WARNING: No server certificate verification method has been

Hodja

Hello,

First of all thank you for providing free community version of OpenVPN.

I've just set up OpenVPN 2.3.2 i686 on Centos 6 Server. I can connect the server from my Ubuntu 14.04 Desktop and can browse the internet fine through the VPN connection.

However I've noticed two lines of error on client connection log:

Sun Feb 28 17:11:47 2016 us=191688 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Feb 28 17:11:47 2016 us=203474 WARNING: file '/path/to/tls.key' is group or others accessible

and couple of errors on server log (messages):

Feb 28 16:08:44 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:47 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped

Will appreciate if someone can assist me at correcting these errors.

Thanks in advance.

Here are the log and config files:

Server.conf:

port myportno
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 199.85.126.10"
push "dhcp-option DNS 199.85.127.10"
keepalive 10 120
tls-auth /path/to/tls.key 0 # This file is secret
cipher AES-256-CBC
comp-lzo
max-clients 10
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 5

Client.ovpn:

client
dev tun
proto udp
remote server.ip.add.ress myportno
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 4
tls-auth /path/to/openvpn/tls.key 1
cipher AES-256-CBC

Client connection log:

sudo openvpn --config /part/to/client.ovpn
[sudo] password for boss: 
Sun Feb 28 17:11:47 2016 us=185171 Current Parameter Settings:
Sun Feb 28 17:11:47 2016 us=185288   config = '/path/to/client.ovpn'
Sun Feb 28 17:11:47 2016 us=185323   mode = 0
Sun Feb 28 17:11:47 2016 us=185347   persist_config = DISABLED
Sun Feb 28 17:11:47 2016 us=185370   persist_mode = 1
Sun Feb 28 17:11:47 2016 us=185393   show_ciphers = DISABLED
Sun Feb 28 17:11:47 2016 us=185416   show_digests = DISABLED
Sun Feb 28 17:11:47 2016 us=185438   show_engines = DISABLED
Sun Feb 28 17:11:47 2016 us=185461   genkey = DISABLED
Sun Feb 28 17:11:47 2016 us=185483   key_pass_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=185506   show_tls_ciphers = DISABLED
Sun Feb 28 17:11:47 2016 us=185529 Connection profiles [default]:
Sun Feb 28 17:11:47 2016 us=185552   proto = udp
Sun Feb 28 17:11:47 2016 us=185575   local = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=185598   local_port = 0
Sun Feb 28 17:11:47 2016 us=185634   remote = 'server.ip.add.ress'
Sun Feb 28 17:11:47 2016 us=185657   remote_port = myportno
Sun Feb 28 17:11:47 2016 us=185680   remote_float = DISABLED
Sun Feb 28 17:11:47 2016 us=185702   bind_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=185724   bind_local = DISABLED
Sun Feb 28 17:11:47 2016 us=185747   connect_retry_seconds = 5
Sun Feb 28 17:11:47 2016 us=185770   connect_timeout = 10
Sun Feb 28 17:11:47 2016 us=185793   connect_retry_max = 0
Sun Feb 28 17:11:47 2016 us=185816   socks_proxy_server = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=185838   socks_proxy_port = 0
Sun Feb 28 17:11:47 2016 us=185861   socks_proxy_retry = DISABLED
Sun Feb 28 17:11:47 2016 us=185884   tun_mtu = 1500
Sun Feb 28 17:11:47 2016 us=185906   tun_mtu_defined = ENABLED
Sun Feb 28 17:11:47 2016 us=185929   link_mtu = 1500
Sun Feb 28 17:11:47 2016 us=185951   link_mtu_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=185974   tun_mtu_extra = 0
Sun Feb 28 17:11:47 2016 us=185996   tun_mtu_extra_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=186019   mtu_discover_type = -1
Sun Feb 28 17:11:47 2016 us=186042   fragment = 0
Sun Feb 28 17:11:47 2016 us=186064   mssfix = 1450
Sun Feb 28 17:11:47 2016 us=186086   explicit_exit_notification = 0
Sun Feb 28 17:11:47 2016 us=186112 Connection profiles END
Sun Feb 28 17:11:47 2016 us=186135   remote_random = DISABLED
Sun Feb 28 17:11:47 2016 us=186158   ipchange = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186180   dev = 'tun'
Sun Feb 28 17:11:47 2016 us=186203   dev_type = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186225   dev_node = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186247   lladdr = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186270   topology = 1
Sun Feb 28 17:11:47 2016 us=186292   tun_ipv6 = DISABLED
Sun Feb 28 17:11:47 2016 us=186315   ifconfig_local = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186337   ifconfig_remote_netmask = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186360   ifconfig_noexec = DISABLED
Sun Feb 28 17:11:47 2016 us=186383   ifconfig_nowarn = DISABLED
