My OpenVPN always connects twice. When I tell it to connect, it goes through the connect sequence, it connects, it immediately issues "Connection reset, restarting" and reconnects. It is successful on the reconnect.
I get this behavior with a freshly rebooted server and I also get it on subsequent connection attempts.
What do I need to change in order make it successful without waiting for the reconnect?
Server:
* OpenVPN 2.3.4 Community Edition
* OS: Raspbian, Version = January 2017
Client:
* OpenVPN 2.3.14 OpenSSL; Tunnelblick 3.7.0 (build 4790)
* OS: OS X 10.11.6
1.
SERVER CONFIG:
daemon openvpn-tcp
dev tun
proto tcp-server
port 443
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/kevin-vpn-2017.crt
key /etc/openvpn/keys/kevin-vpn-2017.key
dh /etc/openvpn/keys/dh4096.pem
tls-auth /etc/openvpn/keys/ta.key 0
auth SHA256
server 10.16.0.0 255.255.255.0
cipher AES-256-CBC
comp-lzo adaptive
keepalive 15 60
push "route 192.168.8.0 255.255.255.0"
push "dhcp-option DOMAIN ."
push "dhcp-option DNS 192.168.8.1"
push "redirect-gateway def1"
client-to-client
user nobody
group nogroup
log /var/log/openvpn.log
verb 4
persist-key
persist-tun
tls-version-min 1.2
2.
CLIENT CONFIG:
client
dev tun
proto tcp
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 4
mute 20
remote 192.168.8.10 443
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
3.
SERVER LOG (--verb 4):
Sat Feb 11 01:23:15 2017 us=67909 Current Parameter Settings:
Sat Feb 11 01:23:15 2017 us=72580 config = '/etc/openvpn/server1.conf'
Sat Feb 11 01:23:15 2017 us=72835 mode = 1
Sat Feb 11 01:23:15 2017 us=73015 persist_config = DISABLED
Sat Feb 11 01:23:15 2017 us=73194 persist_mode = 1
Sat Feb 11 01:23:15 2017 us=73601 show_ciphers = DISABLED
Sat Feb 11 01:23:15 2017 us=73786 show_digests = DISABLED
Sat Feb 11 01:23:15 2017 us=73960 show_engines = DISABLED
Sat Feb 11 01:23:15 2017 us=74132 genkey = DISABLED
Sat Feb 11 01:23:15 2017 us=74306 key_pass_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=74479 show_tls_ciphers = DISABLED
Sat Feb 11 01:23:15 2017 us=74648 Connection profiles [default]:
Sat Feb 11 01:23:15 2017 us=74824 proto = tcp-server
Sat Feb 11 01:23:15 2017 us=77666 local = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=77885 local_port = 443
Sat Feb 11 01:23:15 2017 us=78067 remote = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=80532 remote_port = 443
Sat Feb 11 01:23:15 2017 us=80748 remote_float = DISABLED
Sat Feb 11 01:23:15 2017 us=80929 bind_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=81105 bind_local = ENABLED
Sat Feb 11 01:23:15 2017 us=85122 connect_retry_seconds = 5
Sat Feb 11 01:23:15 2017 us=85453 connect_timeout = 10
Sat Feb 11 01:23:15 2017 us=85639 connect_retry_max = 0
Sat Feb 11 01:23:15 2017 us=85820 socks_proxy_server = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=85999 socks_proxy_port = 0
Sat Feb 11 01:23:15 2017 us=86176 socks_proxy_retry = DISABLED
Sat Feb 11 01:23:15 2017 us=86350 tun_mtu = 1500
Sat Feb 11 01:23:15 2017 us=86527 tun_mtu_defined = ENABLED
Sat Feb 11 01:23:15 2017 us=86704 link_mtu = 1500
Sat Feb 11 01:23:15 2017 us=86876 link_mtu_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=87051 tun_mtu_extra = 0
Sat Feb 11 01:23:15 2017 us=87226 tun_mtu_extra_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=87402 mtu_discover_type = -1
Sat Feb 11 01:23:15 2017 us=87579 fragment = 0
Sat Feb 11 01:23:15 2017 us=87752 mssfix = 1450
Sat Feb 11 01:23:15 2017 us=87926 explicit_exit_notification = 0
Sat Feb 11 01:23:15 2017 us=88096 Connection profiles END
Sat Feb 11 01:23:15 2017 us=88268 remote_random = DISABLED
Sat Feb 11 01:23:15 2017 us=88446 ipchange = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=88620 dev = 'tun'
Sat Feb 11 01:23:15 2017 us=88793 dev_type = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=88966 dev_node = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=89135 lladdr = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=89311 topology = 1
Sat Feb 11 01:23:15 2017 us=89487 tun_ipv6 = DISABLED
Sat Feb 11 01:23:15 2017 us=89659 ifconfig_local = '10.16.0.1'
Sat Feb 11 01:23:15 2017 us=89834 ifconfig_remote_netmask = '10.16.0.2'
Sat Feb 11 01:23:15 2017 us=90004 ifconfig_noexec = DISABLED
Sat Feb 11 01:23:15 2017 us=90175 ifconfig_nowarn = DISABLED
Sat Feb 11 01:23:15 2017 us=90348 ifconfig_ipv6_local = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=90523 ifconfig_ipv6_netbits = 0
Sat Feb 11 01:23:15 2017 us=90696 ifconfig_ipv6_remote = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=90869 shaper = 0
Sat Feb 11 01:23:15 2017 us=91038 mtu_test = 0
Sat Feb 11 01:23:15 2017 us=91207 mlock = DISABLED
Sat Feb 11 01:23:15 2017 us=91379 keepalive_ping = 15
Sat Feb 11 01:23:15 2017 us=91555 keepalive_timeout = 60
Sat Feb 11 01:23:15 2017 us=91727 inactivity_timeout = 0
Sat Feb 11 01:23:15 2017 us=91899 ping_send_timeout = 15
Sat Feb 11 01:23:15 2017 us=92069 ping_rec_timeout = 120
Sat Feb 11 01:23:15 2017 us=92238 ping_rec_timeout_action = 2
Sat Feb 11 01:23:15 2017 us=92412 ping_timer_remote = DISABLED
Sat Feb 11 01:23:15 2017 us=92588 remap_sigusr1 = 0
Sat Feb 11 01:23:15 2017 us=92761 persist_tun = ENABLED
Sat Feb 11 01:23:15 2017 us=92935 persist_local_ip = DISABLED
Sat Feb 11 01:23:15 2017 us=93108 persist_remote_ip = DISABLED
Sat Feb 11 01:23:15 2017 us=93279 persist_key = ENABLED
