Hi
I'm trying to configure my OpenVPN server to provide IPv6 Internet to my Mac laptop over an IPv4 connection.
IPv4 Internet access works perfectly, however I'm still unable to access IPv6 Internet from my Mac.
The OpenVPN server is a Ubuntu box that is directly connected to the Internet. It has IPv6 connectivity, I can traceroute to Google servers:
traceroute6 ipv6.google.com
traceroute to ipv6.l.google.com (2a00:1450:4007:80b::200e) from AAAA:BBBB:CCCC:DDDD::1, 30 hops max, 24 byte packets
1 AAAA:BBBB:CCCC:DDff:ff:ff:ff:fd (AAAA:BBBB:CCCC:DDff:ff:ff:ff:fd) 30.725 ms 1128.36 ms 931.871 ms
2 be11-134.rbx-g2-a9.fr.eu (2001:41d0::b93) 1.015 ms 0.941 ms 2.297 ms
3 be99-1181.gsw-1-a9.fr.eu (2001:41d0::1bf) 4.176 ms 4.158 ms 4.158 ms
4 dal-4-4m.tx.us (2001:41d0::179) 4.192 ms 4.229 ms 4.221 ms
5 2001:4860::1:0:9f2 (2001:4860::1:0:9f2) 4.863 ms 4.882 ms 4.855 ms
6 2001:4860:0:1::ab (2001:4860:0:1::ab) 4.735 ms 4.703 ms 4.709 ms
7 par03s14-in-x0e.1e100.net (2a00:1450:4007:80b::200e) 4.574 ms 4.595 ms 4.609 ms
Unfortunately, this doesn't work from my Mac:
traceroute6 ipv6.google.com
traceroute6 to ipv6.l.google.com (2a00:1450:4002:808::200e) from AAAA:BBBB:CCCC:DDDD:80::1000, 64 hops max, 12 byte packets
1 AAAA:BBBB:CCCC:DDDD:80::1 26.164 ms 47.122 ms 47.953 ms
2 * * *
3 * * *
I can ping6 my Mac from the server and the server from my Mac.
I think there is something wrong on the server with IPV6 routing but since I'm not a network expert, I kindly request your help on this 🙂
Here is the configuration. I edited the personal stuff for privacy.
SERVER
======
Server IPv4 : 11.22.33.44
Server IPv6 : AAAA:BBBB:CCCC:DDDD::/64
Distributor ID: Ubuntu
Description: Ubuntu 12.04.5 LTS
Release: 12.04
Codename: precise
OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 4 2016
library versions: OpenSSL 1.0.1 14 Mar 2012, LZO 2.06
IPv6 router configuration
-------------------------
The server is configured as an IPv6 router, following this tutorial :
https://wiki.ubuntu.com/IPv6#Configure_your_Ubuntu_box_as_a_IPv6_router
The /etc/radvd.conf file is the same as used in the tutorial :
interface eth0
{
AdvSendAdvert on;
prefix AAAA:BBBB:CCCC:DDDD::/64
{
AdvOnLink on;
AdvAutonomous on;
};
};
Of course, I enabled IPv6 forwarding in /etc/sysctl.conf
net.ipv6.conf.all.forwarding=1
net.ipv6.conf.default.forwarding=1
net.ipv6.conf.eth0.forwarding=1
server.conf
-----------
port 443
proto tcp-server
dev tun
dev-type tun
tun-ipv6
push tun-ipv6
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
server-ipv6 AAAA:BBBB:CCCC:DDDD:80::/64
topology subnet
route-ipv6 AAAA:BBBB:CCCC:DDDD:80::/64
push "route-ipv6 AAAA:BBBB:CCCC:DDDD::/64"
push "route-ipv6 2000::/3"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
push "redirect-gateway def1"
push "redirect-gateway ipv6" #For iOS
persist-key
persist-tun
keepalive 10 120
comp-lzo
user nobody
group nogroup
status openvpn-status.log
verb 4
ifconfig
--------
eth0 Link encap:Ethernet HWaddr 00:22:4d:a0:f4:36
inet addr:11.22.33.44 Bcast:5.135.162.255 Mask:255.255.255.0
inet6 addr: fe80::222:4dff:fea0:f436/64 Scope:Link
inet6 addr: AAAA:BBBB:CCCC:DDDD::1/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:107365 errors:0 dropped:189 overruns:0 frame:0
