I've followed the OpenWRT OpenVPN tutorials to the letter, and no matter how many times I redo the VPN setup, OpenWRT refuses to allow clients to connect to tun0 on 1194. - WRT1900ac, running the latest snapshot trunk build (today's, but this has been occurring for 2+ weeks) - all certificates and keys correctly set up (ca, server/client crt and key, dh, & ta) - both server and client config files set up correctly with mirrored options - tried both tcp, then udp, separately, with both failing when server connection is attempted (tcp says server rejects, udp times out). - Tunnel [tun0] is set up correctly as I can ping the tunnel subnet [10.10.10.1/24] from within the LAN subnet [192.168.200.0/24] Followed tutorials: [url]http://wiki.openwrt.org/doc/howto/vpn.openvpn[/url] [url]http://wiki.openwrt.org/doc/howto/vpn.server.openvpn.tun[/url] [url]http://wiki.openwrt.org/oldwiki/vpn.server.openvpn.tun[/url] as well as: [url]https://openvpn.net/index.php/open-source/documentation/howto.html#pkcs11[/url] [url]http://joepaetzel.com/2012/07/24/openvpn-on-freenas-8-2/[/url] [url]http://joepaetzel.com/2014/03/04/secure-freenas-9-2-1-2-with-a-firewall/[/url] [url]https://forums.freenas.org/index.php?threads/how-to-install-routed-openvpn-server-in-a-vimage-portjail.21856/[/url] ... and quite a few others, every time the server [wrt1900ac] refuses the connection, even though I've set up the firewall rules exactly as specified in the OpenWRT tutorials. [quote]root@OpenWRT:~# uci show openvpn openvpn.vpnserver=openvpn openvpn.vpnserver.enabled=1 openvpn.vpnserver.dev=tun openvpn.vpnserver.proto=tcp openvpn.vpnserver.local=192.168.200.1 openvpn.vpnserver.server=10.10.10.0 255.255.255.0 openvpn.vpnserver.port=1194 openvpn.vpnserver.keepalive=10 120 openvpn.vpnserver.push=route 192.168.200.0 255.255.255.0 openvpn.vpnserver.ca=/etc/openvpn/keys/ca.crt openvpn.vpnserver.cert=/etc/openvpn/keys/OpenWRT-VPNserver.crt openvpn.vpnserver.key=/etc/openvpn/keys/OpenWRT-VPNserver.key openvpn.vpnserver.dh=/etc/openvpn/keys/dh2048.pem openvpn.vpnserver.tls_auth=/etc/openvpn/keys/ta.key 0 openvpn.vpnserver.ifconfig_pool_persist=/tmp/ipp.txt openvpn.vpnserver.log_append=/tmp/openvpn.log openvpn.vpnserver.status=/tmp/openvpn-status.log openvpn.vpnserver.verb=4 openvpn.vpnserver.comp_lzo=yes openvpn.vpnserver.cipher=AES-256-CBC openvpn.vpnserver.client_to_client=1 openvpn.vpnserver.persist_key=1 openvpn.vpnserver.persist_tun=1[/quote] [quote]root@OpenWRT:~# uci show firewall firewall.@defaults[0]=defaults firewall.@defaults[0].syn_flood=1 firewall.@defaults[0].input=ACCEPT firewall.@defaults[0].output=ACCEPT firewall.@defaults[0].forward=REJECT firewall.@zone[0]=zone firewall.@zone[0].name=lan firewall.@zone[0].input=ACCEPT firewall.@zone[0].output=ACCEPT firewall.@zone[0].forward=ACCEPT firewall.@zone[0].network=lan firewall.@zone[1]=zone firewall.@zone[1].name=wan firewall.@zone[1].input=REJECT firewall.@zone[1].output=ACCEPT firewall.@zone[1].forward=REJECT firewall.@zone[1].masq=1 firewall.@zone[1].mtu_fix=1 firewall.@zone[1].network=wan wan6 firewall.@zone[2]=zone firewall.@zone[2].name=vpn firewall.@zone[2].input=ACCEPT firewall.@zone[2].forward=ACCEPT firewall.@zone[2].output=ACCEPT firewall.@zone[2].network=vpn0 firewall.@zone[2].masq=1 firewall.@include[0]=include firewall.@include[0].path=/etc/firewall.user firewall.@rule[0]=rule firewall.@rule[0].name=Allow-OpenVPN-Inbound firewall.@rule[0].target=ACCEPT firewall.@rule[0].dest_port=1194 firewall.@rule[0].family=ipv4 firewall.@rule[0].src=* firewall.@rule[0].proto=tcp udp firewall.@forwarding[0]=forwarding firewall.@forwarding[0].dest=wan firewall.@forwarding[0].src=lan firewall.@forwarding[1]=forwarding firewall.@forwarding[1].src=vpn firewall.@forwarding[1].dest=lan[/quote] [b]Client [i](Windows/Android)[/i][/b] [quote] client dev tun proto tcp remote vpnserver.dyndns-server.com 1194 resolv-retry infinite nobind persist-key persist-tun mute-replay-warnings ca "C:\\Program Files\\OpenVPN\\config\\OpenWRT-VPNserver\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\OpenWRT-VPNserver\\OpenWRT-VPNclient-AlienFractals.crt" key "C:\\Program Files\\OpenVPN\\config\\OpenWRT-VPNserver\\OpenWRT-VPNclient-AlienFractals.key" tls-auth "C:\\Program Files\\OpenVPN\\config\\OpenWRT-VPNserver\\ta.key" 1 ns-cert-type server cipher AES-256-CBC comp-lzo verb 9 #dev tap #dev-node MyTap #proto udp #remote-random #user nobody #group nobody #http-proxy-retry # retry on connection failures #http-proxy [proxy server] [proxy port #] #mute 20[/quote] I'm really at a loss here, so any opinions would be greatly appreciated. I've tried disabling the router firewall, as well as the firewall on my Nexus 6 [and PC] and the connection is still rejected by the router. I'm missing something here... just not sure exactly what.

