Hi everyone, I am trying to set up a Router with DD-WRT firmware, with openvpn through purevpn.
ANy how long story short , i was able to get 99% percent working, except after it disconnected from the vpn server, it will never connect again on its own.
I am guessing it has something to do with my firewall set up(maybe).
here is my firewall set up, and also the log.
Please help anyone, thanks!!
Wed Jan 27 22:16:13 2016 OpenVPN 2.3.6 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Apr 9 2015
Wed Jan 27 22:16:13 2016 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.09
Wed Jan 27 22:16:13 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 27 22:16:13 2016 Control Channel Authentication: using 'auth.key' as a OpenVPN static key file
Wed Jan 27 22:16:13 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 22:16:13 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 22:16:13 2016 Socket Buffers: R=[180224->131072] S=[180224->131072]
Wed Jan 27 22:16:13 2016 UDPv4 link local: [undef]
Wed Jan 27 22:16:13 2016 UDPv4 link remote: [AF_INET]104.243.240.4:53
Wed Jan 27 22:16:14 2016 TLS: Initial packet from [AF_INET]104.243.240.4:53, sid=50ac5c87 49575906
Wed Jan 27 22:16:14 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jan 27 22:16:16 2016 VERIFY OK: depth=1, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=
mail@host.domain
Wed Jan 27 22:16:16 2016 Validating certificate key usage
Wed Jan 27 22:16:16 2016 ++ Certificate has key usage 00a0, expects 00a0
Wed Jan 27 22:16:16 2016 VERIFY KU OK
Wed Jan 27 22:16:16 2016 Validating certificate extended key usage
Wed Jan 27 22:16:16 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Jan 27 22:16:16 2016 VERIFY EKU OK
Wed Jan 27 22:16:16 2016 VERIFY OK: depth=0, C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=
mail@host.domain
Wed Jan 27 22:16:21 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Jan 27 22:16:21 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 22:16:21 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Jan 27 22:16:21 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 22:16:21 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jan 27 22:16:21 2016 [PureVPN] Peer Connection Initiated with [AF_INET]104.243.240.4:53
Wed Jan 27 22:16:23 2016 SENT CONTROL [PureVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 27 22:16:24 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 104.243.240.3,dhcp-option DNS 8.8.4.4,sndbuf 393216,rcvbuf 393216,route-gateway 104.243.240.129,topology subnet,ping 10,ping-restart 120,ifconfig 104.243.240.130 255.255.255.192'
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Wed Jan 27 22:16:24 2016 Socket Buffers: R=[131072->360448] S=[131072->360448]
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: route options modified
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: route-related options modified
Wed Jan 27 22:16:24 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jan 27 22:16:24 2016 TUN/TAP device tun0 opened
Wed Jan 27 22:16:24 2016 TUN/TAP TX queue length set to 100
Wed Jan 27 22:16:24 2016 do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
Wed Jan 27 22:16:24 2016 /sbin/ifconfig tun0 104.243.240.130 netmask 255.255.255.192 mtu 1500 broadcast 104.243.240.191
Wed Jan 27 22:16:26 2016 /sbin/route add -net 104.243.240.4 netmask 255.255.255.255 gw 172.30.0.1
Wed Jan 27 22:16:26 2016 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 104.243.240.129
Wed Jan 27 22:16:26 2016 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 104.243.240.129
Wed Jan 27 22:16:26 2016 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 104.243.240.129
Wed Jan 27 22:16:26 2016 Initialization Sequence Completed
Wed Jan 27 22:47:46 2016 [PureVPN] Inactivity timeout (--ping-restart), restarting
Wed Jan 27 22:47:46 2016 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jan 27 22:47:46 2016 Restart pause, 2 second(s)
Wed Jan 27 22:47:48 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 27 22:47:48 2016 Socket Buffers: R=[180224->360448] S=[180224->360448]
Wed Jan 27 22:47:53 2016 RESOLVE: Cannot resolve host address: aw1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:47:58 2016 RESOLVE: Cannot resolve host address: aw1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:47:58 2016 SIGUSR1[soft,init_instance] received, process restarting
Wed Jan 27 22:47:58 2016 Restart pause, 2 second(s)
Wed Jan 27 22:48:00 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 27 22:48:00 2016 Socket Buffers: R=[180224->360448] S=[180224->360448]
Wed Jan 27 22:48:05 2016 RESOLVE: Cannot resolve host address: vlap-ustx1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:10 2016 RESOLVE: Cannot resolve host address: vlap-ustx1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:10 2016 SIGUSR1[soft,init_instance] received, process restarting
Wed Jan 27 22:48:10 2016 Restart pause, 2 second(s)
Wed Jan 27 22:48:12 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 27 22:48:12 2016 Socket Buffers: R=[180224->360448] S=[180224->360448]
Wed Jan 27 22:48:17 2016 RESOLVE: Cannot resolve host address: vlap-usga-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:22 2016 RESOLVE: Cannot resolve host address: vlap-usga-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:22 2016 SIGUSR1[soft,init_instance] received, process restarting
Wed Jan 27 22:48:22 2016 Restart pause, 2 second(s)
Wed Jan 27 22:48:24 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 27 22:48:24 2016 Socket Buffers: R=[180224->360448] S=[180224->360448]
Wed Jan 27 22:48:29 2016 RESOLVE: Cannot resolve host address: usny1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:34 2016 RESOLVE: Cannot resolve host address: usny1-ovpn-udp.pointtoserver.com: Try again
Wed Jan 27 22:48:34 2016 SIGUSR1[soft,init_instance] received, process restarting
Wed Jan 27 22:48:34 2016 Restart pause, 2 second(s)
Wed Jan 27 22:48:36 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
....................
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -A FORWARD -i br0 -o tun0 -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
(this is for using other devices which connected the wifi dns "free". basically i do not have to set up the dns again on each each device.
the thing is interesting is that after reboot, you will always work until the internet gets disconnected.
then the "cannot reslve ..." will always being there. It looks like it runs into some kind of loop,
thanks in advanced 2
