABLED Mon Dec 08 15:42:53 2014 us=487888 duplicate_cn = DISABLED Mon Dec 08 15:42:53 2014 us=487888 cf_max = 0 Mon Dec 08 15:42:53 2014 us=487888 cf_per = 0 Mon Dec 08 15:42:53 2014 us=487888 max_clients = 1024 Mon Dec 08 15:42:53 2014 us=487888 max_routes_per_client = 256 Mon Dec 08 15:42:53 2014 us=487888 auth_user_pass_verify_script = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 auth_user_pass_verify_script_via_file = DISABLED Mon Dec 08 15:42:53 2014 us=487888 client = ENABLED Mon Dec 08 15:42:53 2014 us=487888 pull = ENABLED Mon Dec 08 15:42:53 2014 us=487888 auth_user_pass_file = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 show_net_up = DISABLED Mon Dec 08 15:42:53 2014 us=487888 route_method = 0 Mon Dec 08 15:42:53 2014 us=487888 ip_win32_defined = DISABLED Mon Dec 08 15:42:53 2014 us=487888 ip_win32_type = 3 Mon Dec 08 15:42:53 2014 us=487888 dhcp_masq_offset = 0 Mon Dec 08 15:42:53 2014 us=487888 dhcp_lease_time = 31536000 Mon Dec 08 15:42:53 2014 us=487888 tap_sleep = 0 Mon Dec 08 15:42:53 2014 us=487888 dhcp_options = DISABLED Mon Dec 08 15:42:53 2014 us=487888 dhcp_renew = DISABLED Mon Dec 08 15:42:53 2014 us=487888 dhcp_pre_release = DISABLED Mon Dec 08 15:42:53 2014 us=487888 dhcp_release = DISABLED Mon Dec 08 15:42:53 2014 us=487888 domain = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 netbios_scope = '[UNDEF]' Mon Dec 08 15:42:53 2014 us=487888 netbios_node_type = 0 Mon Dec 08 15:42:53 2014 us=487888 disable_nbt = DISABLED Mon Dec 08 15:42:53 2014 us=487888 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014 Mon Dec 08 15:42:53 2014 us=487888 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08 Enter Management Password: Mon Dec 08 15:42:53 2014 us=488888 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Mon Dec 08 15:42:53 2014 us=488888 Need hold release from management interface, waiting... Mon Dec 08 15:42:53 2014 us=980565 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Mon Dec 08 15:42:54 2014 us=80499 MANAGEMENT: CMD 'state on' Mon Dec 08 15:42:54 2014 us=80499 MANAGEMENT: CMD 'log all on' Mon Dec 08 15:42:54 2014 us=202421 MANAGEMENT: CMD 'hold off' Mon Dec 08 15:42:54 2014 us=202421 MANAGEMENT: CMD 'hold release' Mon Dec 08 15:42:54 2014 us=461266 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ] Mon Dec 08 15:42:54 2014 us=462265 Socket Buffers: R=[8192->8192] S=[8192->8192] Mon Dec 08 15:42:54 2014 us=462265 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ] Mon Dec 08 15:42:54 2014 us=462265 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' Mon Dec 08 15:42:54 2014 us=462265 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' Mon Dec 08 15:42:54 2014 us=462265 Local Options hash (VER=V4): '3514370b' Mon Dec 08 15:42:54 2014 us=462265 Expected Remote Options hash (VER=V4): '239669a8' Mon Dec 08 15:42:54 2014 us=462265 UDPv4 link local (bound): [undef] Mon Dec 08 15:42:54 2014 us=462265 UDPv4 link remote: [AF_INET]91.114.x.x:1194 Mon Dec 08 15:42:54 2014 us=462265 MANAGEMENT: >STATE:1418049774,WAIT,,, Mon Dec 08 15:42:54 2014 us=734088 MANAGEMENT: >STATE:1418049774,AUTH,,, Mon Dec 08 15:42:54 2014 us=734088 TLS: Initial packet from [AF_INET]91.114.x.x:1194, sid=a66c84d1 3a918531 Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: nsCertType=SERVER Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at Mon Dec 08 15:42:55 2014 us=945288 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon Dec 08 15:42:55 2014 us=945288 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Dec 08 15:42:55 2014 us=945288 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon Dec 08 15:42:55 2014 us=945288 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Dec 08 15:42:55 2014 us=945288 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Mon Dec 08 15:42:55 2014 us=945288 [gandalf] Peer Connection Initiated with [AF_INET]91.114.x.x:1194 Mon Dec 08 15:42:57 2014 us=144496 MANAGEMENT: >STATE:1418049777,GET_CONFIG,,, Mon Dec 08 15:42:58 2014 us=343704 SENT CONTROL [gandalf]: 'PUSH_REQUEST' (status=1) Mon Dec 08 15:42:58 2014 us=883348 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: timers and/or timeouts modified Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: --ifconfig/up options modified Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: route options modified Mon Dec 08 15:42:58 2014 us=883348 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mon Dec 08 15:42:58 2014 us=883348 MANAGEMENT: >STATE:1418049778,ASSIGN_IP,,10.8.0.6, Mon Dec 08 15:42:58 2014 us=883348 open_tun, tt->ipv6=0 Mon Dec 08 15:42:58 2014 us=883348 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}.tap Mon Dec 08 15:42:58 2014 us=883348 TAP-Windows Driver Version 9.21 Mon Dec 08 15:42:58 2014 us=883348 TAP-Windows MTU=1500 Mon Dec 08 15:42:58 2014 us=893341 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Mon Dec 08 15:42:58 2014 us=893341 Successful ARP Flush on interface [21] {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} Mon Dec 08 15:43:03 2014 us=52663 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up Mon Dec 08 15:43:03 2014 us=52663 MANAGEMENT: >STATE:1418049783,ADD_ROUTES,,, Mon Dec 08 15:43:03 2014 us=52663 C:\Windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.5 Mon Dec 08 15:43:03 2014 us=52663 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4 Mon Dec 08 15:43:03 2014 us=52663 Route addition via IPAPI succeeded [adaptive] Mon Dec 08 15:43:03 2014 us=52663 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Mon Dec 08 15:43:03 2014 us=52663 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4 Mon Dec 08 15:43:03 2014 us=52663 Route addition via IPAPI succeeded [adaptive] Mon Dec 08 15:43:03 2014 us=52663 Initialization Sequence Completed Mon Dec 08 15:43:03 2014 us=52663 MANAGEMENT: >STATE:1418049783,CONNECTED,SUCCESS,10.8.0.6,91.114.x.x [/code] server config: [code] server 10.8.0.0 255.255.255.0 port 1194 proto udp dev tun dh dh1024.pem ca ca.crt key gandalf.key cert gandalf.crt client-to-client push "route 192.168.2.0 255.255.255.0" ping-timer-rem keepalive 20 180 verb 4 mute 50 [/code] Client config: [code] client dev tun proto udp remote 91.114.x.x 1194 ca ca.crt cert Matthias.crt key Matthias.key ns-cert-type server verb 4 #mute 50 [/code] sorry for that! now its correct! Thanks Matthias

