Client not able to connect

habnefrage

Hi,
I habe setup a OpenVPN Server with this script https://github.com/Nyr/openvpn-install
It was quite easy and working out of the box.

I configured thre or four clients and all of them connected.

One of the clients was an "VU zero" (Linux satellite receiver) that also connected without any problems.
When I shipped it to my sister, she connected it to her wireless network (I was using it wireless two). But now the sattelite receiver does not connect any more. I dit not change anything, just remove power, put it into a box and shiupped it to her.

I have absolutely no idea what the problem could be. Coul'd you please have a look at the logfile below and give me some hints?
(The log is from a connection attempt via tcp. I was switching from proto udp to tcp because udp did not work aswell.

Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: MULTI: REAP range 0 -> 16
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: MULTI: multi_create_instance called
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Re-using SSL/TLS context
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: LZO compression initialized
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: PID packet_id_init tcp_mode=1 seq_backtrack=64 time_backtrack=15
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: message repeated 3 times: [ PID packet_id_init tcp_mode=1 seq_backtrack=64 time_backtrack=15]
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Control Channel MTU parms [ L:1560 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: MTU DYNAMIC mtu=1450, flags=2, 1560 -> 1450
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:143 ET:0 EL:3 AF:3/1 ]
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Local Options hash (VER=V4): 'a642654b'
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: Expected Remote Options hash (VER=V4): '0bdd0804'
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: TCP connection established with [AF_INET]178.12.155.20:60210
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: TCPv4_SERVER link local: [undef]
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: TCPv4_SERVER link remote: [AF_INET]178.12.155.20:60210
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 SENT PING
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: instance added: 178.12.155.20:60210
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: multi_tcp_action a=TA_INITIAL p=0
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: multi_tcp_dispatch a=TA_INITIAL mi=0x559e5edd8480
Aug 26 17:33:35 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: multi_tcp_post TA_INITIAL -> TA_UNDEF
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI: REAP range 16 -> 32
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: multi_tcp_action a=TA_SOCKET_READ p=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [42] from [AF_INET]178.12.155.20:60210: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TLS: Initial packet from [AF_INET]178.12.155.20:60210, sid=2ffc9b3a 30fd8e1b
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 0:0 339:1 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [54] to [AF_INET]178.12.155.20:60210: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_UNDEF
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ p=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [50] from [AF_INET]178.12.155.20:60210: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 339:1 339:2 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ -> TA_UNDEF
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ p=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [142] from [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=100
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 339:2 339:3 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [50] to [AF_INET]178.12.155.20:60210: P_ACK_V1 kid=0 pid=[ #2 ] [ 1 ]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_SOCKET_READ_RESIDUAL
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ_RESIDUAL p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ_RESIDUAL mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [142] from [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=2 DATA len=100
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 339:3 339:4 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ_RESIDUAL -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [50] to [AF_INET]178.12.155.20:60210: P_ACK_V1 kid=0 pid=[ #3 ] [ 2 ]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_SOCKET_READ_RESIDUAL
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ_RESIDUAL p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ_RESIDUAL mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [57] from [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=3 DATA len=15
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 339:4 339:5 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ_RESIDUAL -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [1168] to [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #4 ] [ 3 ] pid=1 DATA len=1114
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [1156] to [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=2 DATA len=1114
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_SOCKET_WRITE
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_WRITE p=1
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_wait_lite a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_WRITE mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER WRITE [360] to [AF_INET]178.12.155.20:60210: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=3 DATA len=318
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_WRITE -> TA_UNDEF
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ p=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 TCPv4_SERVER READ [50] from [AF_INET]178.12.155.20:60210: P_ACK_V1 kid=0 pid=[ #6 ] [ 1 ]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 PID_TEST [0] [TLS_AUTH-0] [] 339:5 339:6 t=1472232816[0] r=[0,0,0,0,1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ -> TA_UNDEF
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_action a=TA_SOCKET_READ p=0
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_dispatch a=TA_SOCKET_READ mi=0x559e5edd8480
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 Connection reset, restarting [-1]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: 178.12.155.20:60210 SIGUSR1[soft,connection-reset] received, client-instance restarting
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI: multi_close_instance called
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: PID packet_id_free
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: message repeated 7 times: [ PID packet_id_free]
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: TCP/UDP: Closing socket
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: PID packet_id_free
Aug 26 17:33:36 localhost ovpn-server_tcp[4162]: MULTI TCP: multi_tcp_post TA_SOCKET_READ -> TA_UNDEF

TinCanTech

Please see the Forum rules (top of this page)

habnefrage

server config

port 1194
proto tcp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 10.8.0.1"
client-to-client
keepalive 10 120
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
crl-verify crl.pem
client-config-dir /etc/openvpn/clientconf

Client conf

client
dev tun
proto tcp
sndbuf 0
rcvbuf 0
remote ***.***.***.*** 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
...

Client conf

ifconfig-push 10.8.0.10 255.255.255.0

server log

Aug 26 19:28:41 localhost kernel: [ 7168.012259] TCP: request_sock_TCP: Possible SYN flooding on port 1194. Sending cookies.  Check SNMP counters.
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: MULTI: multi_create_instance called
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Re-using SSL/TLS context
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: LZO compression initialized
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Control Channel MTU parms [ L:1560 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:143 ET:0 EL:3 AF:3/1 ]
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Local Options hash (VER=V4): 'a642654b'
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: Expected Remote Options hash (VER=V4): '0bdd0804'
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: TCP connection established with [AF_INET]178.12.155.20:39840
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: TCPv4_SERVER link local: [undef]
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: TCPv4_SERVER link remote: [AF_INET]178.12.155.20:39840
Aug 26 19:28:41 localhost ovpn-server_tcp[26939]: 178.12.155.20:39840 TLS: Initial packet from [AF_INET]178.12.155.20:39840, sid=e4fbd150 76f913e0
Aug 26 19:28:44 localhost ovpn-server_tcp[26939]: 178.12.155.20:39840 Connection reset, restarting [-1]
Aug 26 19:28:44 localhost ovpn-server_tcp[26939]: 178.12.155.20:39840 SIGUSR1[soft,connection-reset] received, client-instance restarting
Aug 26 19:28:44 localhost ovpn-server_tcp[26939]: TCP/UDP: Closing socket

Unfortunately I do not have access to client log files.

TinCanTech

Unless you have a good reason to keep this, remove it from your server config:

sndbuf 0
rcvbuf 0

I would also recommend you remove this for now:

push "dhcp-option DNS 10.8.0.1"

Remove this from your client config:

setenv opt block-outside-dns

habnefrage wroteOne of the clients was an "VU zero" (Linux satellite receiver) that also connected without any problems.
When I shipped it to my sister, she connected it to her wireless network (I was using it wireless two). But now the sattelite receiver does not connect any more. I dit not change anything, just remove power, put it into a box and shiupped it to her.

You can not possibly expect this to work .. get on the phone and ensure the device is successfully connected to her network.