client-to-client, ping works, RDP doesn't.

seeker

Hi folks,

I am trying to setup OpenVPN so I can connect between home and work machines.
My OpenVPN server is a VM running Ubuntu 14;
My work machine is a domain joined windows server 2013;
My home machine is a non domain joined windows 8.1.

I can ping from clients to server or between clients just fine, but no luck when it comes to RDP or accessing windows file shares between clients.

Any help is much appreciated!
Here's my setup and logs:

server.conf

port 6669
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 172.19.169.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 172.19.169.0 255.255.255.0
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC   # AES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 6

work machine client.ovpn

client
dev tun
proto udp
remote my.vpnserver.address 6669
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert work.crt
key work.key
remote-cert-tls server
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 6

home machine client.ovpn

client
dev tun
proto udp
remote my.vpnserver.address 6669
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert home.crt
key home.key
remote-cert-tls server
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 6

VPN server firewall:
iptables -vnL

Chain INPUT (policy ACCEPT 117 packets, 5608 bytes)
pkts bytes target     prot opt in     out     source               destination
   14  5000 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:68
  304 22338 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
5005  755K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:3389
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:6669
    0     0 ACCEPT     all  --  tun0   *       0.0.0.0/0            0.0.0.0/0
 
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
    0     0 ACCEPT     all  --  *      *       172.19.169.0/24      0.0.0.0/0
    0     0 ACCEPT     all  --  tun0   *       0.0.0.0/0            0.0.0.0/0
 
Chain OUTPUT (policy ACCEPT 5882 packets, 2069K bytes)
pkts bytes target     prot opt in     out     source               destination

iptables -t nat -vnL

Chain PREROUTING (policy ACCEPT 1184 packets, 69390 bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain INPUT (policy ACCEPT 1184 packets, 69390 bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain OUTPUT (policy ACCEPT 2956 packets, 208K bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain POSTROUTING (policy ACCEPT 2956 packets, 208K bytes)
pkts bytes target     prot opt in     out     source               destination
    0     0 MASQUERADE  all  --  *      eth0    172.19.169.0/24      0.0.0.0/0

iptables -t mangle -vnL

Chain PREROUTING (policy ACCEPT 63587 packets, 7327K bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain INPUT (policy ACCEPT 63587 packets, 7327K bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain OUTPUT (policy ACCEPT 113K packets, 30M bytes)
pkts bytes target     prot opt in     out     source               destination
 
Chain POSTROUTING (policy ACCEPT 113K packets, 30M bytes)
pkts bytes target     prot opt in     out     source               destination

Logs will be posted below.

maikcat

are you using their ip address or their computer name?
did you try with your pcs firewall off?

Michael.

seeker

thanks for the prompt response maikcat!
I was using ip address.
I tried turning off home firewall, still can't get through with RDP. The work machine firewall couldn't be turned off due to domain policy at work, but I made sure the firewall allows RDP service on both private and public networks. RDP between two work machines works on through the domain network, but not through the vpn (using vpn ip addresses)
Here are the logs:

openvpn.log (at verb 3)