except this [quote]Mon Dec 08 15:40:22 2014 us=741500 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2 Mon Dec 08 15:40:22 2014 us=741500 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2 Mon Dec 08 15:40:22 2014 us=741500 Route addition via IPAPI failed [adaptive][/quote] everything else looks ok, cant you ping 10.8.0.1 from your client? also can you post the output of netstat -nr on your server before and after vpn is up? Michael.

Sorry for my late reply, but i got water on my laptop :o :o and so i had to get a new one... Ok, i rebooted my server and thats the netstat -nr result: [code] IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 40 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 40 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 40 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 40 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 40 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Documents and Settings\Administrator>[/code] Then i started the connection on my server with the config above and thats the result of netstat -nr [code] IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 40 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 40 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 40 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 40 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 40 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Documents and Settings\Administrator>[/code] And no i connected my laptop over the internet and thats the result of netstat -nr [code] IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 40 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 40 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 40 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 40 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 40 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Program Files\Support Tools>[/code] No difference at all... i think the route command does not work, or do i always have to add the route manually?! I have one question. My server is behind the router (which connects my lan and the server to the internet). I read that i have to add the route on the router but in my case, when iam connecting over VPN to my server i have to add the route on my server!? Matthias

i see no tun based routes on your server after vpn is up... ipconfig /all reports vpn interface? if not,are you running openvpn with admin rights? also you may reinstall openvpn in case the tap driver is not installed correctly. Michael.

