Openvpn connected client no internet

coolfi

Hi all, I've ran in to problem with Openvpn on Ubuntu and raspberry-pi, hope someone can offer some assistance.

I first wanted to run Openvpn on Ubuntu and also client on the same machine, following this guide " https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04#prerequisites ", but even installing server and client and successfully connecting client/user on the same machine I could not get any access to internet, I could access local network and access to my router but no matter what I tried or did and even googling could not access internet.

So I thought maybe because it was same machine with server and client that’s why it was having the problem, and decided to build the sever on my Raspberry-pi following these guides

https://readwrite.com/2014/04/10/raspberry-pi-vpn-tutorial-server-secure-web-browsing/
http://www.bbc.co.uk/news/technology-33548728

But still the same problem no access to internet, even though I can connect to server using openvpn-gnome-client and again have access to my router home page. I’ve tried two fresh install on the raspberry-pi and done google where others with similar problems had have firewall issues, I could not connect to internet.

I've tried different IP ranges in the server.conf but the problem is till the same, when client is connected to server I can't ping tun0 from server or client though I can ping the local ip from both server and client to each other.

Here is my setup maybe some can figure out what am doing worng.

Thanks

client ifconfig when not connected

 
 ifconfig
eth0      Link encap:Ethernet  HWaddr 00:00:00:d5:6e:f7  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth1      Link encap:Ethernet  HWaddr 00:00:00:ea:5b:55  
          inet addr:192.168.10.3  Bcast:192.168.10.255  Mask:255.255.255.0
          inet6 addr: fdaa:bbcc:ddee:0:10eb:e02:f6c9:3128/64 Scope:Global
          inet6 addr: fdaa:bbcc:ddee:0:204:75ff:feea:5b05/64 Scope:Global
          inet6 addr: 2a00:23c5:903:c00:10eb:e02:f6c9:3128/64 Scope:Global
          inet6 addr: fe80::204:75ff:feea:5b05/64 Scope:Link
          inet6 addr: 2a00:23c5:903:c00:204:75ff:feea:5b05/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:228782 errors:0 dropped:0 overruns:1 frame:0
          TX packets:120607 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:289545514 (289.5 MB)  TX bytes:13098045 (13.0 MB)
          Interrupt:20 Base address:0x2000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:14266 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14266 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1386385 (1.3 MB)  TX bytes:1386385 (1.3 MB)

wlan0     Link encap:Ethernet  HWaddr 00:78:7a:96:ae:a9  
          inet addr:192.168.150.1  Bcast:192.168.150.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:107592 errors:0 dropped:0 overruns:0 frame:0
          TX packets:214279 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:11166021 (11.1 MB)  TX bytes:286375992 (286.3 MB)

When connected to server

eth0      Link encap:Ethernet  HWaddr XX:XX:d0:d5:6e:XX 
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth1      Link encap:Ethernet  HWaddr 00:XX:XX:ea:5b:XX  
          inet addr:192.168.10.3  Bcast:192.168.10.255  Mask:255.255.255.0
          inet6 addr: fdaa:bbcc:ddee:0:10eb:e02:f6c9:3128/64 Scope:Global
          inet6 addr: fdaa:bbcc:ddee:0:204:75ff:feea:5b05/64 Scope:Global
          inet6 addr: 2a00:23c5:903:c00:10eb:e02:f6c9:3128/64 Scope:Global
          inet6 addr: fe80::204:75ff:feea:5b05/64 Scope:Link
          inet6 addr: 2a00:23c5:903:c00:204:75ff:feea:5b05/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:229033 errors:0 dropped:0 overruns:1 frame:0
          TX packets:120944 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:289574259 (289.5 MB)  TX bytes:13138994 (13.1 MB)
          Interrupt:20 Base address:0x2000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:14603 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14603 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1419077 (1.4 MB)  TX bytes:1419077 (1.4 MB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:192.168.20.6  P-t-P:192.168.20.5  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:73 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:5048 (5.0 KB)

wlan0     Link encap:Ethernet  HWaddr XX:48:7a:92:ae:XX  
          inet addr:192.168.150.1  Bcast:192.168.150.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:107592 errors:0 dropped:0 overruns:0 frame:0
          TX packets:214279 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:11166021 (11.1 MB)  TX bytes:286375992 (286.3 MB)

Route on client

 
 route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.20.13   0.0.0.0         UG    0      0        0 tun0
192.168.10.0    *               255.255.255.0   U     1      0        0 eth1
192.168.10.150  *               255.255.255.255 UH    0      0        0 eth1
192.168.20.0    192.168.20.13   255.255.255.255 UGH   0      0        0 tun0
192.168.20.0    192.168.20.13   255.255.255.0   UG    0      0        0 tun0
192.168.20.13   *               255.255.255.255 UH    0      0        0 tun0
192.168.150.0   *               255.255.255.0   U     0      0        0 wlan0

ifconfig on server when client not connected

ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:f8:2c:52  
          inet addr:192.168.10.150  Bcast:192.168.10.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13733 errors:0 dropped:0 overruns:0 frame:0
          TX packets:17066 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1436319 (1.3 MiB)  TX bytes:1438044 (1.3 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:11237 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11237 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1086402 (1.0 MiB)  TX bytes:1086402 (1.0 MiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:192.168.20.1  P-t-P:192.168.20.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

when client is connected

ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:f8:2c:52  
          inet addr:192.168.10.150  Bcast:192.168.10.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13986 errors:0 dropped:0 overruns:0 frame:0
          TX packets:17320 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1462624 (1.3 MiB)  TX bytes:1466982 (1.3 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:11329 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11329 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1095390 (1.0 MiB)  TX bytes:1095390 (1.0 MiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:192.168.20.1  P-t-P:192.168.20.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

route

 
 route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         bthub           0.0.0.0         UG    0      0        0 eth0
192.168.10.0    *               255.255.255.0   U     0      0        0 eth0
192.168.20.0    192.168.20.2    255.255.255.0   UG    0      0        0 tun0
192.168.20.2    *               255.255.255.255 UH    0      0        0 tun0
[/code[

current server.conf file changed to many ip ranges but still the problem persists. 
[code]
local 192.168.10.150 # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt # SWAP XX WITH YOUR SERVER NAME
key /etc/openvpn/easy-rsa/keys/server.key # SWAP XX WITH YOUR SERVER NAME
dh /etc/openvpn/easy-rsa/keys/dh1024.pem # IF YOU CHANGED YOUR ENCRYPTION TO 20$
server 192.168.20.0 255.255.255.0
# server and remote endpoints
ifconfig 192.168.20.1 192.168.20.2
# Add route to Client routing table for the OpenVPN Server
push "route 192.168.20.0 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 192.168.20.0 255.255.255.255"
# your local subnet
push "route 192.168.10.150 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBE$
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
#push "dhcp-option DNS 192.168.10.1" 
push "dhcp-option DNS 8.8.8.8" # THIS SHOULD ALREADY MATCH YOUR OWN ROUTER OR USE GOOGLES
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1 bypass-dhcp"
#push "dhcp-option DNS 208.67.222.222"
#push "dhcp-option DNS 208.67.220.220"
client-to-client
duplicate-cn
keepalive 10 120
#tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1

TinCanTech

Please see:
HOWTO: Request Help ! {2}

And:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

coolfi

TinCanTech wrote Please see:
HOWTO: Request Help ! {2}

And:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

Thanks for the links, didn't have enough space left in the first post to include links for logs, etc.

I think I've figured it out now as per your link and also few other tweaks needed on the client side and traffic is going through but the IP remains the same as my ISP still exposed. The guides I followed are wrong and showing incorrect information for redirect-gateway it should have been like this.