Wed Dec 24 21:18:49 2014 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec  1 2014
Wed Dec 24 21:18:49 2014 Diffie-Hellman initialized with 2048 bit key
Wed Dec 24 21:18:49 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Dec 24 21:18:49 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:18:49 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:18:49 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Dec 24 21:18:49 2014 ROUTE_GATEWAY 10.215.24.1/255.255.254.0 IFACE=eth0 HWADDR=00:xx:xx:xx:xx:15
Wed Dec 24 21:18:49 2014 TUN/TAP device tun0 opened
Wed Dec 24 21:18:49 2014 TUN/TAP TX queue length set to 100
Wed Dec 24 21:18:49 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 24 21:18:49 2014 /sbin/ip link set dev tun0 up mtu 1500
Wed Dec 24 21:18:49 2014 /sbin/ip addr add dev tun0 local 172.19.169.1 peer 172.19.169.2
Wed Dec 24 21:18:49 2014 /sbin/ip route add 172.19.169.0/24 via 172.19.169.2
Wed Dec 24 21:18:49 2014 GID set to nogroup
Wed Dec 24 21:18:49 2014 UID set to nobody
Wed Dec 24 21:18:49 2014 UDPv4 link local (bound): [undef]
Wed Dec 24 21:18:49 2014 UDPv4 link remote: [undef]
Wed Dec 24 21:18:49 2014 MULTI: multi_init called, r=256 v=256
Wed Dec 24 21:18:49 2014 IFCONFIG POOL: base=172.19.169.4 size=62, ipv6=0
Wed Dec 24 21:18:49 2014 IFCONFIG POOL LIST
Wed Dec 24 21:18:49 2014 Initialization Sequence Completed
Wed Dec 24 21:20:03 2014 xxx.xxx.xxx.105:51119 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.105:51119, sid=8ad6924d 72d0bebf
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 VERIFY OK: depth=1, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=MYORG CA, name=MYORGCA, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 VERIFY OK: depth=0, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=WORK, name=WORKCert, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 24 21:20:04 2014 xxx.xxx.xxx.105:51119 [WORK] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.105:51119
Wed Dec 24 21:20:04 2014 WORK/xxx.xxx.xxx.105:51119 OPTIONS IMPORT: reading client specific options from: ccd/WORK
Wed Dec 24 21:20:04 2014 WORK/xxx.xxx.xxx.105:51119 MULTI: Learn: 172.19.169.5 -> WORK/xxx.xxx.xxx.105:51119
Wed Dec 24 21:20:04 2014 WORK/xxx.xxx.xxx.105:51119 MULTI: primary virtual IP for WORK/xxx.xxx.xxx.105:51119: 172.19.169.5
Wed Dec 24 21:20:04 2014 WORK/xxx.xxx.xxx.105:51119 MULTI: internal route 172.19.169.5 -> WORK/xxx.xxx.xxx.105:51119
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.103:60754, sid=49dfa881 baf77212
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 VERIFY OK: depth=1, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=MYORG CA, name=MYORGCA, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 VERIFY OK: depth=0, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=WORK1, name=WORK1Cert, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 24 21:20:05 2014 xxx.xxx.xxx.103:60754 [WORK1] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.103:60754
Wed Dec 24 21:20:05 2014 WORK1/xxx.xxx.xxx.103:60754 OPTIONS IMPORT: reading client specific options from: ccd/WORK1
Wed Dec 24 21:20:05 2014 WORK1/xxx.xxx.xxx.103:60754 MULTI: Learn: 172.19.169.9 -> WORK1/xxx.xxx.xxx.103:60754
Wed Dec 24 21:20:05 2014 WORK1/xxx.xxx.xxx.103:60754 MULTI: primary virtual IP for WORK1/xxx.xxx.xxx.103:60754: 172.19.169.9
Wed Dec 24 21:20:05 2014 WORK1/xxx.xxx.xxx.103:60754 MULTI: internal route 172.19.169.9 -> WORK1/xxx.xxx.xxx.103:60754
Wed Dec 24 21:20:06 2014 WORK/xxx.xxx.xxx.105:51119 PUSH: Received control message: 'PUSH_REQUEST'
Wed Dec 24 21:20:06 2014 WORK/xxx.xxx.xxx.105:51119 send_push_reply(): safe_cap=940
Wed Dec 24 21:20:06 2014 WORK/xxx.xxx.xxx.105:51119 SENT CONTROL [WORK]: 'PUSH_REPLY,route 172.19.169.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.169.5 172.19.169.6' (status=1)
Wed Dec 24 21:20:07 2014 WORK1/xxx.xxx.xxx.103:60754 PUSH: Received control message: 'PUSH_REQUEST'
Wed Dec 24 21:20:07 2014 WORK1/xxx.xxx.xxx.103:60754 send_push_reply(): safe_cap=940
Wed Dec 24 21:20:07 2014 WORK1/xxx.xxx.xxx.103:60754 SENT CONTROL [WORK1]: 'PUSH_REPLY,route 172.19.169.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.169.9 172.19.169.10' (status=1)
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.69:58739, sid=0150c278 05ba99c0
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 VERIFY OK: depth=1, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=MYORG CA, name=MYORGCA, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 VERIFY OK: depth=0, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=HOME, name=HOMECert, emailAddress=xxx@xxx.com
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 24 21:20:48 2014 xxx.xxx.xxx.69:58739 [HOME] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.69:58739
Wed Dec 24 21:20:48 2014 HOME/xxx.xxx.xxx.69:58739 OPTIONS IMPORT: reading client specific options from: ccd/HOME
Wed Dec 24 21:20:48 2014 HOME/xxx.xxx.xxx.69:58739 MULTI: Learn: 172.19.169.37 -> HOME/xxx.xxx.xxx.69:58739
Wed Dec 24 21:20:48 2014 HOME/xxx.xxx.xxx.69:58739 MULTI: primary virtual IP for HOME/xxx.xxx.xxx.69:58739: 172.19.169.37
Wed Dec 24 21:20:48 2014 HOME/xxx.xxx.xxx.69:58739 MULTI: internal route 172.19.169.37 -> HOME/xxx.xxx.xxx.69:58739
Wed Dec 24 21:20:51 2014 HOME/xxx.xxx.xxx.69:58739 PUSH: Received control message: 'PUSH_REQUEST'
Wed Dec 24 21:20:51 2014 HOME/xxx.xxx.xxx.69:58739 send_push_reply(): safe_cap=940
Wed Dec 24 21:20:51 2014 HOME/xxx.xxx.xxx.69:58739 SENT CONTROL [HOME]: 'PUSH_REPLY,route 172.19.169.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.169.37 172.19.169.38' (status=1)

client logs will follow.

seeker

client.log from WORK (at verb 3)

