First, my end goal is to simply have all traffic going through vpn. I think I have things setup so most traffic is going through but dns is not working. After connecting to vpn I can ping 8.8.8.8 but not www.google.com. I can't tell if this is an openvpn setup issue or dd-wrt setup issue so I'm trying here first.
Normal dd-wrt address: 192.168.50.1
VPN dd-wrt address: 192.168.66.1
In normal mode, my router acts as my dns:
[]# cat /etc/resolv.conf
# Generated by resolvconf
domain dmz
nameserver 192.168.50.1
[]# ping www.google.com
PING www.google.com (216.58.216.196) 56(84) bytes of data.
64 bytes from ord31s21-in-f4.1e100.net (216.58.216.196): icmp_seq=1 ttl=56 time=34.0 ms
64 bytes from ord31s21-in-f4.1e100.net (216.58.216.196): icmp_seq=2 ttl=56 time=35.0 ms
64 bytes from ord31s21-in-f4.1e100.net (216.58.216.196): icmp_seq=3 ttl=56 time=34.1 ms
^C
--- www.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 34.072/34.441/35.070/0.446 ms
When I'm connected through vpn, though, I can't ping google.
[]# cat /etc/resolv.conf
# Generated by resolvconf
domain dmz
nameserver 192.168.66.1
nameserver 192.168.50.1
[]# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=56 time=34.3 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=56 time=34.1 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=56 time=33.4 ms
^C
--- 8.8.8.8 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 33.495/33.991/34.366/0.423 ms
[]# ping www.google.com
ping: unknown host www.google.com
I have been searching around quite a bit and trying various things but nothing is working for me. Please help! 🙂
Server config:
OpenVPN: Enable
Start Type: System
Config as: Server
Server mode: Router (TUN)
Network 192.168.66.0
Netmask: 255.255.255.0
Port: 1194
Tunnel Protocol: UDP
Encryption Cipher: AES-256 CBC
Hash Algorithm: SHA256
TLS Cipher: None
LZO Compression: Adaptive
Redirect default Gateway: Disable
Allow Client to Client: Enable
Allow duplicate cn: Disable
Tunnel MTU setting: 1500
Tunnel UDP Fragment:
Tunnel UDP MSS-Fix: Enable
...
Config file:
root@DD-WRT:/tmp/openvpn# grep -vE '^#|^;|^$' openvpn.conf
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 1194
proto udp
cipher aes-256-cbc
auth sha256
client-config-dir /tmp/openvpn/ccd
comp-lzo adaptive
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
tun-mtu 1500
mtu-disc yes
server 192.168.66.0 255.255.255.0
dev tun2
tun-ipv6
push "route 192.168.50.0 255.255.255.0"
push "dhcp-option DNS 192.168.66.1"
server 192.168.66.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001
verb 5
Client Config:
[]# grep -vE '^#|^;|^$' dmz.conf
client
dev tun0
proto udp
remote 192.168.50.1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca keys/ca.crt
cert keys/lappyICSL.crt
key keys/lappyICSL.key
ns-cert-type server
cipher AES-256-CBC
auth sha256
comp-lzo
verb 4
float
script-security 2
up /usr/share/openvpn/update-resolv-conf
down /usr/share/openvpn/update-resolv-conf
Server firewall rules:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -j MASQUERADE
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE
Server log
root@DD-WRT:~# cat /var/log/messages | grep openvpn
Jan 1 00:00:14 DD-WRT user.info syslog: openvpn : OpenVPN daemon (Server) starting/restarting...
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: Current Parameter Settings:
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: config = '/tmp/openvpn/openvpn.conf'
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: mode = 1
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: NOTE: --mute triggered...