sorry, knew I forgot to include something... [b]OpenWRT Server Log[/b] [quote]root@OpenWRT:~# cat /tmp/openvpn.log Sun Mar 22 10:37:12 2015 us=939715 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 10:37:12 2015 us=940027 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 10:37:13 2015 us=221796 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 10:37:13 2015 us=226338 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 10:37:13 2015 us=226625 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 10:37:13 2015 us=226810 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 10:37:13 2015 us=227014 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 10:37:13 2015 us=227246 Socket Buffers: R=[87380->131072] S=[16384->131072] Sun Mar 22 10:37:13 2015 us=229586 TUN/TAP device tun0 opened Sun Mar 22 10:37:13 2015 us=229817 TUN/TAP TX queue length set to 100 Sun Mar 22 10:37:13 2015 us=230014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 10:37:13 2015 us=230292 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 10:37:13 2015 us=239110 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 10:37:13 2015 us=246118 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 10:37:13 2015 us=246483 Listening for incoming TCP connection on [AF_INET]192.168.200.1:1194 Sun Mar 22 10:37:13 2015 us=246821 TCPv4_SERVER link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 10:37:13 2015 us=246996 TCPv4_SERVER link remote: [undef] Sun Mar 22 10:37:13 2015 us=247170 MULTI: multi_init called, r=256 v=256 Sun Mar 22 10:37:13 2015 us=247531 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 10:37:13 2015 us=247748 IFCONFIG POOL LIST Sun Mar 22 10:37:13 2015 us=248070 MULTI: TCP INIT maxclients=1024 maxevents=1028 Sun Mar 22 10:37:13 2015 us=248422 Initialization Sequence Completed Sun Mar 22 12:10:34 2015 us=318425 TCP/UDP: Closing socket Sun Mar 22 12:10:34 2015 us=318884 /sbin/route del -net 10.10.10.0 netmask 255.255.255.0 Sun Mar 22 12:10:34 2015 us=325572 Closing TUN/TAP interface Sun Mar 22 12:10:34 2015 us=325944 /sbin/ifconfig tun0 0.0.0.0 Sun Mar 22 12:10:34 2015 us=386731 SIGTERM[hard,] received, process exiting Sun Mar 22 12:10:34 2015 us=539841 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 12:10:34 2015 us=540130 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 12:10:34 2015 us=821461 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 12:10:34 2015 us=825930 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 12:10:34 2015 us=826157 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:10:34 2015 us=826488 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:10:34 2015 us=826717 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 12:10:34 2015 us=826952 Socket Buffers: R=[87380->131072] S=[16384->131072] Sun Mar 22 12:10:34 2015 us=834538 TUN/TAP device tun0 opened Sun Mar 22 12:10:34 2015 us=834794 TUN/TAP TX queue length set to 100 Sun Mar 22 12:10:34 2015 us=835023 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 12:10:34 2015 us=835327 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 12:10:34 2015 us=858975 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 12:10:34 2015 us=878456 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 12:10:34 2015 us=878893 Listening for incoming TCP connection on [AF_INET]192.168.200.1:1194 Sun Mar 22 12:10:34 2015 us=879215 TCPv4_SERVER link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 12:10:34 2015 us=879433 TCPv4_SERVER link remote: [undef] Sun Mar 22 12:10:34 2015 us=879605 MULTI: multi_init called, r=256 v=256 Sun Mar 22 12:10:34 2015 us=879920 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 12:10:34 2015 us=880121 IFCONFIG POOL LIST Sun Mar 22 12:10:34 2015 us=880440 MULTI: TCP INIT maxclients=1024 maxevents=1028 Sun Mar 22 12:10:34 2015 us=880915 Initialization Sequence Completed[/quote] [b]Client Log[/b] (Windows 8.1 Pro x64, same output from Android as well [Nexus 6]) [quote]Sun Mar 22 12:16:25 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:16:25 2015 pkcs11_pin_cache_period = -1 Sun Mar 22 12:16:25 2015 pkcs11_id = '[UNDEF]' Sun Mar 22 12:16:25 2015 pkcs11_id_management = DISABLED Sun Mar 22 12:16:25 2015 server_network = 0.0.0.0 Sun Mar 22 12:16:25 2015 server_netmask = 0.0.0.0 Sun Mar 22 12:16:25 2015 server_network_ipv6 = :: Sun Mar 22 12:16:25 2015 server_netbits_ipv6 = 0 Sun Mar 22 12:16:25 2015 server_bridge_ip = 0.0.0.0 Sun Mar 22 12:16:25 2015 server_bridge_netmask = 0.0.0.0 Sun Mar 22 12:16:25 2015 server_bridge_pool_start = 0.0.0.0 Sun Mar 22 12:16:25 2015 server_bridge_pool_end = 0.0.0.0 Sun Mar 22 12:16:25 2015 ifconfig_pool_defined = DISABLED Sun Mar 22 12:16:25 2015 ifconfig_pool_start = 0.0.0.0 Sun Mar 22 12:16:25 2015 ifconfig_pool_end = 0.0.0.0 Sun Mar 22 12:16:25 2015 ifconfig_pool_netmask = 0.0.0.0 Sun Mar 22 12:16:25 2015 ifconfig_pool_persist_filename = '[UNDEF]' Sun Mar 22 12:16:25 2015 ifconfig_pool_persist_refresh_freq = 600 Sun Mar 22 12:16:25 2015 ifconfig_ipv6_pool_defined = DISABLED Sun Mar 22 12:16:25 2015 ifconfig_ipv6_pool_base = :: Sun Mar 22 12:16:25 2015 ifconfig_ipv6_pool_netbits = 0 Sun Mar 22 12:16:25 2015 n_bcast_buf = 256 Sun Mar 22 12:16:25 2015 tcp_queue_limit = 64 Sun Mar 22 12:16:25 2015 real_hash_size = 256 Sun Mar 22 12:16:25 2015 virtual_hash_size = 256 Sun Mar 22 12:16:25 2015 client_connect_script = '[UNDEF]' Sun Mar 22 12:16:25 2015 learn_address_script = '[UNDEF]' Sun Mar 22 12:16:25 2015 client_disconnect_script = '[UNDEF]' Sun Mar 22 12:16:25 2015 client_config_dir = '[UNDEF]' Sun Mar 22 12:16:25 2015 ccd_exclusive = DISABLED Sun Mar 22 12:16:25 2015 tmp_dir = 'C:\Users\James\AppData\Local\Temp\' Sun Mar 22 12:16:25 2015 push_ifconfig_defined = DISABLED Sun Mar 22 12:16:25 2015 push_ifconfig_local = 0.0.0.0 Sun Mar 22 12:16:25 2015 push_ifconfig_remote_netmask = 0.0.0.0 Sun Mar 22 12:16:25 2015 push_ifconfig_ipv6_defined = DISABLED Sun Mar 22 12:16:25 2015 push_ifconfig_ipv6_local = ::/0 Sun Mar 22 12:16:25 2015 push_ifconfig_ipv6_remote = :: Sun Mar 22 12:16:25 2015 enable_c2c = DISABLED Sun Mar 22 12:16:25 2015 duplicate_cn = DISABLED Sun Mar 22 12:16:25 2015 cf_max = 0 Sun Mar 22 12:16:25 2015 cf_per = 0 Sun Mar 22 12:16:25 2015 max_clients = 1024 Sun Mar 22 12:16:25 2015 max_routes_per_client = 256 Sun Mar 22 12:16:25 2015 auth_user_pass_verify_script = '[UNDEF]' Sun Mar 22 12:16:25 2015 auth_user_pass_verify_script_via_file = DISABLED Sun Mar 22 12:16:25 2015 client = ENABLED Sun Mar 22 12:16:25 2015 pull = ENABLED Sun Mar 22 12:16:25 2015 auth_user_pass_file = '[UNDEF]' Sun Mar 22 12:16:25 2015 show_net_up = DISABLED Sun Mar 22 12:16:25 2015 route_method = 2 Sun Mar 22 12:16:25 2015 ip_win32_defined = DISABLED Sun Mar 22 12:16:25 2015 ip_win32_type = 3 Sun Mar 22 12:16:25 2015 dhcp_masq_offset = 0 Sun Mar 22 12:16:25 2015 dhcp_lease_time = 31536000 Sun Mar 22 12:16:25 2015 tap_sleep = 0 Sun Mar 22 12:16:25 2015 dhcp_options = DISABLED Sun Mar 22 12:16:25 2015 dhcp_renew = DISABLED Sun Mar 22 12:16:25 2015 dhcp_pre_release = DISABLED Sun Mar 22 12:16:25 2015 dhcp_release = DISABLED Sun Mar 22 12:16:25 2015 domain = '[UNDEF]' Sun Mar 22 12:16:25 2015 netbios_scope = '[UNDEF]' Sun Mar 22 12:16:25 2015 netbios_node_type = 0 Sun Mar 22 12:16:25 2015 disable_nbt = DISABLED Sun Mar 22 12:16:25 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015 Sun Mar 22 12:16:25 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08 Sun Mar 22 12:16:25 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Sun Mar 22 12:16:25 2015 Need hold release from management interface, waiting... Sun Mar 22 12:16:25 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Sun Mar 22 12:16:25 2015 MANAGEMENT: CMD 'state on' Sun Mar 22 12:16:25 2015 MANAGEMENT: CMD 'log all on' Sun Mar 22 12:16:25 2015 MANAGEMENT: CMD 'hold off' Sun Mar 22 12:16:25 2015 MANAGEMENT: CMD 'hold release' Sun Mar 22 12:16:25 2015 Control Channel Authentication: using 'C:\Program Files\OpenVPN\config\OpenWRT-VPNserver\ta.key' as a OpenVPN static key file Sun Mar 22 12:16:25 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:16:25 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:16:25 2015 LZO compression initialized Sun Mar 22 12:16:25 2015 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 12:16:25 2015 Socket Buffers: R=[65536->65536] S=[65536->65536] Sun Mar 22 12:16:25 2015 MANAGEMENT: >STATE:1427044585,RESOLVE,,, Sun Mar 22 12:16:25 2015 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 12:16:25 2015 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client' Sun Mar 22 12:16:25 2015 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server' Sun Mar 22 12:16:25 2015 Local Options hash (VER=V4): '2f2c6498' Sun Mar 22 12:16:25 2015 Expected Remote Options hash (VER=V4): '9915e4a2' Sun Mar 22 12:16:25 2015 Attempting to establish TCP connection with [AF_INET]68.114.212.219:1194 [nonblock] Sun Mar 22 12:16:25 2015 MANAGEMENT: >STATE:1427044585,TCP_CONNECT,,, Sun Mar 22 12:16:35 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Sun Mar 22 12:16:40 2015 MANAGEMENT: >STATE:1427044600,RESOLVE,,, Sun Mar 22 12:16:40 2015 MANAGEMENT: >STATE:1427044600,TCP_CONNECT,,, Sun Mar 22 12:16:50 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Sun Mar 22 12:16:55 2015 MANAGEMENT: >STATE:1427044615,RESOLVE,,, Sun Mar 22 12:16:55 2015 MANAGEMENT: >STATE:1427044615,TCP_CONNECT,,, Sun Mar 22 12:17:05 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Sun Mar 22 12:17:10 2015 MANAGEMENT: >STATE:1427044630,RESOLVE,,, Sun Mar 22 12:17:10 2015 MANAGEMENT: >STATE:1427044630,TCP_CONNECT,,, Sun Mar 22 12:17:20 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. [/quote]

[quote]Sun Mar 22 12:17:20 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. [/quote] this is not firewall related problem, its win8 + openvpn. which version did you installed? can you try to switch to udp? Michael.