TX packets:117672 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:32780707 (32.7 MB) TX bytes:22861111 (22.8 MB)
Interrupt:16 Memory:80400000-80420000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:17451 errors:0 dropped:0 overruns:0 frame:0
TX packets:17451 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1797185 (1.7 MB) TX bytes:1797185 (1.7 MB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.1 Mask:255.255.255.0
inet6 addr: AAAA:BBBB:CCCC:DDDD:80::1/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:1318 (1.3 KB)
Routing tables
--------------
ip route
default via 5.135.162.254 dev eth0 metric 100
5.135.162.0/24 dev eth0 proto kernel scope link src 11.22.33.44
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
ip -6 route
AAAA:BBBB:CCCC:DDDD::/64 dev tun0 metric 1
AAAA:BBBB:CCCC:DDDD::/64 dev eth0 proto kernel metric 256
AAAA:BBBB:CCCC:DDDD::/64 dev tun0 proto kernel metric 256
AAAA:BBBB:CCCC:DDDD::/64 via AAAA:BBBB:CCCC:DDff:ff:ff:ff:ff dev eth0 metric 1024
AAAA:BBBB:CCCC:DDff:ff:ff:ff:ff dev eth0 metric 1024
fe80::/64 dev eth0 proto kernel metric 256
fe80::/64 dev tun0 proto kernel metric 256
ff00::/8 dev eth0 metric 256
ff00::/8 dev tun0 metric 256
default via AAAA:BBBB:CCCC:DDff:ff:ff:ff:ff dev eth0 metric 1024
CLIENT
======
System Version: OS X 10.11.3 (15D21)
Kernel Version: Darwin 15.3.0
VPN IPv4 : 10.8.0.2
VPN IPv6 : AAAA:BBBB:CCCC:DDDD:80::1000
External gateway IP : 1.2.3.4
client.conf
-----------
client
dev tun
proto tcp-client
remote vpn.my-company.com 443
nobind
persist-key
persist-tun
#user nobody
#group nobody
remote-cert-tls server
ns-cert-type server
comp-lzo
<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
XXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END PRIVATE KEY-----
</key>
ifconfig
--------
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether a4:5e:60:d1:ac:1b
inet6 fe80::a65e:60ff:fed1:ac1b%en0 prefixlen 64 scopeid 0x4
inet 192.168.0.24 netmask 0xffffff00 broadcast 192.168.0.255
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
en4: flags=8822<BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1500
ether 56:e4:3a:29:fd:ab
nd6 options=1<PERFORMNUD>
media: 100baseTX <full-duplex>
status: inactive
en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether 4a:00:01:05:97:20
media: autoselect <full-duplex>
status: inactive
en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether 4a:00:01:05:97:21
media: autoselect <full-duplex>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 06:5e:60:d1:ac:1b
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
ether 36:15:dd:6e:4b:4e
inet6 fe80::3415:ddff:fe6e:4b4e%awdl0 prefixlen 64 scopeid 0x9
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether a6:5e:60:1d:d1:00
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en1 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 6 priority 0 path cost 0
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 7 priority 0 path cost 0
nd6 options=1<PERFORMNUD>
media: <unknown type>
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 10.8.0.2 --> 10.8.0.2 netmask 0xffffff00
inet6 fe80::a65e:60ff:fed1:ac1b%utun0 prefixlen 64 scopeid 0xb
inet6 AAAA:BBBB:CCCC:DDDD:80::1000 prefixlen 64
nd6 options=1<PERFORMNUD>
Routes
------
netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