It looks like you have no TAP adapters installed:[quote]>netstat -nr Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 50 04 d0 50 0f ...... 3Com EtherLink XL 10/100 PCI For Complete PC Man agement NIC (3C905C-TX) - VirtualBox Bridged Networking Driver Miniport [b]0x20003 ...00 ff 06 a5 9d 3a ...... TAP-Windows Adapter V9 0x30004 ...00 ff 4c 0b 34 e6 ...... TAP-Windows Adapter V9 #2 0x40005 ...00 ff c4 f6 b4 75 ...... TAP-Windows Adapter V9 #3[/b] ===========================================================================[/quote]

Hey guys iam sorry i made a big mistake... i recovered my server and then i had the bridge between the tap device and the network card online. Once more here the output of ipconfig /all and netstat -nr. I restarted my server and then i got the two outputs, then i connected on my server over OpenVPN GUI and got the output and last but not least i connected over my notebook (3G connection) to my server! after restart ipconfig /all [code]C:\Program Files\Support Tools>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : gandalf Primary Dns Suffix . . . . . . . : seeslenet.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : seeslenet.local Ethernet adapter tap-bridge: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TAP-Windows Adapter V9 Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Autoconfiguration IP Address. . . : 169.254.152.242 Subnet Mask . . . . . . . . . . . : 255.255.0.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 192.168.2.254 Ethernet adapter homenetwork: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi t Ethernet NIC Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.2.254 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.2.1 DNS Servers . . . . . . . . . . . : 192.168.2.254 Primary WINS Server . . . . . . . : 192.168.2.254 NetBIOS over Tcpip. . . . . . . . : Disabled C:\Program Files\Support Tools>[/code] after restart netstat -nr [code]C:\Program Files\Support Tools>netstat -nr IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9 0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E thernet NIC =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 10 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 169.254.0.0 255.255.0.0 169.254.152.242 169.254.152.242 30 169.254.152.242 255.255.255.255 127.0.0.1 127.0.0.1 30 169.254.255.255 255.255.255.255 169.254.152.242 169.254.152.242 30 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 10 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 10 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 10 224.0.0.0 240.0.0.0 169.254.152.242 169.254.152.242 30 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 10 255.255.255.255 255.255.255.255 169.254.152.242 169.254.152.242 1 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Program Files\Support Tools>[/code] after connection over GUI ipconfig /all [code] C:\Program Files\Support Tools>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : gandalf Primary Dns Suffix . . . . . . . : seeslenet.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : seeslenet.local Ethernet adapter tap-bridge: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TAP-Windows Adapter V9 Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Autoconfiguration IP Address. . . : 169.254.152.242 Subnet Mask . . . . . . . . . . . : 255.255.0.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 192.168.2.254 Ethernet adapter homenetwork: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi t Ethernet NIC Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.2.254 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.2.1 DNS Servers . . . . . . . . . . . : 192.168.2.254 Primary WINS Server . . . . . . . : 192.168.2.254 NetBIOS over Tcpip. . . . . . . . : Disabled C:\Program Files\Support Tools>[/code] after connection over GUI netstat -nr [code]C:\Program Files\Support Tools>netstat -nr IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9 0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E thernet NIC =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 10 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 169.254.0.0 255.255.0.0 169.254.152.242 169.254.152.242 30 169.254.152.242 255.255.255.255 127.0.0.1 127.0.0.1 30 169.254.255.255 255.255.255.255 169.254.152.242 169.254.152.242 30 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 10 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 10 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 10 224.0.0.0 240.0.0.0 169.254.152.242 169.254.152.242 30 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 10 255.255.255.255 255.255.255.255 169.254.152.242 169.254.152.242 1 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Program Files\Support Tools>[/code] after connection from notebook ipconfig /all [code]C:\Program Files\Support Tools>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : gandalf Primary Dns Suffix . . . . . . . : seeslenet.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : seeslenet.local Ethernet adapter tap-bridge: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TAP-Windows Adapter V9 Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Autoconfiguration IP Address. . . : 169.254.152.242 Subnet Mask . . . . . . . . . . . : 255.255.0.