Hello!
So ive set up a raspberry pi to be my VPN server. Everything has been working fine since recently. If i connect to a hotspot and activate my VPN it connects seamlessly. But when i try to access certain websites they are still blocked, meaning that although i have VPN active my browsing is still monitored by the access point. I dont know why this is happening. It used to work.
Heres my LOG:
Sat Nov 14 12:27:10 2015 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Sat Nov 14 12:27:10 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Sat Nov 14 12:27:11 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sat Nov 14 12:27:11 2015 Need hold release from management interface, waiting...
Sat Nov 14 12:27:11 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sat Nov 14 12:27:11 2015 MANAGEMENT: CMD 'state on'
Sat Nov 14 12:27:11 2015 MANAGEMENT: CMD 'log all on'
Sat Nov 14 12:27:11 2015 MANAGEMENT: CMD 'hold off'
Sat Nov 14 12:27:11 2015 MANAGEMENT: CMD 'hold release'
Sat Nov 14 12:27:11 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Nov 14 12:27:11 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Nov 14 12:27:11 2015 MANAGEMENT: >STATE:1447500431,RESOLVE,,,
Sat Nov 14 12:27:11 2015 UDPv4 link local: [undef]
Sat Nov 14 12:27:11 2015 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Sat Nov 14 12:27:11 2015 MANAGEMENT: >STATE:1447500431,WAIT,,,
Sat Nov 14 12:27:11 2015 MANAGEMENT: >STATE:1447500431,AUTH,,,
Sat Nov 14 12:27:11 2015 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=3e7df920 2d424ac2
Sat Nov 14 12:27:12 2015 VERIFY OK: depth=1, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:27:12 2015 VERIFY OK: depth=0, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:27:13 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:27:13 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:27:13 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:27:13 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:27:13 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 14 12:27:13 2015 [server] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Sat Nov 14 12:27:14 2015 MANAGEMENT: >STATE:1447500434,GET_CONFIG,,,
Sat Nov 14 12:27:15 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Nov 14 12:27:15 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 192.168.2.1,dhcp-option DNS 192.168.2.1,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Sat Nov 14 12:27:15 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 14 12:27:15 2015 OPTIONS IMPORT: route options modified
Sat Nov 14 12:27:15 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 14 12:27:15 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 14 12:27:15 2015 MANAGEMENT: >STATE:1447500435,ASSIGN_IP,,10.8.0.10,
Sat Nov 14 12:27:15 2015 open_tun, tt->ipv6=0
Sat Nov 14 12:27:15 2015 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{AA5FC6C8-B258-40E2-8985-CBE96D4AD522}.tap
Sat Nov 14 12:27:15 2015 TAP-Windows Driver Version 9.21
Sat Nov 14 12:27:15 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {AA5FC6C8-B258-40E2-8985-CBE96D4AD522} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Sat Nov 14 12:27:15 2015 NOTE: FlushIpNetTable failed on interface [16] {AA5FC6C8-B258-40E2-8985-CBE96D4AD522} (status=5) : Access is denied.
Sat Nov 14 12:27:20 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sat Nov 14 12:27:20 2015 C:\Windows\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 10.134.115.254
Sat Nov 14 12:27:20 2015 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=6]
Sat Nov 14 12:27:20 2015 Route addition via IPAPI failed [adaptive]
Sat Nov 14 12:27:20 2015 Route addition fallback to route.exe
Sat Nov 14 12:27:20 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Nov 14 12:27:20 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Nov 14 12:27:20 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.9
Sat Nov 14 12:27:20 2015 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=16]
Sat Nov 14 12:27:20 2015 Route addition via IPAPI failed [adaptive]
Sat Nov 14 12:27:20 2015 Route addition fallback to route.exe
Sat Nov 14 12:27:20 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Nov 14 12:27:21 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Nov 14 12:27:21 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.9
Sat Nov 14 12:27:21 2015 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=16]
Sat Nov 14 12:27:21 2015 Route addition via IPAPI failed [adaptive]
Sat Nov 14 12:27:21 2015 Route addition fallback to route.exe
Sat Nov 14 12:27:21 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Nov 14 12:27:21 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Nov 14 12:27:21 2015 MANAGEMENT: >STATE:1447500441,ADD_ROUTES,,,
Sat Nov 14 12:27:21 2015 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.9