0/1 10.8.0.1 UGSc 14 0 utun0
default 192.168.0.1 UGSc 5 0 en0
11.22.33.44/32 192.168.0.1 UGSc 2 0 en0
10.8/24 10.8.0.2 UGSc 25 0 utun0
10.8.0.2 10.8.0.2 UH 3 5 utun0
127 127.0.0.1 UCS 1 0 lo0
127.0.0.1 127.0.0.1 UH 4 1294 lo0
128.0/1 10.8.0.1 UGSc 10 0 utun0
169.254 link#4 UCS 1 0 en0
192.168.0 link#4 UCS 3 0 en0
192.168.0.1/32 link#4 UCS 2 0 en0
192.168.0.1 0:37:b7:4d:18:ab UHLWIir 5 223 en0 338
192.168.0.5 0:37:b7:4d:18:ac UHLWIi 2 2 en0 860
192.168.0.24/32 link#4 UCS 1 0 en0
192.168.0.255 link#4 UHLWbI 1 110 en0
255.255.255.255/32 link#4 UCS 2 0 en0
255.255.255.255 link#4 UHLWbI 1 44 en0
Internet6:
Destination Gateway Flags Netif Expire
::1 ::1 UHL lo0
2000::/3 utun0 USc utun0
AAAA:BBBB:CCCC:DDDD::/64 fe80::a65e:60ff:fed1:ac1b%utun0 Uc utun0
AAAA:BBBB:CCCC:DDDD:80::1000 link#11 UHL lo0
fe80::%lo0/64 fe80::1%lo0 UcI lo0
fe80::1%lo0 link#1 UHLI lo0
fe80::%en0/64 link#4 UCI en0
fe80::a65e:60ff:fed1:ac1b%en0 a4:5e:60:d1:ac:1b UHLI lo0
fe80::%awdl0/64 link#9 UCI awdl0
fe80::3415:ddff:fe6e:4b4e%awdl0 36:15:dd:6e:4b:4e UHLI lo0
fe80::%utun0/64 fe80::a65e:60ff:fed1:ac1b%utun0 UcI utun0
fe80::a65e:60ff:fed1:ac1b%utun0 link#11 UHLI lo0
ff01::%lo0/32 ::1 UmCI lo0
ff01::%en0/32 link#4 UmCI en0
ff01::%en4/32 link#5 UmCI en4
ff01::%awdl0/32 link#9 UmCI awdl0
ff01::%utun0/32 fe80::a65e:60ff:fed1:ac1b%utun0 UmCI utun0
ff02::%lo0/32 ::1 UmCI lo0
ff02::%en0/32 link#4 UmCI en0
ff02::%en4/32 link#5 UmCI en4
ff02::%awdl0/32 link#9 UmCI awdl0
ff02::%utun0/32 fe80::a65e:60ff:fed1:ac1b%utun0 UmCI utun0
OpenVPN client
--------------
Tunnelblick 3.6beta22 (build 4517)
Connection log
2016-02-23 10:08:19 *Tunnelblick: OS X 10.11.3; Tunnelblick 3.6beta22 (build 4517); prior version 3.5.7 (build 4270.4517)
2016-02-23 10:08:20 *Tunnelblick: Attempting connection with VPN my-company using shadow copy; Set nameserver = 1; monitoring connection
2016-02-23 10:08:20 *Tunnelblick: openvpnstart start VPN\ my-company.tblk 1337 1 0 1 0 278832 -ptADGNWradsgnw 2.3.10
2016-02-23 10:08:20 *Tunnelblick: openvpnstart log:
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.10/openvpn
--daemon
--log
/Library/Application Support/Tunnelblick/Logs/-SUsers-Sjohndoe-SLibrary-SApplication Support-STunnelblick-SConfigurations-SVPN my-company.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_278832.1337.openvpn.log
--cd
/Library/Application Support/Tunnelblick/Users/johndoe/VPN my-company.tblk/Contents/Resources
--verb
3
--config
/Library/Application Support/Tunnelblick/Users/johndoe/VPN my-company.tblk/Contents/Resources/config.ovpn
--cd
/Library/Application Support/Tunnelblick/Users/johndoe/VPN my-company.tblk/Contents/Resources
--management
127.0.0.1
1337
--management-query-passwords
--management-hold
--script-security
2
--up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -6 -d -f -m -w -ptADGNWradsgnw
--down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -6 -d -f -m -w -ptADGNWradsgnw
2016-02-23 10:08:20 OpenVPN 2.3.10 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Feb 18 2016
2016-02-23 10:08:20 library versions: OpenSSL 1.0.2f 28 Jan 2016, LZO 2.09
2016-02-23 10:08:20 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2016-02-23 10:08:20 Need hold release from management interface, waiting...