[quote="maikcat"][quote]Sun Mar 22 12:17:20 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. [/quote] this is not firewall related problem, its win8 + openvpn. which version did you installed? can you try to switch to udp? Michael.[/quote] I originally installed: openvpn-install-2.3.6-I603-x86_64.exe This morning, I uninstalled that version, restarted, then installed: openvpn-install-2.3.6-I003-x86_64.exe Both are giving the same output that the "The system tried to join a drive to a directory on a joined drive." On Android [Nexus 6, using both the latest OpenVPN app, as well most recent version of OpenVPN for Android], the following error is given: [quote]Transport Error: TCP connect error on vpnserver.dyndns-server.com:1194 (WANIP:1194): connection refused[/quote] Changing to udp, the server log shows: [quote]root@OpenWRT:~# cat /tmp/openvpn.log Sun Mar 22 10:37:12 2015 us=939715 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 10:37:12 2015 us=940027 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 10:37:13 2015 us=221796 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 10:37:13 2015 us=226338 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 10:37:13 2015 us=226625 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 10:37:13 2015 us=226810 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 10:37:13 2015 us=227014 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 10:37:13 2015 us=227246 Socket Buffers: R=[87380->131072] S=[16384->131072] Sun Mar 22 10:37:13 2015 us=229586 TUN/TAP device tun0 opened Sun Mar 22 10:37:13 2015 us=229817 TUN/TAP TX queue length set to 100 Sun Mar 22 10:37:13 2015 us=230014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 10:37:13 2015 us=230292 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 10:37:13 2015 us=239110 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 10:37:13 2015 us=246118 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 10:37:13 2015 us=246483 Listening for incoming TCP connection on [AF_INET]192.168.200.1:1194 Sun Mar 22 10:37:13 2015 us=246821 TCPv4_SERVER link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 10:37:13 2015 us=246996 TCPv4_SERVER link remote: [undef] Sun Mar 22 10:37:13 2015 us=247170 MULTI: multi_init called, r=256 v=256 Sun Mar 22 10:37:13 2015 us=247531 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 10:37:13 2015 us=247748 IFCONFIG POOL LIST Sun Mar 22 10:37:13 2015 us=248070 MULTI: TCP INIT maxclients=1024 maxevents=1028 Sun Mar 22 10:37:13 2015 us=248422 Initialization Sequence Completed Sun Mar 22 12:10:34 2015 us=318425 TCP/UDP: Closing socket Sun Mar 22 12:10:34 2015 us=318884 /sbin/route del -net 10.10.10.0 netmask 255.255.255.0 Sun Mar 22 12:10:34 2015 us=325572 Closing TUN/TAP interface Sun Mar 22 12:10:34 2015 us=325944 /sbin/ifconfig tun0 0.0.0.0 Sun Mar 22 12:10:34 2015 us=386731 SIGTERM[hard,] received, process exiting Sun Mar 22 12:10:34 2015 us=539841 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 12:10:34 2015 us=540130 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 12:10:34 2015 us=821461 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 12:10:34 2015 us=825930 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 12:10:34 2015 us=826157 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:10:34 2015 us=826488 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:10:34 2015 us=826717 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 12:10:34 2015 us=826952 Socket Buffers: R=[87380->131072] S=[16384->131072] Sun Mar 22 12:10:34 2015 us=834538 TUN/TAP device tun0 opened Sun Mar 22 12:10:34 2015 us=834794 TUN/TAP TX queue length set to 100 Sun Mar 22 12:10:34 2015 us=835023 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 12:10:34 2015 us=835327 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 12:10:34 2015 us=858975 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 12:10:34 2015 us=878456 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 12:10:34 2015 us=878893 Listening for incoming TCP connection on [AF_INET]192.168.200.1:1194 Sun Mar 22 12:10:34 2015 us=879215 TCPv4_SERVER link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 12:10:34 2015 us=879433 TCPv4_SERVER link remote: [undef] Sun Mar 22 12:10:34 2015 us=879605 MULTI: multi_init called, r=256 v=256 Sun Mar 22 12:10:34 2015 us=879920 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 12:10:34 2015 us=880121 IFCONFIG POOL LIST Sun Mar 22 12:10:34 2015 us=880440 MULTI: TCP INIT maxclients=1024 maxevents=1028 Sun Mar 22 12:10:34 2015 us=880915 Initialization Sequence Completed Sun Mar 22 12:32:22 2015 us=453182 TCP/UDP: Closing socket Sun Mar 22 12:32:22 2015 us=453625 /sbin/route del -net 10.10.10.0 netmask 255.255.255.0 Sun Mar 22 12:32:22 2015 us=461364 Closing TUN/TAP interface Sun Mar 22 12:32:22 2015 us=461622 /sbin/ifconfig tun0 0.0.0.0 Sun Mar 22 12:32:22 2015 us=507186 SIGTERM[hard,] received, process exiting Sun Mar 22 12:32:22 2015 us=675930 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 12:32:22 2015 us=676229 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 12:32:22 2015 us=966239 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 12:32:22 2015 us=971121 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 12:32:22 2015 us=971357 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:32:22 2015 us=971533 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:32:22 2015 us=971737 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Sun Mar 22 12:32:22 2015 us=971969 Socket Buffers: R=[87380->131072] S=[16384->131072] Sun Mar 22 12:32:22 2015 us=980741 TUN/TAP device tun0 opened Sun Mar 22 12:32:22 2015 us=980961 TUN/TAP TX queue length set to 100 Sun Mar 22 12:32:22 2015 us=981151 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 12:32:22 2015 us=981425 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 12:32:22 2015 us=996389 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 12:32:23 2015 us=6802 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 12:32:23 2015 us=7037 Listening for incoming TCP connection on [AF_INET]192.168.200.1:1194 Sun Mar 22 12:32:23 2015 us=7231 TCPv4_SERVER link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 12:32:23 2015 us=7361 TCPv4_SERVER link remote: [undef] Sun Mar 22 12:32:23 2015 us=7506 MULTI: multi_init called, r=256 v=256 Sun Mar 22 12:32:23 2015 us=7778 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 12:32:23 2015 us=7930 IFCONFIG POOL LIST Sun Mar 22 12:32:23 2015 us=8154 MULTI: TCP INIT maxclients=1024 maxevents=1028 Sun Mar 22 12:32:23 2015 us=8392 Initialization Sequence Completed[/quote] Client Log (Windows) [quote]Sun Mar 22 12:37:54 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_private_mode = 00000000 Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_cert_private = DISABLED Sun Mar 22 12:37:54 2015 pkcs11_pin_cache_period = -1 Sun Mar 22 12:37:54 2015 pkcs11_id = '[UNDEF]' Sun Mar 22 12:37:54 2015 pkcs11_id_management = DISABLED Sun Mar 22 12:37:54 2015 server_network = 0.0.0.0 Sun Mar 22 12:37:54 2015 server_netmask = 0.0.0.0 Sun Mar 22 12:37:54 2015 server_network_ipv6 = :: Sun Mar 22 12:37:54 2015 server_netbits_ipv6 = 0 Sun Mar 22 12:37:54 2015 server_bridge_ip = 0.0.0.0 Sun Mar 22 12:37:54 2015 server_bridge_netmask = 0.0.0.0 Sun Mar 22 12:37:54 2015 server_bridge_pool_start = 0.0.0.0 Sun Mar 22 12:37:54 2015 server_bridge_pool_end = 0.0.0.0 Sun Mar 22 12:37:54 2015 ifconfig_pool_defined = DISABLED Sun Mar 22 12:37:54 2015 ifconfig_pool_start = 0.0.0.0 Sun Mar 22 12:37:54 2015 ifconfig_pool_end = 0.0.0.0 Sun Mar 22 12:37:54 2015 ifconfig_pool_netmask = 0.0.0.0 Sun Mar 22 12:37:54 2015 ifconfig_pool_persist_filename = '[UNDEF]' Sun Mar 22 12:37:54 2015 ifconfig_pool_persist_refresh_freq = 600 Sun Mar 22 12:37:54 2015 ifconfig_ipv6_pool_defined = DISABLED Sun Mar 22 12:37:54 2015 ifconfig_ipv6_pool_base = :: Sun Mar 22 12:37:54 2015 ifconfig_ipv6_pool_netbits = 0 Sun Mar 22 12:37:54 2015 n_bcast_buf = 256 Sun Mar 22 12:37:54 2015 tcp_queue_limit = 64 Sun Mar 22 12:37:54 2015 real_hash_size = 256 Sun Mar 22 12:37:54 2015 virtual_hash_size = 256 Sun Mar 22 12:37:54 2015 client_connect_script = '[UNDEF]' Sun Mar 22 12:37:54 2015 learn_address_script = '[UNDEF]' Sun Mar 22 12:37:54 2015 client_disconnect_script = '[UNDEF]' Sun Mar 22 12:37:54 2015 client_config_dir = '[UNDEF]' Sun Mar 22 12:37:54 2015 ccd_exclusive = DISABLED Sun Mar 22 12:37:54 2015 tmp_dir = 'C:\Users\James\AppData\Local\Temp\' Sun Mar 22 12:37:54 2015 push_ifconfig_defined = DISABLED Sun Mar 22 12:37:54 2015 push_ifconfig_local = 0.0.0.0 Sun Mar 22 12:37:54 2015 push_ifconfig_remote_netmask = 0.0.0.0 Sun Mar 22 12:37:54 2015 push_ifconfig_ipv6_defined = DISABLED Sun Mar 22 12:37:54 2015 push_ifconfig_ipv6_local = ::/0 Sun Mar 22 12:37:54 2015 push_ifconfig_ipv6_remote = :: Sun Mar 22 12:37:54 2015 enable_c2c = DISABLED Sun Mar 22 12:37:54 2015 duplicate_cn = DISABLED Sun Mar 22 12:37:54 2015 cf_max = 0 Sun Mar 22 12:37:54 2015 cf_per = 0 Sun Mar 22 12:37:54 2015 max_clients = 1024 Sun Mar 22 12:37:54 2015 max_routes_per_client = 256 Sun Mar 22 12:37:54 2015 auth_user_pass_verify_script = '[UNDEF]' Sun Mar 22 12:37:54 2015 auth_user_pass_verify_script_via_file = DISABLED Sun Mar 22 12:37:54 2015 client = ENABLED Sun Mar 22 12:37:54 2015 pull = ENABLED Sun Mar 22 12:37:54 2015 auth_user_pass_file = '[UNDEF]' Sun Mar 22 12:37:54 2015 show_net_up = DISABLED Sun Mar 22 12:37:54 2015 route_method = 2 Sun Mar 22 12:37:54 2015 ip_win32_defined = DISABLED Sun Mar 22 12:37:54 2015 ip_win32_type = 3 Sun Mar 22 12:37:54 2015 dhcp_masq_offset = 0 Sun Mar 22 12:37:54 2015 dhcp_lease_time = 31536000 Sun Mar 22 12:37:54 2015 tap_sleep = 0 Sun Mar 22 12:37:54 2015 dhcp_options = DISABLED Sun Mar 22 12:37:54 2015 dhcp_renew = DISABLED Sun Mar 22 12:37:54 2015 dhcp_pre_release = DISABLED Sun Mar 22 12:37:54 2015 dhcp_release = DISABLED Sun Mar 22 12:37:54 2015 domain = '[UNDEF]' Sun Mar 22 12:37:54 2015 netbios_scope = '[UNDEF]' Sun Mar 22 12:37:54 2015 netbios_node_type = 0 Sun Mar 22 12:37:54 2015 disable_nbt = DISABLED Sun Mar 22 12:37:54 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015 Sun Mar 22 12:37:54 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08 Sun Mar 22 12:37:54 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Sun Mar 22 12:37:54 2015 Need hold release from management interface, waiting... Sun Mar 22 12:37:54 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Sun Mar 22 12:37:54 2015 MANAGEMENT: CMD 'state on' Sun Mar 22 12:37:54 2015 MANAGEMENT: CMD 'log all on' Sun Mar 22 12:37:54 2015 MANAGEMENT: CMD 'hold off' Sun Mar 22 12:37:54 2015 MANAGEMENT: CMD 'hold release' Sun Mar 22 12:37:55 2015 Control Channel Authentication: using 'C:\Program Files\OpenVPN\config\OpenWRT-VPNserver\ta.key' as a OpenVPN static key file Sun Mar 22 12:37:55 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:37:55 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 12:37:55 2015 LZO compression initialized Sun Mar 22 12:37:55 2015 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ] Sun Mar 22 12:37:55 2015 Socket Buffers: R=[65536->65536] S=[65536->65536] Sun Mar 22 12:37:55 2015 MANAGEMENT: >STATE:1427045875,RESOLVE,,, Sun Mar 22 12:37:55 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 12:37:55 2015 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client' Sun Mar 22 12:37:55 2015 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server' Sun Mar 22 12:37:55 2015 Local Options hash (VER=V4): '9e7066d2' Sun Mar 22 12:37:55 2015 Expected Remote Options hash (VER=V4): '162b04de' Sun Mar 22 12:37:55 2015 UDPv4 link local: [undef] Sun Mar 22 12:37:55 2015 UDPv4 link remote: [AF_INET]x.x.x.x:1194 Sun Mar 22 12:37:55 2015 MANAGEMENT: >STATE:1427045875,WAIT,,, Sun Mar 22 12:37:55 2015 event_wait returned 3 Sun Mar 22 12:37:55 2015 UDPv4 WRITE [42] to [AF_INET]x.x.x.x:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=9a1777dd 40236cd0 tls_hmac=dbaba66b ade069f4 28cf7b36 bf367f31 13b82d3c pid=[ #1 / time = (1427045875) Sun Mar 22 12:37:55 2015 ] [ ] pid=0 DATA Sun Mar 22 12:37:55 2015 UDPv4 write returned 42 Sun Mar 22 12:37:55 2015 event_wait returned 2 Sun Mar 22 12:37:55 2015 WIN32 I/O: Socket Completion non-queued error: Invalid argument (WSAEINVAL) (errno=10022) Sun Mar 22 12:37:55 2015 UDPv4 read returned -1 Sun Mar 22 12:37:55 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 12:37:55 2015 event_wait returned 2 Sun Mar 22 12:37:55 2015 WIN32 I/O: Socket Completion non-queued error: Connection reset by peer (WSAECONNRESET) (errno=10054) Sun Mar 22 12:37:55 2015 UDPv4 read returned -1 Sun Mar 22 12:37:55 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sun Mar 22 12:37:55 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 12:37:55 2015 event_wait returned 1 Sun Mar 22 12:37:56 2015 event_wait returned 0 Sun Mar 22 12:37:56 2015 event_wait returned 1 Sun Mar 22 12:37:57 2015 event_wait returned 0 Sun Mar 22 12:37:57 2015 event_wait returned 2 Sun Mar 22 12:37:57 2015 UDPv4 WRITE [42] to [AF_INET]x.x.x.x:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=9a1777dd 40236cd0 tls_hmac=2f46cc07 896468e5 dbc39372 47d53729 8b70f7c9 pid=[ #2 / time = (1427045875) Sun Mar 22 12:37:55 2015 ] [ ] pid=0 DATA Sun Mar 22 12:37:57 2015 UDPv4 write returned 42 Sun Mar 22 12:37:57 2015 event_wait returned 1 Sun Mar 22 12:37:57 2015 event_wait returned 1 Sun Mar 22 12:37:57 2015 WIN32 I/O: Socket Completion error: Connection reset by peer (WSAECONNRESET) (errno=10054) Sun Mar 22 12:37:57 2015 UDPv4 read returned -1 Sun Mar 22 12:37:57 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sun Mar 22 12:37:57 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 12:37:57 2015 event_wait returned 1 Sun Mar 22 12:37:58 2015 event_wait returned 0 Sun Mar 22 12:37:58 2015 event_wait returned 1 Sun Mar 22 12:38:00 2015 event_wait returned 0 Sun Mar 22 12:38:00 2015 event_wait returned 1 [/quote] I edited all WAN IP listings to "x.x.x.x" Using Android [Nexus 6], it outputs error: [quote] read UDP [ECONNREFUSED]: Connection refused (code=111)[/quote]