Sat Feb 11 01:23:15 2017 us=93453 passtos = DISABLED
Sat Feb 11 01:23:15 2017 us=93629 resolve_retry_seconds = 1000000000
Sat Feb 11 01:23:15 2017 us=93806 username = 'nobody'
Sat Feb 11 01:23:15 2017 us=94088 groupname = 'nogroup'
Sat Feb 11 01:23:15 2017 us=94279 chroot_dir = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=94457 cd_dir = '/etc/openvpn'
Sat Feb 11 01:23:15 2017 us=94627 writepid = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=94802 up_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=153947 down_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=154192 down_pre = DISABLED
Sat Feb 11 01:23:15 2017 us=154369 up_restart = DISABLED
Sat Feb 11 01:23:15 2017 us=154545 up_delay = DISABLED
Sat Feb 11 01:23:15 2017 us=154718 daemon = ENABLED
Sat Feb 11 01:23:15 2017 us=163039 inetd = 0
Sat Feb 11 01:23:15 2017 us=163361 log = ENABLED
Sat Feb 11 01:23:15 2017 us=163752 suppress_timestamps = DISABLED
Sat Feb 11 01:23:15 2017 us=163967 nice = 0
Sat Feb 11 01:23:15 2017 us=164144 verbosity = 4
Sat Feb 11 01:23:15 2017 us=164315 mute = 0
Sat Feb 11 01:23:15 2017 us=164490 gremlin = 0
Sat Feb 11 01:23:15 2017 us=164663 status_file = '/run/openvpn/server1.status'
Sat Feb 11 01:23:15 2017 us=164841 status_file_version = 1
Sat Feb 11 01:23:15 2017 us=175943 status_file_update_freq = 10
Sat Feb 11 01:23:15 2017 us=176151 occ = ENABLED
Sat Feb 11 01:23:15 2017 us=176565 rcvbuf = 65536
Sat Feb 11 01:23:15 2017 us=176748 sndbuf = 65536
Sat Feb 11 01:23:15 2017 us=176923 mark = 0
Sat Feb 11 01:23:15 2017 us=177099 sockflags = 0
Sat Feb 11 01:23:15 2017 us=177271 fast_io = DISABLED
Sat Feb 11 01:23:15 2017 us=177445 lzo = 7
Sat Feb 11 01:23:15 2017 us=177617 route_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=177790 route_default_gateway = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=177973 route_default_metric = 0
Sat Feb 11 01:23:15 2017 us=178147 route_noexec = DISABLED
Sat Feb 11 01:23:15 2017 us=178325 route_delay = 0
Sat Feb 11 01:23:15 2017 us=178503 route_delay_window = 30
Sat Feb 11 01:23:15 2017 us=178679 route_delay_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=178858 route_nopull = DISABLED
Sat Feb 11 01:23:15 2017 us=179035 route_gateway_via_dhcp = DISABLED
Sat Feb 11 01:23:15 2017 us=179216 max_routes = 100
Sat Feb 11 01:23:15 2017 us=179395 allow_pull_fqdn = DISABLED
Sat Feb 11 01:23:15 2017 us=179582 route 10.16.0.0/255.255.255.0/nil/nil
Sat Feb 11 01:23:15 2017 us=179762 management_addr = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=179942 management_port = 0
Sat Feb 11 01:23:15 2017 us=180117 management_user_pass = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=180294 management_log_history_cache = 250
Sat Feb 11 01:23:15 2017 us=180474 management_echo_buffer_size = 100
Sat Feb 11 01:23:15 2017 us=180655 management_write_peer_info_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=180836 management_client_user = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=181012 management_client_group = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=181192 management_flags = 0
Sat Feb 11 01:23:15 2017 us=181370 shared_secret_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=181551 key_direction = 1
Sat Feb 11 01:23:15 2017 us=181729 ciphername_defined = ENABLED
Sat Feb 11 01:23:15 2017 us=181905 ciphername = 'AES-256-CBC'
Sat Feb 11 01:23:15 2017 us=182083 authname_defined = ENABLED
Sat Feb 11 01:23:15 2017 us=182261 authname = 'SHA256'
Sat Feb 11 01:23:15 2017 us=182442 prng_hash = 'SHA1'
Sat Feb 11 01:23:15 2017 us=182621 prng_nonce_secret_len = 16
Sat Feb 11 01:23:15 2017 us=182797 keysize = 0
Sat Feb 11 01:23:15 2017 us=182974 engine = DISABLED
Sat Feb 11 01:23:15 2017 us=183150 replay = ENABLED
Sat Feb 11 01:23:15 2017 us=183328 mute_replay_warnings = DISABLED
Sat Feb 11 01:23:15 2017 us=183504 replay_window = 64
Sat Feb 11 01:23:15 2017 us=183681 replay_time = 15
Sat Feb 11 01:23:15 2017 us=183860 packet_id_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=184038 use_iv = ENABLED
Sat Feb 11 01:23:15 2017 us=184215 test_crypto = DISABLED
Sat Feb 11 01:23:15 2017 us=184391 tls_server = ENABLED
Sat Feb 11 01:23:15 2017 us=184572 tls_client = DISABLED
Sat Feb 11 01:23:15 2017 us=184750 key_method = 2
Sat Feb 11 01:23:15 2017 us=201499 ca_file = '/etc/openvpn/keys/ca.crt'
Sat Feb 11 01:23:15 2017 us=202928 ca_path = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=203154 dh_file = '/etc/openvpn/keys/dh4096.pem'
Sat Feb 11 01:23:15 2017 us=203345 cert_file = '/etc/openvpn/keys/kevin-vpn-2017.crt'
Sat Feb 11 01:23:15 2017 us=203529 priv_key_file = '/etc/openvpn/keys/kevin-vpn-2017.key'
Sat Feb 11 01:23:15 2017 us=203713 pkcs12_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=203890 cipher_list = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=204069 tls_verify = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=204246 tls_export_cert = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=204428 verify_x509_type = 0
Sat Feb 11 01:23:15 2017 us=204610 verify_x509_name = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=204787 crl_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=206996 ns_cert_type = 0
