Blocked port also not working once connected

swatpup102

I am using a program that operates on port 9000. The network I am on blocks that port. When I connect to my OpenVPN server, everything works as it should except I still find port 9000 blocked. When I connect to a service provided VPN using their client (ExpressVPN), I can access the program on port 9000 over the same network. I figure there is something I must need to add to my configuration file where I don't have a complete traffic tunnel going through. Any ideas? Using Windows 10.

I tried a DNS leak test and it all shows as it should with no leaks to the internal network I'm connecting from. I copied my config file below and x'ed out the identifiers. Using pfSense to host the OpenVPN Server and the client creation package to configure my client connections.

dev tun
persist-tun
persist-key
cipher AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
remote xxx.xxx.com 80 tcp-client
setenv opt block-outside-dns
verify-x509-name "xxxVPN" name
auth-user-pass
pkcs12 pfSense-TCP-80-xxx.p12
tls-auth pfSense-TCP-80-xxx-tls.key 1
ns-cert-type server

TinCanTech

Please use --verb 4 in your client config and then add your sanitised log to this thread.

Does your server redirect your client gateway ?

swatpup102

I do have the option checked for Redirect Gateway - Force all client generated traffic through the tunnel.

The config is now as follows:

dev tun
persist-tun
persist-key
cipher AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
--verb 4
remote xxx.xxx.com 80 tcp-client
setenv opt block-outside-dns
verify-x509-name "xxxVPN" name
auth-user-pass
pkcs12 pfSense-TCP-80-xxx.p12
tls-auth pfSense-TCP-80-xxx-tls.key 1
ns-cert-type server