[quote="maikcat"] this is not firewall related problem, its win8 + openvpn.[/quote] I came across a couple of forum threads that mentioned there was some issues with win8 and openVPN and I followed steps that were given that was said to eliminate that specific issue. The steps were as follows (and is the reason for the uninstall/reinstall this morning): - open up the network adapters folder applet - run installer as admin - set all openvpn exe's to run as administrator in their respective file properties - set openvpn service to automatic, as well as network connections - run openvpn as admin and connect successfully (at least those members were able to)

please disregard server and client output in previous post, as I edited the backup conf file instead of the one loaded by openVPN. After changing to UDP: Server [quote]root@OpenWRT:~# cat /tmp/openvpn.log Sun Mar 22 14:29:23 2015 us=68743 OpenVPN 2.3.6 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 21 2015 Sun Mar 22 14:29:23 2015 us=69054 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08 Sun Mar 22 14:29:23 2015 us=363061 Diffie-Hellman initialized with 2048 bit key Sun Mar 22 14:29:23 2015 us=367716 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file Sun Mar 22 14:29:23 2015 us=367946 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 14:29:23 2015 us=368122 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 14:29:23 2015 us=368327 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ] Sun Mar 22 14:29:23 2015 us=368547 Socket Buffers: R=[163840->131072] S=[163840->131072] Sun Mar 22 14:29:23 2015 us=376501 TUN/TAP device tun0 opened Sun Mar 22 14:29:23 2015 us=376793 TUN/TAP TX queue length set to 100 Sun Mar 22 14:29:23 2015 us=377078 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Mar 22 14:29:23 2015 us=377509 /sbin/ifconfig tun0 10.10.10.1 pointopoint 10.10.10.2 mtu 1500 Sun Mar 22 14:29:23 2015 us=396076 /sbin/route add -net 10.10.10.0 netmask 255.255.255.0 gw 10.10.10.2 Sun Mar 22 14:29:23 2015 us=402437 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 14:29:23 2015 us=402699 UDPv4 link local (bound): [AF_INET]192.168.200.1:1194 Sun Mar 22 14:29:23 2015 us=402873 UDPv4 link remote: [undef] Sun Mar 22 14:29:23 2015 us=403053 MULTI: multi_init called, r=256 v=256 Sun Mar 22 14:29:23 2015 us=403461 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0 Sun Mar 22 14:29:23 2015 us=403671 IFCONFIG POOL LIST Sun Mar 22 14:29:23 2015 us=403989 Initialization Sequence Completed Sun Mar 22 14:29:33 2015 us=415337 event_wait returned 0[/quote] Client (Windows) [quote]Sun Mar 22 14:32:31 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_protected_authentication = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_private_mode = 00000000 Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_cert_private = DISABLED Sun Mar 22 14:32:31 2015 pkcs11_pin_cache_period = -1 Sun Mar 22 14:32:31 2015 pkcs11_id = '[UNDEF]' Sun Mar 22 14:32:31 2015 pkcs11_id_management = DISABLED Sun Mar 22 14:32:31 2015 server_network = 0.0.0.0 Sun Mar 22 14:32:31 2015 server_netmask = 0.0.0.0 Sun Mar 22 14:32:31 2015 server_network_ipv6 = :: Sun Mar 22 14:32:31 2015 server_netbits_ipv6 = 0 Sun Mar 22 14:32:31 2015 server_bridge_ip = 0.0.0.0 Sun Mar 22 14:32:31 2015 server_bridge_netmask = 0.0.0.0 Sun Mar 22 14:32:31 2015 server_bridge_pool_start = 0.0.0.0 Sun Mar 22 14:32:31 2015 server_bridge_pool_end = 0.0.0.0 Sun Mar 22 14:32:31 2015 ifconfig_pool_defined = DISABLED Sun Mar 22 14:32:31 2015 ifconfig_pool_start = 0.0.0.0 Sun Mar 22 14:32:31 2015 ifconfig_pool_end = 0.0.0.0 Sun Mar 22 14:32:31 2015 ifconfig_pool_netmask = 0.0.0.0 Sun Mar 22 14:32:31 2015 ifconfig_pool_persist_filename = '[UNDEF]' Sun Mar 22 14:32:31 2015 ifconfig_pool_persist_refresh_freq = 600 Sun Mar 22 14:32:31 2015 ifconfig_ipv6_pool_defined = DISABLED Sun Mar 22 14:32:31 2015 ifconfig_ipv6_pool_base = :: Sun Mar 22 14:32:31 2015 ifconfig_ipv6_pool_netbits = 0 Sun Mar 22 14:32:31 2015 n_bcast_buf = 256 Sun Mar 22 14:32:31 2015 tcp_queue_limit = 64 Sun Mar 22 14:32:31 2015 real_hash_size = 256 Sun Mar 22 14:32:31 2015 virtual_hash_size = 256 Sun Mar 22 14:32:31 2015 client_connect_script = '[UNDEF]' Sun Mar 22 14:32:31 2015 learn_address_script = '[UNDEF]' Sun Mar 22 14:32:31 2015 client_disconnect_script = '[UNDEF]' Sun Mar 22 14:32:31 2015 client_config_dir = '[UNDEF]' Sun Mar 22 14:32:31 2015 ccd_exclusive = DISABLED Sun Mar 22 14:32:31 2015 tmp_dir = 'C:\Users\James\AppData\Local\Temp\' Sun Mar 22 14:32:31 2015 push_ifconfig_defined = DISABLED Sun Mar 22 14:32:31 2015 push_ifconfig_local = 0.0.0.0 Sun Mar 22 14:32:31 2015 push_ifconfig_remote_netmask = 0.0.0.0 Sun Mar 22 14:32:31 2015 push_ifconfig_ipv6_defined = DISABLED Sun Mar 22 14:32:31 2015 push_ifconfig_ipv6_local = ::/0 Sun Mar 22 14:32:31 2015 push_ifconfig_ipv6_remote = :: Sun Mar 22 14:32:31 2015 enable_c2c = DISABLED Sun Mar 22 14:32:31 2015 duplicate_cn = DISABLED Sun Mar 22 14:32:31 2015 cf_max = 0 Sun Mar 22 14:32:31 2015 cf_per = 0 Sun Mar 22 14:32:31 2015 max_clients = 1024 Sun Mar 22 14:32:31 2015 max_routes_per_client = 256 Sun Mar 22 14:32:31 2015 auth_user_pass_verify_script = '[UNDEF]' Sun Mar 22 14:32:31 2015 auth_user_pass_verify_script_via_file = DISABLED Sun Mar 22 14:32:31 2015 client = ENABLED Sun Mar 22 14:32:31 2015 pull = ENABLED Sun Mar 22 14:32:31 2015 auth_user_pass_file = '[UNDEF]' Sun Mar 22 14:32:31 2015 show_net_up = DISABLED Sun Mar 22 14:32:31 2015 route_method = 2 Sun Mar 22 14:32:31 2015 ip_win32_defined = DISABLED Sun Mar 22 14:32:31 2015 ip_win32_type = 3 Sun Mar 22 14:32:31 2015 dhcp_masq_offset = 0 Sun Mar 22 14:32:31 2015 dhcp_lease_time = 31536000 Sun Mar 22 14:32:31 2015 tap_sleep = 0 Sun Mar 22 14:32:31 2015 dhcp_options = DISABLED Sun Mar 22 14:32:31 2015 dhcp_renew = DISABLED Sun Mar 22 14:32:31 2015 dhcp_pre_release = DISABLED Sun Mar 22 14:32:31 2015 dhcp_release = DISABLED Sun Mar 22 14:32:31 2015 domain = '[UNDEF]' Sun Mar 22 14:32:31 2015 netbios_scope = '[UNDEF]' Sun Mar 22 14:32:31 2015 netbios_node_type = 0 Sun Mar 22 14:32:31 2015 disable_nbt = DISABLED Sun Mar 22 14:32:31 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015 Sun Mar 22 14:32:31 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08 Sun Mar 22 14:32:31 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Sun Mar 22 14:32:31 2015 Need hold release from management interface, waiting... Sun Mar 22 14:32:31 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Sun Mar 22 14:32:32 2015 MANAGEMENT: CMD 'state on' Sun Mar 22 14:32:32 2015 MANAGEMENT: CMD 'log all on' Sun Mar 22 14:32:32 2015 MANAGEMENT: CMD 'hold off' Sun Mar 22 14:32:32 2015 MANAGEMENT: CMD 'hold release' Sun Mar 22 14:32:32 2015 Control Channel Authentication: using 'C:\Program Files\OpenVPN\config\OpenWRT-VPNserver\ta.key' as a OpenVPN static key file Sun Mar 22 14:32:32 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 14:32:32 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sun Mar 22 14:32:32 2015 LZO compression initialized Sun Mar 22 14:32:32 2015 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ] Sun Mar 22 14:32:32 2015 Socket Buffers: R=[65536->65536] S=[65536->65536] Sun Mar 22 14:32:32 2015 MANAGEMENT: >STATE:1427052752,RESOLVE,,, Sun Mar 22 14:32:32 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Sun Mar 22 14:32:32 2015 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client' Sun Mar 22 14:32:32 2015 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server' Sun Mar 22 14:32:32 2015 Local Options hash (VER=V4): '9e7066d2' Sun Mar 22 14:32:32 2015 Expected Remote Options hash (VER=V4): '162b04de' Sun