Sat Feb 11 01:23:15 2017 us=207252 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=207440 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=208071 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=209179 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=209419 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=209611 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=209792 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=209975 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=219643 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=219973 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=220159 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=225430 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=225744 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=225932 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=226117 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=226298 remote_cert_ku[i] = 0
Sat Feb 11 01:23:15 2017 us=229185 remote_cert_eku = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=230408 ssl_flags = 192
Sat Feb 11 01:23:15 2017 us=230661 tls_timeout = 2
Sat Feb 11 01:23:15 2017 us=230849 renegotiate_bytes = 0
Sat Feb 11 01:23:15 2017 us=231027 renegotiate_packets = 0
Sat Feb 11 01:23:15 2017 us=235109 renegotiate_seconds = 3600
Sat Feb 11 01:23:15 2017 us=235357 handshake_window = 60
Sat Feb 11 01:23:15 2017 us=235539 transition_window = 3600
Sat Feb 11 01:23:15 2017 us=248495 single_session = DISABLED
Sat Feb 11 01:23:15 2017 us=248726 push_peer_info = DISABLED
Sat Feb 11 01:23:15 2017 us=248905 tls_exit = DISABLED
Sat Feb 11 01:23:15 2017 us=249088 tls_auth_file = '/etc/openvpn/keys/ta.key'
Sat Feb 11 01:23:15 2017 us=249267 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=249450 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=249634 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=249814 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=249996 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=250174 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=250353 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=250532 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=250713 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=250889 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=251072 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=251252 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=251431 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=251611 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=251789 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=252009 pkcs11_protected_authentication = DISABLED
Sat Feb 11 01:23:15 2017 us=252210 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=252393 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=252578 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=252761 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253038 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253240 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253425 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253611 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253791 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=253970 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=254150 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=254330 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=254511 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=254694 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=254875 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=285463 pkcs11_private_mode = 00000000
Sat Feb 11 01:23:15 2017 us=285655 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=285836 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286014 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286191 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286371 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286552 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286730 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=286902 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287081 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287257 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287433 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287611 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287788 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=287969 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=288146 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=288324 pkcs11_cert_private = DISABLED
Sat Feb 11 01:23:15 2017 us=288505 pkcs11_pin_cache_period = -1
Sat Feb 11 01:23:15 2017 us=288685 pkcs11_id = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=288863 pkcs11_id_management = DISABLED
Sat Feb 11 01:23:15 2017 us=289103 server_network = 10.16.0.0
Sat Feb 11 01:23:15 2017 us=289310 server_netmask = 255.255.255.0
Sat Feb 11 01:23:15 2017 us=289508 server_network_ipv6 = ::
Sat Feb 11 01:23:15 2017 us=289692 server_netbits_ipv6 = 0
Sat Feb 11 01:23:15 2017 us=289889 server_bridge_ip = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=290087 server_bridge_netmask = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=290283 server_bridge_pool_start = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=290478 server_bridge_pool_end = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=290659 push_entry = 'route 192.168.8.0 255.255.255.0'
Sat Feb 11 01:23:15 2017 us=290839 push_entry = 'dhcp-option DOMAIN .'