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

I had it like this

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 192.168.10.150

Also Openvpn-gnome-client had to be adjusted in the client.conf file, simply adding the 3 files ca.crt,user.crt, and user.key in network manager is not enough and not included in the guides.

Current log file

Thu Oct 26 14:40:14 2017 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF$
Thu Oct 26 14:40:14 2017 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scr$
Thu Oct 26 14:40:14 2017 TUN/TAP device tun0 opened
Thu Oct 26 14:40:14 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 26 14:40:14 2017 /sbin/ifconfig tun0 192.168.20.1 pointopoint 192.168.20.2 mtu 1500
Thu Oct 26 14:40:14 2017 GID set to nogroup
Thu Oct 26 14:40:14 2017 UID set to nobody
Thu Oct 26 14:40:14 2017 UDPv4 link local (bound): [AF_INET]192.168.10.150:1194
Thu Oct 26 14:40:14 2017 UDPv4 link remote: [undef]
Thu Oct 26 14:40:14 2017 Initialization Sequence Completed
Thu Oct 26 14:44:49 2017 81.158.215.61:33333 Re-using SSL/TLS context
Thu Oct 26 14:44:49 2017 81.158.215.61:33333 LZO compression initialized
Thu Oct 26 14:44:49 2017 81.158.215.61:33333 [user1] Peer Connection Initiated with [AF_INET]81.158.215.61:3$
Thu Oct 26 14:44:49 2017 user1/81.158.215.61:33333 MULTI_sva: pool returned IPv4=192.168.20.6, IPv6=e8a6:efb$
Thu Oct 26 14:44:51 2017 user1/81.158.215.61:33333 send_push_reply(): safe_cap=960

TinCanTech

coolfi wrote The guides I followed are wrong and showing incorrect information for redirect-gateway it should have been like this.

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

I had it like this

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 192.168.10.150

Those are both valid iptables commands but it does depend on your server setup which will work.

BobAGI

TinCanTech wrote Please see:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

This page describes a situation where the client will only be able to access the remote local network trough the tunnel while his other internet traffic continues to pass through his normal gateway as if the tunnel was not connected:

By default, when an OpenVPN client is active, only network traffic to and from the OpenVPN server site will pass over the VPN. General web browsing, for example, will be accomplished with direct connections that bypass the VPN.

Then the article describes how to change this so that all traffic passes through the tunnel.

However, my experience is that if the server does not include this gateway directive in its conf file:

push "redirect-gateway def1 bypass-dhcp"

then there is no client side Internet access at all!
So the premise above is wrong AFAICT.

Or can you say exactly how the server (and possibly client) configuration files should be set up to allow the "unwanted" behavior?
Because this is the behavior I have desperately been trying to create...

But all I get is either a connection that handles all traffic or else I can ONLY access the remote network and not the Internet.
I have seen suggestions to push something containing an exact address to the client side gateway, but that would never be possible because the server can really not know from which network address the call is coming. If I connect from my phone for instance the gateway on the phone depends on its connection state (mobile network or wifi). So any attempt server side to set a fixed IP number as gateway will fail.

TinCanTech

BobAGI wrote
TinCanTech wrote Please see:
HOWTO: Routing all client traffic (including web-traffic) through the VPN
This page describes a situation where the client will only be able to access the remote local network trough the tunnel while his other internet traffic continues to pass through his normal gateway as if the tunnel was not connected:

No it does not ..

BobAGI

Well, the two first paragraphs on that page spells this out (my underlines):

Overview

By default, when an OpenVPN client is active, only network traffic to and from the OpenVPN server site will pass over the VPN. General web browsing, for example, will be accomplished with direct connections that bypass the VPN.

In certain cases this behavior might not be desirable -- you might want a VPN client to tunnel all network traffic through the VPN, including general internet web browsing. While this type of VPN configuration will exact a performance penalty on the client, it gives the VPN administrator more control over security policies when a client is simultaneously connected to both the public internet and the VPN at the same time.

To me that describes the situation I want to accomplish where the general Internet traffic stays outside the tunnel, but the article describes how to reconfigure so that general browsing goes through the tunnel...
As I said I want to get to the situation described in the first paragraph but I am unable to do this.
When I deactivate the redirect gateway in the server config then the client has access to the remote LAN computers but stalls on access to the Internet. Everything times out....
So the client side gateway seems to have been switched off....
My tests are done with the client on an Android phone and the server on a Raspberry Pi3 running Raspbian Stretch.

If you have any ideas how to fix this issue I will be very grateful, I have spent several days on this now without success.
Since the client is on a phone I cannot examine its routing table or even its IP address or gateway address like if it was a regular PC...

coolfi

So now that am connected to my Raspberry-Pi server and client Ubuntu 10.04 has working internet, but IP's are not changing still showing my own isp ip address, I've tried both openvpn and google dns-nameservers in the server config file, in the client config, and network interfaces, and running ./update-resolv-conf up, but no matter what settings I do, it makes no difference.

Server Log

Mon Oct 30 03:32:52 2017 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 22 2017
Mon Oct 30 03:32:52 2017 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Oct 30 03:32:52 2017 TUN/TAP device tun0 opened
Mon Oct 30 03:32:52 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Oct 30 03:32:52 2017 /sbin/ifconfig tun0 192.168.20.1 pointopoint 192.168.20.2 mtu 1500
Mon Oct 30 03:32:52 2017 GID set to nogroup
Mon Oct 30 03:32:52 2017 UID set to nobody
Mon Oct 30 03:32:52 2017 UDPv4 link local (bound): [AF_INET]192.168.10.150:1194
Mon Oct 30 03:32:52 2017 UDPv4 link remote: [undef]
Mon Oct 30 03:32:52 2017 Initialization Sequence Completed
Mon Oct 30 03:33:06 2017 192.168.10.3:35977 Re-using SSL/TLS context
Mon Oct 30 03:33:06 2017 192.168.10.3:35977 LZO compression initialized
Mon Oct 30 03:33:07 2017 192.168.10.3:35977 [user1] Peer Connection Initiated with [AF_INET]192.168.10.3:35977
Mon Oct 30 03:33:07 2017 user1/192.168.10.3:35977 MULTI_sva: pool returned IPv4=192.168.20.6, IPv6=48f7:c0be:b0cd:5c7f:8fb:617f:cda:ed80
Mon Oct 30 03:33:09 2017 user1/192.168.10.3:35977 send_push_reply(): safe_cap=960

local 192.168.10.150 #
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 192.168.20.0 255.255.255.0
# server and remote endpoints
ifconfig 192.168.20.1 192.168.20.2
# Add route to Client routing table for the OpenVPN Server
push "route 192.168.20.0 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 192.168.20.0 255.255.255.255"
# your local subnet
push "route 192.168.10.150 255.255.255.0"
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
#push "dhcp-option DNS 192.168.10.1"
#push "dhcp-option DNS 8.8.8.8"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1 bypass-dhcp"
#push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
#push "dhcp-option DNS 192.168.20.1"
#push "dhcp-option DNS 4.4.8.8"
#push "dhcp-option DNS 8.8.8.8"
#block-outside-dns
client-to-client
duplicate-cn
keepalive 10 120
#tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
#cipher BF-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 4

Shall I open another thread or is it OK to continue here?

Thanks

TinCanTech

It is ok to continue here.

Change your server config like so:

server 192.168.20.0 255.255.255.0
# ifconfig 192.168.20.1 192.168.20.2        # You do not need this
# push "route 192.168.20.0 255.255.255.255" # You do not need this
# push "route 192.168.20.0 255.255.255.255" # You do not need this
# push "route 192.168.10.150 255.255.255.0" # You do not need this

coolfi wrote IP's are not changing still showing my own isp ip address

Please post client config and log at verb 4

coolfi

TinCanTech wrote It is ok to continue here.