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: 227 variation(s) on previous 3 message(s) suppressed by --mute
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 24 2013
Jan 1 00:00:18 DD-WRT daemon.notice openvpn[1120]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:5001
Jan 1 00:00:18 DD-WRT daemon.warn openvpn[1120]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[1120]: Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: UDPv4 link local (bound): [undef]
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: UDPv4 link remote: [undef]
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: MULTI: multi_init called, r=256 v=256
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: IFCONFIG POOL: base=192.168.66.2 size=252, ipv6=0
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: IFCONFIG POOL LIST
Mar 28 12:33:23 DD-WRT daemon.notice openvpn[2041]: Initialization Sequence Completed
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: MULTI: multi_create_instance called
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Re-using SSL/TLS context
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 LZO compression initialized
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Local Options hash (VER=V4): '79a26cd9'
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mar 28 12:34:44 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 TLS: Initial packet from [AF_INET]192.168.50.132:45102, sid=70055700 3a3b8339
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 VERIFY OK: depth=1, C=US, ST=MN, L=Bloomington, O=DMZ, OU=House, CN=DMZ CA, name=HouseCA, emailAddress=ryantr@gmail.com
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 VERIFY OK: depth=0, C=US, ST=MN, L=Bloomington, O=DMZ, OU=House, CN=lappyICSL, name=HouseCA, emailAddress=ryantr@gmail.com
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 NOTE: --mute triggered...
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 5 variation(s) on previous 3 message(s) suppressed by --mute
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: 192.168.50.132:45102 [lappyICSL] Peer Connection Initiated with [AF_INET]192.168.50.132:45102
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 MULTI_sva: pool returned IPv4=192.168.66.2, IPv6=(Not enabled)
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 MULTI: Learn: 192.168.66.2 -> lappyICSL/192.168.50.132:45102
Mar 28 12:34:45 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 MULTI: primary virtual IP for lappyICSL/192.168.50.132:45102: 192.168.66.2
Mar 28 12:34:47 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 PUSH: Received control message: 'PUSH_REQUEST'
Mar 28 12:34:47 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 send_push_reply(): safe_cap=940
Mar 28 12:34:47 DD-WRT daemon.notice openvpn[2041]: lappyICSL/192.168.50.132:45102 SENT CONTROL [lappyICSL]: 'PUSH_REPLY,route 192.168.50.0 255.255.255.0,dhcp-option DNS 192.168.66.1,route-gateway 192.168.66.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.66.2
Client log:
Sat Mar 28 08:02:15 2015 us=606249 Current Parameter Settings:
Sat Mar 28 08:02:15 2015 us=606358 config = 'dmz.conf'
Sat Mar 28 08:02:15 2015 us=606380 mode = 0
Sat Mar 28 08:02:15 2015 us=606395 persist_config = DISABLED
Sat Mar 28 08:02:15 2015 us=606410 persist_mode = 1
Sat Mar 28 08:02:15 2015 us=606424 show_ciphers = DISABLED
Sat Mar 28 08:02:15 2015 us=606437 show_digests = DISABLED
Sat Mar 28 08:02:15 2015 us=606451 show_engines = DISABLED
Sat Mar 28 08:02:15 2015 us=606464 genkey = DISABLED
Sat Mar 28 08:02:15 2015 us=606478 key_pass_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606491 show_tls_ciphers = DISABLED
Sat Mar 28 08:02:15 2015 us=606504 Connection profiles [default]:
Sat Mar 28 08:02:15 2015 us=606518 proto = udp
Sat Mar 28 08:02:15 2015 us=606531 local = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606545 local_port = 0
Sat Mar 28 08:02:15 2015 us=606558 remote = '192.168.50.1'
Sat Mar 28 08:02:15 2015 us=606571 remote_port = 1194
Sat Mar 28 08:02:15 2015 us=606584 remote_float = ENABLED
Sat Mar 28 08:02:15 2015 us=606597 bind_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=606610 bind_local = DISABLED
Sat Mar 28 08:02:15 2015 us=606624 connect_retry_seconds = 5