Sun Feb 28 17:11:47 2016 us=186405   ifconfig_ipv6_local = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186427   ifconfig_ipv6_netbits = 0
Sun Feb 28 17:11:47 2016 us=186450   ifconfig_ipv6_remote = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186472   shaper = 0
Sun Feb 28 17:11:47 2016 us=186495   mtu_test = 0
Sun Feb 28 17:11:47 2016 us=186517   mlock = DISABLED
Sun Feb 28 17:11:47 2016 us=186540   keepalive_ping = 0
Sun Feb 28 17:11:47 2016 us=186562   keepalive_timeout = 0
Sun Feb 28 17:11:47 2016 us=186584   inactivity_timeout = 0
Sun Feb 28 17:11:47 2016 us=186607   ping_send_timeout = 0
Sun Feb 28 17:11:47 2016 us=186629   ping_rec_timeout = 0
Sun Feb 28 17:11:47 2016 us=186652   ping_rec_timeout_action = 0
Sun Feb 28 17:11:47 2016 us=186674   ping_timer_remote = DISABLED
Sun Feb 28 17:11:47 2016 us=186696   remap_sigusr1 = 0
Sun Feb 28 17:11:47 2016 us=186719   persist_tun = ENABLED
Sun Feb 28 17:11:47 2016 us=186742   persist_local_ip = DISABLED
Sun Feb 28 17:11:47 2016 us=186764   persist_remote_ip = DISABLED
Sun Feb 28 17:11:47 2016 us=186787   persist_key = ENABLED
Sun Feb 28 17:11:47 2016 us=186809   passtos = DISABLED
Sun Feb 28 17:11:47 2016 us=186832   resolve_retry_seconds = 1000000000
Sun Feb 28 17:11:47 2016 us=186855   username = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186877   groupname = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186900   chroot_dir = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186922   cd_dir = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186944   writepid = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186966   up_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=186989   down_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187011   down_pre = DISABLED
Sun Feb 28 17:11:47 2016 us=187034   up_restart = DISABLED
Sun Feb 28 17:11:47 2016 us=187056   up_delay = DISABLED
Sun Feb 28 17:11:47 2016 us=187078   daemon = DISABLED
Sun Feb 28 17:11:47 2016 us=187101   inetd = 0
Sun Feb 28 17:11:47 2016 us=187123   log = DISABLED
Sun Feb 28 17:11:47 2016 us=187145   suppress_timestamps = DISABLED
Sun Feb 28 17:11:47 2016 us=187168   nice = 0
Sun Feb 28 17:11:47 2016 us=187190   verbosity = 4
Sun Feb 28 17:11:47 2016 us=187213   mute = 0
Sun Feb 28 17:11:47 2016 us=187238   gremlin = 0
Sun Feb 28 17:11:47 2016 us=187260   status_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187283   status_file_version = 1
Sun Feb 28 17:11:47 2016 us=187305   status_file_update_freq = 60
Sun Feb 28 17:11:47 2016 us=187328   occ = ENABLED
Sun Feb 28 17:11:47 2016 us=187350   rcvbuf = 65536
Sun Feb 28 17:11:47 2016 us=187372   sndbuf = 65536
Sun Feb 28 17:11:47 2016 us=187394   mark = 0
Sun Feb 28 17:11:47 2016 us=187416   sockflags = 0
Sun Feb 28 17:11:47 2016 us=187439   fast_io = DISABLED
Sun Feb 28 17:11:47 2016 us=187461   lzo = 7
Sun Feb 28 17:11:47 2016 us=187483   route_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187506   route_default_gateway = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187528   route_default_metric = 0
Sun Feb 28 17:11:47 2016 us=187551   route_noexec = DISABLED
Sun Feb 28 17:11:47 2016 us=187574   route_delay = 0
Sun Feb 28 17:11:47 2016 us=187596   route_delay_window = 30
Sun Feb 28 17:11:47 2016 us=187619   route_delay_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=187642   route_nopull = DISABLED
Sun Feb 28 17:11:47 2016 us=187665   route_gateway_via_dhcp = DISABLED
Sun Feb 28 17:11:47 2016 us=187688   max_routes = 100
Sun Feb 28 17:11:47 2016 us=187710   allow_pull_fqdn = DISABLED
Sun Feb 28 17:11:47 2016 us=187733   management_addr = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187756   management_port = 0
Sun Feb 28 17:11:47 2016 us=187778   management_user_pass = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187802   management_log_history_cache = 250
Sun Feb 28 17:11:47 2016 us=187824   management_echo_buffer_size = 100
Sun Feb 28 17:11:47 2016 us=187847   management_write_peer_info_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187870   management_client_user = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187893   management_client_group = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187916   management_flags = 0
Sun Feb 28 17:11:47 2016 us=187939   shared_secret_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=187961   key_direction = 2
Sun Feb 28 17:11:47 2016 us=187984   ciphername_defined = ENABLED
Sun Feb 28 17:11:47 2016 us=188007   ciphername = 'AES-256-CBC'
Sun Feb 28 17:11:47 2016 us=188029   authname_defined = ENABLED
Sun Feb 28 17:11:47 2016 us=188052   authname = 'SHA1'