Change your server config like so:

server 192.168.20.0 255.255.255.0
# ifconfig 192.168.20.1 192.168.20.2        # You do not need this
# push "route 192.168.20.0 255.255.255.255" # You do not need this
# push "route 192.168.20.0 255.255.255.255" # You do not need this
# push "route 192.168.10.150 255.255.255.0" # You do not need this

coolfi wrote IP's are not changing still showing my own isp ip address

Please post client config and log at verb 4

Here you go M8.

client
dev tun
proto udp
remote 192.168.10.150 1194
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /home/media/keys1/ca.crt
cert /home/media/keys1/user1.crt
key /home/media/keys1/user1.key
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
ns-cert-type server
cipher AES-128-CBC
comp-lzo
log /var/log/openvpn-client.log
verb 4

Log

 
 Mon Oct 30 14:58:47 2017 us=946666 Current Parameter Settings:
Mon Oct 30 14:58:47 2017 us=946789   config = '/etc/openvpn/client.conf'
Mon Oct 30 14:58:47 2017 us=946813   mode = 0
Mon Oct 30 14:58:47 2017 us=946832   persist_config = DISABLED
Mon Oct 30 14:58:47 2017 us=946850   persist_mode = 1
Mon Oct 30 14:58:47 2017 us=946867   show_ciphers = DISABLED
Mon Oct 30 14:58:47 2017 us=946883   show_digests = DISABLED
Mon Oct 30 14:58:47 2017 us=946900   show_engines = DISABLED
Mon Oct 30 14:58:47 2017 us=946916   genkey = DISABLED
Mon Oct 30 14:58:47 2017 us=946933   key_pass_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=946949   show_tls_ciphers = DISABLED
Mon Oct 30 14:58:47 2017 us=946966 Connection profiles [default]:
Mon Oct 30 14:58:47 2017 us=946982   proto = udp
Mon Oct 30 14:58:47 2017 us=946999   local = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947015   local_port = 0
Mon Oct 30 14:58:47 2017 us=947032   remote = '192.168.10.150'
Mon Oct 30 14:58:47 2017 us=947049   remote_port = 1194
Mon Oct 30 14:58:47 2017 us=947065   remote_float = DISABLED
Mon Oct 30 14:58:47 2017 us=947081   bind_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=947098   bind_local = DISABLED
Mon Oct 30 14:58:47 2017 us=947114   connect_retry_seconds = 5
Mon Oct 30 14:58:47 2017 us=947130   connect_timeout = 10
Mon Oct 30 14:58:47 2017 us=947146   connect_retry_max = 0
Mon Oct 30 14:58:47 2017 us=947163   socks_proxy_server = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947179   socks_proxy_port = 0
Mon Oct 30 14:58:47 2017 us=947195   socks_proxy_retry = DISABLED
Mon Oct 30 14:58:47 2017 us=947211   tun_mtu = 1500
Mon Oct 30 14:58:47 2017 us=947227   tun_mtu_defined = ENABLED
Mon Oct 30 14:58:47 2017 us=947243   link_mtu = 1500
Mon Oct 30 14:58:47 2017 us=947259   link_mtu_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=947276   tun_mtu_extra = 0
Mon Oct 30 14:58:47 2017 us=947292   tun_mtu_extra_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=947308   mtu_discover_type = -1
Mon Oct 30 14:58:47 2017 us=947325   fragment = 0
Mon Oct 30 14:58:47 2017 us=947341   mssfix = 1450
Mon Oct 30 14:58:47 2017 us=947358   explicit_exit_notification = 0
Mon Oct 30 14:58:47 2017 us=947374 Connection profiles END
Mon Oct 30 14:58:47 2017 us=947390   remote_random = DISABLED
Mon Oct 30 14:58:47 2017 us=947406   ipchange = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947425   dev = 'tun'
Mon Oct 30 14:58:47 2017 us=947441   dev_type = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947457   dev_node = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947473   lladdr = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947489   topology = 1
Mon Oct 30 14:58:47 2017 us=947505   tun_ipv6 = DISABLED
Mon Oct 30 14:58:47 2017 us=947521   ifconfig_local = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947538   ifconfig_remote_netmask = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947554   ifconfig_noexec = DISABLED
Mon Oct 30 14:58:47 2017 us=947570   ifconfig_nowarn = DISABLED
Mon Oct 30 14:58:47 2017 us=947586   ifconfig_ipv6_local = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947602   ifconfig_ipv6_netbits = 0
Mon Oct 30 14:58:47 2017 us=947618   ifconfig_ipv6_remote = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947634   shaper = 0
Mon Oct 30 14:58:47 2017 us=947651   mtu_test = 0
Mon Oct 30 14:58:47 2017 us=947670   mlock = DISABLED
Mon Oct 30 14:58:47 2017 us=947686   keepalive_ping = 0
Mon Oct 30 14:58:47 2017 us=947702   keepalive_timeout = 0
Mon Oct 30 14:58:47 2017 us=947718   inactivity_timeout = 0
Mon Oct 30 14:58:47 2017 us=947734   ping_send_timeout = 0
Mon Oct 30 14:58:47 2017 us=947750   ping_rec_timeout = 0
Mon Oct 30 14:58:47 2017 us=947766   ping_rec_timeout_action = 0
Mon Oct 30 14:58:47 2017 us=947782   ping_timer_remote = DISABLED
Mon Oct 30 14:58:47 2017 us=947801   remap_sigusr1 = 0
Mon Oct 30 14:58:47 2017 us=947817   persist_tun = ENABLED
Mon Oct 30 14:58:47 2017 us=947833   persist_local_ip = DISABLED
Mon Oct 30 14:58:47 2017 us=947849   persist_remote_ip = DISABLED
Mon Oct 30 14:58:47 2017 us=947865   persist_key = ENABLED
Mon Oct 30 14:58:47 2017 us=947881   passtos = DISABLED
Mon Oct 30 14:58:47 2017 us=947898   resolve_retry_seconds = 1000000000
Mon Oct 30 14:58:47 2017 us=947922   username = 'nobody'
Mon Oct 30 14:58:47 2017 us=947940   groupname = 'nogroup'
Mon Oct 30 14:58:47 2017 us=947956   chroot_dir = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=947972   cd_dir = '/etc/openvpn'
Mon Oct 30 14:58:47 2017 us=947989   writepid = '/run/openvpn/client.pid'
Mon Oct 30 14:58:47 2017 us=948005   up_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948021   down_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948037   down_pre = DISABLED
Mon Oct 30 14:58:47 2017 us=948053   up_restart = DISABLED
Mon Oct 30 14:58:47 2017 us=948074   up_delay = DISABLED
Mon Oct 30 14:58:47 2017 us=948091   daemon = ENABLED
Mon Oct 30 14:58:47 2017 us=948107   inetd = 0
Mon Oct 30 14:58:47 2017 us=948123   log = ENABLED
Mon Oct 30 14:58:47 2017 us=948139   suppress_timestamps = DISABLED
Mon Oct 30 14:58:47 2017 us=948156   nice = 0
Mon Oct 30 14:58:47 2017 us=948174   verbosity = 4
Mon Oct 30 14:58:47 2017 us=948190   mute = 0
Mon Oct 30 14:58:47 2017 us=948206   gremlin = 0
Mon Oct 30 14:58:47 2017 us=948223   status_file = '/run/openvpn/client.status'
Mon Oct 30 14:58:47 2017 us=948239   status_file_version = 1
Mon Oct 30 14:58:47 2017 us=948256   status_file_update_freq = 10
Mon Oct 30 14:58:47 2017 us=948272   occ = ENABLED
Mon Oct 30 14:58:47 2017 us=948288   rcvbuf = 65536
Mon Oct 30 14:58:47 2017 us=948304   sndbuf = 65536
Mon Oct 30 14:58:47 2017 us=948320   mark = 0
Mon Oct 30 14:58:47 2017 us=948336   sockflags = 0
Mon Oct 30 14:58:47 2017 us=948352   fast_io = DISABLED
Mon Oct 30 14:58:47 2017 us=948368   lzo = 7
Mon Oct 30 14:58:47 2017 us=948384   route_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948401   route_default_gateway = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948420   route_default_metric = 0
Mon Oct 30 14:58:47 2017 us=948437   route_noexec = DISABLED
Mon Oct 30 14:58:47 2017 us=948453   route_delay = 0
Mon Oct 30 14:58:47 2017 us=948470   route_delay_window = 30
Mon Oct 30 14:58:47 2017 us=948487   route_delay_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=948503   route_nopull = DISABLED
Mon Oct 30 14:58:47 2017 us=948520   route_gateway_via_dhcp = DISABLED
Mon Oct 30 14:58:47 2017 us=948537   max_routes = 100
Mon Oct 30 14:58:47 2017 us=948554   allow_pull_fqdn = DISABLED
Mon Oct 30 14:58:47 2017 us=948571   management_addr = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948587   management_port = 0
Mon Oct 30 14:58:47 2017 us=948603   management_user_pass = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948620   management_log_history_cache = 250
Mon Oct 30 14:58:47 2017 us=948636   management_echo_buffer_size = 100
Mon Oct 30 14:58:47 2017 us=948653   management_write_peer_info_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948672   management_client_user = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948689   management_client_group = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948705   management_flags = 0
Mon Oct 30 14:58:47 2017 us=948722   shared_secret_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948738   key_direction = 0
Mon Oct 30 14:58:47 2017 us=948755   ciphername_defined = ENABLED
Mon Oct 30 14:58:47 2017 us=948771   ciphername = 'AES-128-CBC'
Mon Oct 30 14:58:47 2017 us=948787   authname_defined = ENABLED
Mon Oct 30 14:58:47 2017 us=948804   authname = 'SHA1'
Mon Oct 30 14:58:47 2017 us=948820   prng_hash = 'SHA1'
Mon Oct 30 14:58:47 2017 us=948836   prng_nonce_secret_len = 16
Mon Oct 30 14:58:47 2017 us=948853   keysize = 0
Mon Oct 30 14:58:47 2017 us=948869   engine = DISABLED
Mon Oct 30 14:58:47 2017 us=948885   replay = ENABLED
Mon Oct 30 14:58:47 2017 us=948902   mute_replay_warnings = DISABLED
Mon Oct 30 14:58:47 2017 us=948921   replay_window = 64
Mon Oct 30 14:58:47 2017 us=948937   replay_time = 15
Mon Oct 30 14:58:47 2017 us=948954   packet_id_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=948970   use_iv = ENABLED
Mon Oct 30 14:58:47 2017 us=948986   test_crypto = DISABLED
Mon Oct 30 14:58:47 2017 us=949002   tls_server = DISABLED
Mon Oct 30 14:58:47 2017 us=949019   tls_client = ENABLED
Mon Oct 30 14:58:47 2017 us=949035   key_method = 2
Mon Oct 30 14:58:47 2017 us=949052   ca_file = '/home/media/keys1/ca.crt'
Mon Oct 30 14:58:47 2017 us=949076   ca_path = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949094   dh_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949111   cert_file = '/home/media/keys1/user1.crt'
Mon Oct 30 14:58:47 2017 us=949127   priv_key_file = '/home/media/keys1/user1.key'
Mon Oct 30 14:58:47 2017 us=949144   pkcs12_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949160   cipher_list = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949176   tls_verify = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949192   tls_export_cert = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949209   verify_x509_type = 0
Mon Oct 30 14:58:47 2017 us=949225   verify_x509_name = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949241   crl_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949257   ns_cert_type = 1
Mon Oct 30 14:58:47 2017 us=949274   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949294   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949310   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949326   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949342   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949358   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949374   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949390   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949405   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949421   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949437   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949453   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949469   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949485   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949501   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949517   remote_cert_ku[i] = 0
Mon Oct 30 14:58:47 2017 us=949533   remote_cert_eku = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949551   ssl_flags = 0
Mon Oct 30 14:58:47 2017 us=949567   tls_timeout = 2
Mon Oct 30 14:58:47 2017 us=949583   renegotiate_bytes = 0