Wed Dec 24 13:20:02 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Wed Dec 24 13:20:02 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Wed Dec 24 13:20:03 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Dec 24 13:20:03 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:03 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:03 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Dec 24 13:20:03 2014 UDPv4 link local: [undef]
Wed Dec 24 13:20:03 2014 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.20:6669
Wed Dec 24 13:20:03 2014 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.20:6669, sid=e21e24a9 c3f22498
Wed Dec 24 13:20:03 2014 VERIFY OK: depth=1, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=MYORG CA, name=MYORGCA, emailAddress=xxx@xxx.com
Wed Dec 24 13:20:03 2014 VERIFY OK: nsCertType=SERVER
Wed Dec 24 13:20:03 2014 Validating certificate key usage
Wed Dec 24 13:20:03 2014 ++ Certificate has key usage  00a0, expects 00a0
Wed Dec 24 13:20:03 2014 VERIFY KU OK
Wed Dec 24 13:20:03 2014 Validating certificate extended key usage
Wed Dec 24 13:20:03 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Dec 24 13:20:03 2014 VERIFY EKU OK
Wed Dec 24 13:20:03 2014 VERIFY OK: depth=0, C=US, ST=XX, L=Xxxxxxx, O=MYORG, CN=SERVER, name=SERVERCert, emailAddress=xxx@xxx.com
Wed Dec 24 13:20:03 2014 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 13:20:03 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:03 2014 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 13:20:03 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:03 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 24 13:20:03 2014 [SERVER] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.20:6669
Wed Dec 24 13:20:05 2014 SENT CONTROL [SERVER]: 'PUSH_REQUEST' (status=1)
Wed Dec 24 13:20:05 2014 PUSH: Received control message: 'PUSH_REPLY,route 172.19.169.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.169.5 172.19.169.6'
Wed Dec 24 13:20:05 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 24 13:20:05 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 24 13:20:05 2014 OPTIONS IMPORT: route options modified
Wed Dec 24 13:20:05 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 24 13:20:05 2014 open_tun, tt->ipv6=0
Wed Dec 24 13:20:05 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{D9F94F28-BD67-48BC-9CC1-345950434B27}.tap
Wed Dec 24 13:20:05 2014 TAP-Windows Driver Version 9.21 
Wed Dec 24 13:20:05 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 172.19.169.5/255.255.255.252 on interface {D9F94F28-BD67-48BC-9CC1-345950434B27} [DHCP-serv: 172.19.169.6, lease-time: 31536000]
Wed Dec 24 13:20:05 2014 Successful ARP Flush on interface [17] {D9F94F28-BD67-48BC-9CC1-345950434B27}
Wed Dec 24 13:20:11 2014 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Wed Dec 24 13:20:11 2014 C:\windows\system32\route.exe ADD 172.19.169.0 MASK 255.255.255.0 172.19.169.6
Wed Dec 24 13:20:11 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 24 13:20:11 2014 Route addition via IPAPI succeeded [adaptive]
Wed Dec 24 13:20:11 2014 Initialization Sequence Completed

client.log at WORK1 (at verb 3)

Wed Dec 24 13:20:04 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Wed Dec 24 13:20:04 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Wed Dec 24 13:20:04 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Dec 24 13:20:04 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:04 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:04 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Dec 24 13:20:04 2014 UDPv4 link local: [undef]
Wed Dec 24 13:20:04 2014 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.20:6669
Wed Dec 24 13:20:04 2014 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.20:6669, sid=bdf8ccf1 a0570c63
Wed Dec 24 13:20:04 2014 VERIFY OK: depth=1, C=US, ST=Xx, L=Xxxxxxx, O=MYORG, CN=MYORG CA, name=MYORGCA, emailAddress=xxx@xxx.com
Wed Dec 24 13:20:04 2014 VERIFY OK: nsCertType=SERVER
Wed Dec 24 13:20:04 2014 Validating certificate key usage
Wed Dec 24 13:20:04 2014 ++ Certificate has key usage  00a0, expects 00a0
Wed Dec 24 13:20:04 2014 VERIFY KU OK
Wed Dec 24 13:20:04 2014 Validating certificate extended key usage
Wed Dec 24 13:20:04 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Dec 24 13:20:04 2014 VERIFY EKU OK
Wed Dec 24 13:20:04 2014 VERIFY OK: depth=0, C=US, ST=Xx, L=Xxxxxxx, O=MYORG, CN=SERVER, name=SERVERCert, emailAddress=xxx@xxx.com
Wed Dec 24 13:20:05 2014 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 13:20:05 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:05 2014 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 24 13:20:05 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 24 13:20:05 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Dec 24 13:20:05 2014 [SERVER] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.20:6669
Wed Dec 24 13:20:07 2014 SENT CONTROL [SERVER]: 'PUSH_REQUEST' (status=1)
Wed Dec 24 13:20:07 2014 PUSH: Received control message: 'PUSH_REPLY,route 172.19.169.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.169.9 172.19.169.10'
Wed Dec 24 13:20:07 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 24 13:20:07 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 24 13:20:07 2014 OPTIONS IMPORT: route options modified
Wed Dec 24 13:20:07 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 24 13:20:07 2014 open_tun, tt->ipv6=0
Wed Dec 24 13:20:07 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{D69DEF3A-FE1B-4498-B75F-21D00624FAC4}.tap
Wed Dec 24 13:20:07 2014 TAP-Windows Driver Version 9.21 
Wed Dec 24 13:20:07 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 172.19.169.9/255.255.255.252 on interface {D69DEF3A-FE1B-4498-B75F-21D00624FAC4} [DHCP-serv: 172.19.169.10, lease-time: 31536000]
Wed Dec 24 13:20:07 2014 Successful ARP Flush on interface [30] {D69DEF3A-FE1B-4498-B75F-21D00624FAC4}
Wed Dec 24 13:20:12 2014 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Wed Dec 24 13:20:12 2014 C:\windows\system32\route.exe ADD 172.19.169.0 MASK 255.255.255.0 172.19.169.10
Wed Dec 24 13:20:12 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 24 13:20:12 2014 Route addition via IPAPI succeeded [adaptive]
Wed Dec 24 13:20:12 2014 Initialization Sequence Completed