Sun Feb 28 17:11:47 2016 us=188074   prng_hash = 'SHA1'
Sun Feb 28 17:11:47 2016 us=188097   prng_nonce_secret_len = 16
Sun Feb 28 17:11:47 2016 us=188119   keysize = 0
Sun Feb 28 17:11:47 2016 us=188142   engine = DISABLED
Sun Feb 28 17:11:47 2016 us=188164   replay = ENABLED
Sun Feb 28 17:11:47 2016 us=188187   mute_replay_warnings = DISABLED
Sun Feb 28 17:11:47 2016 us=188210   replay_window = 64
Sun Feb 28 17:11:47 2016 us=188233   replay_time = 15
Sun Feb 28 17:11:47 2016 us=188255   packet_id_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188277   use_iv = ENABLED
Sun Feb 28 17:11:47 2016 us=188300   test_crypto = DISABLED
Sun Feb 28 17:11:47 2016 us=188322   tls_server = DISABLED
Sun Feb 28 17:11:47 2016 us=188345   tls_client = ENABLED
Sun Feb 28 17:11:47 2016 us=188367   key_method = 2
Sun Feb 28 17:11:47 2016 us=188389   ca_file = '[[INLINE]]'
Sun Feb 28 17:11:47 2016 us=188410   ca_path = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188432   dh_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188454   cert_file = '[[INLINE]]'
Sun Feb 28 17:11:47 2016 us=188476   priv_key_file = '[[INLINE]]'
Sun Feb 28 17:11:47 2016 us=188498   pkcs12_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188520   cipher_list = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188542   tls_verify = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188564   tls_export_cert = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188586   verify_x509_type = 0
Sun Feb 28 17:11:47 2016 us=188608   verify_x509_name = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188630   crl_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=188652   ns_cert_type = 0
Sun Feb 28 17:11:47 2016 us=188674   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188696   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188718   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188741   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188763   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188785   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188807   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188829   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188851   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188872   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188894   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188916   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188938   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188960   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=188982   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=189005   remote_cert_ku[i] = 0
Sun Feb 28 17:11:47 2016 us=189027   remote_cert_eku = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=189049   ssl_flags = 0
Sun Feb 28 17:11:47 2016 us=189070   tls_timeout = 2
Sun Feb 28 17:11:47 2016 us=189093   renegotiate_bytes = 0
Sun Feb 28 17:11:47 2016 us=189115   renegotiate_packets = 0
Sun Feb 28 17:11:47 2016 us=189137   renegotiate_seconds = 3600
Sun Feb 28 17:11:47 2016 us=189159   handshake_window = 60
Sun Feb 28 17:11:47 2016 us=189182   transition_window = 3600
Sun Feb 28 17:11:47 2016 us=189203   single_session = DISABLED
Sun Feb 28 17:11:47 2016 us=189225   push_peer_info = DISABLED
Sun Feb 28 17:11:47 2016 us=189246   tls_exit = DISABLED
Sun Feb 28 17:11:47 2016 us=189269   tls_auth_file = '/path/to/tls.key'
Sun Feb 28 17:11:47 2016 us=189292   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189315   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189337   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189360   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189382   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189405   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189427   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189450   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189478   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189501   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189524   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189546   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189569   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189592   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189621   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189644   pkcs11_protected_authentication = DISABLED