log:
ue Mar 21 13:27:57 2017 us=103412 Current Parameter Settings:
Tue Mar 21 13:27:57 2017 us=103412 config = 'pfSense-TCP-80-xxx.ovpn'
Tue Mar 21 13:27:57 2017 us=103412 mode = 0
Tue Mar 21 13:27:57 2017 us=103412 show_ciphers = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 show_digests = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 show_engines = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 genkey = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 key_pass_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103412 show_tls_ciphers = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 connect_retry_max = 0
Tue Mar 21 13:27:57 2017 us=103412 Connection profiles [0]:
Tue Mar 21 13:27:57 2017 us=103412 proto = tcp-client
Tue Mar 21 13:27:57 2017 us=103412 local = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103412 local_port = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103412 remote = 'xxx.xxx.com'
Tue Mar 21 13:27:57 2017 us=103412 remote_port = '80'
Tue Mar 21 13:27:57 2017 us=103412 remote_float = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 bind_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 bind_local = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 bind_ipv6_only = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 connect_retry_seconds = 5
Tue Mar 21 13:27:57 2017 us=103412 connect_timeout = 120
Tue Mar 21 13:27:57 2017 us=103412 socks_proxy_server = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103412 socks_proxy_port = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103412 tun_mtu = 1500
Tue Mar 21 13:27:57 2017 us=103412 tun_mtu_defined = ENABLED
Tue Mar 21 13:27:57 2017 us=103412 link_mtu = 1500
Tue Mar 21 13:27:57 2017 us=103412 link_mtu_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 tun_mtu_extra = 0
Tue Mar 21 13:27:57 2017 us=103412 tun_mtu_extra_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=103412 mtu_discover_type = -1
Tue Mar 21 13:27:57 2017 us=103412 fragment = 0
Tue Mar 21 13:27:57 2017 us=103412 mssfix = 1450
Tue Mar 21 13:27:57 2017 us=103412 explicit_exit_notification = 0
Tue Mar 21 13:27:57 2017 us=103913 Connection profiles END
Tue Mar 21 13:27:57 2017 us=103913 remote_random = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 ipchange = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 dev = 'tun'
Tue Mar 21 13:27:57 2017 us=103913 dev_type = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 dev_node = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 lladdr = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 topology = 1
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_local = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_remote_netmask = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_noexec = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_nowarn = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_ipv6_local = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_ipv6_netbits = 0
Tue Mar 21 13:27:57 2017 us=103913 ifconfig_ipv6_remote = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 shaper = 0
Tue Mar 21 13:27:57 2017 us=103913 mtu_test = 0
Tue Mar 21 13:27:57 2017 us=103913 mlock = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 keepalive_ping = 0
Tue Mar 21 13:27:57 2017 us=103913 keepalive_timeout = 0
Tue Mar 21 13:27:57 2017 us=103913 inactivity_timeout = 0
Tue Mar 21 13:27:57 2017 us=103913 ping_send_timeout = 0
Tue Mar 21 13:27:57 2017 us=103913 ping_rec_timeout = 0
Tue Mar 21 13:27:57 2017 us=103913 ping_rec_timeout_action = 0
Tue Mar 21 13:27:57 2017 us=103913 ping_timer_remote = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 remap_sigusr1 = 0
Tue Mar 21 13:27:57 2017 us=103913 persist_tun = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 persist_local_ip = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 persist_remote_ip = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 persist_key = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 passtos = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 resolve_retry_seconds = 1000000000
Tue Mar 21 13:27:57 2017 us=103913 resolve_in_advance = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 username = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 groupname = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 chroot_dir = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 cd_dir = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 writepid = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 up_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 down_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 down_pre = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 up_restart = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 up_delay = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 daemon = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 inetd = 0
Tue Mar 21 13:27:57 2017 us=103913 log = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 suppress_timestamps = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 machine_readable_output = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 nice = 0
Tue Mar 21 13:27:57 2017 us=103913 verbosity = 4
Tue Mar 21 13:27:57 2017 us=103913 mute = 0
Tue Mar 21 13:27:57 2017 us=103913 gremlin = 0
Tue Mar 21 13:27:57 2017 us=103913 status_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 status_file_version = 1
Tue Mar 21 13:27:57 2017 us=103913 status_file_update_freq = 60
Tue Mar 21 13:27:57 2017 us=103913 occ = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 rcvbuf = 0