Mon Oct 30 14:58:47 2017 us=949599   renegotiate_packets = 0
Mon Oct 30 14:58:47 2017 us=949629   renegotiate_seconds = 3600
Mon Oct 30 14:58:47 2017 us=949649   handshake_window = 60
Mon Oct 30 14:58:47 2017 us=949669   transition_window = 3600
Mon Oct 30 14:58:47 2017 us=949686   single_session = DISABLED
Mon Oct 30 14:58:47 2017 us=949702   push_peer_info = DISABLED
Mon Oct 30 14:58:47 2017 us=949718   tls_exit = DISABLED
Mon Oct 30 14:58:47 2017 us=949734   tls_auth_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=949751   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949767   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949784   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949801   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949817   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949834   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949850   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949867   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949883   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949900   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949916   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949933   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949950   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949966   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949983   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=949999   pkcs11_protected_authentication = DISABLED
Mon Oct 30 14:58:47 2017 us=950017   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950034   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950051   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950067   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950084   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950109   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950126   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950143   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950160   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950176   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950192   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950209   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950225   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950242   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950258   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950275   pkcs11_private_mode = 00000000
Mon Oct 30 14:58:47 2017 us=950294   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950310   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950327   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950343   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950359   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950375   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950392   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950408   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950424   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950440   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950456   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950473   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950489   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950505   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950521   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950537   pkcs11_cert_private = DISABLED
Mon Oct 30 14:58:47 2017 us=950554   pkcs11_pin_cache_period = -1
Mon Oct 30 14:58:47 2017 us=950570   pkcs11_id = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=950587   pkcs11_id_management = DISABLED
Mon Oct 30 14:58:47 2017 us=950615   server_network = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950636   server_netmask = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950663   server_network_ipv6 = ::
Mon Oct 30 14:58:47 2017 us=950681   server_netbits_ipv6 = 0
Mon Oct 30 14:58:47 2017 us=950700   server_bridge_ip = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950718   server_bridge_netmask = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950736   server_bridge_pool_start = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950754   server_bridge_pool_end = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950771   push_entry = 'dhcp-option DNS 208.67.222.222'
Mon Oct 30 14:58:47 2017 us=950788   push_entry = 'dhcp-option DNS 208.67.220.220'
Mon Oct 30 14:58:47 2017 us=950805   ifconfig_pool_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=950823   ifconfig_pool_start = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950841   ifconfig_pool_end = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950859   ifconfig_pool_netmask = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=950876   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=950893   ifconfig_pool_persist_refresh_freq = 600
Mon Oct 30 14:58:47 2017 us=950909   ifconfig_ipv6_pool_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=950927   ifconfig_ipv6_pool_base = ::
Mon Oct 30 14:58:47 2017 us=950944   ifconfig_ipv6_pool_netbits = 0
Mon Oct 30 14:58:47 2017 us=950961   n_bcast_buf = 256
Mon Oct 30 14:58:47 2017 us=950977   tcp_queue_limit = 64
Mon Oct 30 14:58:47 2017 us=950993   real_hash_size = 256
Mon Oct 30 14:58:47 2017 us=951010   virtual_hash_size = 256
Mon Oct 30 14:58:47 2017 us=951026   client_connect_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951045   learn_address_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951061   client_disconnect_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951078   client_config_dir = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951094   ccd_exclusive = DISABLED
Mon Oct 30 14:58:47 2017 us=951110   tmp_dir = '/tmp'
Mon Oct 30 14:58:47 2017 us=951126   push_ifconfig_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=951145   push_ifconfig_local = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=951171   push_ifconfig_remote_netmask = 0.0.0.0
Mon Oct 30 14:58:47 2017 us=951188   push_ifconfig_ipv6_defined = DISABLED
Mon Oct 30 14:58:47 2017 us=951207   push_ifconfig_ipv6_local = ::/0
Mon Oct 30 14:58:47 2017 us=951225   push_ifconfig_ipv6_remote = ::
Mon Oct 30 14:58:47 2017 us=951241   enable_c2c = DISABLED
Mon Oct 30 14:58:47 2017 us=951257   duplicate_cn = DISABLED
Mon Oct 30 14:58:47 2017 us=951274   cf_max = 0
Mon Oct 30 14:58:47 2017 us=951291   cf_per = 0
Mon Oct 30 14:58:47 2017 us=951308   max_clients = 1024
Mon Oct 30 14:58:47 2017 us=951324   max_routes_per_client = 256
Mon Oct 30 14:58:47 2017 us=951341   auth_user_pass_verify_script = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951358   auth_user_pass_verify_script_via_file = DISABLED
Mon Oct 30 14:58:47 2017 us=951374   port_share_host = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951390   port_share_port = 0
Mon Oct 30 14:58:47 2017 us=951407   client = ENABLED
Mon Oct 30 14:58:47 2017 us=951423   pull = ENABLED
Mon Oct 30 14:58:47 2017 us=951439   auth_user_pass_file = '[UNDEF]'
Mon Oct 30 14:58:47 2017 us=951459 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jun 22 2017
Mon Oct 30 14:58:53 2017 us=691376 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Oct 30 14:58:53 2017 us=705914 LZO compression initialized
Mon Oct 30 14:58:53 2017 us=706103 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Oct 30 14:58:53 2017 us=706174 Socket Buffers: R=[163840->131072] S=[163840->131072]
Mon Oct 30 14:58:53 2017 us=706223 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Oct 30 14:58:53 2017 us=706262 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Oct 30 14:58:53 2017 us=706278 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Oct 30 14:58:53 2017 us=706314 Local Options hash (VER=V4): '66096c33'
Mon Oct 30 14:58:53 2017 us=706346 Expected Remote Options hash (VER=V4): '691e95c7'
Mon Oct 30 14:58:53 2017 us=707782 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon Oct 30 14:58:53 2017 us=707901 UDPv4 link local: [undef]
Mon Oct 30 14:58:53 2017 us=707944 UDPv4 link remote: [AF_INET]192.168.10.150:1194
Mon Oct 30 14:58:53 2017 us=711141 TLS: Initial packet from [AF_INET]192.168.10.150:1194, sid=19843c50 55186e70
Mon Oct 30 14:58:53 2017 us=786200 VERIFY OK: depth=1, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Mon Oct 30 14:58:53 2017 us=786752 VERIFY OK: nsCertType=SERVER
Mon Oct 30 14:58:53 2017 us=786776 VERIFY OK: depth=0, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Mon Oct 30 14:58:53 2017 us=900970 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 30 14:58:53 2017 us=901029 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 30 14:58:53 2017 us=901053 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 30 14:58:53 2017 us=901077 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 30 14:58:53 2017 us=901129 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Oct 30 14:58:53 2017 us=901173 [server] Peer Connection Initiated with [AF_INET]192.168.10.150:1194
Mon Oct 30 14:58:56 2017 us=151564 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Oct 30 14:58:56 2017 us=155828 PUSH: Received control message: 'PUSH_REPLY,route 192.168.20.0 255.255.255.255,route 192.168.20.0 255.255.255.255,route 192.168.10.150 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 192.168.20.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.20.6 192.168.20.5'
Mon Oct 30 14:58:56 2017 us=156012 OPTIONS IMPORT: timers and/or timeouts modified
Mon Oct 30 14:58:56 2017 us=156036 OPTIONS IMPORT: --ifconfig/up options modified
Mon Oct 30 14:58:56 2017 us=156053 OPTIONS IMPORT: route options modified
Mon Oct 30 14:58:56 2017 us=156069 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Oct 30 14:58:56 2017 us=156385 ROUTE_GATEWAY 192.168.10.1/255.255.255.0 IFACE=eth1 HWADDR=00:04:75:ea:5b:05
Mon Oct 30 14:58:56 2017 us=156965 TUN/TAP device tun1 opened
Mon Oct 30 14:58:56 2017 us=157002 TUN/TAP TX queue length set to 100
Mon Oct 30 14:58:56 2017 us=157031 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Oct 30 14:58:56 2017 us=157077 /sbin/ip link set dev tun1 up mtu 1500
Mon Oct 30 14:58:56 2017 us=159451 /sbin/ip addr add dev tun1 local 192.168.20.6 peer 192.168.20.5
Mon Oct 30 14:58:56 2017 us=161050 /sbin/ip route add 192.168.10.150/32 via 192.168.10.1
Mon Oct 30 14:58:56 2017 us=162598 /sbin/ip route add 0.0.0.0/1 via 192.168.20.5
Mon Oct 30 14:58:56 2017 us=163912 /sbin/ip route add 128.0.0.0/1 via 192.168.20.5
Mon Oct 30 14:58:56 2017 us=165137 /sbin/ip route add 192.168.20.0/32 via 192.168.20.5
Mon Oct 30 14:58:56 2017 us=167220 /sbin/ip route add 192.168.20.0/32 via 192.168.20.5
RTNETLINK answers: File exists
Mon Oct 30 14:58:56 2017 us=168153 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Oct 30 14:58:56 2017 us=168202 /sbin/ip route add 192.168.10.150/24 via 192.168.20.5
RTNETLINK answers: Invalid argument
Mon Oct 30 14:58:56 2017 us=169053 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Oct 30 14:58:56 2017 us=169155 /sbin/ip route add 192.168.20.0/24 via 192.168.20.5
RTNETLINK answers: File exists
Mon Oct 30 14:58:56 2017 us=171222 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Oct 30 14:58:56 2017 us=171267 GID set to nogroup
Mon Oct 30 14:58:56 2017 us=171283 UID set to nobody
Mon Oct 30 14:58:56 2017 us=171292 Initialization Sequence Completed