Sun Feb 28 17:11:47 2016 us=189669   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189692   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189714   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189737   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189759   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189782   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189805   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189827   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189850   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189873   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189895   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189917   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189940   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189962   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=189985   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=190007   pkcs11_private_mode = 00000000
Sun Feb 28 17:11:47 2016 us=190029   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190052   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190074   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190096   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190118   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190141   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190163   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190185   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190207   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190229   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190251   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190273   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190295   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190317   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190340   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190362   pkcs11_cert_private = DISABLED
Sun Feb 28 17:11:47 2016 us=190384   pkcs11_pin_cache_period = -1
Sun Feb 28 17:11:47 2016 us=190407   pkcs11_id = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=190429   pkcs11_id_management = DISABLED
Sun Feb 28 17:11:47 2016 us=190461   server_network = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190486   server_netmask = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190521   server_network_ipv6 = ::
Sun Feb 28 17:11:47 2016 us=190544   server_netbits_ipv6 = 0
Sun Feb 28 17:11:47 2016 us=190568   server_bridge_ip = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190591   server_bridge_netmask = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190615   server_bridge_pool_start = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190639   server_bridge_pool_end = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190662   ifconfig_pool_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=190686   ifconfig_pool_start = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190710   ifconfig_pool_end = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190734   ifconfig_pool_netmask = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=190756   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=190779   ifconfig_pool_persist_refresh_freq = 600
Sun Feb 28 17:11:47 2016 us=190801   ifconfig_ipv6_pool_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=190824   ifconfig_ipv6_pool_base = ::
Sun Feb 28 17:11:47 2016 us=190847   ifconfig_ipv6_pool_netbits = 0
Sun Feb 28 17:11:47 2016 us=190869   n_bcast_buf = 256
Sun Feb 28 17:11:47 2016 us=190891   tcp_queue_limit = 64
Sun Feb 28 17:11:47 2016 us=190913   real_hash_size = 256
Sun Feb 28 17:11:47 2016 us=190935   virtual_hash_size = 256
Sun Feb 28 17:11:47 2016 us=190958   client_connect_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=190981   learn_address_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191003   client_disconnect_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191026   client_config_dir = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191048   ccd_exclusive = DISABLED
Sun Feb 28 17:11:47 2016 us=191070   tmp_dir = '/tmp'
Sun Feb 28 17:11:47 2016 us=191092   push_ifconfig_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=191116   push_ifconfig_local = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=191139   push_ifconfig_remote_netmask = 0.0.0.0
Sun Feb 28 17:11:47 2016 us=191165   push_ifconfig_ipv6_defined = DISABLED
Sun Feb 28 17:11:47 2016 us=191190   push_ifconfig_ipv6_local = ::/0
Sun Feb 28 17:11:47 2016 us=191213   push_ifconfig_ipv6_remote = ::
Sun Feb 28 17:11:47 2016 us=191235   enable_c2c = DISABLED