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 192.168.2.254 Ethernet adapter homenetwork: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi t Ethernet NIC Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.2.254 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.2.1 DNS Servers . . . . . . . . . . . : 192.168.2.254 Primary WINS Server . . . . . . . : 192.168.2.254 NetBIOS over Tcpip. . . . . . . . : Disabled C:\Program Files\Support Tools>[/code] after connection from notebook netstat -nr [code]C:\Program Files\Support Tools>netstat -nr IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9 0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E thernet NIC =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.254 10 10.1.1.0 255.255.255.0 192.168.2.254 192.168.2.254 1 10.8.0.0 255.255.255.252 10.8.0.1 10.8.0.1 30 10.8.0.1 255.255.255.255 127.0.0.1 127.0.0.1 30 10.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 30 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.2.0 255.255.255.0 192.168.2.254 192.168.2.254 10 192.168.2.254 255.255.255.255 127.0.0.1 127.0.0.1 10 192.168.2.255 255.255.255.255 192.168.2.254 192.168.2.254 10 224.0.0.0 240.0.0.0 10.8.0.1 10.8.0.1 30 224.0.0.0 240.0.0.0 192.168.2.254 192.168.2.254 10 255.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 1 255.255.255.255 255.255.255.255 192.168.2.254 192.168.2.254 1 Default Gateway: 192.168.2.1 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 10.1.1.0 255.255.255.0 192.168.2.254 1 C:\Program Files\Support Tools>[/code] after connection from notebook => netstat -nr "ON NOTEBOOK" [code]C:\Users\Nina>netstat -nr =========================================================================== Schnittstellenliste 31...00 ff 60 2c eb bb ......TAP-Windows Adapter V9 14...c0 cb 38 b5 7e 75 ......Bluetooth-Gerät (PAN) 12...f0 4d a2 ba 81 a0 ......Realtek PCIe GBE Family Controller 11...c0 cb 38 79 16 ac ......DW 1501 Wireless-N WLAN Half-Mini Card 1...........................Software Loopback Interface 1 13...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter 16...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #2 32...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2 33...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4 19...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #4 17...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #3 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #5 22...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #7 23...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #8 21...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #6 24...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #9 25...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #10 26...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #11 30...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4-Routentabelle =========================================================================== Aktive Routen: Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik 0.0.0.0 0.0.0.0 172.20.10.1 172.20.10.4 25 10.8.0.0 255.255.255.0 10.8.0.5 10.8.0.6 20 10.8.0.4 255.255.255.252 Auf Verbindung 10.8.0.6 276 10.8.0.6 255.255.255.255 Auf Verbindung 10.8.0.6 276 10.8.0.7 255.255.255.255 Auf Verbindung 10.8.0.6 276 127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306 127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306 127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 172.20.10.0 255.255.255.240 Auf Verbindung 172.20.10.4 281 172.20.10.4 255.255.255.255 Auf Verbindung 172.20.10.4 281 172.20.10.15 255.255.255.255 Auf Verbindung 172.20.10.4 281 192.168.2.0 255.255.255.0 10.8.0.5 10.8.0.6 20 224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306 224.0.0.0 240.0.0.0 Auf Verbindung 10.8.0.6 276 224.0.0.0 240.0.0.0 Auf Verbindung 172.20.10.4 281 255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 255.255.255.255 255.255.255.255 Auf Verbindung 10.8.0.6 276 255.255.255.255 255.255.255.255 Auf Verbindung 172.20.10.4 281 =========================================================================== Ständige Routen: Netzwerkadresse Netzmaske Gatewayadresse Metrik 169.254.0.0 255.255.0.0 192.168.2.12 1 =========================================================================== IPv6-Routentabelle =========================================================================== Aktive Routen: If Metrik Netzwerkziel Gateway 30 58 ::/0 Auf Verbindung 1 306 ::1/128 Auf Verbindung 30 58 2001::/32 Auf Verbindung 30 306 2001:0:5ef5:79fb:83:cc4d:a66f:315f/128 Auf Verbindung 31 276 fe80::/64 Auf Verbindung 11 281 fe80::/64 Auf Verbindung 30 306 fe80::/64 Auf Verbindung 30 306 fe80::83:cc4d:a66f:315f/128 Auf Verbindung 31 276 fe80::111:842a:d9e:9b21/128 Auf Verbindung 11 281 fe80::253c:80c0:85b2:d443/128 Auf Verbindung 1 306 ff00::/8 Auf Verbindung 30 306 ff00::/8 Auf Verbindung 31 276 ff00::/8 Auf Verbindung 11 281 ff00::/8 Auf Verbindung =========================================================================== Ständige Routen: Keine C:\Users\Nina>[/code] on my server i run openvpn as an administrator on the notebook i run it as "run as" Administrator! i hope this information helps, sorry for that mistake one post before... Thx for your help and Best regards Matthias

