Hi, just a little question please.
i want to use my ddwrt (tomato usb aio image latest version) Router as a Internataccesspoint using openvpn.
so all outgoing traffic should be routed over my vpn account.
cablemodem, fritzbox and into the fritzbox is the netgear vpn router. it is assigned as a dmz/exposed host, so no firewall crap is blocking.
internet works so far.
tor (its inside the tomato usb image) works too...
but i have problems starting the openvpn client.
i post the logfile below.
"Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: /sbin/ifconfig tun11 10.103.53.35 pointopoint 255.224.0.0 mtu 1500"
whats the problem? i dontknow where how to change that...is this the prob?
plz help me, im trying for some days until now, reading many tuts, but no hint.
Jan 3 11:49:07 unknown daemon.info dnsmasq-dhcp[770]: DHCPREQUEST(br0) 192.168.1.46 ac:d1:b8:9a:31:01
Jan 3 11:49:07 unknown daemon.info dnsmasq-dhcp[770]: DHCPACK(br0) 192.168.1.46 ac:d1:b8:9a:31:01 android-71e1aa5619bcc2f1
Jan 3 11:49:18 unknown daemon.info dnsmasq-dhcp[770]: DHCPREQUEST(br0) 192.168.1.161 34:de:1a:0d:0b:b0
Jan 3 11:49:18 unknown daemon.info dnsmasq-dhcp[770]: DHCPACK(br0) 192.168.1.161 34:de:1a:0d:0b:b0 area51
Jan 3 11:49:34 unknown daemon.info dnsmasq-dhcp[770]: DHCPREQUEST(br0) 192.168.1.161 34:de:1a:0d:0b:b0
Jan 3 11:49:34 unknown daemon.info dnsmasq-dhcp[770]: DHCPACK(br0) 192.168.1.161 34:de:1a:0d:0b:b0 area51
Jan 3 11:49:36 unknown daemon.notice openvpn[1147]: OpenVPN 2.3.7 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Nov 2 2015
Jan 3 11:49:36 unknown daemon.notice openvpn[1147]: library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09
Jan 3 11:49:36 unknown daemon.warn openvpn[1149]: WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Jan 3 11:49:36 unknown daemon.warn openvpn[1149]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jan 3 11:49:36 unknown daemon.notice openvpn[1149]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jan 3 11:49:36 unknown daemon.notice openvpn[1149]: Attempting to establish TCP connection with [AF_INET]50.7.139.117:443 [nonblock]
Jan 3 11:49:37 unknown daemon.notice openvpn[1149]: TCP connection established with [AF_INET]50.7.139.117:443
Jan 3 11:49:37 unknown daemon.notice openvpn[1149]: TCPv4_CLIENT link local: [undef]
Jan 3 11:49:37 unknown daemon.notice openvpn[1149]: TCPv4_CLIENT link remote: [AF_INET]50.7.139.117:443
Jan 3 11:49:37 unknown daemon.notice openvpn[1149]: TLS: Initial packet from [AF_INET]50.7.139.117:443, sid=cba9e8ad 5e45213d
Jan 3 11:49:37 unknown daemon.warn openvpn[1149]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jan 3 11:49:37 unknown user.notice root: vpnrouting: clean-up
Jan 3 11:49:38 unknown daemon.notice openvpn[1149]: VERIFY OK: depth=1, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=HideME CA, emailAddress=
feedback@hideme.ru
Jan 3 11:49:38 unknown daemon.notice openvpn[1149]: VERIFY OK: depth=0, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=server, emailAddress=
feedback@hideme.ru
Jan 3 11:49:40 unknown daemon.warn httpd[1223]: Invalid ID '' from 192.168.1.161 for /service.cgi
Jan 3 11:49:40 unknown daemon.warn openvpn[1149]: WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Jan 3 11:49:40 unknown daemon.warn openvpn[1149]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1576'
Jan 3 11:49:40 unknown daemon.warn openvpn[1149]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jan 3 11:49:40 unknown daemon.notice openvpn[1149]: [server] Peer Connection Initiated with [AF_INET]50.7.139.117:443
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.103.0.1,ping 10,ping-restart 30,ifconfig 10.103.53.35 255.224.0.0'
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: OPTIONS IMPORT: timers and/or timeouts modified
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: OPTIONS IMPORT: --ifconfig/up options modified
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: OPTIONS IMPORT: route-related options modified
Jan 3 11:49:42 unknown daemon.warn openvpn[1149]: WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.224.0.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: TUN/TAP device tun11 opened
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: TUN/TAP TX queue length set to 100
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: /sbin/ifconfig tun11 10.103.53.35 pointopoint 255.224.0.0 mtu 1500
Jan 3 11:49:42 unknown daemon.err openvpn[1149]: Linux ifconfig failed: external program exited with error status: 1
Jan 3 11:49:42 unknown daemon.notice openvpn[1149]: Exiting due to fatal error