seeker

I ran wireshark on an RDP from 172.19.169.5 (WORK) to 172.19.169.9 (WORK1), it looks like the initial TCP SYN call didn't get an ACK from 172.19.169.9 at all, so it fails after 3 attempts.

+---------+---------------+----------+
21:49:32,251,420   ETHER
|0   |ff|ff|ff|ff|ff|ff|00|ff|d9|f9|4f|28|08|06|00|01|08|00|06|04|00|01|00|ff|d9|f9|4f|28|ac|13|a9|05|00|00|00|00|00|00|ac|13|a9|06|

+---------+---------------+----------+
21:49:32,251,431   ETHER
|0   |00|ff|d9|f9|4f|28|00|ff|da|f9|4f|28|08|06|00|01|08|00|06|04|00|02|00|ff|da|f9|4f|28|ac|13|a9|06|00|ff|d9|f9|4f|28|ac|13|a9|0a5|

+---------+---------------+----------+
21:49:32,251,441   ETHER
|0   |00|ff|da|f9|4f|28|00|ff|d9|f9|4f|28|08|00|45|02|00|34|00|08|40|00|80|06|50|84|ac|13|a9|05|ac|13|a9|09|44|78|0d|3d|8a|9e|ce|a7|00|00|00|00|80|c2|20|00|f9|1e|00|00|02|04|05|b4|01|03|03|08|

01|01|04|02|

+---------+---------------+----------+
21:49:32,254,749   ETHER
|0   |00|ff|da|f9|4f|28|00|ff|d9|f9|4f|28|08|00|45|00|01|b8|00|09|00|00|80|11|8e|f6|ac|13|a9|05|ac|13|a9|09|01|f4|01|f4|01|a4|12|f0|b7|a0|d6|ec|be|14|42|bb|00|00|00|00|00|00|00|00|01|10|02|00|

00|00|00|00|00|00|01|9c|0d|00|00|c4|00|00|00|01|00|00|00|01|00|00|00|b8|01|01|00|04|03|00|00|34|01|01|00|00|80|01|00|07|80|0e|00|80|80|02|00|02|80|04|00|02|80|03|fd|e9|80|0b|00|01|00|0c|00|04|

00|00|1c|20|40|00|00|08|49|00|4b|00|45|00|00|00|03|00|00|30|02|01|00|00|80|01|00|05|80|02|00|02|80|04|00|02|80|03|fd|e9|80|0b|00|01|00|0c|00|04|00|00|1c|20|40|00|00|08|49|00|4b|00|45|00|00|00|

03|00|00|28|03|01|00|00|80|01|00|07|80|0e|00|80|80|02|00|02|80|04|00|02|80|03|00|03|80|0b|00|01|00|0c|00|04|00|00|1c|20|00|00|00|24|04|01|00|00|80|01|00|05|80|02|00|02|80|04|00|02|80|03|00|03|

80|0b|00|01|00|0c|00|04|00|00|1c|20|0d|00|00|18|01|52|8b|bb|c0|06|96|12|18|49|ab|9a|1c|5b|2a|51|00|00|00|05|0d|00|00|14|21|4c|a4|fa|ff|a7|f3|2d|67|48|e5|30|33|95|ae|83|0d|00|00|18|1e|2b|51|69|

05|99|1c|7d|7c|96|fc|bf|b5|87|e4|61|00|00|00|09|0d|00|00|14|4a|13|1c|81|07|03|58|45|5c|57|28|f2|0e|95|45|2f|0d|00|00|14|90|cb|80|91|3e|bb|69|6e|08|63|81|b5|ec|42|7b|1f|0d|00|00|14|40|48|b7|d5|

6e|bc|e8|85|25|e7|de|7f|00|d6|c2|d3|0d|00|00|14|fb|1d|e3|cd|f3|41|b7|ea|16|b7|e5|be|08|55|f1|20|0d|00|00|14|26|24|4d|38|ed|db|61|b3|17|2a|36|e3|d0|cf|b8|19|00|00|00|14|e3|a5|96|6a|76|37|9f|e7|

07|22|82|31|e5|ce|86|52|

+---------+---------------+----------+
21:49:32,255,856   ETHER
|0   |00|ff|da|f9|4f|28|00|ff|d9|f9|4f|28|08|00|45|00|01|9c|00|0a|00|00|80|11|8f|11|ac|13|a9|05|ac|13|a9|09|01|f4|01|f4|01|88|6e|5b|bc|d3|9a|4d|b5|ca|8e|18|00|00|00|00|00|00|00|00|85|10|f3|00|