2016-02-23 10:08:20 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2016-02-23 10:08:20 *Tunnelblick: openvpnstart starting OpenVPN
2016-02-23 10:08:20 *Tunnelblick: Established communication with OpenVPN
2016-02-23 10:08:20 MANAGEMENT: CMD 'pid'
2016-02-23 10:08:20 MANAGEMENT: CMD 'state on'
2016-02-23 10:08:20 MANAGEMENT: CMD 'state'
2016-02-23 10:08:20 MANAGEMENT: CMD 'bytecount 1'
2016-02-23 10:08:20 MANAGEMENT: CMD 'hold release'
2016-02-23 10:08:20 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-02-23 10:08:20 Socket Buffers: R=[131072->131072] S=[131072->131072]
2016-02-23 10:08:20 MANAGEMENT: >STATE:1456218500,RESOLVE,,,
2016-02-23 10:08:20 Attempting to establish TCP connection with [AF_INET]11.22.33.44:443 [nonblock]
2016-02-23 10:08:20 MANAGEMENT: >STATE:1456218500,TCP_CONNECT,,,
2016-02-23 10:08:21 TCP connection established with [AF_INET]11.22.33.44:443
2016-02-23 10:08:21 TCPv4_CLIENT link local: [undef]
2016-02-23 10:08:21 TCPv4_CLIENT link remote: [AF_INET]11.22.33.44:443
2016-02-23 10:08:21 MANAGEMENT: >STATE:1456218501,WAIT,,,
2016-02-23 10:08:21 MANAGEMENT: >STATE:1456218501,AUTH,,,
2016-02-23 10:08:21 TLS: Initial packet from [AF_INET]11.22.33.44:443, sid=3f317557 6af441c3
2016-02-23 10:08:21 VERIFY OK: depth=1, C=FR, ST=Loire Atlantique, L=Nantes, O=Kimsufi 1234567, OU=changeme, CN=changeme, name=changeme, emailAddress=john.doe@gmail.com
2016-02-23 10:08:21 VERIFY OK: nsCertType=SERVER
2016-02-23 10:08:21 Validating certificate key usage
2016-02-23 10:08:21 ++ Certificate has key usage 00a0, expects 00a0
2016-02-23 10:08:21 VERIFY KU OK
2016-02-23 10:08:21 Validating certificate extended key usage
2016-02-23 10:08:21 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2016-02-23 10:08:21 VERIFY EKU OK
2016-02-23 10:08:21 VERIFY OK: depth=0, C=FR, ST=Loire Atlantique, L=Nantes, O=Kimsufi 1234567, OU=changeme, CN=changeme, name=changeme, emailAddress=john.doe@gmail.com
2016-02-23 10:08:21 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2016-02-23 10:08:21 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2016-02-23 10:08:21 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2016-02-23 10:08:21 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2016-02-23 10:08:21 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
2016-02-23 10:08:21 [changeme] Peer Connection Initiated with [AF_INET]11.22.33.44:443
2016-02-23 10:08:23 MANAGEMENT: >STATE:1456218503,GET_CONFIG,,,
2016-02-23 10:08:24 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
2016-02-23 10:08:24 PUSH: Received control message: 'PUSH_REPLY,ifconfig-ipv6 AAAA:BBBB:CCCC:DDDD:80::1000/64 AAAA:BBBB:CCCC:DDDD:80::1,tun-ipv6,route-ipv6 AAAA:BBBB:CCCC:DDDD::/64,route-ipv6 2000::/3,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
2016-02-23 10:08:24 Options error: unknown --redirect-gateway flag: ipv6
2016-02-23 10:08:24 OPTIONS IMPORT: timers and/or timeouts modified
2016-02-23 10:08:24 OPTIONS IMPORT: --ifconfig/up options modified
2016-02-23 10:08:24 OPTIONS IMPORT: route options modified
2016-02-23 10:08:24 OPTIONS IMPORT: route-related options modified
2016-02-23 10:08:24 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2016-02-23 10:08:24 Opened utun device utun0
2016-02-23 10:08:24 do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=1
2016-02-23 10:08:24 MANAGEMENT: >STATE:1456218504,ASSIGN_IP,,10.8.0.2,