please re-post the current server config and logs used. Michael.

OK! Server konfig [code] server 10.8.0.0 255.255.255.0 port 1194 proto udp dev tun dh dh1024.pem ca ca.crt key gandalf.key cert gandalf.crt client-to-client push "route 192.168.2.0 255.255.255.0" # float ping-timer-rem keepalive 20 180 verb 4 mute 50 [/code] Client konfig [code]client dev tun proto udp remote 91.114.121.70 1194 ca ca.crt cert Matthias.crt key Matthias.key ns-cert-type server verb 4 #mute 50[/code]

OpenVPN on Windows 2003 Server Routing (tun) Config Problems

seesle

The second thing is that i tried to add the route on my new router

Is this the right way?

maikcat

The second thing is that i tried to add the route on my new router
Is this the right way?

yes it is,
disable its firewall for testing in case it drops traffic to openvpn....

Michael.

seesle

Hey

i tried disabling it but no change...
Ping is not working to 10.8.0.1 also not to 192.168.2.254

Whats happening here? Why is the ping not working, i only changed the router (same settings)... With the old one it was working! But on that one i was not able to add the route on the internal interface...

Thanks for help

Matthias

maikcat

btw i noticed that you have a persistent route for 10.1.1.0 network,
what is that?

can you post the output of netstat -nr on vpn server AFTER vpn is up?

Michael.

seesle

here it is:

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      169.254.0.0      255.255.0.0  169.254.152.242  169.254.152.242     30
  169.254.152.242  255.255.255.255        127.0.0.1        127.0.0.1     30
  169.254.255.255  255.255.255.255  169.254.152.242  169.254.152.242     30
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0  169.254.152.242  169.254.152.242     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255  169.254.152.242  169.254.152.242      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

the 10.8.0.x route is missing?!

I dont know what the 10.1.1.0 is for... maybe some earlier tests? i can try to delete it because it should not have any influence to my problem... should it?

seesle

Hey,

Today i tried some other things! Here is an update of the routing table => i did not realize that the route is added 10 seconds after vpn server is up...
but i did not change anything in the config ...

here netstat -nr on server before vpn connection is up

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
         10.8.0.0  255.255.255.252         10.8.0.1         10.8.0.1     30
         10.8.0.1  255.255.255.255        127.0.0.1        127.0.0.1     30
   10.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1     30
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0         10.8.0.1         10.8.0.1     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

and here it is after connection is up

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
         10.8.0.0  255.255.255.252         10.8.0.1         10.8.0.1     30
         10.8.0.1  255.255.255.255        127.0.0.1        127.0.0.1     30
   10.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1     30
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0         10.8.0.1         10.8.0.1     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

and once more the output of netstat -nr on the client before vpn is up:

C:\Users\Nina>netstat -nr
===========================================================================
Schnittstellenliste
 30...00 ff 60 2c eb bb ......TAP-Windows Adapter V9
 13...c0 cb 38 b5 7e 75 ......Bluetooth-Gerät (PAN)
 11...f0 4d a2 ba 81 a0 ......Realtek PCIe GBE Family Controller
 10...c0 cb 38 79 16 ac ......DW 1501 Wireless-N WLAN Half-Mini Card
  1...........................Software Loopback Interface 1
 12...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 15...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #2
 32...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
 18...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #4
 16...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #3
 19...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #5
 21...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #7
 22...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #8
 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #6
 23...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #9
 24...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #10
 25...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #11
 29...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0      172.20.10.1      172.20.10.4     25
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      172.20.10.0  255.255.255.240   Auf Verbindung       172.20.10.4    281
      172.20.10.4  255.255.255.255   Auf Verbindung       172.20.10.4    281
     172.20.10.15  255.255.255.255   Auf Verbindung       172.20.10.4    281
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung       172.20.10.4    281
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung       172.20.10.4    281
===========================================================================
Ständige Routen:
  Netzwerkadresse          Netzmaske  Gatewayadresse  Metrik
      169.254.0.0      255.255.0.0     192.168.2.12       1
===========================================================================

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
 29     58 ::/0                     Auf Verbindung
  1    306 ::1/128                  Auf Verbindung
 29     58 2001::/32                Auf Verbindung
 29    306 2001:0:9d38:6abd:242b:19bb:53eb:f5fb/128
                                    Auf Verbindung
 10    281 fe80::/64                Auf Verbindung
 29    306 fe80::/64                Auf Verbindung
 29    306 fe80::242b:19bb:53eb:f5fb/128
                                    Auf Verbindung
 10    281 fe80::253c:80c0:85b2:d443/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 29    306 ff00::/8                 Auf Verbindung
 10    281 ff00::/8                 Auf Verbindung
===========================================================================
Ständige Routen:
  Keine

C:\Users\Nina>

and on client after vpn is up

C:\Users\Nina>netstat -nr
===========================================================================
Schnittstellenliste
 30...00 ff 60 2c eb bb ......TAP-Windows Adapter V9
 13...c0 cb 38 b5 7e 75 ......Bluetooth-Gerät (PAN)
 11...f0 4d a2 ba 81 a0 ......Realtek PCIe GBE Family Controller
 10...c0 cb 38 79 16 ac ......DW 1501 Wireless-N WLAN Half-Mini Card
  1...........................Software Loopback Interface 1
 12...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 15...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #2
 32...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
 33...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
 18...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #4
 16...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #3
 19...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #5
 21...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #7
 22...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #8
 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #6
 23...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #9
 24...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #10
 25...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #11
 29...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0      172.20.10.1      172.20.10.4     25
         10.8.0.0    255.255.255.0         10.8.0.5         10.8.0.6     20
         10.8.0.4  255.255.255.252   Auf Verbindung          10.8.0.6    276
         10.8.0.6  255.255.255.255   Auf Verbindung          10.8.0.6    276
         10.8.0.7  255.255.255.255   Auf Verbindung          10.8.0.6    276
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      172.20.10.0  255.255.255.240   Auf Verbindung       172.20.10.4    281
      172.20.10.4  255.255.255.255   Auf Verbindung       172.20.10.4    281
     172.20.10.15  255.255.255.255   Auf Verbindung       172.20.10.4    281
      192.168.2.0    255.255.255.0         10.8.0.5         10.8.0.6     20
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung          10.8.0.6    276
        224.0.0.0        240.0.0.0   Auf Verbindung       172.20.10.4    281
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung          10.8.0.6    276
  255.255.255.255  255.255.255.255   Auf Verbindung       172.20.10.4    281
===========================================================================
Ständige Routen:
  Netzwerkadresse          Netzmaske  Gatewayadresse  Metrik
      169.254.0.0      255.255.0.0     192.168.2.12       1
===========================================================================

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
 29     58 ::/0                     Auf Verbindung
  1    306 ::1/128                  Auf Verbindung
 29     58 2001::/32                Auf Verbindung
 29    306 2001:0:9d38:6abd:343d:1f96:a66f:106f/128
                                    Auf Verbindung
 30    276 fe80::/64                Auf Verbindung
 10    281 fe80::/64                Auf Verbindung
 29    306 fe80::/64                Auf Verbindung
 30    276 fe80::111:842a:d9e:9b21/128
                                    Auf Verbindung
 10    281 fe80::253c:80c0:85b2:d443/128
                                    Auf Verbindung
 29    306 fe80::343d:1f96:a66f:106f/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 29    306 ff00::/8                 Auf Verbindung
 30    276 ff00::/8                 Auf Verbindung
 10    281 ff00::/8                 Auf Verbindung
===========================================================================
Ständige Routen:
  Keine

C:\Users\Nina>

seesle

BTW... this is the log on my server after vpn is up...

does anybody know what the last entry: "MULTI: bad source address from client ..." mean?