Sat Mar 28 08:02:15 2015 us=606638 connect_timeout = 10
Sat Mar 28 08:02:15 2015 us=606651 connect_retry_max = 0
Sat Mar 28 08:02:15 2015 us=606665 socks_proxy_server = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606678 socks_proxy_port = 0
Sat Mar 28 08:02:15 2015 us=606691 socks_proxy_retry = DISABLED
Sat Mar 28 08:02:15 2015 us=606704 tun_mtu = 1500
Sat Mar 28 08:02:15 2015 us=606717 tun_mtu_defined = ENABLED
Sat Mar 28 08:02:15 2015 us=606731 link_mtu = 1500
Sat Mar 28 08:02:15 2015 us=606744 link_mtu_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=606757 tun_mtu_extra = 0
Sat Mar 28 08:02:15 2015 us=606770 tun_mtu_extra_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=606783 mtu_discover_type = -1
Sat Mar 28 08:02:15 2015 us=606796 fragment = 0
Sat Mar 28 08:02:15 2015 us=606809 mssfix = 1450
Sat Mar 28 08:02:15 2015 us=606822 explicit_exit_notification = 0
Sat Mar 28 08:02:15 2015 us=606835 Connection profiles END
Sat Mar 28 08:02:15 2015 us=606848 remote_random = DISABLED
Sat Mar 28 08:02:15 2015 us=606861 ipchange = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606874 dev = 'tun0'
Sat Mar 28 08:02:15 2015 us=606887 dev_type = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606904 dev_node = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606919 lladdr = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606933 topology = 1
Sat Mar 28 08:02:15 2015 us=606946 tun_ipv6 = DISABLED
Sat Mar 28 08:02:15 2015 us=606959 ifconfig_local = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606973 ifconfig_remote_netmask = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=606986 ifconfig_noexec = DISABLED
Sat Mar 28 08:02:15 2015 us=606999 ifconfig_nowarn = DISABLED
Sat Mar 28 08:02:15 2015 us=607012 ifconfig_ipv6_local = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607025 ifconfig_ipv6_netbits = 0
Sat Mar 28 08:02:15 2015 us=607038 ifconfig_ipv6_remote = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607052 shaper = 0
Sat Mar 28 08:02:15 2015 us=607065 mtu_test = 0
Sat Mar 28 08:02:15 2015 us=607078 mlock = DISABLED
Sat Mar 28 08:02:15 2015 us=607091 keepalive_ping = 0
Sat Mar 28 08:02:15 2015 us=607104 keepalive_timeout = 0
Sat Mar 28 08:02:15 2015 us=607118 inactivity_timeout = 0
Sat Mar 28 08:02:15 2015 us=607131 ping_send_timeout = 0
Sat Mar 28 08:02:15 2015 us=607145 ping_rec_timeout = 0
Sat Mar 28 08:02:15 2015 us=607158 ping_rec_timeout_action = 0
Sat Mar 28 08:02:15 2015 us=607171 ping_timer_remote = DISABLED
Sat Mar 28 08:02:15 2015 us=607184 remap_sigusr1 = 0
Sat Mar 28 08:02:15 2015 us=607197 persist_tun = ENABLED
Sat Mar 28 08:02:15 2015 us=607210 persist_local_ip = DISABLED
Sat Mar 28 08:02:15 2015 us=607223 persist_remote_ip = DISABLED
Sat Mar 28 08:02:15 2015 us=607237 persist_key = ENABLED
Sat Mar 28 08:02:15 2015 us=607250 passtos = DISABLED
Sat Mar 28 08:02:15 2015 us=607263 resolve_retry_seconds = 1000000000
Sat Mar 28 08:02:15 2015 us=607285 username = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607300 groupname = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607313 chroot_dir = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607327 cd_dir = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607340 writepid = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607353 up_script = '/usr/share/openvpn/update-resolv-conf'
Sat Mar 28 08:02:15 2015 us=607367 down_script = '/usr/share/openvpn/update-resolv-conf'
Sat Mar 28 08:02:15 2015 us=607380 down_pre = DISABLED
Sat Mar 28 08:02:15 2015 us=607394 up_restart = DISABLED
Sat Mar 28 08:02:15 2015 us=607407 up_delay = DISABLED
Sat Mar 28 08:02:15 2015 us=607420 daemon = DISABLED
Sat Mar 28 08:02:15 2015 us=607433 inetd = 0
Sat Mar 28 08:02:15 2015 us=607446 log = DISABLED
Sat Mar 28 08:02:15 2015 us=607459 suppress_timestamps = DISABLED
Sat Mar 28 08:02:15 2015 us=607473 nice = 0
Sat Mar 28 08:02:15 2015 us=607486 verbosity = 4
Sat Mar 28 08:02:15 2015 us=607510 mute = 0
Sat Mar 28 08:02:15 2015 us=607524 gremlin = 0
Sat Mar 28 08:02:15 2015 us=607537 status_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607549 status_file_version = 1
Sat Mar 28 08:02:15 2015 us=607568 status_file_update_freq = 60