TinCanTech

coolfi wrote UDPv4 link remote: [AF_INET]192.168.10.150:1194

Your server and client are in the same subnet (your home LAN) so being connected to the VPN will make no difference to the IP address you use on the internet .. it will always be your home internet connection.

coolfi wrote Mon Oct 30 14:58:56 2017 us=167220 /sbin/ip route add 192.168.20.0/32 via 192.168.20.5
RTNETLINK answers: File exists
Mon Oct 30 14:58:56 2017 us=168153 ERROR: Linux route add command failed: external program exited with error status: 2

You cannot do this while on your home LAN.

coolfi wrote server 192.168.20.0 255.255.255.0

You cannot do this because that is your home LAN.

Use:

server 10.8.0.0 255.255.255.0

and make the other changes I said before as well ..

coolfi

OK, done that made the changes and still the same.

Here are the logs from server and client.

Thanks

Server.log

 
 Tue Oct 31 09:11:48 2017 us=254656 Current Parameter Settings:
Tue Oct 31 09:11:48 2017 us=255262   config = '/etc/openvpn/server.conf'
Tue Oct 31 09:11:48 2017 us=255453   mode = 1
Tue Oct 31 09:11:48 2017 us=255616   persist_config = DISABLED
Tue Oct 31 09:11:48 2017 us=255775   persist_mode = 1
Tue Oct 31 09:11:48 2017 us=255935   show_ciphers = DISABLED
Tue Oct 31 09:11:48 2017 us=256098   show_digests = DISABLED
Tue Oct 31 09:11:48 2017 us=256257   show_engines = DISABLED
Tue Oct 31 09:11:48 2017 us=256413   genkey = DISABLED
Tue Oct 31 09:11:48 2017 us=256574   key_pass_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=256733   show_tls_ciphers = DISABLED
Tue Oct 31 09:11:48 2017 us=256920 Connection profiles [default]:
Tue Oct 31 09:11:48 2017 us=257207   proto = udp
Tue Oct 31 09:11:48 2017 us=257374   local = '192.168.10.150'
Tue Oct 31 09:11:48 2017 us=257538   local_port = 1194
Tue Oct 31 09:11:48 2017 us=257700   remote = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=257861   remote_port = 1194
Tue Oct 31 09:11:48 2017 us=258019   remote_float = DISABLED
Tue Oct 31 09:11:48 2017 us=258178   bind_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=258339   bind_local = ENABLED
Tue Oct 31 09:11:48 2017 us=258498   connect_retry_seconds = 5
Tue Oct 31 09:11:48 2017 us=258659   connect_timeout = 10
Tue Oct 31 09:11:48 2017 us=258823   connect_retry_max = 0
Tue Oct 31 09:11:48 2017 us=258981   socks_proxy_server = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=259143   socks_proxy_port = 0
Tue Oct 31 09:11:48 2017 us=259486   socks_proxy_retry = DISABLED
Tue Oct 31 09:11:48 2017 us=259683 Connection profiles END
Tue Oct 31 09:11:48 2017 us=259851   remote_random = DISABLED
Tue Oct 31 09:11:48 2017 us=260008   ipchange = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=260165   dev = 'tun0'
Tue Oct 31 09:11:48 2017 us=260325   dev_type = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=260484   dev_node = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=260638   lladdr = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=260796   topology = 1
Tue Oct 31 09:11:48 2017 us=261000   tun_ipv6 = DISABLED
Tue Oct 31 09:11:48 2017 us=261216   ifconfig_local = '10.8.0.1'
Tue Oct 31 09:11:48 2017 us=261379   ifconfig_remote_netmask = '10.8.0.2'
Tue Oct 31 09:11:48 2017 us=261536   ifconfig_noexec = DISABLED
Tue Oct 31 09:11:48 2017 us=261696   ifconfig_nowarn = DISABLED
Tue Oct 31 09:11:48 2017 us=261855   ifconfig_ipv6_local = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=262013   ifconfig_ipv6_netbits = 0
Tue Oct 31 09:11:48 2017 us=262168   ifconfig_ipv6_remote = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=262327   shaper = 0
Tue Oct 31 09:11:48 2017 us=262592   tun_mtu = 1500
Tue Oct 31 09:11:48 2017 us=262769   tun_mtu_defined = ENABLED
Tue Oct 31 09:11:48 2017 us=263142   link_mtu = 1500
Tue Oct 31 09:11:48 2017 us=263353   link_mtu_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=263519   tun_mtu_extra = 0
Tue Oct 31 09:11:48 2017 us=263680   tun_mtu_extra_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=263846   fragment = 0
Tue Oct 31 09:11:48 2017 us=264004   mtu_discover_type = -1
Tue Oct 31 09:11:48 2017 us=264160   mtu_test = 0
Tue Oct 31 09:11:48 2017 us=264319   mlock = DISABLED
Tue Oct 31 09:11:48 2017 us=264476   keepalive_ping = 10
Tue Oct 31 09:11:48 2017 us=264634   keepalive_timeout = 120
Tue Oct 31 09:11:48 2017 us=264795   inactivity_timeout = 0
Tue Oct 31 09:11:48 2017 us=264951   ping_send_timeout = 10
Tue Oct 31 09:11:48 2017 us=265107   ping_rec_timeout = 240
Tue Oct 31 09:11:48 2017 us=265264   ping_rec_timeout_action = 2
Tue Oct 31 09:11:48 2017 us=265419   ping_timer_remote = DISABLED
Tue Oct 31 09:11:48 2017 us=265578   remap_sigusr1 = 0
Tue Oct 31 09:11:48 2017 us=265738   explicit_exit_notification = 0
Tue Oct 31 09:11:48 2017 us=265894   persist_tun = ENABLED
Tue Oct 31 09:11:48 2017 us=266053   persist_local_ip = DISABLED
Tue Oct 31 09:11:48 2017 us=266217   persist_remote_ip = DISABLED
Tue Oct 31 09:11:48 2017 us=266374   persist_key = ENABLED
Tue Oct 31 09:11:48 2017 us=266533   mssfix = 1450
Tue Oct 31 09:11:48 2017 us=266688   passtos = DISABLED
Tue Oct 31 09:11:48 2017 us=266850   resolve_retry_seconds = 1000000000
Tue Oct 31 09:11:48 2017 us=267103   username = 'nobody'
Tue Oct 31 09:11:48 2017 us=267271   groupname = 'nogroup'
Tue Oct 31 09:11:48 2017 us=267429   chroot_dir = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=267590   cd_dir = '/etc/openvpn'
Tue Oct 31 09:11:48 2017 us=267751   writepid = '/var/run/openvpn.server.pid'
Tue Oct 31 09:11:48 2017 us=267908   up_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=268064   down_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=268224   down_pre = DISABLED
Tue Oct 31 09:11:48 2017 us=268380   up_restart = DISABLED
Tue Oct 31 09:11:48 2017 us=268537   up_delay = DISABLED
Tue Oct 31 09:11:48 2017 us=268695   daemon = ENABLED
Tue Oct 31 09:11:48 2017 us=268852   inetd = 0
Tue Oct 31 09:11:48 2017 us=269061   log = ENABLED
Tue Oct 31 09:11:48 2017 us=269276   suppress_timestamps = DISABLED
Tue Oct 31 09:11:48 2017 us=269437   nice = 0
Tue Oct 31 09:11:48 2017 us=269599   verbosity = 4
Tue Oct 31 09:11:48 2017 us=269755   mute = 0
Tue Oct 31 09:11:48 2017 us=269912   gremlin = 0
Tue Oct 31 09:11:48 2017 us=270070   status_file = '/var/log/openvpn-status.log'
Tue Oct 31 09:11:48 2017 us=270228   status_file_version = 1
Tue Oct 31 09:11:48 2017 us=270388   status_file_update_freq = 20
Tue Oct 31 09:11:48 2017 us=270545   occ = ENABLED
Tue Oct 31 09:11:48 2017 us=270708   rcvbuf = 65536
Tue Oct 31 09:11:48 2017 us=270866   sndbuf = 65536
Tue Oct 31 09:11:48 2017 us=271023   sockflags = 0
Tue Oct 31 09:11:48 2017 us=271180   fast_io = DISABLED
Tue Oct 31 09:11:48 2017 us=271338   lzo = 7
Tue Oct 31 09:11:48 2017 us=271493   route_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=271651   route_default_gateway = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=271811   route_default_metric = 0
Tue Oct 31 09:11:48 2017 us=271971   route_noexec = DISABLED
Tue Oct 31 09:11:48 2017 us=272129   route_delay = 0
Tue Oct 31 09:11:48 2017 us=272293   route_delay_window = 30
Tue Oct 31 09:11:48 2017 us=272456   route_delay_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=272618   route_nopull = DISABLED
Tue Oct 31 09:11:48 2017 us=272780   route_gateway_via_dhcp = DISABLED
Tue Oct 31 09:11:48 2017 us=273037   max_routes = 100
Tue Oct 31 09:11:48 2017 us=273239   allow_pull_fqdn = DISABLED
Tue Oct 31 09:11:48 2017 us=273409   route 10.8.0.0/255.255.255.0/nil/nil
Tue Oct 31 09:11:48 2017 us=273578   management_addr = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=273741   management_port = 0
Tue Oct 31 09:11:48 2017 us=273898   management_user_pass = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=274059   management_log_history_cache = 250
Tue Oct 31 09:11:48 2017 us=274227   management_echo_buffer_size = 100