Mar 22 14:32:32 2015 UDPv4 link local: [undef] Sun Mar 22 14:32:32 2015 UDPv4 link remote: [AF_INET]68.114.212.219:1194 Sun Mar 22 14:32:32 2015 MANAGEMENT: >STATE:1427052752,WAIT,,, Sun Mar 22 14:32:32 2015 event_wait returned 3 Sun Mar 22 14:32:32 2015 UDPv4 WRITE [42] to [AF_INET]68.114.212.219:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=48c70199 fff916f8 tls_hmac=a880af30 8c5f2d5f 92bb800f 17fda081 8181f860 pid=[ #1 / time = (1427052752) Sun Mar 22 14:32:32 2015 ] [ ] pid=0 DATA Sun Mar 22 14:32:32 2015 UDPv4 write returned 42 Sun Mar 22 14:32:32 2015 event_wait returned 2 Sun Mar 22 14:32:32 2015 WIN32 I/O: Socket Completion non-queued error: Invalid argument (WSAEINVAL) (errno=10022) Sun Mar 22 14:32:32 2015 UDPv4 read returned -1 Sun Mar 22 14:32:32 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 14:32:32 2015 event_wait returned 1 Sun Mar 22 14:32:32 2015 event_wait returned 1 Sun Mar 22 14:32:32 2015 WIN32 I/O: Socket Completion error: Connection reset by peer (WSAECONNRESET) (errno=10054) Sun Mar 22 14:32:32 2015 UDPv4 read returned -1 Sun Mar 22 14:32:32 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sun Mar 22 14:32:32 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 14:32:32 2015 event_wait returned 1 Sun Mar 22 14:32:33 2015 event_wait returned 0 Sun Mar 22 14:32:33 2015 event_wait returned 1 Sun Mar 22 14:32:34 2015 event_wait returned 0 Sun Mar 22 14:32:34 2015 event_wait returned 2 Sun Mar 22 14:32:34 2015 UDPv4 WRITE [42] to [AF_INET]68.114.212.219:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=48c70199 fff916f8 tls_hmac=01faf748 572b97fd 2a9cd401 fba7b9aa 2e1bf430 pid=[ #2 / time = (1427052752) Sun Mar 22 14:32:32 2015 ] [ ] pid=0 DATA Sun Mar 22 14:32:34 2015 UDPv4 write returned 42 Sun Mar 22 14:32:34 2015 event_wait returned 1 Sun Mar 22 14:32:34 2015 event_wait returned 1 Sun Mar 22 14:32:34 2015 WIN32 I/O: Socket Completion error: Connection reset by peer (WSAECONNRESET) (errno=10054) Sun Mar 22 14:32:34 2015 UDPv4 read returned -1 Sun Mar 22 14:32:34 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sun Mar 22 14:32:34 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 14:32:34 2015 event_wait returned 1 Sun Mar 22 14:32:36 2015 event_wait returned 0 Sun Mar 22 14:32:36 2015 event_wait returned 1 Sun Mar 22 14:32:37 2015 event_wait returned 0 Sun Mar 22 14:32:37 2015 event_wait returned 1 Sun Mar 22 14:32:38 2015 event_wait returned 0 Sun Mar 22 14:32:38 2015 event_wait returned 2 Sun Mar 22 14:32:38 2015 UDPv4 WRITE [42] to [AF_INET]68.114.212.219:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=48c70199 fff916f8 tls_hmac=1f8549bc ed05217d 632ec6ea 0f2aec28 4d2a6b3b pid=[ #3 / time = (1427052752) Sun Mar 22 14:32:32 2015 ] [ ] pid=0 DATA Sun Mar 22 14:32:38 2015 UDPv4 write returned 42 Sun Mar 22 14:32:38 2015 event_wait returned 1 Sun Mar 22 14:32:38 2015 event_wait returned 1 Sun Mar 22 14:32:38 2015 WIN32 I/O: Socket Completion error: Connection reset by peer (WSAECONNRESET) (errno=10054) Sun Mar 22 14:32:38 2015 UDPv4 read returned -1 Sun Mar 22 14:32:38 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sun Mar 22 14:32:38 2015 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1 Sun Mar 22 14:32:38 2015 event_wait returned 1 Sun Mar 22 14:32:39 2015 event_wait returned 0 Sun Mar 22 14:32:39 2015 event_wait returned 1 Sun Mar 22 14:32:40 2015 event_wait returned 0 Sun Mar 22 14:32:40 2015 event_wait returned 1 Sun Mar 22 14:32:41 2015 event_wait returned 0 Sun Mar 22 14:32:41 2015 event_wait returned 1 Sun Mar 22 14:32:43 2015 event_wait returned 0 Sun Mar 22 14:32:43 2015 event_wait returned 1 Sun Mar 22 14:32:44 2015 event_wait returned 0 Sun Mar 22 14:32:44 2015 event_wait returned 1[/quote] Android (Nexus 6) [quote] 2015-03-22 14:33:23 Running on Nexus 6 (shamu) google, Android API 21, version 0.6.29, official build 2015-03-22 14:33:23 Log cleared. 2015-03-22 14:33:25 Building configuration??? 2015-03-22 14:33:27 started Socket Thread 2015-03-22 14:33:27 Network Status: CONNECTED LTE to MOBILE VZWINTERNET 2015-03-22 14:33:27 Current Parameter Settings: 2015-03-22 14:33:27 config = '/data/data/de.blinkt.openvpn/cache/android.conf' 2015-03-22 14:33:27 mode = 0 2015-03-22 14:33:27 show_ciphers = DISABLED 2015-03-22 14:33:27 show_digests = DISABLED 2015-03-22 14:33:27 show_engines = DISABLED 2015-03-22 14:33:27 genkey = DISABLED 2015-03-22 14:33:27 key_pass_file = '[UNDEF]' 2015-03-22 14:33:27 show_tls_ciphers = DISABLED 2015-03-22 14:33:27 connect_retry_max = 5 2015-03-22 14:33:27 Connection profiles [0]: 2015-03-22 14:33:27 proto = udp 2015-03-22 14:33:27 local = '[UNDEF]' 2015-03-22 14:33:27 local_port = '[UNDEF]' 2015-03-22 14:33:27 remote = 'vpnserver.dyndns-server.com' 2015-03-22 14:33:27 remote_port = '1194' 2015-03-22 14:33:27 remote_float = DISABLED 2015-03-22 14:33:27 bind_defined = DISABLED 2015-03-22 14:33:27 bind_local = DISABLED 2015-03-22 14:33:27 bind_ipv6_only = DISABLED 2015-03-22 14:33:27 connect_retry_seconds = 5 2015-03-22 14:33:27 connect_timeout = 10 2015-03-22 14:33:27 socks_proxy_server = '[UNDEF]' 2015-03-22 14:33:27 socks_proxy_port = '[UNDEF]' 2015-03-22 14:33:27 socks_proxy_retry = DISABLED 2015-03-22 14:33:27 tun_mtu = 1500 2015-03-22 14:33:27 tun_mtu_defined = ENABLED 2015-03-22 14:33:27 link_mtu = 1500 2015-03-22 14:33:27 link_mtu_defined = DISABLED 2015-03-22 14:33:27 tun_mtu_extra = 0 2015-03-22 14:33:27 tun_mtu_extra_defined = DISABLED 2015-03-22 14:33:27 mtu_discover_type = -1 2015-03-22 14:33:27 fragment = 0 2015-03-22 14:33:27 mssfix = 1450 2015-03-22 14:33:27 explicit_exit_notification = 0 2015-03-22 14:33:27 Connection profiles END 2015-03-22 14:33:27 remote_random = DISABLED 2015-03-22 14:33:27 ipchange = '[UNDEF]' 2015-03-22 14:33:27 dev = 'tun' 2015-03-22 14:33:27 dev_type = '[UNDEF]' 2015-03-22 14:33:27 dev_node = '[UNDEF]' 2015-03-22 14:33:27 lladdr = '[UNDEF]' 2015-03-22 14:33:27 topology = 1 2015-03-22 14:33:27 tun_ipv6 = DISABLED 2015-03-22 14:33:27 ifconfig_local = '[UNDEF]' 2015-03-22 14:33:27 ifconfig_remote_netmask = '[UNDEF]' 2015-03-22 14:33:27 ifconfig_noexec = DISABLED 2015-03-22 14:33:27 ifconfig_nowarn = ENABLED 2015-03-22 14:33:27 ifconfig_ipv6_local = '[UNDEF]' 2015-03-22 14:33:27 ifconfig_ipv6_netbits = 0 2015-03-22 14:33:27 ifconfig_ipv6_remote = '[UNDEF]' 2015-03-22 14:33:27 shaper = 0 2015-03-22 14:33:27 mtu_test = 0 2015-03-22 14:33:27 mlock = DISABLED 2015-03-22 14:33:27 keepalive_ping = 0 2015-03-22 14:33:27 keepalive_timeout = 0 2015-03-22 14:33:27 inactivity_timeout = 0 2015-03-22 14:33:27 ping_send_timeout = 0 2015-03-22 14:33:27 ping_rec_timeout = 0 2015-03-22 14:33:27 ping_rec_timeout_action = 0 2015-03-22 14:33:27 ping_timer_remote = DISABLED 2015-03-22 14:33:27 remap_sigusr1 = 0 2015-03-22 14:33:27 persist_tun = ENABLED 2015-03-22 14:33:27 persist_local_ip = DISABLED 2015-03-22 14:33:27 persist_remote_ip = DISABLED 2015-03-22 14:33:27 persist_key = DISABLED 2015-03-22 14:33:27 passtos = DISABLED 2015-03-22 14:33:27 resolve_retry_seconds = 1000000000 2015-03-22 14:33:27 resolve_in_advance = ENABLED 2015-03-22 14:33:27 username = '[UNDEF]' 2015-03-22 14:33:27 groupname = '[UNDEF]' 2015-03-22 14:33:27 chroot_dir = '[UNDEF]' 2015-03-22 14:33:27 cd_dir = '[UNDEF]' 2015-03-22 14:33:27 writepid = '[UNDEF]' 2015-03-22 14:33:27 up_script = '[UNDEF]' 2015-03-22 14:33:27 down_script = '[UNDEF]' 2015-03-22 14:33:27 down_pre = DISABLED 2015-03-22 14:33:27 up_restart = DISABLED 2015-03-22 14:33:27 up_delay = DISABLED 2015-03-22 14:33:27 daemon = DISABLED 2015-03-22 14:33:27 inetd = 0 2015-03-22 14:33:27 log = DISABLED 2015-03-22 14:33:27 suppress_timestamps = DISABLED 