Sat Mar 28 08:02:15 2015 us=607592 occ = ENABLED
Sat Mar 28 08:02:15 2015 us=607616 rcvbuf = 65536
Sat Mar 28 08:02:15 2015 us=607634 sndbuf = 65536
Sat Mar 28 08:02:15 2015 us=607646 mark = 0
Sat Mar 28 08:02:15 2015 us=607658 sockflags = 0
Sat Mar 28 08:02:15 2015 us=607671 fast_io = DISABLED
Sat Mar 28 08:02:15 2015 us=607683 lzo = 7
Sat Mar 28 08:02:15 2015 us=607707 route_script = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607722 route_default_gateway = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607735 route_default_metric = 0
Sat Mar 28 08:02:15 2015 us=607749 route_noexec = DISABLED
Sat Mar 28 08:02:15 2015 us=607762 route_delay = 0
Sat Mar 28 08:02:15 2015 us=607776 route_delay_window = 30
Sat Mar 28 08:02:15 2015 us=607789 route_delay_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=607802 route_nopull = DISABLED
Sat Mar 28 08:02:15 2015 us=607816 route_gateway_via_dhcp = DISABLED
Sat Mar 28 08:02:15 2015 us=607830 max_routes = 100
Sat Mar 28 08:02:15 2015 us=607843 allow_pull_fqdn = DISABLED
Sat Mar 28 08:02:15 2015 us=607857 management_addr = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607871 management_port = 0
Sat Mar 28 08:02:15 2015 us=607884 management_user_pass = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607898 management_log_history_cache = 250
Sat Mar 28 08:02:15 2015 us=607912 management_echo_buffer_size = 100
Sat Mar 28 08:02:15 2015 us=607926 management_write_peer_info_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607940 management_client_user = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607953 management_client_group = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607966 management_flags = 0
Sat Mar 28 08:02:15 2015 us=607980 shared_secret_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=607993 key_direction = 0
Sat Mar 28 08:02:15 2015 us=608006 ciphername_defined = ENABLED
Sat Mar 28 08:02:15 2015 us=608019 ciphername = 'AES-256-CBC'
Sat Mar 28 08:02:15 2015 us=608033 authname_defined = ENABLED
Sat Mar 28 08:02:15 2015 us=608046 authname = 'sha256'
Sat Mar 28 08:02:15 2015 us=608059 prng_hash = 'SHA1'
Sat Mar 28 08:02:15 2015 us=608073 prng_nonce_secret_len = 16
Sat Mar 28 08:02:15 2015 us=608086 keysize = 0
Sat Mar 28 08:02:15 2015 us=608099 engine = DISABLED
Sat Mar 28 08:02:15 2015 us=608113 replay = ENABLED
Sat Mar 28 08:02:15 2015 us=608126 mute_replay_warnings = DISABLED
Sat Mar 28 08:02:15 2015 us=608139 replay_window = 64
Sat Mar 28 08:02:15 2015 us=608153 replay_time = 15
Sat Mar 28 08:02:15 2015 us=608166 packet_id_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608179 use_iv = ENABLED
Sat Mar 28 08:02:15 2015 us=608192 test_crypto = DISABLED
Sat Mar 28 08:02:15 2015 us=608205 tls_server = DISABLED
Sat Mar 28 08:02:15 2015 us=608219 tls_client = ENABLED
Sat Mar 28 08:02:15 2015 us=608232 key_method = 2
Sat Mar 28 08:02:15 2015 us=608254 ca_file = 'keys/ca.crt'
Sat Mar 28 08:02:15 2015 us=608268 ca_path = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608282 dh_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608295 cert_file = 'keys/lappyICSL.crt'
Sat Mar 28 08:02:15 2015 us=608309 priv_key_file = 'keys/lappyICSL.key'
Sat Mar 28 08:02:15 2015 us=608322 pkcs12_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608335 cipher_list = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608348 tls_verify = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608362 tls_export_cert = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608375 verify_x509_type = 0
Sat Mar 28 08:02:15 2015 us=608388 verify_x509_name = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608402 crl_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608415 ns_cert_type = 1
Sat Mar 28 08:02:15 2015 us=608428 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608442 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608455 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608468 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608481 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608494 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608506 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608519 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608532 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608545 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608558 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608571 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608584 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608597 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608610 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608623 remote_cert_ku[i] = 0