Tue Oct 31 09:11:48 2017 us=274384   management_write_peer_info_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=274547   management_client_user = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=274711   management_client_group = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=274873   management_flags = 0
Tue Oct 31 09:11:48 2017 us=275032   shared_secret_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=275198   key_direction = 0
Tue Oct 31 09:11:48 2017 us=275358   ciphername_defined = ENABLED
Tue Oct 31 09:11:48 2017 us=275520   ciphername = 'AES-128-CBC'
Tue Oct 31 09:11:48 2017 us=275680   authname_defined = ENABLED
Tue Oct 31 09:11:48 2017 us=275844   authname = 'SHA1'
Tue Oct 31 09:11:48 2017 us=276004   prng_hash = 'SHA1'
Tue Oct 31 09:11:48 2017 us=276168   prng_nonce_secret_len = 16
Tue Oct 31 09:11:48 2017 us=276331   keysize = 0
Tue Oct 31 09:11:48 2017 us=276490   engine = DISABLED
Tue Oct 31 09:11:48 2017 us=276650   replay = ENABLED
Tue Oct 31 09:11:48 2017 us=276812   mute_replay_warnings = DISABLED
Tue Oct 31 09:11:48 2017 us=277023   replay_window = 64
Tue Oct 31 09:11:48 2017 us=277243   replay_time = 15
Tue Oct 31 09:11:48 2017 us=277409   packet_id_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=277572   use_iv = ENABLED
Tue Oct 31 09:11:48 2017 us=277734   test_crypto = DISABLED
Tue Oct 31 09:11:48 2017 us=277893   tls_server = ENABLED
Tue Oct 31 09:11:48 2017 us=278051   tls_client = DISABLED
Tue Oct 31 09:11:48 2017 us=278217   key_method = 2
Tue Oct 31 09:11:48 2017 us=278460   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Tue Oct 31 09:11:48 2017 us=278629   ca_path = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=278794   dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Tue Oct 31 09:11:48 2017 us=278959   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Tue Oct 31 09:11:48 2017 us=279125   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Tue Oct 31 09:11:48 2017 us=279287   pkcs12_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=279451   cipher_list = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=279610   tls_verify = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=279770   tls_export_cert = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=279931   tls_remote = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=280095   crl_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=280257   ns_cert_type = 0
Tue Oct 31 09:11:48 2017 us=280418   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=280583   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=280743   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=280902   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281066   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281228   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281387   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281546   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281708   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=281870   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282031   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282191   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282356   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282517   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282677   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=282840   remote_cert_ku[i] = 0
Tue Oct 31 09:11:48 2017 us=283120   remote_cert_eku = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=283293   tls_timeout = 2
Tue Oct 31 09:11:48 2017 us=283459   renegotiate_bytes = 0
Tue Oct 31 09:11:48 2017 us=283619   renegotiate_packets = 0
Tue Oct 31 09:11:48 2017 us=283782   renegotiate_seconds = 3600
Tue Oct 31 09:11:48 2017 us=283948   handshake_window = 60
Tue Oct 31 09:11:48 2017 us=284110   transition_window = 3600
Tue Oct 31 09:11:48 2017 us=284266   single_session = DISABLED
Tue Oct 31 09:11:48 2017 us=284707   push_peer_info = DISABLED
Tue Oct 31 09:11:48 2017 us=284927   tls_exit = DISABLED
Tue Oct 31 09:11:48 2017 us=285205   tls_auth_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=285381   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=285545   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=285714   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=285877   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286042   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286209   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286373   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286536   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286702   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=286865   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287026   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287190   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287354   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287517   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287683   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=287848   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:11:48 2017 us=288017   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=288182   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=288353   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=288519   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=288685   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=288949   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289128   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289297   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289467   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289635   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289804   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=289975   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=290141   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=290306   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=290474   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=290640   pkcs11_private_mode = 00000000
Tue Oct 31 09:11:48 2017 us=290799   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=290965   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291127   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291288   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291451   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291612   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291776   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=291938   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=292104   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=292266   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=292428   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=292591   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=292751   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=293044   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=293295   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=293465   pkcs11_cert_private = DISABLED
Tue Oct 31 09:11:48 2017 us=293630   pkcs11_pin_cache_period = -1
Tue Oct 31 09:11:48 2017 us=293788   pkcs11_id = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=293952   pkcs11_id_management = DISABLED
Tue Oct 31 09:11:48 2017 us=294409   server_network = 10.8.0.0
Tue Oct 31 09:11:48 2017 us=294615   server_netmask = 255.255.255.0
Tue Oct 31 09:11:48 2017 us=294795   server_network_ipv6 = ::
Tue Oct 31 09:11:48 2017 us=294967   server_netbits_ipv6 = 0
Tue Oct 31 09:11:48 2017 us=295145   server_bridge_ip = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=295324   server_bridge_netmask = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=295505   server_bridge_pool_start = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=295708   server_bridge_pool_end = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=295880   push_entry = 'redirect-gateway def1 bypass-dhcp'