Sat Feb 11 01:23:15 2017 us=291015 push_entry = 'dhcp-option DNS 192.168.8.1'
Sat Feb 11 01:23:15 2017 us=291193 push_entry = 'redirect-gateway def1'
Sat Feb 11 01:23:15 2017 us=291377 push_entry = 'route 10.16.0.0 255.255.255.0'
Sat Feb 11 01:23:15 2017 us=291555 push_entry = 'topology net30'
Sat Feb 11 01:23:15 2017 us=291733 push_entry = 'ping 15'
Sat Feb 11 01:23:15 2017 us=291906 push_entry = 'ping-restart 60'
Sat Feb 11 01:23:15 2017 us=292083 ifconfig_pool_defined = ENABLED
Sat Feb 11 01:23:15 2017 us=292276 ifconfig_pool_start = 10.16.0.4
Sat Feb 11 01:23:15 2017 us=292472 ifconfig_pool_end = 10.16.0.251
Sat Feb 11 01:23:15 2017 us=292665 ifconfig_pool_netmask = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=292846 ifconfig_pool_persist_filename = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=293028 ifconfig_pool_persist_refresh_freq = 600
Sat Feb 11 01:23:15 2017 us=293212 ifconfig_ipv6_pool_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=293400 ifconfig_ipv6_pool_base = ::
Sat Feb 11 01:23:15 2017 us=293586 ifconfig_ipv6_pool_netbits = 0
Sat Feb 11 01:23:15 2017 us=293767 n_bcast_buf = 256
Sat Feb 11 01:23:15 2017 us=293945 tcp_queue_limit = 64
Sat Feb 11 01:23:15 2017 us=294124 real_hash_size = 256
Sat Feb 11 01:23:15 2017 us=294303 virtual_hash_size = 256
Sat Feb 11 01:23:15 2017 us=294588 client_connect_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=294785 learn_address_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=345163 client_disconnect_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=345439 client_config_dir = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=351280 ccd_exclusive = DISABLED
Sat Feb 11 01:23:15 2017 us=351584 tmp_dir = '/tmp'
Sat Feb 11 01:23:15 2017 us=351769 push_ifconfig_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=351972 push_ifconfig_local = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=352212 push_ifconfig_remote_netmask = 0.0.0.0
Sat Feb 11 01:23:15 2017 us=352402 push_ifconfig_ipv6_defined = DISABLED
Sat Feb 11 01:23:15 2017 us=352608 push_ifconfig_ipv6_local = ::/0
Sat Feb 11 01:23:15 2017 us=352802 push_ifconfig_ipv6_remote = ::
Sat Feb 11 01:23:15 2017 us=352984 enable_c2c = ENABLED
Sat Feb 11 01:23:15 2017 us=353160 duplicate_cn = DISABLED
Sat Feb 11 01:23:15 2017 us=353343 cf_max = 0
Sat Feb 11 01:23:15 2017 us=353522 cf_per = 0
Sat Feb 11 01:23:15 2017 us=353701 max_clients = 1024
Sat Feb 11 01:23:15 2017 us=353882 max_routes_per_client = 256
Sat Feb 11 01:23:15 2017 us=354061 auth_user_pass_verify_script = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=354241 auth_user_pass_verify_script_via_file = DISABLED
Sat Feb 11 01:23:15 2017 us=354416 port_share_host = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=354601 port_share_port = 0
Sat Feb 11 01:23:15 2017 us=354777 client = DISABLED
Sat Feb 11 01:23:15 2017 us=380353 pull = DISABLED
Sat Feb 11 01:23:15 2017 us=380637 auth_user_pass_file = '[UNDEF]'
Sat Feb 11 01:23:15 2017 us=380845 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Sat Feb 11 01:23:15 2017 us=381135 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08
Sat Feb 11 01:23:15 2017 us=426070 Diffie-Hellman initialized with 4096 bit key
Sat Feb 11 01:23:15 2017 us=476631 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Sat Feb 11 01:23:15 2017 us=477070 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:23:15 2017 us=477328 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:23:15 2017 us=477567 TLS-Auth MTU parms [ L:1572 D:180 EF:80 EB:0 ET:0 EL:0 ]
Sat Feb 11 01:23:15 2017 us=477881 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sat Feb 11 01:23:15 2017 us=478813 ROUTE: default_gateway=UNDEF
Sat Feb 11 01:23:15 2017 us=571020 TUN/TAP device tun0 opened
Sat Feb 11 01:23:15 2017 us=571400 TUN/TAP TX queue length set to 100
Sat Feb 11 01:23:15 2017 us=571665 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Feb 11 01:23:15 2017 us=571999 /sbin/ip link set dev tun0 up mtu 1500
Sat Feb 11 01:23:15 2017 us=671834 /sbin/ip addr add dev tun0 local 10.16.0.1 peer 10.16.0.2
Sat Feb 11 01:23:15 2017 us=759768 /sbin/ip route add 10.16.0.0/24 via 10.16.0.2