00|00|00|00|00|00|01|80|01|00|00|08|00|00|00|00|87|00|00|58|00|00|00|01|00|00|00|01|00|00|00|4c|01|01|00|02|03|00|00|24|01|01|00|00|80|01|00|07|80|0e|00|80|80|02|00|02|80|04|00|00|80|0b|00|01|

00|0c|00|04|00|00|1c|20|00|00|00|20|02|01|00|00|80|01|00|05|80|02|00|02|80|04|00|00|80|0b|00|01|00|0c|00|04|00|00|1c|20|0a|00|00|0c|00|02|00|00|00|04|00|00|0d|00|00|34|27|8a|bd|e2|12|6a|81|3a|

ca|00|7a|63|8a|1f|74|06|ef|9e|6c|c1|f9|95|ac|14|01|fa|42|39|3e|de|bc|a2|07|49|de|1c|82|5c|b5|85|e7|47|f5|9e|50|34|d6|34|0d|00|00|18|1e|2b|51|69|05|99|1c|7d|7c|96|fc|bf|b5|87|e4|61|00|00|00|09|

0d|00|00|14|4a|13|1c|81|07|03|58|45|5c|57|28|f2|0e|95|45|2f|0d|00|00|14|40|48|b7|d5|6e|bc|e8|85|25|e7|de|7f|00|d6|c2|d3|0d|00|00|14|fb|1d|e3|cd|f3|41|b7|ea|16|b7|e5|be|08|55|f1|20|0d|00|00|14|

26|24|4d|38|ed|db|61|b3|17|2a|36|e3|d0|cf|b8|19|0d|00|00|18|01|52|8b|bb|c0|06|96|12|18|49|ab|9a|1c|5b|2a|51|00|00|00|05|14|00|00|14|21|4c|a4|fa|ff|a7|f3|2d|67|48|e5|30|33|95|ae|83|14|00|00|18|

05|d6|0c|52|12|99|2a|cd|1c|4e|d3|11|84|c8|e0|86|00|f5|3d|22|00|00|00|18|07|70|4b|12|4a|b5|77|b9|ec|9d|05|8a|90|27|9f|30|06|3b|6d|0e|

+---------+---------------+----------+
21:49:32,303,393   ETHER
|0   |00|ff|d9|f9|4f|28|00|ff|da|f9|4f|28|08|00|45|00|01|ba|4a|6d|00|00|80|11|44|90|ac|13|a9|09|ac|13|a9|05|01|f4|01|f4|01|a6|c1|62|bc|d3|9a|4d|b5|ca|8e|18|9e|e1|e6|e3|b3|1b|cb|31|85|10|f3|00|

00|00|00|00|00|00|01|9e|01|00|00|08|00|00|00|00|87|00|00|38|00|00|00|01|00|00|00|01|00|00|00|2c|01|01|00|01|00|00|00|24|01|01|00|00|80|01|00|07|80|0e|00|80|80|02|00|02|80|04|00|00|80|0b|00|01|

00|0c|00|04|00|00|1c|20|0a|00|00|0c|00|02|00|00|00|04|00|00|0a|00|00|34|18|73|c1|d7|58|2e|99|d5|89|0d|20|63|1e|37|ed|85|a6|fe|cd|82|71|12|6b|85|20|fa|ce|48|56|46|64|96|82|bc|57|89|64|3b|b4|09|

65|5f|64|ff|3e|c5|1b|e4|86|00|00|34|70|13|c2|81|5a|28|2d|7e|40|b2|9b|bc|0f|8a|bc|70|a2|da|4c|bd|83|c1|e8|c8|5a|b1|83|8e|28|03|94|10|16|36|be|39|4e|aa|5c|e3|10|26|74|09|f9|64|d7|38|0d|00|00|4a|

68|00|6f|00|73|00|74|00|2f|00|53|00|51|00|31|00|2e|00|72|00|65|00|64|00|6d|00|6f|00|6e|00|64|00|2e|00|63|00|6f|00|72|00|70|00|2e|00|6d|00|69|00|63|00|72|00|6f|00|73|00|6f|00|66|00|74|00|2e|00|

63|00|6f|00|6d|00|0d|00|00|18|1e|2b|51|69|05|99|1c|7d|7c|96|fc|bf|b5|87|e4|61|00|00|00|09|0d|00|00|14|4a|13|1c|81|07|03|58|45|5c|57|28|f2|0e|95|45|2f|0d|00|00|14|40|48|b7|d5|6e|bc|e8|85|25|e7|

de|7f|00|d6|c2|d3|14|00|00|14|fb|1d|e3|cd|f3|41|b7|ea|16|b7|e5|be|08|55|f1|20|14|00|00|18|07|70|4b|12|4a|b5|77|b9|ec|9d|05|8a|90|27|9f|30|06|3b|6d|0e|00|00|00|18|05|d6|0c|52|12|99|2a|cd|1c|4e|

d3|11|84|c8|e0|86|00|f5|3d|22|

+---------+---------------+----------+
21:49:32,304,199   ETHER
|0   |00|ff|da|f9|4f|28|00|ff|d9|f9|4f|28|08|00|45|00|05|dc|00|0b|20|00|80|11|6a|d0|ac|13|a9|05|ac|13|a9|09|01|f4|01|f4|07|cb|3d|6e|bc|d3|9a|4d|b5|ca|8e|18|9e|e1|e6|e3|b3|1b|cb|31|85|10|f3|00|