Tue Mar 21 13:27:57 2017 us=103913 sndbuf = 0
Tue Mar 21 13:27:57 2017 us=103913 sockflags = 0
Tue Mar 21 13:27:57 2017 us=103913 fast_io = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 comp.alg = 0
Tue Mar 21 13:27:57 2017 us=103913 comp.flags = 0
Tue Mar 21 13:27:57 2017 us=103913 route_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 route_default_gateway = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 route_default_metric = 0
Tue Mar 21 13:27:57 2017 us=103913 route_noexec = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 route_delay = 5
Tue Mar 21 13:27:57 2017 us=103913 route_delay_window = 30
Tue Mar 21 13:27:57 2017 us=103913 route_delay_defined = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 route_nopull = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 route_gateway_via_dhcp = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 allow_pull_fqdn = DISABLED
Tue Mar 21 13:27:57 2017 us=103913 management_addr = '127.0.0.1'
Tue Mar 21 13:27:57 2017 us=103913 management_port = '25340'
Tue Mar 21 13:27:57 2017 us=103913 management_user_pass = 'stdin'
Tue Mar 21 13:27:57 2017 us=103913 management_log_history_cache = 250
Tue Mar 21 13:27:57 2017 us=103913 management_echo_buffer_size = 100
Tue Mar 21 13:27:57 2017 us=103913 management_write_peer_info_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 management_client_user = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 management_client_group = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 management_flags = 6
Tue Mar 21 13:27:57 2017 us=103913 shared_secret_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=103913 key_direction = 2
Tue Mar 21 13:27:57 2017 us=103913 ciphername = 'AES-256-CBC'
Tue Mar 21 13:27:57 2017 us=103913 ncp_enabled = ENABLED
Tue Mar 21 13:27:57 2017 us=103913 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Mar 21 13:27:57 2017 us=103913 authname = 'SHA256'
Tue Mar 21 13:27:57 2017 us=103913 prng_hash = 'SHA1'
Tue Mar 21 13:27:57 2017 us=104413 prng_nonce_secret_len = 16
Tue Mar 21 13:27:57 2017 us=104413 keysize = 0
Tue Mar 21 13:27:57 2017 us=104413 engine = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 replay = ENABLED
Tue Mar 21 13:27:57 2017 us=104413 mute_replay_warnings = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 replay_window = 64
Tue Mar 21 13:27:57 2017 us=104413 replay_time = 15
Tue Mar 21 13:27:57 2017 us=104413 packet_id_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 use_iv = ENABLED
Tue Mar 21 13:27:57 2017 us=104413 test_crypto = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 tls_server = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 tls_client = ENABLED
Tue Mar 21 13:27:57 2017 us=104413 key_method = 2
Tue Mar 21 13:27:57 2017 us=104413 ca_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 ca_path = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 dh_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 cert_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 extra_certs_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 priv_key_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 pkcs12_file = 'pfSense-TCP-80-xxx.p12'
Tue Mar 21 13:27:57 2017 us=104413 cryptoapi_cert = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 cipher_list = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 tls_verify = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 tls_export_cert = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 verify_x509_type = 2
Tue Mar 21 13:27:57 2017 us=104413 verify_x509_name = 'xxxVPN'
Tue Mar 21 13:27:57 2017 us=104413 crl_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 ns_cert_type = 1
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_ku[i] = 0
Tue Mar 21 13:27:57 2017 us=104413 remote_cert_eku = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 ssl_flags = 0
Tue Mar 21 13:27:57 2017 us=104413 tls_timeout = 2
Tue Mar 21 13:27:57 2017 us=104413 renegotiate_bytes = -1
Tue Mar 21 13:27:57 2017 us=104413 renegotiate_packets = 0
Tue Mar 21 13:27:57 2017 us=104413 renegotiate_seconds = 3600
Tue Mar 21 13:27:57 2017 us=104413 handshake_window = 60
Tue Mar 21 13:27:57 2017 us=104413 transition_window = 3600
Tue Mar 21 13:27:57 2017 us=104413 single_session = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 push_peer_info = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 tls_exit = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 tls_auth_file = 'pfSense-TCP-80-xxx-tls.key'
Tue Mar 21 13:27:57 2017 us=104413 tls_crypt_file = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_protected_authentication = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_private_mode = 00000000
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104413 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_cert_private = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_pin_cache_period = -1
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_id = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 pkcs11_id_management = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 server_network = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 server_netmask = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 server_network_ipv6 = ::
Tue Mar 21 13:27:57 2017 us=104913 server_netbits_ipv6 = 0