Sat Feb 11 01:23:15 2017 us=827930 Data Channel MTU parms [ L:1572 D:1450 EF:72 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 11 01:23:15 2017 us=898416 GID set to nogroup
Sat Feb 11 01:23:15 2017 us=898941 UID set to nobody
Sat Feb 11 01:23:15 2017 us=899208 Listening for incoming TCP connection on [undef]
Sat Feb 11 01:23:15 2017 us=899602 TCPv4_SERVER link local (bound): [undef]
Sat Feb 11 01:23:15 2017 us=899797 TCPv4_SERVER link remote: [undef]
Sat Feb 11 01:23:15 2017 us=899989 MULTI: multi_init called, r=256 v=256
Sat Feb 11 01:23:15 2017 us=901256 IFCONFIG POOL: base=10.16.0.4 size=62, ipv6=0
Sat Feb 11 01:23:15 2017 us=901634 MULTI: TCP INIT maxclients=1024 maxevents=1028
Sat Feb 11 01:23:15 2017 us=902147 Initialization Sequence Completed
Sat Feb 11 01:24:56 2017 us=125140 MULTI: multi_create_instance called
Sat Feb 11 01:24:56 2017 us=125768 Re-using SSL/TLS context
Sat Feb 11 01:24:56 2017 us=126323 LZO compression initialized
Sat Feb 11 01:24:56 2017 us=128488 Control Channel MTU parms [ L:1572 D:180 EF:80 EB:0 ET:0 EL:0 ]
Sat Feb 11 01:24:56 2017 us=128988 Data Channel MTU parms [ L:1572 D:1450 EF:72 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 11 01:24:56 2017 us=130149 Local Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Sat Feb 11 01:24:56 2017 us=130393 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Sat Feb 11 01:24:56 2017 us=130780 Local Options hash (VER=V4): '165db97f'
Sat Feb 11 01:24:56 2017 us=131081 Expected Remote Options hash (VER=V4): '504bba81'
Sat Feb 11 01:24:56 2017 us=131421 TCP connection established with [AF_INET]192.168.8.1:58939
Sat Feb 11 01:24:56 2017 us=131627 TCPv4_SERVER link local: [undef]
Sat Feb 11 01:24:56 2017 us=131826 TCPv4_SERVER link remote: [AF_INET]192.168.8.1:58939
Sat Feb 11 01:24:57 2017 us=122853 192.168.8.1:58939 TLS: Initial packet from [AF_INET]192.168.8.1:58939, sid=6082f14b 59ffd344
Sat Feb 11 01:24:59 2017 us=604279 192.168.8.1:58939 VERIFY OK: depth=1, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=MyFamily CA, name=EasyRSA, emailAddress=email@mydomain.com
Sat Feb 11 01:24:59 2017 us=608802 192.168.8.1:58939 VERIFY OK: depth=0, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=user-key01, name=EasyRSA, emailAddress=email@mydomain.com
Sat Feb 11 01:25:01 2017 us=916619 192.168.8.1:58939 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Feb 11 01:25:01 2017 us=917014 192.168.8.1:58939 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:25:01 2017 us=917261 192.168.8.1:58939 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Feb 11 01:25:01 2017 us=917505 192.168.8.1:58939 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:25:01 2017 us=962765 192.168.8.1:58939 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Feb 11 01:25:01 2017 us=963224 192.168.8.1:58939 [user-key01] Peer Connection Initiated with [AF_INET]192.168.8.1:58939
Sat Feb 11 01:25:01 2017 us=963646 user-key01/192.168.8.1:58939 MULTI_sva: pool returned IPv4=10.16.0.6, IPv6=(Not enabled)
Sat Feb 11 01:25:01 2017 us=964279 user-key01/192.168.8.1:58939 MULTI: Learn: 10.16.0.6 -> user-key01/192.168.8.1:58939
Sat Feb 11 01:25:01 2017 us=964512 user-key01/192.168.8.1:58939 MULTI: primary virtual IP for user-key01/192.168.8.1:58939: 10.16.0.6
Sat Feb 11 01:25:04 2017 us=133578 user-key01/192.168.8.1:58939 PUSH: Received control message: 'PUSH_REQUEST'
Sat Feb 11 01:25:04 2017 us=133900 user-key01/192.168.8.1:58939 send_push_reply(): safe_cap=940
Sat Feb 11 01:25:04 2017 us=134299 user-key01/192.168.8.1:58939 SENT CONTROL [user-key01]: 'PUSH_REPLY,route 192.168.8.0 255.255.255.0,dhcp-option DOMAIN .,dhcp-option DNS 192.168.8.1,redirect-gateway def1,route 10.16.0.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 10.16.0.6 10.16.0.5' (status=1)
Sat Feb 11 01:25:07 2017 us=824613 MULTI: multi_create_instance called
Sat Feb 11 01:25:07 2017 us=825151 Re-using SSL/TLS context
Sat Feb 11 01:25:07 2017 us=825464 LZO compression initialized
Sat Feb 11 01:25:07 2017 us=826420 Control Channel MTU parms [ L:1572 D:180 EF:80 EB:0 ET:0 EL:0 ]
Sat Feb 11 01:25:07 2017 us=826789 Data Channel MTU parms [ L:1572 D:1450 EF:72 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 11 01:25:07 2017 us=827248 Local Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Sat Feb 11 01:25:07 2017 us=827431 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Sat Feb 11 01:25:07 2017 us=827735 Local Options hash (VER=V4): '165db97f'