Sun Feb 28 17:11:47 2016 us=191257   duplicate_cn = DISABLED
Sun Feb 28 17:11:47 2016 us=191279   cf_max = 0
Sun Feb 28 17:11:47 2016 us=191301   cf_per = 0
Sun Feb 28 17:11:47 2016 us=191323   max_clients = 1024
Sun Feb 28 17:11:47 2016 us=191345   max_routes_per_client = 256
Sun Feb 28 17:11:47 2016 us=191368   auth_user_pass_verify_script = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191390   auth_user_pass_verify_script_via_file = DISABLED
Sun Feb 28 17:11:47 2016 us=191413   port_share_host = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191435   port_share_port = 0
Sun Feb 28 17:11:47 2016 us=191456   client = ENABLED
Sun Feb 28 17:11:47 2016 us=191478   pull = ENABLED
Sun Feb 28 17:11:47 2016 us=191500   auth_user_pass_file = '[UNDEF]'
Sun Feb 28 17:11:47 2016 us=191524 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec  1 2014
Sun Feb 28 17:11:47 2016 us=191688 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Feb 28 17:11:47 2016 us=203474 WARNING: file '/path/to/tls.key' is group or others accessible
Sun Feb 28 17:11:47 2016 us=203521 Control Channel Authentication: using '/path/to/tls.key' as a OpenVPN static key file
Sun Feb 28 17:11:47 2016 us=203556 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 17:11:47 2016 us=203583 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 17:11:47 2016 us=203634 LZO compression initialized
Sun Feb 28 17:11:47 2016 us=203783 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sun Feb 28 17:11:47 2016 us=203860 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sun Feb 28 17:11:47 2016 us=203909 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 28 17:11:47 2016 us=203960 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sun Feb 28 17:11:47 2016 us=203985 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sun Feb 28 17:11:47 2016 us=204035 Local Options hash (VER=V4): '9e7066d2'
Sun Feb 28 17:11:47 2016 us=204068 Expected Remote Options hash (VER=V4): '162b04de'
Sun Feb 28 17:11:47 2016 us=204100 UDPv4 link local: [undef]
Sun Feb 28 17:11:47 2016 us=204128 UDPv4 link remote: [AF_INET]server.ip.add.ress:myportno
Sun Feb 28 17:11:47 2016 us=267856 TLS: Initial packet from [AF_INET]server.ip.add.ress:myportno, sid=22400522 35998892
Sun Feb 28 17:11:47 2016 us=379385 VERIFY OK: depth=1, C=US, ST=NA, L=City, O=Fort-Funston, OU=VPN Services, CN=Server, name=Server, emailAddress=name@mydomain.com
Sun Feb 28 17:11:47 2016 us=379838 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=VPN Services, CN=server, name=Server, emailAddress=name@mydomain.com
Sun Feb 28 17:11:48 2016 us=101599 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Feb 28 17:11:48 2016 us=101674 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 17:11:48 2016 us=101701 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Feb 28 17:11:48 2016 us=101727 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 17:11:48 2016 us=101795 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Feb 28 17:11:48 2016 us=101843 [server] Peer Connection Initiated with [AF_INET]server.ip.add.ress:myportno
Sun Feb 28 17:11:50 2016 us=318201 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Feb 28 17:11:50 2016 us=381411 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 199.85.126.10,dhcp-option DNS 199.85.127.10,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sun Feb 28 17:11:50 2016 us=381542 OPTIONS IMPORT: timers and/or timeouts modified
Sun Feb 28 17:11:50 2016 us=381558 OPTIONS IMPORT: --ifconfig/up options modified
Sun Feb 28 17:11:50 2016 us=381570 OPTIONS IMPORT: route options modified
Sun Feb 28 17:11:50 2016 us=381582 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Feb 28 17:11:50 2016 us=381790 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=00:1d:7d:7b:94:a9
Sun Feb 28 17:11:50 2016 us=382120 TUN/TAP device tun0 opened
Sun Feb 28 17:11:50 2016 us=382144 TUN/TAP TX queue length set to 100
Sun Feb 28 17:11:50 2016 us=382169 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Feb 28 17:11:50 2016 us=382208 /sbin/ip link set dev tun0 up mtu 1500
Sun Feb 28 17:11:50 2016 us=404201 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Sun Feb 28 17:11:50 2016 us=405547 /sbin/ip route add server.ip.add.ress/32 via 192.168.1.1
Sun Feb 28 17:11:50 2016 us=424243 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Sun Feb 28 17:11:50 2016 us=425530 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Sun Feb 28 17:11:50 2016 us=427232 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Sun Feb 28 17:11:50 2016 us=429590 Initialization Sequence Completed