2016-02-23 10:08:24 /sbin/ifconfig utun0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2016-02-23 10:08:24 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2016-02-23 10:08:24 /sbin/ifconfig utun0 10.8.0.2 10.8.0.2 netmask 255.255.255.0 mtu 1500 up
2016-02-23 10:08:24 /sbin/route add -net 10.8.0.0 10.8.0.2 255.255.255.0
add net 10.8.0.0: gateway 10.8.0.2
2016-02-23 10:08:24 /sbin/ifconfig utun0 inet6 AAAA:BBBB:CCCC:DDDD:80::1000/64
2016-02-23 10:08:24 add_route_ipv6(AAAA:BBBB:CCCC:DDDD::/64 -> AAAA:BBBB:CCCC:DDDD:80::1000 metric 0) dev utun0
2016-02-23 10:08:24 /sbin/route add -inet6 AAAA:BBBB:CCCC:DDDD:: -prefixlen 64 -iface utun0
route: writing to routing socket: File exists
add net AAAA:BBBB:CCCC:DDDD::: gateway utun0: File exists
2016-02-23 10:08:24 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -6 -d -f -m -w -ptADGNWradsgnw utun0 1500 1544 10.8.0.2 255.255.255.0 init
**********************************************
Start of output from client.up.tunnelblick.sh
Retrieved from OpenVPN: name server(s) [ 208.67.222.222 208.67.220.220 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
Not aggregating ServerAddresses because running on OS X 10.6 or higher
Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually and 'Prepend domain name to search domains' was not selected
Saved the DNS and SMB configurations so they can be restored
Changed DNS ServerAddresses setting from '89.2.0.10' to '208.67.222.222 208.67.220.220'
Changed DNS SearchDomains setting from '' to 'openvpn'
Changed DNS DomainName setting from 'numericable.fr' to 'openvpn'
Did not change SMB NetBIOSName setting of ''
Did not change SMB Workgroup setting of ''
Did not change SMB WINSAddresses setting of ''
DNS servers '208.67.222.222 208.67.220.220' will be used for DNS queries when the VPN is active
The DNS servers include only free public DNS servers known to Tunnelblick.
Flushed the DNS cache via dscacheutil
/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
Notified mDNSResponder that the DNS cache was flushed
Setting up to monitor system configuration with process-network-changes
End of output from client.up.tunnelblick.sh
**********************************************
2016-02-23 10:08:27 *Tunnelblick: No 'connected.sh' script to execute
2016-02-23 10:08:27 /sbin/route add -net 11.22.33.44 192.168.0.1 255.255.255.255
add net 11.22.33.44: gateway 192.168.0.1
2016-02-23 10:08:27 /sbin/route add -net 0.0.0.0 10.8.0.1 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.1
2016-02-23 10:08:27 /sbin/route add -net 128.0.0.0 10.8.0.1 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.1
2016-02-23 10:08:27 add_route_ipv6(AAAA:BBBB:CCCC:DDDD::/64 -> AAAA:BBBB:CCCC:DDDD:80::1 metric -1) dev utun0
2016-02-23 10:08:27 /sbin/route add -inet6 AAAA:BBBB:CCCC:DDDD:: -prefixlen 64 -iface utun0
route: writing to routing socket: File exists
add net AAAA:BBBB:CCCC:DDDD::: gateway utun0: File exists
2016-02-23 10:08:27 add_route_ipv6(2000::/3 -> AAAA:BBBB:CCCC:DDDD:80::1 metric -1) dev utun0
2016-02-23 10:08:27 /sbin/route add -inet6 2000:: -prefixlen 3 -iface utun0
add net 2000::: gateway utun0
2016-02-23 10:08:27 Initialization Sequence Completed
2016-02-23 10:08:27 MANAGEMENT: >STATE:1456218507,CONNECTED,SUCCESS,10.8.0.2,11.22.33.44
2016-02-23 10:08:32 *Tunnelblick process-network-changes: A system configuration change was ignored
2016-02-23 10:08:35 *Tunnelblick: This computer's apparent public IP address changed from 1.2.3.4 before connection to 11.22.33.44 after connection