Sat Feb 11 01:25:07 2017 us=828131 Expected Remote Options hash (VER=V4): '504bba81'
Sat Feb 11 01:25:07 2017 us=828539 TCP connection established with [AF_INET]192.168.8.11:58944
Sat Feb 11 01:25:07 2017 us=828855 TCPv4_SERVER link local: [undef]
Sat Feb 11 01:25:07 2017 us=829076 TCPv4_SERVER link remote: [AF_INET]192.168.8.11:58944
Sat Feb 11 01:25:08 2017 us=824609 192.168.8.11:58944 TLS: Initial packet from [AF_INET]192.168.8.11:58944, sid=465966b8 96e4e593
Sat Feb 11 01:25:11 2017 us=267437 192.168.8.11:58944 VERIFY OK: depth=1, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=MyFamily CA, name=EasyRSA, emailAddress=email@mydomain.com
Sat Feb 11 01:25:11 2017 us=272009 192.168.8.11:58944 VERIFY OK: depth=0, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=user-key01, name=EasyRSA, emailAddress=email@mydomain.com
Sat Feb 11 01:25:13 2017 us=426243 192.168.8.11:58944 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Feb 11 01:25:13 2017 us=426646 192.168.8.11:58944 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:25:13 2017 us=426867 192.168.8.11:58944 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Feb 11 01:25:13 2017 us=427107 192.168.8.11:58944 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Feb 11 01:25:13 2017 us=472555 192.168.8.11:58944 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Feb 11 01:25:13 2017 us=473013 192.168.8.11:58944 [user-key01] Peer Connection Initiated with [AF_INET]192.168.8.11:58944
Sat Feb 11 01:25:13 2017 us=475074 user-key01/192.168.8.11:58944 TCP/UDP: Closing socket
Sat Feb 11 01:25:13 2017 us=475861 MULTI: new connection by client 'user-key01' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Sat Feb 11 01:25:13 2017 us=476155 MULTI_sva: pool returned IPv4=10.16.0.6, IPv6=(Not enabled)
Sat Feb 11 01:25:13 2017 us=476801 MULTI: Learn: 10.16.0.6 -> user-key01/192.168.8.11:58944
Sat Feb 11 01:25:13 2017 us=477039 MULTI: primary virtual IP for user-key01/192.168.8.11:58944: 10.16.0.6
Sat Feb 11 01:25:15 2017 us=123374 user-key01/192.168.8.11:58944 PUSH: Received control message: 'PUSH_REQUEST'
Sat Feb 11 01:25:15 2017 us=123701 user-key01/192.168.8.11:58944 send_push_reply(): safe_cap=940
Sat Feb 11 01:25:15 2017 us=124096 user-key01/192.168.8.11:58944 SENT CONTROL [user-key01]: 'PUSH_REPLY,route 192.168.8.0 255.255.255.0,dhcp-option DOMAIN .,dhcp-option DNS 192.168.8.1,redirect-gateway def1,route 10.16.0.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 10.16.0.6 10.16.0.5' (status=1)
4.
CLIENT LOG (--verb 4):
*Tunnelblick: OS X 10.11.6; Tunnelblick 3.7.0 (build 4790); prior version 3.6.10 (build 4760)
2017-02-10 20:25:12 *Tunnelblick: Attempting connection with user-key01 using shadow copy; Set nameserver = 769; monitoring connection
2017-02-10 20:25:12 *Tunnelblick: openvpnstart start user-key01.tblk 1337 769 0 1 0 1065264 -ptADGNWradsgnw 2.3.14-openssl-1.0.2k
2017-02-10 20:25:12 *Tunnelblick: openvpnstart log:
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.14-openssl-1.0.2k/openvpn
--daemon
--log
/Library/Application Support/Tunnelblick/Logs/-SUsers-Skevin-SLibrary-SApplication Support-STunnelblick-SConfigurations-Suser--key01.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065264.1337.openvpn.log
--cd
/Library/Application Support/Tunnelblick/Users/kevin/user-key01.tblk/Contents/Resources
--verb
3
--config
/Library/Application Support/Tunnelblick/Users/kevin/user-key01.tblk/Contents/Resources/config.ovpn
--verb
3
--cd
/Library/Application Support/Tunnelblick/Users/kevin/user-key01.tblk/Contents/Resources
--management
127.0.0.1
1337
--management-query-passwords
--management-hold
--script-security
2
--up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
--down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2017-02-10 20:25:12 *Tunnelblick: Established communication with OpenVPN
2017-02-10 20:25:12 OpenVPN 2.3.14 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 28 2017
2017-02-10 20:25:12 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
2017-02-10 20:25:12 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2017-02-10 20:25:12 Need hold release from management interface, waiting...