Tue Mar 21 13:27:57 2017 us=104913 server_bridge_ip = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 server_bridge_netmask = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 server_bridge_pool_start = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 server_bridge_pool_end = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_start = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_end = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_netmask = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_pool_persist_refresh_freq = 600
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_ipv6_pool_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_ipv6_pool_base = ::
Tue Mar 21 13:27:57 2017 us=104913 ifconfig_ipv6_pool_netbits = 0
Tue Mar 21 13:27:57 2017 us=104913 n_bcast_buf = 256
Tue Mar 21 13:27:57 2017 us=104913 tcp_queue_limit = 64
Tue Mar 21 13:27:57 2017 us=104913 real_hash_size = 256
Tue Mar 21 13:27:57 2017 us=104913 virtual_hash_size = 256
Tue Mar 21 13:27:57 2017 us=104913 client_connect_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 learn_address_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 client_disconnect_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 client_config_dir = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 ccd_exclusive = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 tmp_dir = 'C:\Users\xxx\AppData\Local\Temp\'
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_local = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_ipv6_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_ipv6_local = ::/0
Tue Mar 21 13:27:57 2017 us=104913 push_ifconfig_ipv6_remote = ::
Tue Mar 21 13:27:57 2017 us=104913 enable_c2c = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 duplicate_cn = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 cf_max = 0
Tue Mar 21 13:27:57 2017 us=104913 cf_per = 0
Tue Mar 21 13:27:57 2017 us=104913 max_clients = 1024
Tue Mar 21 13:27:57 2017 us=104913 max_routes_per_client = 256
Tue Mar 21 13:27:57 2017 us=104913 auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 auth_token_generate = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 auth_token_lifetime = 0
Tue Mar 21 13:27:57 2017 us=104913 client = ENABLED
Tue Mar 21 13:27:57 2017 us=104913 pull = ENABLED
Tue Mar 21 13:27:57 2017 us=104913 auth_user_pass_file = 'stdin'
Tue Mar 21 13:27:57 2017 us=104913 show_net_up = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 route_method = 0
Tue Mar 21 13:27:57 2017 us=104913 block_outside_dns = ENABLED
Tue Mar 21 13:27:57 2017 us=104913 ip_win32_defined = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 ip_win32_type = 3
Tue Mar 21 13:27:57 2017 us=104913 dhcp_masq_offset = 0
Tue Mar 21 13:27:57 2017 us=104913 dhcp_lease_time = 31536000
Tue Mar 21 13:27:57 2017 us=104913 tap_sleep = 0
Tue Mar 21 13:27:57 2017 us=104913 dhcp_options = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 dhcp_renew = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 dhcp_pre_release = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 dhcp_release = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 domain = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 netbios_scope = '[UNDEF]'
Tue Mar 21 13:27:57 2017 us=104913 netbios_node_type = 0
Tue Mar 21 13:27:57 2017 us=104913 disable_nbt = DISABLED
Tue Mar 21 13:27:57 2017 us=104913 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Tue Mar 21 13:27:57 2017 us=104913 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Mar 21 13:27:57 2017 us=104913 library versions: OpenSSL 1.0.2i 22 Sep 2016, LZO 2.09
Enter Management Password:
Tue Mar 21 13:27:57 2017 us=105917 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Mar 21 13:27:57 2017 us=105917 Need hold release from management interface, waiting...
Tue Mar 21 13:27:57 2017 us=581983 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Mar 21 13:27:57 2017 us=683100 MANAGEMENT: CMD 'state on'
Tue Mar 21 13:27:57 2017 us=684045 MANAGEMENT: CMD 'log all on'
Tue Mar 21 13:27:57 2017 us=831239 MANAGEMENT: CMD 'hold off'
Tue Mar 21 13:27:57 2017 us=832739 MANAGEMENT: CMD 'hold release'
Tue Mar 21 13:28:01 2017 us=490366 MANAGEMENT: CMD 'username "Auth" "xxx"'
Tue Mar 21 13:28:01 2017 us=500281 MANAGEMENT: CMD 'password [...]'
Tue Mar 21 13:28:01 2017 us=618375 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 21 13:28:01 2017 us=618375 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 21 13:28:01 2017 us=618375 Control Channel MTU parms [ L:1623 D:1170 EF:80 EB:0 ET:0 EL:3 ]
Tue Mar 21 13:28:01 2017 us=618375 MANAGEMENT: >STATE:1490117281,RESOLVE,,,,,,
Tue Mar 21 13:28:01 2017 us=845736 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Mar 21 13:28:01 2017 us=846237 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1571,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Tue Mar 21 13:28:01 2017 us=846237 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1571,tun-mtu 1500,proto TCPv4_SERVER,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Tue Mar 21 13:28:01 2017 us=846237 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:80
Tue Mar 21 13:28:01 2017 us=846237 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Mar 21 13:28:01 2017 us=846237 Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:80 [nonblock]
Tue Mar 21 13:28:01 2017 us=846237 MANAGEMENT: >STATE:1490117281,TCP_CONNECT,,,,,,
Tue Mar 21 13:28:02 2017 us=847797 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:80
Tue Mar 21 13:28:02 2017 us=847797 TCP_CLIENT link local: (not bound)
Tue Mar 21 13:28:02 2017 us=847797 TCP_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:80
Tue Mar 21 13:28:02 2017 us=848304 MANAGEMENT: >STATE:1490117282,WAIT,,,,,,