Server Messages:

Feb 28 16:05:45 servername openvpn[16737]: MULTI: multi_create_instance called
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Re-using SSL/TLS context
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 LZO compression initialized
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Local Options hash (VER=V4): '162b04de'
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 Expected Remote Options hash (VER=V4): '9e7066d2'
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 TLS: Initial packet from [AF_INET]my.ip.add.ress:53835, sid=b1756027 3fe40959
Feb 28 16:05:45 servername openvpn[16737]: my.ip.add.ress:53835 PID_ERR replay-window backtrack occurred [3] [TLS_AUTH-0] [00__00000000] 1456668345:12 1456668345:9 t=1456668345[0] r=[0,64,15,3,1] sl=[52,12,64,272]
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 VERIFY OK: depth=1, C=TR, ST=NA, L=Cityname, O=Fort-Funston, OU=VPN Services, CN=Server, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=VPN Services, CN=boss, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Feb 28 16:05:46 servername openvpn[16737]: my.ip.add.ress:53835 [boss] Peer Connection Initiated with [AF_INET]my.ip.add.ress:53835
Feb 28 16:05:46 servername openvpn[16737]: MULTI: new connection by client 'boss' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Feb 28 16:05:46 servername openvpn[16737]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Feb 28 16:05:46 servername openvpn[16737]: MULTI: Learn: 10.8.0.6 -> boss/my.ip.add.ress:53835
Feb 28 16:05:46 servername openvpn[16737]: MULTI: primary virtual IP for boss/my.ip.add.ress:53835: 10.8.0.6
Feb 28 16:05:48 servername openvpn[16737]: boss/my.ip.add.ress:53835 PUSH: Received control message: 'PUSH_REQUEST'
Feb 28 16:05:48 servername openvpn[16737]: boss/my.ip.add.ress:53835 send_push_reply(): safe_cap=940
Feb 28 16:05:48 servername openvpn[16737]: boss/my.ip.add.ress:53835 SENT CONTROL [boss]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 199.85.126.10,dhcp-option DNS 199.85.127.10,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Feb 28 16:07:02 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:03 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:13 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:29 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:46 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:46 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:46 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:46 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:07:58 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:32 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:32 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:32 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:40 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:41 servername openvpn[16737]: boss/my.media/boss/LinuxBackUp/Server/cosmos.sitekoruma.comip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:41 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:42 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:43 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:44 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:47 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped
Feb 28 16:08:55 servername openvpn[16737]: MULTI: multi_create_instance called
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Re-using SSL/TLS context
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 LZO compression initialized
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Local Options hash (VER=V4): '162b04de'
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 Expected Remote Options hash (VER=V4): '9e7066d2'
Feb 28 16:08:55 servername openvpn[16737]: my.ip.add.ress:58726 TLS: Initial packet from [AF_INET]my.ip.add.ress:58726, sid=2c6622e2 c33eaff8
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 VERIFY OK: depth=1, C=TR, ST=NA, L=Cityname, O=Fort-Funston, OU=VPN Services, CN=Server, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=VPN Services, CN=boss, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:08:56 servername openvpn[16737]: my.ip.add.ress:58726 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:08:57 servername openvpn[16737]: my.ip.add.ress:58726 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 28 16:08:57 servername openvpn[16737]: my.ip.add.ress:58726 [boss] Peer Connection Initiated with [AF_INET]my.ip.add.ress:58726
Feb 28 16:08:57 servername openvpn[16737]: MULTI: new connection by client 'boss' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Feb 28 16:08:57 servername openvpn[16737]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Feb 28 16:08:57 servername openvpn[16737]: MULTI: Learn: 10.8.0.6 -> boss/my.ip.add.ress:58726
Feb 28 16:08:57 servername openvpn[16737]: MULTI: primary virtual IP for boss/my.ip.add.ress:58726: 10.8.0.6
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 PUSH: Received control message: 'PUSH_REQUEST'
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 send_push_reply(): safe_cap=940
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 SENT CONTROL [boss]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 199.85.126.10,dhcp-option DNS 199.85.127.10,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:57 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:08:58 servername openvpn[16737]: boss/my.ip.add.ress:58726 SIGTERM[soft,remote-exit] received, client-instance exiting