2017-02-10 20:25:12 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2017-02-10 20:25:12 MANAGEMENT: CMD 'pid'
2017-02-10 20:25:12 MANAGEMENT: CMD 'state on'
2017-02-10 20:25:12 MANAGEMENT: CMD 'state'
2017-02-10 20:25:12 MANAGEMENT: CMD 'bytecount 1'
2017-02-10 20:25:12 MANAGEMENT: CMD 'hold release'
2017-02-10 20:25:12 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-02-10 20:25:12 Control Channel Authentication: tls-auth using INLINE static key file
2017-02-10 20:25:12 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:12 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:12 Socket Buffers: R=[131072->131072] S=[131072->131072]
2017-02-10 20:25:12 Attempting to establish TCP connection with [AF_INET]192.168.8.10:443 [nonblock]
2017-02-10 20:25:12 MANAGEMENT: >STATE:1486776312,TCP_CONNECT,,,
2017-02-10 20:25:12 *Tunnelblick: openvpnstart starting OpenVPN
2017-02-10 20:25:14 TCP connection established with [AF_INET]192.168.8.10:443
2017-02-10 20:25:14 TCPv4_CLIENT link local: [undef]
2017-02-10 20:25:14 TCPv4_CLIENT link remote: [AF_INET]192.168.8.10:443
2017-02-10 20:25:14 MANAGEMENT: >STATE:1486776314,WAIT,,,
2017-02-10 20:25:14 MANAGEMENT: >STATE:1486776314,AUTH,,,
2017-02-10 20:25:14 TLS: Initial packet from [AF_INET]192.168.8.10:443, sid=3cd22ef5 239c8409
2017-02-10 20:25:16 VERIFY OK: depth=1, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=MyFamily CA, name=EasyRSA, emailAddress=email@mydomain.com
2017-02-10 20:25:16 VERIFY OK: nsCertType=SERVER
2017-02-10 20:25:16 VERIFY OK: depth=0, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=kleinfelter-vpn-2017, name=EasyRSA, emailAddress=email@mydomain.com
2017-02-10 20:25:18 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-02-10 20:25:18 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:18 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-02-10 20:25:18 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:18 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2017-02-10 20:25:18 [kleinfelter-vpn-2017] Peer Connection Initiated with [AF_INET]192.168.8.10:443
2017-02-10 20:25:19 MANAGEMENT: >STATE:1486776319,GET_CONFIG,,,
2017-02-10 20:25:21 SENT CONTROL [kleinfelter-vpn-2017]: 'PUSH_REQUEST' (status=1)
2017-02-10 20:25:21 PUSH: Received control message: 'PUSH_REPLY,route 192.168.8.0 255.255.255.0,dhcp-option DOMAIN .,dhcp-option DNS 192.168.8.1,redirect-gateway def1,route 10.16.0.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 10.16.0.6 10.16.0.5'
2017-02-10 20:25:21 OPTIONS IMPORT: timers and/or timeouts modified
2017-02-10 20:25:21 OPTIONS IMPORT: --ifconfig/up options modified
2017-02-10 20:25:21 OPTIONS IMPORT: route options modified
2017-02-10 20:25:21 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-02-10 20:25:21 Opened utun device utun0
2017-02-10 20:25:21 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2017-02-10 20:25:21 MANAGEMENT: >STATE:1486776321,ASSIGN_IP,,10.16.0.6,
2017-02-10 20:25:21 /sbin/ifconfig utun0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2017-02-10 20:25:21 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2017-02-10 20:25:21 /sbin/ifconfig utun0 10.16.0.6 10.16.0.5 mtu 1500 netmask 255.255.255.255 up
2017-02-10 20:25:21 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun0 1500 1572 10.16.0.6 10.16.0.5 init
**********************************************
Start of output from client.up.tunnelblick.sh
Retrieved from OpenVPN: name server(s) [ 192.168.8.1 ], domain name [ . ], search domain(s) [ ], and SMB server(s) [ ]
Not aggregating ServerAddresses because running on OS X 10.6 or higher
Setting search domains to '.' because running under OS X 10.6 or higher and the search domains were not set manually and 'Prepend domain name to search domains' was not selected
Saved the DNS and SMB configurations so they can be restored
Did not change DNS ServerAddresses setting of '192.168.8.1' (but re-set it)
Changed DNS SearchDomains setting from '' to '.'
Changed DNS DomainName setting from '' to '.'