Tue Mar 21 13:28:03 2017 us=375838 MANAGEMENT: >STATE:1490117283,AUTH,,,,,,
Tue Mar 21 13:28:03 2017 us=376345 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:80, sid=98f7e08f 1f1ebdb5
Tue Mar 21 13:28:03 2017 us=376844 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Mar 21 13:28:03 2017 us=460484 VERIFY OK: depth=1,
Tue Mar 21 13:28:03 2017 us=461463 VERIFY OK: nsCertType=SERVER
Tue Mar 21 13:28:03 2017 us=461463 VERIFY X509NAME OK:
Tue Mar 21 13:28:03 2017 us=461463 VERIFY OK: depth=0,
Tue Mar 21 13:28:03 2017 us=589791 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Mar 21 13:28:03 2017 us=589791 [HomeVPN] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:80
Tue Mar 21 13:28:04 2017 us=823818 MANAGEMENT: >STATE:1490117284,GET_CONFIG,,,,,,
Tue Mar 21 13:28:04 2017 us=823818 SENT CONTROL [HomeVPN]: 'PUSH_REQUEST' (status=1)
Tue Mar 21 13:28:04 2017 us=917263 PUSH: Received control message: 'PUSH_REPLY,route 192.168.xx.1 255.255.255.0,dhcp-option DNS 192.168.xx.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,block-outside-dns,register-dns,redirect-gateway def1,route-gateway 10.0.8.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.0.xx.2 255.255.255.0'
Tue Mar 21 13:28:04 2017 us=917263 OPTIONS IMPORT: timers and/or timeouts modified
Tue Mar 21 13:28:04 2017 us=917732 OPTIONS IMPORT: --ifconfig/up options modified
Tue Mar 21 13:28:04 2017 us=917732 OPTIONS IMPORT: route options modified
Tue Mar 21 13:28:04 2017 us=917732 OPTIONS IMPORT: route-related options modified
Tue Mar 21 13:28:04 2017 us=917732 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Mar 21 13:28:04 2017 us=918233 Data Channel MTU parms [ L:1571 D:1450 EF:71 EB:406 ET:0 EL:3 ]
Tue Mar 21 13:28:04 2017 us=918233 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Mar 21 13:28:04 2017 us=918233 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 21 13:28:04 2017 us=918733 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Mar 21 13:28:04 2017 us=918733 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 21 13:28:04 2017 us=918733 interactive service msg_channel=0
Tue Mar 21 13:28:04 2017 us=929747 ROUTE_GATEWAY xxx.xxx.xxx.xxx/255.255.240.0
Tue Mar 21 13:28:04 2017 us=958760 open_tun
Tue Mar 21 13:28:04 2017 us=963264 TAP-WIN32 device
Tue Mar 21 13:28:04 2017 us=963765 TAP-Windows Driver Version 9.21
Tue Mar 21 13:28:04 2017 us=963765 TAP-Windows MTU=1500
Tue Mar 21 13:28:04 2017 us=970269 Set TAP-Windows TUN subnet mode network/local/netmask = 10.0.8.0/10.0.8.2/255.255.255.0 [SUCCEEDED]
Tue Mar 21 13:28:04 2017 us=970269 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.8.2/255.255.255.0 on interface
Tue Mar 21 13:28:04 2017 us=970269 DHCP option string: 060cc0a8 0b010808 08080808 0404
Tue Mar 21 13:28:04 2017 us=970769 Successful ARP Flush on interface [22] {AABD760B-DC90-40A1-B4B4-A9F5920650C0}
Tue Mar 21 13:28:04 2017 us=974771 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Mar 21 13:28:04 2017 us=975273 MANAGEMENT: >STATE:1490117284,ASSIGN_IP,,10.0.8.2,,,,
Tue Mar 21 13:28:04 2017 us=975273 Blocking outside DNS
Tue Mar 21 13:28:04 2017 us=984278 Block_DNS: WFP engine opened
Tue Mar 21 13:28:04 2017 us=984278 Block_DNS: Using existing sublayer
Tue Mar 21 13:28:04 2017 us=985278 Block_DNS: Added permit filters for exe_path
Tue Mar 21 13:28:04 2017 us=985780 Block_DNS: Added block filters for all interfaces
Tue Mar 21 13:28:04 2017 us=994786 Block_DNS: Added permit filters for TAP interface
Tue Mar 21 13:28:09 2017 us=81398 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Mar 21 13:28:09 2017 us=81398 C:\WINDOWS\system32\route.exe ADD xxx.xxx.xxx.xxx MASK 255.255.255.255 xxx.xxx.xxx.xxx
Tue Mar 21 13:28:09 2017 us=91071 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=55 and dwForwardType=4
Tue Mar 21 13:28:09 2017 us=91071 Route addition via IPAPI succeeded [adaptive]
Tue Mar 21 13:28:09 2017 us=91572 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.0.8.1
Tue Mar 21 13:28:09 2017 us=106594 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=6 and dwForwardType=4
Tue Mar 21 13:28:09 2017 us=106594 Route addition via IPAPI succeeded [adaptive]
Tue Mar 21 13:28:09 2017 us=107096 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.0.8.1
Tue Mar 21 13:28:09 2017 us=114108 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=6 and dwForwardType=4
Tue Mar 21 13:28:09 2017 us=114608 Route addition via IPAPI succeeded [adaptive]
Tue Mar 21 13:28:09 2017 us=114608 MANAGEMENT: >STATE:1490117289,ADD_ROUTES,,,,,,
Tue Mar 21 13:28:09 2017 us=114608 C:\WINDOWS\system32\route.exe ADD 192.168.xx.1 MASK 255.255.255.0 10.0.8.1
Tue Mar 21 13:28:09 2017 us=118611 Warning: address 192.168.xx.1 is not a network address in relation to netmask 255.255.255.0
Tue Mar 21 13:28:09 2017 us=119111 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=22]
Tue Mar 21 13:28:09 2017 us=119111 Route addition via IPAPI failed [adaptive]
Tue Mar 21 13:28:09 2017 us=119111 Route addition fallback to route.exe
Tue Mar 21 13:28:09 2017 us=119111 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Mar 21 13:28:09 2017 us=150133 Initialization Sequence Completed
Tue Mar 21 13:28:09 2017 us=153136 MANAGEMENT: >STATE:1490117289,CONNECTED,SUCCESS,10.0.8.2,xxx.xxx.xxx.xxx,80,xxx.xxx.xxx.xxx,61340
Tue Mar 21 13:28:09 2017 Start ipconfig commands for register-dns...
Tue Mar 21 13:28:09 2017 C:\WINDOWS\system32\ipconfig.exe /flushdns
Tue Mar 21 13:28:09 2017 C:\WINDOWS\system32\ipconfig.exe /registerdns
Tue Mar 21 13:28:12 2017 End ipconfig commands for register-dns...

