Hello,
I tried to setup an openvpn client connection to purevpn service. I used the following guide:
http://support.purevpn.com/qnap-nas-qts-4-x-openvpn-setup-guide
It seens that everthing is working fine, but I can not get acess to the internet. I am a newbie in openvpn and hopes that somebody can help me.
Here the openvpn log file:
Sat Nov 7 17:54:07 2015 OpenVPN 2.3.6 arm-none-linux-gnueabi [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Oct 23 2015
Sat Nov 7 17:54:07 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.05
Sat Nov 7 17:54:07 2015 WARNING: file '/share/Public/vpn/pass1.txt' is group or others accessible
Sat Nov 7 17:54:07 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Nov 7 17:54:07 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Nov 7 17:54:07 2015 WARNING: file '/share/Public/vpn/Wdc.key' is group or others accessible
Sat Nov 7 17:54:07 2015 Control Channel Authentication: using '/share/Public/vpn/Wdc.key' as a OpenVPN static key file
Sat Nov 7 17:54:07 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:07 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:07 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat Nov 7 17:54:07 2015 UDPv4 link local (bound): [undef]
Sat Nov 7 17:54:07 2015 UDPv4 link remote: [AF_INET]206.123.147.2:53
Sat Nov 7 17:54:07 2015 TLS: Initial packet from [AF_INET]206.123.147.2:53, sid=55af31f3 7d1928f5
Sat Nov 7 17:54:07 2015 VERIFY OK: depth=1, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Sat Nov 7 17:54:07 2015 VERIFY OK: depth=0, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Sat Nov 7 17:54:12 2015 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Nov 7 17:54:12 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:12 2015 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Nov 7 17:54:12 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:12 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Nov 7 17:54:12 2015 [PureVPN] Peer Connection Initiated with [AF_INET]206.123.147.2:53
Sat Nov 7 17:54:14 2015 SENT CONTROL [PureVPN]: 'PUSH_REQUEST' (status=1)
Sat Nov 7 17:54:14 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 206.123.147.3,dhcp-option DNS 8.8.4.4,sndbuf 393216,rcvbuf 393216,route-gateway 206.123.147.97,topology subnet,ping 10,ping-restart 120,ifconfig 206.123.147.106 255.255.255.224'
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Nov 7 17:54:14 2015 Socket Buffers: R=[131072->327680] S=[131072->327680]
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: route options modified
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: route-related options modified
Sat Nov 7 17:54:14 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 7 17:54:14 2015 ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=eth0 HWADDR=00:08:9b:d5:8a:20
Sat Nov 7 17:54:14 2015 TUN/TAP device tun0 opened
Sat Nov 7 17:54:14 2015 TUN/TAP TX queue length set to 100
Sat Nov 7 17:54:14 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 7 17:54:14 2015 /sbin/ifconfig tun0 206.123.147.106 netmask 255.255.255.224 mtu 1500 broadcast 206.123.147.127
Sat Nov 7 17:54:14 2015 /etc/openvpn/openvpn_up tun0 1500 1558 206.123.147.106 255.255.255.224 init
route: SIOC[ADD|DEL]RT: No such process
Sat Nov 7 17:54:14 2015 /sbin/route add -net 206.123.147.2 netmask 255.255.255.255 gw 192.168.178.1
Sat Nov 7 17:54:14 2015 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 206.123.147.97
Sat Nov 7 17:54:14 2015 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 206.123.147.97
Sat Nov 7 17:54:14 2015 Initialization Sequence Completed
Sat Nov 7 17:54:38 2015 OpenVPN 2.3.6 arm-none-linux-gnueabi [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Oct 23 2015
Sat Nov 7 17:54:38 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.05
Sat Nov 7 17:54:38 2015 WARNING: file '/share/Public/vpn/pass1.txt' is group or others accessible
Sat Nov 7 17:54:38 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Nov 7 17:54:38 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Nov 7 17:54:38 2015 WARNING: file '/share/Public/vpn/Wdc.key' is group or others accessible