2015-03-22 14:33:27 machine_readable_output = ENABLED 2015-03-22 14:33:27 nice = 0 2015-03-22 14:33:27 verbosity = 4 2015-03-22 14:33:27 mute = 0 2015-03-22 14:33:27 gremlin = 0 2015-03-22 14:33:27 status_file = '[UNDEF]' 2015-03-22 14:33:27 status_file_version = 1 2015-03-22 14:33:27 status_file_update_freq = 60 2015-03-22 14:33:27 occ = ENABLED 2015-03-22 14:33:27 rcvbuf = 65536 2015-03-22 14:33:27 sndbuf = 65536 2015-03-22 14:33:27 sockflags = 0 2015-03-22 14:33:27 fast_io = DISABLED 2015-03-22 14:33:27 comp.alg = 2 2015-03-22 14:33:27 comp.flags = 1 2015-03-22 14:33:27 route_script = '[UNDEF]' 2015-03-22 14:33:27 route_default_gateway = '[UNDEF]' 2015-03-22 14:33:27 route_default_metric = 0 2015-03-22 14:33:27 route_noexec = DISABLED 2015-03-22 14:33:27 route_delay = 0 2015-03-22 14:33:27 route_delay_window = 30 2015-03-22 14:33:27 route_delay_defined = DISABLED 2015-03-22 14:33:27 route_nopull = DISABLED 2015-03-22 14:33:27 route_gateway_via_dhcp = DISABLED 2015-03-22 14:33:27 allow_pull_fqdn = DISABLED 2015-03-22 14:33:27 management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket' 2015-03-22 14:33:27 management_port = 'unix' 2015-03-22 14:33:27 management_user_pass = '[UNDEF]' 2015-03-22 14:33:27 management_log_history_cache = 250 2015-03-22 14:33:27 management_echo_buffer_size = 100 2015-03-22 14:33:27 management_write_peer_info_file = '[UNDEF]' 2015-03-22 14:33:27 management_client_user = '[UNDEF]' 2015-03-22 14:33:27 management_client_group = '[UNDEF]' 2015-03-22 14:33:27 management_flags = 806 2015-03-22 14:33:27 shared_secret_file = '[UNDEF]' 2015-03-22 14:33:27 key_direction = 2 2015-03-22 14:33:27 ciphername_defined = ENABLED 2015-03-22 14:33:27 ciphername = 'AES-256-CBC' 2015-03-22 14:33:27 authname_defined = ENABLED 2015-03-22 14:33:27 authname = 'SHA1' 2015-03-22 14:33:27 prng_hash = 'SHA1' 2015-03-22 14:33:27 prng_nonce_secret_len = 16 2015-03-22 14:33:27 keysize = 0 2015-03-22 14:33:27 engine = DISABLED 2015-03-22 14:33:27 replay = ENABLED 2015-03-22 14:33:27 mute_replay_warnings = ENABLED 2015-03-22 14:33:27 replay_window = 64 2015-03-22 14:33:27 replay_time = 15 2015-03-22 14:33:27 packet_id_file = '[UNDEF]' 2015-03-22 14:33:27 use_iv = ENABLED 2015-03-22 14:33:27 test_crypto = DISABLED 2015-03-22 14:33:27 tls_server = DISABLED 2015-03-22 14:33:27 tls_client = ENABLED 2015-03-22 14:33:27 key_method = 2 2015-03-22 14:33:27 ca_file = '[[INLINE]]' 2015-03-22 14:33:27 ca_path = '[UNDEF]' 2015-03-22 14:33:27 dh_file = '[UNDEF]' 2015-03-22 14:33:27 cert_file = '[[INLINE]]' 2015-03-22 14:33:27 "priv_key_file" = EXTERNAL_PRIVATE_KEY 2015-03-22 14:33:27 pkcs12_file = '[UNDEF]' 2015-03-22 14:33:27 cipher_list = '[UNDEF]' 2015-03-22 14:33:27 tls_verify = '[UNDEF]' 2015-03-22 14:33:27 tls_export_cert = '[UNDEF]' 2015-03-22 14:33:27 verify_x509_type = 0 2015-03-22 14:33:27 verify_x509_name = '[UNDEF]' 2015-03-22 14:33:27 crl_file = '[UNDEF]' 2015-03-22 14:33:27 ns_cert_type = 1 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_ku[i] = 0 2015-03-22 14:33:27 remote_cert_eku = '[UNDEF]' 2015-03-22 14:33:27 ssl_flags = 0 2015-03-22 14:33:27 tls_timeout = 2 2015-03-22 14:33:27 renegotiate_bytes = 0 2015-03-22 14:33:27 renegotiate_packets = 0 2015-03-22 14:33:27 renegotiate_seconds = 3600 2015-03-22 14:33:27 handshake_window = 60 2015-03-22 14:33:27 transition_window = 3600 2015-03-22 14:33:27 single_session = DISABLED 2015-03-22 14:33:27 push_peer_info = DISABLED 2015-03-22 14:33:27 tls_exit = DISABLED 2015-03-22 14:33:27 tls_auth_file = '[[INLINE]]' 2015-03-22 14:33:27 client = ENABLED 2015-03-22 14:33:27 pull = ENABLED 2015-03-22 14:33:27 auth_user_pass_file = '[UNDEF]' 2015-03-22 14:33:27 OpenVPN 2.4-icsopenvpn [git:icsopenvpn_629-4c6f7f0d16e1a6b3] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [SNAPPY] [LZ4] [EPOLL] [MH] [IPv6] built on Feb 24 2015 2015-03-22 14:33:27 library versions: OpenSSL 1.0.1l 15 Jan 2015, LZO 2.07 2015-03-22 14:33:27 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket 2015-03-22 14:33:27 MANAGEMENT: CMD 'hold release' 2015-03-22 14:33:27 Control Channel Authentication: tls-auth using INLINE static key file 2015-03-22 14:33:27 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2015-03-22 14:33:27 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2015-03-22 14:33:27 LZO compression initializing 2015-03-22 14:33:27 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:3 ] 2015-03-22 14:33:27 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:395 ET:0 EL:3 ] 2015-03-22 14:33:27 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client' 2015-03-22 14:33:27 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server' 2015-03-22 14:33:27 Local Options hash (VER=V4): '9e7066d2' 2015-03-22 14:33:27 Expected Remote Options hash (VER=V4): '162b04de' 2015-03-22 14:33:27 TCP/UDP: Preserving recently used remote address: [AF_INET]68.114.212.219:1194 2015-03-22 14:33:27 Socket Buffers: R=[163840->131072] S=[163840->131072] 2015-03-22 14:33:27 Protecting socket fd 4 2015-03-22 14:33:27 MANAGEMENT: CMD 'bytecount 2' 2015-03-22 14:33:27 MANAGEMENT: CMD 'state on' 2015-03-22 14:33:27 MANAGEMENT: CMD 'needok 'PROTECTFD' ok' 2015-03-22 14:33:27 UDP link local: (not bound) 2015-03-22 14:33:27 UDP link remote: [AF_INET]68.114.212.219:1194 2015-03-22 14:33:27 MANAGEMENT: >STATE:1427052807,WAIT,,, 2015-03-22 14:33:27 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:33:29 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:33:34 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:33:42 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:33:58 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:34:27 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2015-03-22 14:34:27 TLS Error: TLS handshake failed 2015-03-22 14:34:27 TCP/UDP: Closing socket 2015-03-22 14:34:27 SIGUSR1[soft,tls-error] received, process restarting 2015-03-22 14:34:27 MANAGEMENT: >STATE:1427052867,RECONNECTING,tls-error,, 2015-03-22 14:34:27 MANAGEMENT: CMD 'hold release' 2015-03-22 14:34:27 Control Channel Authentication: tls-auth using INLINE static key file 2015-03-22 14:34:27 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2015-03-22 14:34:27 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 2015-03-22 14:34:27 LZO compression initializing 2015-03-22 14:34:27 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:3 ] 2015-03-22 14:34:27 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:395 ET:0 EL:3 ] 2015-03-22 14:34:27 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client' 2015-03-22 14:34:27 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server' 2015-03-22 14:34:27 Local Options hash (VER=V4): '9e7066d2' 2015-03-22 14:34:27 Expected Remote Options hash (VER=V4): '162b04de' 2015-03-22 14:34:27 TCP/UDP: Preserving recently used remote address: [AF_INET]68.114.212.219:1194 2015-03-22 14:34:27 Socket Buffers: R=[163840->131072] S=[163840->131072] 2015-03-22 14:34:27 Protecting socket fd 4 2015-03-22 14:34:27 MANAGEMENT: CMD 'bytecount 2' 2015-03-22 14:34:27 MANAGEMENT: CMD 'state on' 2015-03-22 14:34:27 MANAGEMENT: CMD 'needok 'PROTECTFD' ok' 2015-03-22 14:34:27 UDP link local: (not bound) 2015-03-22 14:34:27 UDP link remote: [AF_INET]68.114.212.219:1194 2015-03-22 14:34:27 MANAGEMENT: >STATE:1427052867,WAIT,,, 2015-03-22 14:34:28 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:34:29 read UDP [ECONNREFUSED]: Connection refused (code=111) 2015-03-22 14:34:33 read UDP [ECONNREFUSED]: Connection refused (code=111)[/quote] Errors appear to be the same, however since I can't see any of my prior posts yet, I wanted to post the above in case anything differed