Sat Nov 14 12:27:21 2015 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=16]
Sat Nov 14 12:27:21 2015 Route addition via IPAPI failed [adaptive]
Sat Nov 14 12:27:21 2015 Route addition fallback to route.exe
Sat Nov 14 12:27:21 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Nov 14 12:27:21 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Nov 14 12:27:21 2015 Initialization Sequence Completed
Sat Nov 14 12:27:21 2015 MANAGEMENT: >STATE:1447500441,CONNECTED,SUCCESS,10.8.0.10,x.x.x.x
Sat Nov 14 12:29:16 2015 [server] Inactivity timeout (--ping-restart), restarting
Sat Nov 14 12:29:16 2015 SIGUSR1[soft,ping-restart] received, process restarting
Sat Nov 14 12:29:16 2015 MANAGEMENT: >STATE:1447500556,RECONNECTING,ping-restart,,
Sat Nov 14 12:29:16 2015 Restart pause, 2 second(s)
Sat Nov 14 12:29:18 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Nov 14 12:29:18 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Nov 14 12:29:18 2015 MANAGEMENT: >STATE:1447500558,RESOLVE,,,
Sat Nov 14 12:29:18 2015 UDPv4 link local: [undef]
Sat Nov 14 12:29:18 2015 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Sat Nov 14 12:29:18 2015 MANAGEMENT: >STATE:1447500558,WAIT,,,
Sat Nov 14 12:29:18 2015 MANAGEMENT: >STATE:1447500558,AUTH,,,
Sat Nov 14 12:29:18 2015 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=aa785c39 c06de55a
Sat Nov 14 12:29:18 2015 VERIFY OK: depth=1, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:29:18 2015 VERIFY OK: depth=0, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:29:19 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:29:19 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:29:19 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:29:19 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:29:19 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 14 12:29:19 2015 [server] Peer Connection Initiated with [AF_INETx.x.x.x:1194
Sat Nov 14 12:29:20 2015 MANAGEMENT: >STATE:1447500560,GET_CONFIG,,,
Sat Nov 14 12:29:22 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Nov 14 12:29:22 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 192.168.2.1,dhcp-option DNS 192.168.2.1,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Sat Nov 14 12:29:22 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 14 12:29:22 2015 OPTIONS IMPORT: route options modified
Sat Nov 14 12:29:22 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 14 12:29:22 2015 Preserving previous TUN/TAP instance: Ethernet 2
Sat Nov 14 12:29:22 2015 Initialization Sequence Completed
Sat Nov 14 12:29:22 2015 MANAGEMENT: >STATE:1447500562,CONNECTED,SUCCESS,10.8.0.10,x.x.x.x
Sat Nov 14 12:31:22 2015 [server] Inactivity timeout (--ping-restart), restarting
Sat Nov 14 12:31:22 2015 SIGUSR1[soft,ping-restart] received, process restarting
Sat Nov 14 12:31:22 2015 MANAGEMENT: >STATE:1447500682,RECONNECTING,ping-restart,,
Sat Nov 14 12:31:22 2015 Restart pause, 2 second(s)
Sat Nov 14 12:31:24 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Nov 14 12:31:24 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Nov 14 12:31:24 2015 MANAGEMENT: >STATE:1447500684,RESOLVE,,,
Sat Nov 14 12:31:24 2015 UDPv4 link local: [undef]
Sat Nov 14 12:31:24 2015 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Sat Nov 14 12:31:24 2015 MANAGEMENT: >STATE:1447500684,WAIT,,,
Sat Nov 14 12:31:24 2015 MANAGEMENT: >STATE:1447500684,AUTH,,,
Sat Nov 14 12:31:24 2015 TLS: Initial packet from [AF_INET]7x.x.x.x:1194, sid=85ef7398 b815d666
Sat Nov 14 12:31:25 2015 VERIFY OK: depth=1, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:31:25 2015 VERIFY OK: depth=0, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=
mail@host.domain
Sat Nov 14 12:31:30 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:31:30 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:31:30 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 14 12:31:30 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 14 12:31:30 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 14 12:31:30 2015 [server] Peer Connection Initiated with [AF_INET]79.192.22.196:1194
Sat Nov 14 12:31:31 2015 MANAGEMENT: >STATE:1447500691,GET_CONFIG,,,
Sat Nov 14 12:31:32 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat Nov 14 12:31:32 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 192.168.2.1,dhcp-option DNS 192.168.2.1,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Sat Nov 14 12:31:32 2015 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 14 12:31:32 2015 OPTIONS IMPORT: route options modified
Sat Nov 14 12:31:32 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 14 12:31:32 2015 Preserving previous TUN/TAP instance: Ethernet 2
Sat Nov 14 12:31:32 2015 Initialization Sequence Completed
Sat Nov 14 12:31:32 2015 MANAGEMENT: >STATE:1447500692,CONNECTED,SUCCESS,10.8.0.10,x.x.x.x
I dont know how to fix this. Thank you for your support!
