Hi there
I'm new to OpenVPN, so please bear with me. I subscribe to a paid VPN service which utilizes the OpenVPN protocol, and the server is not within my control.
I am able to setup the client and I am provided a set of configuration files, the content of which is pasted below.
---
client
dev tun
proto udp
remote XXX.XXXXXX.XX 1194
cipher AES-128-CBC
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
verb 3
auth-user-pass userpass.txt
reneg-sec 0
---
I am able to connect to the VPN server, and the VPN check websites tell me that my IP address has changed.
However, after a varying period, which could be 10 minutes in one instance and 40 minutes in another, I realize that my IP address has changed back to my ISP's address in those VPN checkers, although I am still connected in the OpenVPN client.
Also, the OpenVPN client does not log this change, so it is impossible to tell other than constantly checking using the VPN checkers.
I have changed my DNS servers to Google DNS, so I believe this is not a DNS leak problem. I have also disabled IPv6 in my network adapter settings for both LAN and VPN connections. Additionally, I am on a DHCP lease, but the renewal is set for days, not minutes.
A sample log is attached below.
---
Sat Oct 31 08:29:14 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Sat Oct 31 08:29:14 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Sat Oct 31 08:29:14 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Oct 31 08:29:14 2015 Need hold release from management interface, waiting...
Sat Oct 31 08:29:14 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Oct 31 08:29:14 2015 MANAGEMENT: CMD 'state on'
Sat Oct 31 08:29:14 2015 MANAGEMENT: CMD 'log all on'
Sat Oct 31 08:29:14 2015 MANAGEMENT: CMD 'hold off'
Sat Oct 31 08:29:14 2015 MANAGEMENT: CMD 'hold release'
Sat Oct 31 08:29:14 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Oct 31 08:29:14 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Oct 31 08:29:14 2015 MANAGEMENT: >STATE:1446251354,RESOLVE,,,
Sat Oct 31 08:29:14 2015 UDPv4 link local: [undef]
Sat Oct 31 08:29:14 2015 UDPv4 link remote: [AF_INET]185.17.196.162:1194
Sat Oct 31 08:29:14 2015 MANAGEMENT: >STATE:1446251354,WAIT,,,
Sat Oct 31 08:29:14 2015 MANAGEMENT: >STATE:1446251354,AUTH,,,
Sat Oct 31 08:29:14 2015 TLS: Initial packet from [AF_INET]185.17.196.162:1194, sid=95de51b8 9f74199d
Sat Oct 31 08:29:14 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Oct 31 08:29:31 2015 VERIFY OK: depth=1, C=ZZ, ST=ZZ, L=ZZ, O=n/a, OU=MyOrganizationalUnit, CN=NA, name=EasyRSA, emailAddress=
example@example.com
Sat Oct 31 08:29:31 2015 VERIFY OK: depth=0, C=ZZ, ST=ZZ, L=ZZ, O=n/a, OU=MyOrganizationalUnit, CN=pmvpn3, name=EasyRSA, emailAddress=
example@example.com
Sat Oct 31 08:29:33 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Oct 31 08:29:33 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Oct 31 08:29:33 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Oct 31 08:29:33 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Oct 31 08:29:33 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Oct 31 08:29:33 2015 [pmvpn3] Peer Connection Initiated with [AF_INET]185.17.196.162:1194
Sat Oct 31 08:29:34 2015 MANAGEMENT: >STATE:1446251374,GET_CONFIG,,,
Sat Oct 31 08:29:36 2015 SENT CONTROL [pmvpn3]: 'PUSH_REQUEST' (status=1)
Sat Oct 31 08:29:36 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.4.4,dhcp-option DNS 8.8.8.8,dhcp-option WINS 8.8.8.8,dhcp-option WINS 8.8.4.4,route 10.8.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.8.0.10 10.8.0.9'
Sat Oct 31 08:29:36 2015 OPTIONS IMPORT: timers and/or timeouts modified
Sat Oct 31 08:29:36 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Oct 31 08:29:36 2015 OPTIONS IMPORT: route options modified
Sat Oct 31 08:29:36 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Oct 31 08:29:36 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Oct 31 08:29:36 2015 MANAGEMENT: >STATE:1446251376,ASSIGN_IP,,10.8.0.10,
Sat Oct 31 08:29:36 2015 open_tun, tt->ipv6=0
Sat Oct 31 08:29:36 2015 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{54BA76AE-C6B4-4279-86BD-A1D19500F288}.tap
Sat Oct 31 08:29:36 2015 TAP-Windows Driver Version 9.21
Sat Oct 31 08:29:36 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {54BA76AE-C6B4-4279-86BD-A1D19500F288} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Sat Oct 31 08:29:36 2015 Successful ARP Flush on interface [17] {54BA76AE-C6B4-4279-86BD-A1D19500F288}
Sat Oct 31 08:29:41 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sat Oct 31 08:29:41 2015 C:\Windows\system32\route.exe ADD 185.17.196.162 MASK 255.255.255.255 172.16.228.2
Sat Oct 31 08:29:41 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Sat Oct 31 08:29:41 2015 Route addition via IPAPI succeeded [adaptive]
Sat Oct 31 08:29:41 2015 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 172.16.228.2
Sat Oct 31 08:29:41 2015 Route deletion via IPAPI succeeded [adaptive]
Sat Oct 31 08:29:41 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.8.0.9
Sat Oct 31 08:29:41 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Oct 31 08:29:41 2015 Route addition via IPAPI succeeded [adaptive]
Sat Oct 31 08:29:41 2015 MANAGEMENT: >STATE:1446251381,ADD_ROUTES,,,
Sat Oct 31 08:29:41 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Sat Oct 31 08:29:41 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Oct 31 08:29:41 2015 Route addition via IPAPI succeeded [adaptive]
Sat Oct 31 08:29:41 2015 Initialization Sequence Completed
Sat Oct 31 08:29:41 2015 MANAGEMENT: >STATE:1446251381,CONNECTED,SUCCESS,10.8.0.10,185.17.196.162
---
The initial "route print" is as follows:
---
===========================================================================
Interface List
17...00 ff 54 ba 76 ae ......TAP-Windows Adapter V9
14...c8 e0 eb 40 f8 30 ......Bluetooth Device (Personal Area Network)
11...00 0c 29 a6 a1 75 ......Intel(R) PRO/1000 MT Network Connection
1...........................Software Loopback Interface 1
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.8.0.9 10.8.0.10 20
10.8.0.1 255.255.255.255 10.8.0.9 10.8.0.10 20
10.8.0.8 255.255.255.252 On-link 10.8.0.10 276
10.8.0.10 255.255.255.255 On-link 10.8.0.10 276
10.8.0.11 255.255.255.255 On-link 10.8.0.10 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
172.16.228.0 255.255.255.0 On-link 172.16.228.129 266
172.16.228.129 255.255.255.255 On-link 172.16.228.129 266
172.16.228.255 255.255.255.255 On-link 172.16.228.129 266
185.17.196.162 255.255.255.255 172.16.228.2 172.16.228.129 10
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 172.16.228.129 266
224.0.0.0 240.0.0.0 On-link 10.8.0.10 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 172.16.228.129 266
255.255.255.255 255.255.255.255 On-link 10.8.0.10 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
---
Please go slow with me, networking is not my forte. TIA. 😃