[quote="maikcat"]Quote: Sun Mar 22 12:17:20 2015 TCP: connect to [AF_INET]68.114.212.219:1194 failed, will try again in 5 seconds: [u]The system tried to join a drive to a directory on a joined drive[/u]. this is not firewall related problem, its win8 + openvpn.[/quote]where did this come from ? [quote="maikcat"]can you try to switch to udp[/quote]Stick with TCP until the problem is resolved as it is easier to trouble shoot. [quote="JW0914"]both failing when server connection is attempted (tcp says server rejects, udp times out).[/quote]This strongly suggests your WRT Firewall is blocking your openvpn client. [quote="JW0914"]Tunnel [tun0] is set up correctly as I can ping the tunnel subnet [10.10.10.1/24] from within the LAN subnet [192.168.200.0/24][/quote]You can ping the tunnel subnet from the LAN but not connect to your VPN server ... ? How are you doing that from the WRT router ?

[quote][quote]this is not firewall related problem, its win8 + openvpn.[/quote] where did this come from ? [/quote] Whomever moderates this section hasn't approved my posts (not sure why there's an enormous lag in approval), which is why you can't see the posts he quoted from (my guess is since he's on the forum team, he was able to see them) [quote]This strongly suggests your WRT Firewall is blocking your openvpn client.[/quote] Per my original post, you can see the firewall should not be blocking any inbound traffic on 1194. As also was mentioned in the original post, disabling the firewall on both the router and PC/Nexus 6 results in the same exact error, meaning it's not the firewall. [quote]You can ping the tunnel subnet from the LAN but not connect to your VPN server ... ? How are you doing that from the WRT router ?[/quote] I can ping the VPN subnet via any device on the LAN, which should be able to be done and demonstrates the error is not with the tunnel itself.