Did not change SMB NetBIOSName setting of ''
Did not change SMB Workgroup setting of 'home'
Did not change SMB WINSAddresses setting of ''
DNS servers '192.168.8.1' will be used for DNS queries when the VPN is active
NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
Flushed the DNS cache via dscacheutil
/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
Notified mDNSResponder that the DNS cache was flushed
Setting up to monitor system configuration with process-network-changes
End of output from client.up.tunnelblick.sh
**********************************************
2017-02-10 20:25:24 *Tunnelblick: No 'connected.sh' script to execute
2017-02-10 20:25:24 *Tunnelblick: No 'reconnecting.sh' script to execute
2017-02-10 20:25:24 /sbin/route add -cloning -net 192.168.8.10 -netmask 255.255.255.255 -interface en0
add net 192.168.8.10: gateway en0
2017-02-10 20:25:24 /sbin/route add -net 0.0.0.0 10.16.0.5 128.0.0.0
add net 0.0.0.0: gateway 10.16.0.5
2017-02-10 20:25:24 /sbin/route add -net 128.0.0.0 10.16.0.5 128.0.0.0
add net 128.0.0.0: gateway 10.16.0.5
2017-02-10 20:25:24 MANAGEMENT: >STATE:1486776324,ADD_ROUTES,,,
2017-02-10 20:25:24 /sbin/route add -net 192.168.8.0 10.16.0.5 255.255.255.0
add net 192.168.8.0: gateway 10.16.0.5
2017-02-10 20:25:24 /sbin/route add -net 10.16.0.0 10.16.0.5 255.255.255.0
add net 10.16.0.0: gateway 10.16.0.5
2017-02-10 20:25:24 Initialization Sequence Completed
2017-02-10 20:25:24 MANAGEMENT: >STATE:1486776324,CONNECTED,SUCCESS,10.16.0.6,192.168.8.10
2017-02-10 20:25:24 Connection reset, restarting [-1]
2017-02-10 20:25:24 SIGUSR1[soft,connection-reset] received, process restarting
2017-02-10 20:25:24 MANAGEMENT: >STATE:1486776324,RECONNECTING,connection-reset,,
2017-02-10 20:25:24 MANAGEMENT: CMD 'hold release'
2017-02-10 20:25:24 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-02-10 20:25:24 Socket Buffers: R=[131072->131072] S=[131072->131072]
2017-02-10 20:25:24 Attempting to establish TCP connection with [AF_INET]192.168.8.10:443 [nonblock]
2017-02-10 20:25:24 MANAGEMENT: >STATE:1486776324,TCP_CONNECT,,,
2017-02-10 20:25:25 TCP connection established with [AF_INET]192.168.8.10:443
2017-02-10 20:25:25 TCPv4_CLIENT link local: [undef]
2017-02-10 20:25:25 TCPv4_CLIENT link remote: [AF_INET]192.168.8.10:443
2017-02-10 20:25:25 MANAGEMENT: >STATE:1486776325,WAIT,,,
2017-02-10 20:25:25 MANAGEMENT: >STATE:1486776325,AUTH,,,
2017-02-10 20:25:25 TLS: Initial packet from [AF_INET]192.168.8.10:443, sid=82a923ea 8d95966a
2017-02-10 20:25:27 VERIFY OK: depth=1, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=MyFamily CA, name=EasyRSA, emailAddress=email@mydomain.com
2017-02-10 20:25:27 VERIFY OK: nsCertType=SERVER
2017-02-10 20:25:27 VERIFY OK: depth=0, C=US, ST=GA, L=Atlanta, O=MyFamily, OU=KevinMyFamily, CN=kleinfelter-vpn-2017, name=EasyRSA, emailAddress=email@mydomain.com
2017-02-10 20:25:29 *Tunnelblick process-network-changes: A system configuration change was ignored
2017-02-10 20:25:30 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-02-10 20:25:30 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:30 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-02-10 20:25:30 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
2017-02-10 20:25:30 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2017-02-10 20:25:30 [kleinfelter-vpn-2017] Peer Connection Initiated with [AF_INET]192.168.8.10:443
2017-02-10 20:25:31 MANAGEMENT: >STATE:1486776331,GET_CONFIG,,,
2017-02-10 20:25:32 *Tunnelblick: No 'connected.sh' script to execute
2017-02-10 20:25:32 SENT CONTROL [kleinfelter-vpn-2017]: 'PUSH_REQUEST' (status=1)
2017-02-10 20:25:32 PUSH: Received control message: 'PUSH_REPLY,route 192.168.8.0 255.255.255.0,dhcp-option DOMAIN .,dhcp-option DNS 192.168.8.1,redirect-gateway def1,route 10.16.0.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 10.16.0.6 10.16.0.5'
2017-02-10 20:25:32 OPTIONS IMPORT: timers and/or timeouts modified
2017-02-10 20:25:32 OPTIONS IMPORT: --ifconfig/up options modified
2017-02-10 20:25:32 OPTIONS IMPORT: route options modified
2017-02-10 20:25:32 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-02-10 20:25:32 Preserving previous TUN/TAP instance: utun0
2017-02-10 20:25:32 Initialization Sequence Completed
2017-02-10 20:25:32 MANAGEMENT: >STATE:1486776332,CONNECTED,SUCCESS,10.16.0.6,192.168.8.10
2017-02-10 20:25:37 *Tunnelblick: This computer's apparent public IP address (xx.yy.zz.aa) was unchanged after the connection was made
iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