Sat Mar 28 08:02:15 2015 us=608636 remote_cert_eku = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608649 ssl_flags = 0
Sat Mar 28 08:02:15 2015 us=608662 tls_timeout = 2
Sat Mar 28 08:02:15 2015 us=608675 renegotiate_bytes = 0
Sat Mar 28 08:02:15 2015 us=608701 renegotiate_packets = 0
Sat Mar 28 08:02:15 2015 us=608739 renegotiate_seconds = 3600
Sat Mar 28 08:02:15 2015 us=608752 handshake_window = 60
Sat Mar 28 08:02:15 2015 us=608762 transition_window = 3600
Sat Mar 28 08:02:15 2015 us=608786 single_session = DISABLED
Sat Mar 28 08:02:15 2015 us=608800 push_peer_info = DISABLED
Sat Mar 28 08:02:15 2015 us=608814 tls_exit = DISABLED
Sat Mar 28 08:02:15 2015 us=608827 tls_auth_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=608845 server_network = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=608860 server_netmask = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=608903 server_network_ipv6 = ::
Sat Mar 28 08:02:15 2015 us=608931 server_netbits_ipv6 = 0
Sat Mar 28 08:02:15 2015 us=608962 server_bridge_ip = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=608978 server_bridge_netmask = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=608993 server_bridge_pool_start = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609008 server_bridge_pool_end = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609021 ifconfig_pool_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=609036 ifconfig_pool_start = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609050 ifconfig_pool_end = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609065 ifconfig_pool_netmask = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609078 ifconfig_pool_persist_filename = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609092 ifconfig_pool_persist_refresh_freq = 600
Sat Mar 28 08:02:15 2015 us=609105 ifconfig_ipv6_pool_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=609120 ifconfig_ipv6_pool_base = ::
Sat Mar 28 08:02:15 2015 us=609134 ifconfig_ipv6_pool_netbits = 0
Sat Mar 28 08:02:15 2015 us=609148 n_bcast_buf = 256
Sat Mar 28 08:02:15 2015 us=609161 tcp_queue_limit = 64
Sat Mar 28 08:02:15 2015 us=609174 real_hash_size = 256
Sat Mar 28 08:02:15 2015 us=609188 virtual_hash_size = 256
Sat Mar 28 08:02:15 2015 us=609201 client_connect_script = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609225 learn_address_script = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609236 client_disconnect_script = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609247 client_config_dir = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609278 ccd_exclusive = DISABLED
Sat Mar 28 08:02:15 2015 us=609293 tmp_dir = '/home/ryantr/temp'
Sat Mar 28 08:02:15 2015 us=609306 push_ifconfig_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=609321 push_ifconfig_local = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609336 push_ifconfig_remote_netmask = 0.0.0.0
Sat Mar 28 08:02:15 2015 us=609349 push_ifconfig_ipv6_defined = DISABLED
Sat Mar 28 08:02:15 2015 us=609367 push_ifconfig_ipv6_local = ::/0
Sat Mar 28 08:02:15 2015 us=609383 push_ifconfig_ipv6_remote = ::
Sat Mar 28 08:02:15 2015 us=609396 enable_c2c = DISABLED
Sat Mar 28 08:02:15 2015 us=609410 duplicate_cn = DISABLED
Sat Mar 28 08:02:15 2015 us=609424 cf_max = 0
Sat Mar 28 08:02:15 2015 us=609437 cf_per = 0
Sat Mar 28 08:02:15 2015 us=609451 max_clients = 1024
Sat Mar 28 08:02:15 2015 us=609464 max_routes_per_client = 256
Sat Mar 28 08:02:15 2015 us=609478 auth_user_pass_verify_script = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609492 auth_user_pass_verify_script_via_file = DISABLED
Sat Mar 28 08:02:15 2015 us=609505 port_share_host = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609519 port_share_port = 0