@maikcat There's two issues I was hoping you might be able to help with since you're on the forum team: 1. I need the second account I created to be removed/deleted (JWO914 - "O" not zero). I created it because when I went to login this morning, my password wasn't recognized. I could have sworn I registered before, so I clicked on forgot password, but I never received an email. This led me to believe I didn't register before and I created the new account. I then realized tonight I must have mistyped the password for the original account (JW0914 - zero, not "O"), as I was able to log in. 2. All of my posts and replies are requiring reviews and I was curious why this is occurring. If there's anything I can do so that replies are posted w/o review please let me know as posts that were posted 12+ hours ago are still not posted and its preventing me from being able to troubleshoot the issue I'm having. Thanks for taking the time =] (Once addressed, I'll delete this post, as I'm only posting here because I can't PM and I wasn't able to find an email address to contact forum Adkins or webmasters)

[quote="JW0914"]All of my posts and replies are requiring reviews and I was curious why this is occurring[/quote]due to spam monkeys all new posts are reviewed .. [quote="JW0914"]Once addressed, I'll delete this post[/quote]You cannot .. same as above. Re: WRT. I have just setup an openwrt/openvpn connection no problem. The only rule required (from default) was to forward the external vpn port (1194) to the LAN address as that is where my Openvpn is configured to listen. Yours:[quote="JW0914"]openvpn.vpnserver.local=192.168.200.1[/quote]also appears to be listening on the LAN address .. so: what is output of netstat -antup Under >network/firewall/port-forward: make rule to forward external port 1194 to LAN address.

[Solved]Followed OpenWRT tutorials OpenWRT refuse connection

JW0914

Don't come to any forum and patronize people, its rude and quite irritating. Yes this is an OpenVPN forum, however THIS THREAD was about OpenVPN on a WRT1900ac that was running OpenWRT.

BB already worked with the local directive, as tens of tutorials online had already shown since at least 2012.

I've stated multiple times I am on CC and the local directive prevented a VPN connection on my WRT1900ac.

Yes Michael found a workaround, however then you stated you investigate further, as the local directive should not prevent a VPN connection from succeeding, and is why I asked Michael to leave the thread open for a few more days.

Traffic

Flame war aside ..

If you "stop" openvpn via your GUI . does it work ?

IE: does it termininate the openvpn process ?

JW0914

No... I've tried it both via Luci and via uci, neither causes a different result. There's obviously something different in how iptables either routes traffic in CC, or how it compiles its rules from uci.... As even forwarding the WAN zone directly doesn't allow traffic to flow to the VPN

Traffic

JW0914 wroteNo... I've tried it both via Luci and via uci, neither causes a different result

openWRT version of openVPN is a customised version .. for a start (openWRT:BB) does not support --management ..
I have no idea in what way openWRT configures iptables except that it assumes a port-redirect (as shown above) for local interfaces.

As I do not have access to openWRT:CC I can offer no further help.

JW0914

Thanks for taking the time =]

« Previous Page