00|00|00|00|00|00|07|c3|81|00|00|08|00|00|00|01|00|00|07|9f|00|00|00|00|01|60|82|07|92|06|09|2a|86|48|86|f7|12|01|02|02|01|00|6e|82|07|81|30|82|07|7d|a0|03|02|01|05|a1|03|02|01|0e|a2|07|03|05|

00|20|00|00|00|a3|82|06|04|61|82|06|00|30|82|05|fc|a0|03|02|01|05|a1|1c|1b|1a|52|45|44|4d|4f|4e|44|2e|43|4f|52|50|2e|4d|49|43|52|4f|53|4f|46|54|2e|43|4f|4d|a2|31|30|2f|a0|03|02|01|02|a1|28|30|

26|1b|04|68|6f|73|74|1b|1e|53|51|31|2e|72|65|64|6d|6f|6e|64|2e|63|6f|72|70|2e|6d|69|63|72|6f|73|6f|66|74|2e|63|6f|6d|a3|82|05|a2|30|82|05|9e|a0|03|02|01|12|a1|03|02|01|07|a2|82|05|90|04|82|05|

8c|68|5a|46|c8|17|db|9e|89|a8|1d|ab|8d|3e|17|27|2b|5e|c3|38|87|c8|d5|72|76|35|00|2b|b8|91|9a|44|fc|d3|2a|86|b5|58|c5|97|c3|48|02|64|f5|76|d1|25|73|10|9d|e9|45|6f|45|e0|e7|bb|fa|dd|92|f7|b2|5f|

94|3e|c3|5e|d1|b6|62|1d|3f|9d|e9|2d|43|fc|79|7b|8b|49|03|b3|1b|75|89|33|cd|68|f8|65|d3|ae|c8|1a|52|01|08|c1|d0|a6|4f|26|cb|5c|a1|27|ba|77|36|fc|ad|f5|6c|dc|12|08|9a|0d|1a|a4|b2|1b|62|a6|3c|1a|

f0|11|67|18|40|11|31|92|fb|82|56|fd|53|43|56|e6|4d|69|9c|c5|35|8a|89|6c|14|5d|be|2d|bb|23|7e|80|aa|58|39|1f|70|69|44|ac|9c|6f|5d|57|c9|a1|5b|6a|7e|f5|14|83|7c|b2|e9|c3|ad|11|85|86|81|2d|d1|a7|

68|e8|bb|3a|12|d0|25|3b|1d|88|f6|a5|b4|d4|9f|8d|69|dd|02|89|9b|65|5e|02|41|07|ac|7f|30|e5|fe|3e|b7|23|88|63|70|90|b4|13|6c|ba|d1|81|45|cf|95|16|c1|e7|a1|30|3e|a7|8e|ed|71|6e|db|85|2e|aa|6a|2e|

0f|55|7f|24|a8|46|5c|c6|e4|7c|bb|69|1c|f6|a5|40|a1|fd|92|49|b8|eb|e5|62|67|57|35|63|0b|ea|5d|6e|7c|ce|0a|6b|bf|d4|f3|04|79|96|33|04|17|97|5f|0b|02|06|fa|5d|70|82|72|6a|e3|dd|f8|85|79|c1|91|a2|

fc|58|21|02|34|05|5a|16|c2|0e|cf|25|6a|dd|28|70|39|c1|36|0b|04|dc|1a|c9|95|9d|5e|22|9e|ef|a3|27|d4|90|f9|d8|94|b9|da|68|44|01|74|35|39|25|f5|a7|b3|d0|95|62|cc|40|90|40|99|da|b2|8e|44|bf|6f|c2|

38|4a|2d|9f|f5|7c|e5|72|71|70|fd|8c|ac|dd|2f|9c|1c|5c|e0|d8|0d|99|4e|11|9f|9d|a4|32|d6|be|3f|eb|f3|04|6f|20|3c|33|6c|98|24|b0|53|2b|27|09|f0|b7|30|36|fa|7d|dc|9e|4a|81|2c|22|5b|36|1d|2e|8d|b9|

58|3d|b4|1a|0d|d9|58|df|6f|9a|a9|4f|69|90|c9|cc|28|d4|f2|a5|50|c6|a8|61|8c|84|03|b9|c3|9c|43|2c|f8|a6|d5|11|d2|49|05|45|7e|97|55|99|16|b1|36|30|34|0a|30|4e|a8|67|3d|7f|bc|cd|79|3a|13|a1|d5|e2|

85|13|98|0e|f9|1d|0b|a1|0a|40|36|52|09|f1|a6|00|7b|5e|de|5f|57|fa|16|36|e1|55|e0|e3|6e|f6|ed|02|68|ef|d7|52|c5|05|6d|c1|ab|bd|e5|30|b1|2b|09|79|89|ae|8b|02|d1|38|d4|32|51|69|82|ba|21|1c|f0|7b|

