bad source address from client [fe80::1071:7c89:153e:15ad],

scoody

Hi,

VPN serveur Windows 10, to be accessed from clients just on it's ip 10.8.0.1.
I want from my VPN clients just to access this @adress, and don't route all other trafic.
i have some errors like :

Chantal/90.24.37.243:58912 MULTI: bad source address from client [fe80::1071:7c89:153e:15ad], packet dropped

The fe80::1071:7c89:153e:15ad adress is not easy to understand ... I don't want to route other trafic than 10.8.0.1 adress to avoid having too much trafic in tunnel.

Configuration files :

Server :
port 1194
proto udp
dev tun
dev-node VPN
ca "C:\\OpenVPN\\config\\ca.crt"
cert "C:\\OpenVPN\\config\\server.crt"
key "C:\\OpenVPN\\config\\server.key"
dh "C:\\OpenVPN\\config\\dh1024.pem"
client-config-dir "C:\\OpenVPN\\ccd"
server 10.8.0.0 255.255.255.0
topology subnet
ifconfig-pool-persist ipp.txt 0
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6

ccd dir file :
ifconfig-push 10.8.0.12 255.255.255.0

Client :

client
dev tun
proto udp
remote xxxxxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\OpenVPN\\config\\ca.crt"
cert "C:\\OpenVPN\\config\\fred.crt"
key "C:\\OpenVPN\\config\\fred.key"
ns-cert-type server
comp-lzo
verb 3

Thanks a lot for help

Traffic

scoody wroteMULTI: bad source address from client [fe80::1071:7c89:153e:15ad], packet dropped

The packet originates from your client: Chantal, see:
MULTI bad source address from client

You can safely ignore it .. as you can see, OpenVPN dropped the packet.