Sat Dec 27 19:16:49 2014 us=567500 Current Parameter Settings:
Sat Dec 27 19:16:49 2014 us=567500   config = 'server_tun.ovpn'
Sat Dec 27 19:16:49 2014 us=567500   mode = 1
Sat Dec 27 19:16:49 2014 us=567500   show_ciphers = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   show_digests = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   show_engines = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   genkey = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   key_pass_file = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   show_tls_ciphers = DISABLED
Sat Dec 27 19:16:49 2014 us=567500 Connection profiles [default]:
Sat Dec 27 19:16:49 2014 us=567500   proto = udp
Sat Dec 27 19:16:49 2014 us=567500   local = '192.168.2.254'
Sat Dec 27 19:16:49 2014 us=567500   local_port = 1194
Sat Dec 27 19:16:49 2014 us=567500   remote = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   remote_port = 1194
Sat Dec 27 19:16:49 2014 us=567500   remote_float = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   bind_defined = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   bind_local = ENABLED
Sat Dec 27 19:16:49 2014 us=567500   connect_retry_seconds = 5
Sat Dec 27 19:16:49 2014 us=567500   connect_timeout = 10
Sat Dec 27 19:16:49 2014 us=567500   connect_retry_max = 0
Sat Dec 27 19:16:49 2014 us=567500   socks_proxy_server = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   socks_proxy_port = 0
Sat Dec 27 19:16:49 2014 us=567500   socks_proxy_retry = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   tun_mtu = 1500
Sat Dec 27 19:16:49 2014 us=567500   tun_mtu_defined = ENABLED
Sat Dec 27 19:16:49 2014 us=567500   link_mtu = 1500
Sat Dec 27 19:16:49 2014 us=567500   link_mtu_defined = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   tun_mtu_extra = 0
Sat Dec 27 19:16:49 2014 us=567500   tun_mtu_extra_defined = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   mtu_discover_type = -1
Sat Dec 27 19:16:49 2014 us=567500   fragment = 0
Sat Dec 27 19:16:49 2014 us=567500   mssfix = 1450
Sat Dec 27 19:16:49 2014 us=567500   explicit_exit_notification = 0
Sat Dec 27 19:16:49 2014 us=567500 Connection profiles END
Sat Dec 27 19:16:49 2014 us=567500   remote_random = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   ipchange = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   dev = 'tun'
Sat Dec 27 19:16:49 2014 us=567500   dev_type = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   dev_node = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   lladdr = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   topology = 1
Sat Dec 27 19:16:49 2014 us=567500   tun_ipv6 = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_local = '10.8.0.1'
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_remote_netmask = '10.8.0.2'
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_noexec = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_nowarn = DISABLED
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_ipv6_local = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_ipv6_netbits = 0
Sat Dec 27 19:16:49 2014 us=567500   ifconfig_ipv6_remote = '[UNDEF]'
Sat Dec 27 19:16:49 2014 us=567500 NOTE: --mute triggered...
Sat Dec 27 19:16:49 2014 us=567500 241 variation(s) on previous 50 message(s) suppressed by --mute
Sat Dec 27 19:16:49 2014 us=567500 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sat Dec 27 19:16:49 2014 us=567500 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Sat Dec 27 19:16:49 2014 us=567500 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sat Dec 27 19:16:49 2014 us=567500 Need hold release from management interface, waiting...
Sat Dec 27 19:16:50 2014 us=20625 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sat Dec 27 19:16:50 2014 us=114375 MANAGEMENT: CMD 'state on'
Sat Dec 27 19:16:50 2014 us=114375 MANAGEMENT: CMD 'log all on'
Sat Dec 27 19:16:50 2014 us=161250 MANAGEMENT: CMD 'hold off'