Tue Oct 31 09:11:48 2017 us=296049   push_entry = 'dhcp-option DNS 208.67.222.222'
Tue Oct 31 09:11:48 2017 us=296218   push_entry = 'dhcp-option DNS 208.67.220.220'
Tue Oct 31 09:11:48 2017 us=296380   push_entry = 'route 10.8.0.0 255.255.255.0'
Tue Oct 31 09:11:48 2017 us=296542   push_entry = 'topology net30'
Tue Oct 31 09:11:48 2017 us=296705   push_entry = 'ping 10'
Tue Oct 31 09:11:48 2017 us=296865   push_entry = 'ping-restart 120'
Tue Oct 31 09:11:48 2017 us=297025   ifconfig_pool_defined = ENABLED
Tue Oct 31 09:11:48 2017 us=297207   ifconfig_pool_start = 10.8.0.4
Tue Oct 31 09:11:48 2017 us=297386   ifconfig_pool_end = 10.8.0.251
Tue Oct 31 09:11:48 2017 us=297563   ifconfig_pool_netmask = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=297729   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=297891   ifconfig_pool_persist_refresh_freq = 600
Tue Oct 31 09:11:48 2017 us=298052   ifconfig_ipv6_pool_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=298231   ifconfig_ipv6_pool_base = ::
Tue Oct 31 09:11:48 2017 us=298396   ifconfig_ipv6_pool_netbits = 0
Tue Oct 31 09:11:48 2017 us=298556   n_bcast_buf = 256
Tue Oct 31 09:11:48 2017 us=298720   tcp_queue_limit = 64
Tue Oct 31 09:11:48 2017 us=298881   real_hash_size = 256
Tue Oct 31 09:11:48 2017 us=299044   virtual_hash_size = 256
Tue Oct 31 09:11:48 2017 us=299210   client_connect_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=299371   learn_address_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=299623   client_disconnect_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=299793   client_config_dir = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=299958   ccd_exclusive = DISABLED
Tue Oct 31 09:11:48 2017 us=300116   tmp_dir = '/tmp'
Tue Oct 31 09:11:48 2017 us=300275   push_ifconfig_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=300455   push_ifconfig_local = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=300632   push_ifconfig_remote_netmask = 0.0.0.0
Tue Oct 31 09:11:48 2017 us=300795   push_ifconfig_ipv6_defined = DISABLED
Tue Oct 31 09:11:48 2017 us=301031   push_ifconfig_ipv6_local = ::/0
Tue Oct 31 09:11:48 2017 us=301264   push_ifconfig_ipv6_remote = ::
Tue Oct 31 09:11:48 2017 us=301431   enable_c2c = ENABLED
Tue Oct 31 09:11:48 2017 us=301595   duplicate_cn = ENABLED
Tue Oct 31 09:11:48 2017 us=301753   cf_max = 0
Tue Oct 31 09:11:48 2017 us=301912   cf_per = 0
Tue Oct 31 09:11:48 2017 us=302077   max_clients = 1024
Tue Oct 31 09:11:48 2017 us=302238   max_routes_per_client = 256
Tue Oct 31 09:11:48 2017 us=302398   auth_user_pass_verify_script = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=302560   auth_user_pass_verify_script_via_file = DISABLED
Tue Oct 31 09:11:48 2017 us=302722   ssl_flags = 0
Tue Oct 31 09:11:48 2017 us=302883   port_share_host = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=303177   port_share_port = 0
Tue Oct 31 09:11:48 2017 us=303345   client = DISABLED
Tue Oct 31 09:11:48 2017 us=303505   pull = DISABLED
Tue Oct 31 09:11:48 2017 us=303666   auth_user_pass_file = '[UNDEF]'
Tue Oct 31 09:11:48 2017 us=303843 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 22 2017
Tue Oct 31 09:11:48 2017 us=305460 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Oct 31 09:11:48 2017 us=309680 Diffie-Hellman initialized with 1024 bit key
Tue Oct 31 09:11:48 2017 us=320804 TLS-Auth MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Oct 31 09:11:48 2017 us=321169 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Oct 31 09:11:48 2017 us=322619 ROUTE default_gateway=192.168.10.1
Tue Oct 31 09:11:48 2017 us=334512 TUN/TAP device tun0 opened
Tue Oct 31 09:11:48 2017 us=335143 TUN/TAP TX queue length set to 100
Tue Oct 31 09:11:48 2017 us=335418 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 31 09:11:48 2017 us=335722 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Tue Oct 31 09:11:48 2017 us=365397 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Tue Oct 31 09:11:48 2017 us=386370 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Oct 31 09:11:48 2017 us=409761 GID set to nogroup
Tue Oct 31 09:11:48 2017 us=410356 UID set to nobody
Tue Oct 31 09:11:48 2017 us=410709 UDPv4 link local (bound): [AF_INET]192.168.10.150:1194
Tue Oct 31 09:11:48 2017 us=410894 UDPv4 link remote: [undef]
Tue Oct 31 09:11:48 2017 us=411081 MULTI: multi_init called, r=256 v=256
Tue Oct 31 09:11:48 2017 us=411821 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Tue Oct 31 09:11:48 2017 us=412211 Initialization Sequence Completed
Tue Oct 31 09:12:07 2017 us=734543 MULTI: multi_create_instance called
Tue Oct 31 09:12:07 2017 us=735138 192.168.10.3:43351 Re-using SSL/TLS context
Tue Oct 31 09:12:07 2017 us=735524 192.168.10.3:43351 LZO compression initialized
Tue Oct 31 09:12:07 2017 us=737799 192.168.10.3:43351 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Oct 31 09:12:07 2017 us=738078 192.168.10.3:43351 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Oct 31 09:12:07 2017 us=738535 192.168.10.3:43351 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Oct 31 09:12:07 2017 us=738715 192.168.10.3:43351 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Oct 31 09:12:07 2017 us=739143 192.168.10.3:43351 Local Options hash (VER=V4): '691e95c7'
Tue Oct 31 09:12:07 2017 us=739515 192.168.10.3:43351 Expected Remote Options hash (VER=V4): '66096c33'
Tue Oct 31 09:12:07 2017 us=739914 192.168.10.3:43351 TLS: Initial packet from [AF_INET]192.168.10.3:43351, sid=66987cb7 a4eecf0c
Tue Oct 31 09:12:07 2017 us=877804 192.168.10.3:43351 VERIFY OK: depth=1, /C=UK/ST=LO/L=London/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Tue Oct 31 09:12:07 2017 us=880062 192.168.10.3:43351 VERIFY OK: depth=0, /C=UK/ST=LO/L=London/O=Fort-Funston/OU=changeme/CN=user1/name=changeme/emailAddress=mail@host.domain
Tue Oct 31 09:12:07 2017 us=943441 192.168.10.3:43351 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 09:12:07 2017 us=943791 192.168.10.3:43351 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 09:12:07 2017 us=943997 192.168.10.3:43351 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 09:12:07 2017 us=944209 192.168.10.3:43351 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 09:12:07 2017 us=947419 192.168.10.3:43351 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Oct 31 09:12:07 2017 us=947827 192.168.10.3:43351 [user1] Peer Connection Initiated with [AF_INET]192.168.10.3:43351
Tue Oct 31 09:12:07 2017 us=948248 user1/192.168.10.3:43351 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=4817:f0be:b02d:5f7f:85b:647f:8c1c:3980
Tue Oct 31 09:12:07 2017 us=948841 user1/192.168.10.3:43351 MULTI: Learn: 10.8.0.6 -> user1/192.168.10.3:43351
Tue Oct 31 09:12:07 2017 us=949063 user1/192.168.10.3:43351 MULTI: primary virtual IP for user1/192.168.10.3:43351: 10.8.0.6
Tue Oct 31 09:12:10 2017 us=349600 user1/192.168.10.3:43351 PUSH: Received control message: 'PUSH_REQUEST'
Tue Oct 31 09:12:10 2017 us=349856 user1/192.168.10.3:43351 send_push_reply(): safe_cap=960
Tue Oct 31 09:12:10 2017 us=350427 user1/192.168.10.3:43351 SENT CONTROL [user1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Tue Oct 31 09:12:11 2017 us=585320 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:11 2017 us=797530 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:12 2017 us=221152 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:13 2017 us=68972 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:14 2017 us=768863 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:16 2017 us=383007 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:18 2017 us=168579 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:24 2017 us=968149 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:12:38 2017 us=583076 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped
Tue Oct 31 09:13:05 2017 us=780843 user1/192.168.10.3:43351 MULTI: bad source address from client [192.168.10.3], packet dropped