Sat Nov 7 17:54:38 2015 Control Channel Authentication: using '/share/Public/vpn/Wdc.key' as a OpenVPN static key file
Sat Nov 7 17:54:38 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:38 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:38 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat Nov 7 17:54:38 2015 UDPv4 link local (bound): [undef]
Sat Nov 7 17:54:38 2015 UDPv4 link remote: [AF_INET]206.123.147.2:53
Sat Nov 7 17:54:38 2015 TLS: Initial packet from [AF_INET]206.123.147.2:53, sid=20a96e00 8a84e6a4
Sat Nov 7 17:54:38 2015 VERIFY OK: depth=1, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Sat Nov 7 17:54:38 2015 VERIFY OK: depth=0, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Sat Nov 7 17:54:42 2015 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Nov 7 17:54:42 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:42 2015 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Nov 7 17:54:42 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 7 17:54:42 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Nov 7 17:54:42 2015 [PureVPN] Peer Connection Initiated with [AF_INET]206.123.147.2:53
Sat Nov 7 17:54:45 2015 SENT CONTROL [PureVPN]: 'PUSH_REQUEST' (status=1)
Sat Nov 7 17:54:45 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 206.123.147.3,dhcp-option DNS 8.8.4.4,sndbuf 393216,rcvbuf 393216,route-gateway 206.123.147.97,topology subnet,ping 10,ping-restart 120,ifconfig 206.123.147.106 255.255.255.224'
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Nov 7 17:54:45 2015 Socket Buffers: R=[131072->327680] S=[131072->327680]
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: route options modified
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: route-related options modified
Sat Nov 7 17:54:45 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 7 17:54:45 2015 ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=eth0 HWADDR=00:08:9b:d5:8a:20
Sat Nov 7 17:54:45 2015 TUN/TAP device tun0 opened
Sat Nov 7 17:54:45 2015 TUN/TAP TX queue length set to 100
Sat Nov 7 17:54:45 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 7 17:54:45 2015 /sbin/ifconfig tun0 206.123.147.106 netmask 255.255.255.224 mtu 1500 broadcast 206.123.147.127
Sat Nov 7 17:54:45 2015 /etc/openvpn/openvpn_up tun0 1500 1558 206.123.147.106 255.255.255.224 init
route: SIOC[ADD|DEL]RT: No such process
Sat Nov 7 17:54:45 2015 /sbin/route add -net 206.123.147.2 netmask 255.255.255.255 gw 192.168.178.1
route: SIOC[ADD|DEL]RT: File exists
Sat Nov 7 17:54:45 2015 ERROR: Linux route add command failed: external program exited with error status: 1
Sat Nov 7 17:54:45 2015 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 206.123.147.97
Sat Nov 7 17:54:45 2015 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 206.123.147.97
Sat Nov 7 17:54:45 2015 Initialization Sequence Completed
and some additional informations from terminal:
[~] # ip route show
0.0.0.0/1 via 206.123.147.97 dev tun0
default via 192.168.178.1 dev eth0 metric 1
127.0.0.0/8 dev lo scope link
128.0.0.0/1 via 206.123.147.97 dev tun0
192.168.178.0/24 dev eth0 proto kernel scope link src 192.168.178.35
206.123.147.2 via 192.168.178.1 dev eth0
206.123.147.96/27 dev tun0 proto kernel scope link src 206.123.147.106
224.0.0.0/4 dev eth1 scope link
224.0.0.0/4 dev eth0 scope link
[~] # route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 206.123.147.97 128.0.0.0 UG 0 0 0 tun0
default fritz.box 0.0.0.0 UG 1 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
128.0.0.0 206.123.147.97 128.0.0.0 UG 0 0 0 tun0
192.168.178.0 * 255.255.255.0 U 0 0 0 eth0
206.123.147.2 fritz.box 255.255.255.255 UGH 0 0 0 eth0
206.123.147.96 * 255.255.255.224 U 0 0 0 tun0
224.0.0.0 * 240.0.0.0 U 0 0 0 eth1
224.0.0.0 * 240.0.0.0 U 0 0 0 eth0
[~] # ping www.google.de
PING www.google.de (173.194.116.216): 56 data bytes
^C
--- www.google.de ping statistics ---
21 packets transmitted, 0 packets received, 100% packet loss
Any Ideas ?
Thank you in advance.
Bernd