Sat Dec 27 19:16:50 2014 us=176875 MANAGEMENT: CMD 'hold release'
Sat Dec 27 19:16:50 2014 us=270625 Diffie-Hellman initialized with 1024 bit key
Sat Dec 27 19:16:50 2014 us=270625 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Dec 27 19:16:50 2014 us=270625 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Dec 27 19:16:50 2014 us=270625 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Dec 27 19:16:50 2014 us=270625 MANAGEMENT: >STATE:1419704210,ASSIGN_IP,,10.8.0.1,
Sat Dec 27 19:16:50 2014 us=270625 open_tun, tt->ipv6=0
Sat Dec 27 19:16:50 2014 us=286250 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Sat Dec 27 19:16:50 2014 us=286250 TAP-Windows Driver Version 9.9 
Sat Dec 27 19:16:50 2014 us=286250 TAP-Windows MTU=1500
Sat Dec 27 19:16:50 2014 us=286250 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat Dec 27 19:16:50 2014 us=286250 Sleeping for 10 seconds...
Sat Dec 27 19:17:00 2014 us=286250 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index.  
Sat Dec 27 19:17:00 2014 us=286250 MANAGEMENT: >STATE:1419704220,ADD_ROUTES,,,
Sat Dec 27 19:17:00 2014 us=286250 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat Dec 27 19:17:00 2014 us=286250 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Dec 27 19:17:00 2014 us=301875 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sat Dec 27 19:17:00 2014 us=301875 UDPv4 link local (bound): [AF_INET]192.168.2.254:1194
Sat Dec 27 19:17:00 2014 us=301875 UDPv4 link remote: [undef]
Sat Dec 27 19:17:00 2014 us=301875 MULTI: multi_init called, r=256 v=256
Sat Dec 27 19:17:00 2014 us=301875 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Dec 27 19:17:00 2014 us=301875 Initialization Sequence Completed
Sat Dec 27 19:17:00 2014 us=301875 MANAGEMENT: >STATE:1419704220,CONNECTED,SUCCESS,10.8.0.1,
Sat Dec 27 19:32:28 2014 us=208125 MULTI: multi_create_instance called
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Re-using SSL/TLS context
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Local Options hash (VER=V4): '239669a8'
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 Expected Remote Options hash (VER=V4): '3514370b'
Sat Dec 27 19:32:28 2014 us=208125 89.144.239.144:64338 TLS: Initial packet from [AF_INET]89.144.239.144:64338, sid=4e419fbe a93203f5
Sat Dec 27 19:32:29 2014 us=301875 89.144.239.144:64338 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Sat Dec 27 19:32:29 2014 us=301875 89.144.239.144:64338 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at
Sat Dec 27 19:32:29 2014 us=473750 89.144.239.144:64338 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 27 19:32:29 2014 us=473750 89.144.239.144:64338 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 27 19:32:29 2014 us=473750 89.144.239.144:64338 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 27 19:32:29 2014 us=473750 89.144.239.144:64338 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 27 19:32:31 2014 us=739375 89.144.239.144:64338 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Dec 27 19:32:31 2014 us=739375 89.144.239.144:64338 [notebook] Peer Connection Initiated with [AF_INET]89.144.239.144:64338
Sat Dec 27 19:32:31 2014 us=739375 notebook/89.144.239.144:64338 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sat Dec 27 19:32:31 2014 us=739375 notebook/89.144.239.144:64338 MULTI: Learn: 10.8.0.6 -> notebook/89.144.239.144:64338
Sat Dec 27 19:32:31 2014 us=739375 notebook/89.144.239.144:64338 MULTI: primary virtual IP for notebook/89.144.239.144:64338: 10.8.0.6
Sat Dec 27 19:32:34 2014 us=98750 notebook/89.144.239.144:64338 PUSH: Received control message: 'PUSH_REQUEST'
Sat Dec 27 19:32:34 2014 us=98750 notebook/89.144.239.144:64338 send_push_reply(): safe_cap=940
Sat Dec 27 19:32:34 2014 us=98750 notebook/89.144.239.144:64338 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sat Dec 27 19:32:34 2014 us=583125 notebook/89.144.239.144:64338 MULTI: bad source address from client [x&¨], packet dropped

« Previous Page