Hi guys
I'm using OpenVPN on my Debian Jessie. It's installed using Yunohost's install script
here on github.
This setup is working for other users but not me. I'm successfully connecting, either from my work's Win7 workstation, or my home's ubuntu. But afterward I can't go anywhere, any random website I'm trying to open isn't working.
I've been digging the topic a couple of day but I got no clue on what's wrong... Anyone can help me investigate ?
Here is my Win7 OpenVPN client's connection log
Wed Sep 23 16:00:44 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Wed Sep 23 16:00:44 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Enter Management Password:
Wed Sep 23 16:00:44 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Sep 23 16:00:44 2015 Need hold release from management interface, waiting...
Wed Sep 23 16:00:44 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Sep 23 16:00:44 2015 MANAGEMENT: CMD 'state on'
Wed Sep 23 16:00:44 2015 MANAGEMENT: CMD 'log all on'
Wed Sep 23 16:00:44 2015 MANAGEMENT: CMD 'hold off'
Wed Sep 23 16:00:44 2015 MANAGEMENT: CMD 'hold release'
Wed Sep 23 16:00:49 2015 MANAGEMENT: CMD 'username "Auth" "myself"'
Wed Sep 23 16:00:49 2015 MANAGEMENT: CMD 'password [...]'
Wed Sep 23 16:00:49 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 23 16:00:50 2015 Socket Buffers: R=[8192->8192] S=[64512->64512]
Wed Sep 23 16:00:50 2015 UDPv4 link local: [undef]
Wed Sep 23 16:00:50 2015 UDPv4 link remote: [AF_INET]176.31.123.123:1194
Wed Sep 23 16:00:50 2015 MANAGEMENT: >STATE:1443016850,WAIT,,,
Wed Sep 23 16:00:50 2015 MANAGEMENT: >STATE:1443016850,AUTH,,,
Wed Sep 23 16:00:50 2015 TLS: Initial packet from [AF_INET]176.31.123.123:1194, sid=54eb8d3f 4e6e3cc9
Wed Sep 23 16:00:50 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Sep 23 16:00:50 2015 VERIFY OK: depth=1, CN=myserver.re
Wed Sep 23 16:00:50 2015 VERIFY OK: depth=0, CN=myserver.re
Wed Sep 23 16:00:50 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 23 16:00:50 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 23 16:00:50 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 23 16:00:50 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 23 16:00:50 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Sep 23 16:00:50 2015 [myserver.re] Peer Connection Initiated with [AF_INET]176.31.123.123:1194
Wed Sep 23 16:00:51 2015 MANAGEMENT: >STATE:1443016851,GET_CONFIG,,,
Wed Sep 23 16:00:53 2015 SENT CONTROL [myserver.re]: 'PUSH_REQUEST' (status=1)
Wed Sep 23 16:00:53 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5'
Wed Sep 23 16:00:53 2015 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 23 16:00:53 2015 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 23 16:00:53 2015 OPTIONS IMPORT: route options modified
Wed Sep 23 16:00:53 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Sep 23 16:00:53 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 23 16:00:53 2015 MANAGEMENT: >STATE:1443016853,ASSIGN_IP,,10.8.0.6,
Wed Sep 23 16:00:53 2015 open_tun, tt->ipv6=0
Wed Sep 23 16:00:53 2015 TAP-WIN32 device [Connexion au réseau local 4] opened: \\.\Global\{8ED2DBBD-8D68-4E8B-A2E3-2871E049F5D7}.tap
Wed Sep 23 16:00:53 2015 TAP-Windows Driver Version 9.21
Wed Sep 23 16:00:53 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {8ED2DBBD-8D68-4E8B-A2E3-2871E049F5D7} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Sep 23 16:00:53 2015 Successful ARP Flush on interface [51] {8ED2DBBD-8D68-4E8B-A2E3-2871E049F5D7}
Wed Sep 23 16:00:53 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Sep 23 16:00:53 2015 C:\Windows\system32\route.exe ADD 176.31.123.123 MASK 255.255.255.255 10.35.103.250
Wed Sep 23 16:00:53 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 23 16:00:53 2015 Route addition via IPAPI succeeded [adaptive]
Wed Sep 23 16:00:53 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Sep 23 16:00:53 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 23 16:00:53 2015 Route addition via IPAPI succeeded [adaptive]
Wed Sep 23 16:00:53 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Sep 23 16:00:53 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 23 16:00:53 2015 Route addition via IPAPI succeeded [adaptive]
Wed Sep 23 16:00:53 2015 MANAGEMENT: >STATE:1443016853,ADD_ROUTES,,,
Wed Sep 23 16:00:53 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Sep 23 16:00:53 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Sep 23 16:00:53 2015 Route addition via IPAPI succeeded [adaptive]
Wed Sep 23 16:00:53 2015 Initialization Sequence Completed
Wed Sep 23 16:00:53 2015 MANAGEMENT: >STATE:1443016853,CONNECTED,SUCCESS,10.8.0.6,176.31.123.123
Here my client .ovpn
client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo yes
verb 3
remote myserver.re 1194
route-delay
reneg-sec 0
redirect-gateway
script-security 2
--auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</ca>
And here's my server's conf file
port 1194
dev tun
proto udp
ca /etc/yunohost/certs/myserver.re/ca.pem
cert /etc/yunohost/certs/myserver.re/crt.pem
key /etc/yunohost/certs/myserver.re/key.pem
dh /etc/yunohost/certs/myserver.re/dh.pem
server 10.8.0.0 255.255.255.0
route 10.8.0.0 255.255.255.0
keepalive 10 60
inactive 600
user openvpn
group openvpn
persist-tun
persist-key
verb 3
plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/auth/ldap.conf
client-cert-not-required
status /var/log/openvpn.log
comp-lzo
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
Thanks for any help