3d|7b|0d|f0|7c|88|c4|43|5d|25|73|e6|6c|a7|f7|78|e7|9c|2a|90|a0|a4|2d|59|ff|2f|6e|8a|78|8c|1f|75|d1|27|67|39|bb|d0|35|cf|9a|c6|9c|e7|fc|07|04|42|95|9b|80|32|55|28|85|1e|be|eb|14|ae|3b|85|48|28|

d1|6a|88|6a|29|15|7c|47|4e|3e|ef|58|c1|05|46|d2|a2|d7|3f|ae|b1|d4|6f|89|d3|74|18|ec|44|43|67|de|6e|11|57|bb|ae|54|52|61|0e|ce|f1|c4|b4|f5|2c|6a|e6|24|bc|ba|f6|2c|2e|f5|91|71|2a|f5|46|06|82|14|

37|4d|81|16|f7|80|b5|dd|4f|fd|a0|50|1e|5f|d7|08|18|32|16|f1|7c|6e|61|df|fd|3f|fc|e2|ab|07|b7|27|d7|45|43|b7|38|44|26|fd|38|3d|f7|2a|90|d0|64|e4|3d|6b|a5|9d|35|77|94|3a|b7|73|c7|c8|45|fd|b5|70|

b4|cd|84|78|5c|19|63|db|c5|dc|22|d1|f5|13|ca|b9|c6|e1|eb|75|4c|bd|bd|08|13|b5|8e|2c|82|73|b6|6d|99|89|42|79|e8|63|0c|65|48|d3|e3|93|d5|0b|b7|c7|33|04|dd|7b|34|13|6a|2f|6d|d1|57|12|d8|98|82|b2|

6c|b3|92|bc|2c|68|13|c9|2e|61|d2|01|b6|df|fa|15|be|cd|02|1a|9e|fa|aa|a2|64|08|d6|5d|12|20|26|40|04|14|a4|44|25|93|5f|b3|25|3c|2e|ce|fe|14|d6|4d|0c|ab|1e|28|84|4b|a5|6c|79|77|ac|14|eb|df|55|04|

21|66|8d|4d|6a|78|10|b4|34|a7|95|a8|a6|9d|25|00|3f|2c|f7|b3|0d|4a|74|34|06|d5|c0|ac|5c|5a|00|d2|71|37|46|06|0d|da|6f|03|60|0c|e2|6c|a4|6d|fe|96|87|c6|bd|8e|05|44|af|62|14|c6|71|55|50|d4|97|49|

7c|c7|e6|01|1d|b8|10|33|98|53|ad|e6|71|c1|53|6e|3a|0a|e4|37|0f|4f|51|3c|92|3a|df|0e|c6|37|28|80|d9|38|58|91|a0|c9|1d|0d|87|e3|2b|e4|1f|ff|77|45|50|71|60|a9|48|16|7f|a4|fc|47|b1|c7|1c|c5|75|98|

90|5f|5a|42|4a|a5|ae|4e|19|ac|e3|04|95|e4|a3|e2|a7|c6|6a|68|84|4b|6e|b6|c1|b1|f7|9b|9b|05|38|fd|52|fd|b7|ce|73|04|31|b3|57|04|31|33|f0|be|c0|fc|4f|43|a9|88|66|9b|53|1d|f7|5f|75|e9|ca|32|f6|33|

b7|3b|1b|e4|44|bd|ca|2a|86|e3|c0|58|30|d3|bb|83|0c|00|2c|5f|6c|9f|eb|77|66|a6|b7|05|69|1a|9b|10|91|85|75|91|d1|e7|7b|6a|d5|49|44|4b|2a|97|55|85|da|e0|43|f4|a9|c1|29|ac|ca|48|e0|e0|c3|49|f4|eb|

e5|d8|60|ce|df|d7|e1|2d|97|7a|f0|3a|c5|34|b7|d4|3b|e1|df|af|03|d4|29|55|a7|3c|da|8a|27|e3|9e|c2|c3|e1|61|6f|d9|ed|85|8a|ea|53|b6|c8|86|a3|9a|fd|57|2a|92|0f|1b|c9|8e|1b|8f|a2|a5|af|7b|5b|ec|da|

ce|4f|b5|2c|d0|f0|c0|f8|9e|8a|9a|3e|4c|14|91|ff|ab|13|9c|46|c1|52|bc|68|8c|91|a7|22|2b|11|8b|c6|d2|aa|74|07|ad|ff|cd|01|16|38|fa|80|

+---------+---------------+----------+
21:49:32,304,202   ETHER
|0   |00|ff|da|f9|4f|28|00|ff|d9|f9|4f|28|08|00|45|00|02|17|00|0b|00|b9|80|11|8d|dc|ac|13|a9|05|ac|13|a9|09|09|d6|02|00|50|e4|00|db|aa|83|95|e8|ac|fe|75|6e|a2|dc|30|96|6b|84|dc|4f|a9|f3|df|5d|

d5|25|64|5d|10|87|2d|a3|ac|8e|d9|5d|49|86|54|ea|86|d2|3f|1e|c8|03|79|0d|f2|b7|20|26|04|a2|da|de|a1|d4|13|99|b1|3b|8e|82|db|05|05|f6|35|9f|80|68|d0|f6|0f|78|a5|96|bf|69|b8|5c|dd|70|69|6f|4b|a0|