TinCanTech

swatpup102 wroteTue Mar 21 13:28:09 2017 us=114608 C:\WINDOWS\system32\route.exe ADD 192.168.xx.1 MASK 255.255.255.0 10.0.8.1
Tue Mar 21 13:28:09 2017 us=118611 Warning: address 192.168.xx.1 is not a network address in relation to netmask 255.255.255.0
Tue Mar 21 13:28:09 2017 us=119111 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=22]

You probably mean: 192.168.xx.0

swatpup102

TinCanTech wrote
swatpup102 wroteTue Mar 21 13:28:09 2017 us=114608 C:\WINDOWS\system32\route.exe ADD 192.168.xx.1 MASK 255.255.255.0 10.0.8.1
Tue Mar 21 13:28:09 2017 us=118611 Warning: address 192.168.xx.1 is not a network address in relation to netmask 255.255.255.0
Tue Mar 21 13:28:09 2017 us=119111 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=22]
You probably mean: 192.168.xx.0

I noticed that error as well, where would that be configured? That .xx.1 is the internal address of my servers Lan interface, I assume that route was added automatic during the openvpn setup. I'm not sure how I would change or remove that directly, or what it actually should be instead.

TinCanTech

It is pushed by your server .. :geek:

swatpup102

TinCanTech wroteIt is pushed by your server .. :geek:

Would that cause a port traffic not to get forwarded correctly through the tunnel? It doesn't seem to affect anything else I do through the vpn connection, including identifying with sites that look for various leaks.