Sat Mar 28 08:02:15 2015 us=609532 client = ENABLED
Sat Mar 28 08:02:15 2015 us=609545 pull = ENABLED
Sat Mar 28 08:02:15 2015 us=609559 auth_user_pass_file = '[UNDEF]'
Sat Mar 28 08:02:15 2015 us=609575 OpenVPN 2.3.6 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 2 2014
Sat Mar 28 08:02:15 2015 us=609600 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.09
Sat Mar 28 08:02:15 2015 us=609664 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Mar 28 08:02:15 2015 us=610514 LZO compression initialized
Sat Mar 28 08:02:15 2015 us=610619 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 28 08:02:15 2015 us=610669 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Mar 28 08:02:15 2015 us=610696 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Mar 28 08:02:15 2015 us=610726 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Sat Mar 28 08:02:15 2015 us=610740 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Sat Mar 28 08:02:15 2015 us=610768 Local Options hash (VER=V4): 'fc8ba345'
Sat Mar 28 08:02:15 2015 us=610791 Expected Remote Options hash (VER=V4): '79a26cd9'
Sat Mar 28 08:02:15 2015 us=610811 UDPv4 link local: [undef]
Sat Mar 28 08:02:15 2015 us=610829 UDPv4 link remote: [AF_INET]192.168.50.1:1194
Sat Mar 28 08:02:15 2015 us=614482 TLS: Initial packet from [AF_INET]192.168.50.1:1194, sid=436c58cd 56e94d3d
Sat Mar 28 08:02:16 2015 us=110878 VERIFY OK: depth=1, C=US, ST=MN, L=Bloomington, O=DMZ, OU=House, CN=DMZ CA, name=HouseCA, emailAddress=ryantr@gmail.com
Sat Mar 28 08:02:16 2015 us=111251 VERIFY OK: nsCertType=SERVER
Sat Mar 28 08:02:16 2015 us=111279 VERIFY OK: depth=0, C=US, ST=MN, L=Bloomington, O=DMZ, OU=House, CN=DDWRT, name=HouseCA, emailAddress=ryantr@gmail.com
Sat Mar 28 08:02:16 2015 us=521042 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Mar 28 08:02:16 2015 us=521133 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Mar 28 08:02:16 2015 us=521155 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Mar 28 08:02:16 2015 us=521175 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Mar 28 08:02:16 2015 us=521250 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Mar 28 08:02:16 2015 us=521316 [DDWRT] Peer Connection Initiated with [AF_INET]192.168.50.1:1194
Sat Mar 28 08:02:18 2015 us=765885 SENT CONTROL [DDWRT]: 'PUSH_REQUEST' (status=1)
Sat Mar 28 08:02:18 2015 us=768390 PUSH: Received control message: 'PUSH_REPLY,route 192.168.50.0 255.255.255.0,dhcp-option DNS 192.168.66.1,route-gateway 192.168.66.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.66.2 255.255.255.0'
Sat Mar 28 08:02:18 2015 us=768579 OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 28 08:02:18 2015 us=768606 OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 28 08:02:18 2015 us=768621 OPTIONS IMPORT: route options modified
Sat Mar 28 08:02:18 2015 us=768635 OPTIONS IMPORT: route-related options modified
Sat Mar 28 08:02:18 2015 us=768648 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 28 08:02:18 2015 us=768876 ROUTE_GATEWAY 192.168.50.1/255.255.255.0 IFACE=eth0 HWADDR=3c:97:0e:58:e5:20
Sat Mar 28 08:02:18 2015 us=769330 TUN/TAP device tun0 opened
Sat Mar 28 08:02:18 2015 us=769378 TUN/TAP TX queue length set to 100
Sat Mar 28 08:02:18 2015 us=769400 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Mar 28 08:02:18 2015 us=769428 /usr/bin/ip link set dev tun0 up mtu 1500
Sat Mar 28 08:02:18 2015 us=770597 /usr/bin/ip addr add dev tun0 192.168.66.2/24 broadcast 192.168.66.255
Sat Mar 28 08:02:18 2015 us=771698 /usr/share/openvpn/update-resolv-conf tun0 1500 1570 192.168.66.2 255.255.255.0 init
dhcp-option DNS 192.168.66.1
Sat Mar 28 08:02:18 2015 us=815477 /usr/bin/ip route add 192.168.50.0/24 via 192.168.66.1
Sat Mar 28 08:02:18 2015 us=816432 Initialization Sequence Completed
Sat Mar 28 08:03:17 2015 us=239788 TCP/UDP: Closing socket
Sat Mar 28 08:03:17 2015 us=239855 /usr/bin/ip route del 192.168.50.0/24
Sat Mar 28 08:03:17 2015 us=240941 Closing TUN/TAP interface
Sat Mar 28 08:03:17 2015 us=241009 /usr/bin/ip addr del dev tun0 192.168.66.2/24
Sat Mar 28 08:03:17 2015 us=277948 /usr/share/openvpn/update-resolv-conf tun0 1500 1570 192.168.66.2 255.255.255.0 init
Sat Mar 28 08:03:17 2015 us=309011 SIGINT[hard,] received, process exiting