09|e0|65|76|20|87|11|52|2f|fd|d4|32|7a|be|99|15|ef|6c|11|38|dd|c2|3f|13|c4|c8|6a|b2|ad|1a|39|c3|de|e0|30|8a|5f|48|3f|f4|97|fc|6b|f7|18|1c|d5|dc|8c|9d|37|15|00|b2|73|06|2d|31|53|77|c3|7a|fa|3f|

55|df|7c|77|24|a4|82|01|5e|30|82|01|5a|a0|03|02|01|12|a2|82|01|51|04|82|01|4d|6b|05|96|0d|71|29|ff|15|eb|b1|1f|75|34|d9|40|3d|de|98|52|f9|56|d5|a2|d6|b1|d7|b0|d6|cc|d0|aa|37|40|9d|e2|00|48|d9|

cc|9c|1b|fb|27|02|68|00|ab|f6|f8|4d|30|dd|99|a0|77|35|3f|8a|18|94|94|5f|04|5e|1e|ed|bc|9e|b7|3e|0e|09|d8|81|1f|1b|0c|a0|98|4b|83|93|41|54|a5|e4|78|10|07|31|1e|b0|45|ad|e3|ad|8c|d6|c6|d9|a6|ba|

59|e7|70|3b|b0|3f|78|9d|fb|6a|db|2a|a2|2c|e2|93|0e|89|04|70|e7|7f|9a|d9|d5|a7|c2|87|5e|55|89|3f|e3|f4|f8|04|b2|27|65|bd|1d|fa|41|6b|ee|6f|0a|57|5c|20|ad|1c|4e|a7|0e|7a|c4|00|3d|68|97|34|45|ae|

f1|05|a4|41|d8|9d|d1|19|a1|f7|f7|e3|5a|17|3b|95|4b|36|60|76|4c|80|3f|f7|4f|fa|3d|9e|02|8e|4f|a2|d3|c6|7b|2b|d4|58|10|65|6e|43|6a|ab|ac|f9|f8|b1|2d|b5|ad|83|10|ca|d6|11|1a|80|a2|eb|e1|36|f5|a3|

d2|e4|1f|39|b7|ab|c6|43|bc|9d|d8|e5|e7|34|97|45|ea|bc|d4|9a|74|d8|5f|5c|42|a3|32|6d|81|f8|73|44|60|82|81|ed|26|e4|7c|f2|6f|51|9c|87|05|30|0b|55|4a|bf|96|41|9a|da|b6|d8|68|9b|69|0f|ee|ab|07|8b|

85|dc|fa|96|f2|7c|e1|0e|6e|a2|84|32|fd|d2|b6|16|e2|39|6c|64|d9|41|1b|1b|11|ff|dd|e2|22|2b|b0|17|0d|53|73|29|f3|a3|ca|

+---------+---------------+----------+
21:49:32,579,507   ETHER
|0   |ff|ff|ff|ff|ff|ff|00|ff|d9|f9|4f|28|08|00|45|00|00|4e|19|4e|00|00|80|11|77|1d|ac|13|a9|05|ac|13|a9|07|00|89|00|89|00|3a|37|22|db|a3|01|10|00|01|00|00|00|00|00|00|20|46|48|46|41|45|42|45|

45|43|41|43|41|43|41|43|41|43|41|43|41|43|41|43|41|43|41|43|41|43|41|41|41|00|00|20|00|01|

+---------+---------------+----------+
21:49:32,580,077   ETHER
|0   |01|00|5e|00|00|fc|00|ff|d9|f9|4f|28|08|00|45|00|00|32|77|09|00|00|01|11|0c|9d|ac|13|a9|05|e0|00|00|fc|e9|00|14|eb|00|1e|82|02|70|d2|00|00|00|01|00|00|00|00|00|00|04|77|70|61|64|00|00|01|

00|01|

maikcat

can you post the output of ifconfig on your openvpn server?

Michael.

seeker

Sorry for the delay, here's ifconfig:

eth0      Link encap:Ethernet  HWaddr 00:xx:xx:xx:xx:15
          inet addr:10.xxx.xx.44  Bcast:10.xxx.xx.255  Mask:255.255.254.0
          inet6 addr: fe80::xxx:xxxx:xxxx:xxxx/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1385484 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1666302 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:194519924 (194.5 MB)  TX bytes:342409705 (342.4 MB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:136638 errors:0 dropped:0 overruns:0 frame:0
          TX packets:136638 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:9754591 (9.7 MB)  TX bytes:9754591 (9.7 MB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:172.19.169.1  P-t-P:172.19.169.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

maikcat

can you post the output of netstat -a on your win2003?
can you verify that rdp listens on tap interface?

Windows8 places tap adapter under public network thus rejects file & printer sharing requests.

Michael.

seeker

Problem solved!
I switched from tun to tap and it started to work both ways.