Feb 28 16:17:34 servername openvpn[16737]: MULTI: multi_create_instance called
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Re-using SSL/TLS context
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 LZO compression initialized
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Local Options hash (VER=V4): '162b04de'
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Expected Remote Options hash (VER=V4): '9e7066d2'
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 TLS: Initial packet from [AF_INET]my.ip.add.ress:36463, sid=c4a9f9ed 5edd2376
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 VERIFY OK: depth=1, C=TR, ST=NA, L=Cityname, O=Fort-Funston, OU=VPN Services, CN=Server, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=VPN Services, CN=boss, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:17:34 servername openvpn[16737]: my.ip.add.ress:36463 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:17:35 servername openvpn[16737]: my.ip.add.ress:36463 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 28 16:17:35 servername openvpn[16737]: my.ip.add.ress:36463 [boss] Peer Connection Initiated with [AF_INET]my.ip.add.ress:36463
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 MULTI: Learn: 10.8.0.6 -> boss/my.ip.add.ress:36463
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 MULTI: primary virtual IP for boss/my.ip.add.ress:36463: 10.8.0.6
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 PUSH: Received control message: 'PUSH_REQUEST'
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 send_push_reply(): safe_cap=940
Feb 28 16:17:35 servername openvpn[16737]: boss/my.ip.add.ress:36463 SENT CONTROL [boss]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 199.85.126.10,dhcp-option DNS 199.85.127.10,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Feb 28 16:17:44 servername openvpn[16737]: boss/my.ip.add.ress:36463 SIGTERM[soft,remote-exit] received, client-instance exiting
Feb 28 16:19:26 servername openvpn[16737]: MULTI: multi_create_instance called
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Re-using SSL/TLS context
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 LZO compression initialized
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Local Options hash (VER=V4): '162b04de'
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 Expected Remote Options hash (VER=V4): '9e7066d2'
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 TLS: Initial packet from [AF_INET]my.ip.add.ress:38952, sid=82d38adf e08381c4
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 VERIFY OK: depth=1, C=TR, ST=NA, L=Cityname, O=Fort-Funston, OU=VPN Services, CN=Server, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:19:26 servername openvpn[16737]: my.ip.add.ress:38952 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=VPN Services, CN=boss, name=Server, emailAddress=myname@mydomain.com
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 PID_ERR replay-window backtrack occurred [1] [TLS_AUTH-0] [0_011111111] 1456669165:11 1456669165:10 t=1456669167[0] r=[-1,64,15,1,1] sl=[53,11,64,272]
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 [boss] Peer Connection Initiated with [AF_INET]my.ip.add.ress:38952
Feb 28 16:19:27 servername openvpn[16737]: my.ip.add.ress:38952 PUSH: Received control message: 'PUSH_REQUEST'
Feb 28 16:19:27 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Feb 28 16:19:27 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: Learn: 10.8.0.6 -> boss/my.ip.add.ress:38952
Feb 28 16:19:27 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: primary virtual IP for boss/my.ip.add.ress:38952: 10.8.0.6
Feb 28 16:19:28 servername openvpn[16737]: boss/my.ip.add.ress:38952 PUSH: Received control message: 'PUSH_REQUEST'
Feb 28 16:19:28 servername openvpn[16737]: boss/my.ip.add.ress:38952 send_push_reply(): safe_cap=940
Feb 28 16:19:28 servername openvpn[16737]: boss/my.ip.add.ress:38952 SENT CONTROL [boss]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 199.85.126.10,dhcp-option DNS 199.85.127.10,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Feb 28 16:20:08 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:08 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:08 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:09 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:10 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:13 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:17 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:27 servername openvpn[16737]: boss/my.ip.add.ress:38952 MULTI: bad source address from client [192.168.1.12], packet dropped
Feb 28 16:20:28 servername openvpn[16737]: boss/my.ip.add.ress:38952 SIGTERM[soft,remote-exit] received, client-instance exiting

Traffic

Hodja wroteI've just set up OpenVPN 2.3.2 i686 on Centos 6 Server. I can connect the server from my Ubuntu 14.04 Desktop and can browse the internet fine through the VPN connection.

Is that upto date ?

Hodja wrote

Sun Feb 28 17:11:47 2016 us=191688 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

See --ns-cert-type in The Manual v23x

Hodja wrote

Sun Feb 28 17:11:47 2016 us=203474 WARNING: file '/path/to/tls.key' is group or others accessible

Protect your PKI with Linux user : group attributes.

Hodja wrote

Feb 28 16:08:44 servername openvpn[16737]: boss/my.ip.add.ress:53835 MULTI: bad source address from client [192.168.1.10], packet dropped

see packet dropped

Hodja

Thank you for the assistance. Will try your suggestions and post the results here.