Client.log

Tue Oct 31 09:12:03 2017 us=591552 Current Parameter Settings:
Tue Oct 31 09:12:03 2017 us=591732   config = '/etc/openvpn/client.conf'
Tue Oct 31 09:12:03 2017 us=591746   mode = 0
Tue Oct 31 09:12:03 2017 us=591760   persist_config = DISABLED
Tue Oct 31 09:12:03 2017 us=591770   persist_mode = 1
Tue Oct 31 09:12:03 2017 us=591779   show_ciphers = DISABLED
Tue Oct 31 09:12:03 2017 us=591789   show_digests = DISABLED
Tue Oct 31 09:12:03 2017 us=591802   show_engines = DISABLED
Tue Oct 31 09:12:03 2017 us=591811   genkey = DISABLED
Tue Oct 31 09:12:03 2017 us=591821   key_pass_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=591896   show_tls_ciphers = DISABLED
Tue Oct 31 09:12:03 2017 us=591913 Connection profiles [default]:
Tue Oct 31 09:12:03 2017 us=591925   proto = udp
Tue Oct 31 09:12:03 2017 us=591934   local = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=591944   local_port = 0
Tue Oct 31 09:12:03 2017 us=591953   remote = '192.168.10.150'
Tue Oct 31 09:12:03 2017 us=591963   remote_port = 1194
Tue Oct 31 09:12:03 2017 us=591973   remote_float = DISABLED
Tue Oct 31 09:12:03 2017 us=591982   bind_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=591992   bind_local = DISABLED
Tue Oct 31 09:12:03 2017 us=592002   connect_retry_seconds = 5
Tue Oct 31 09:12:03 2017 us=592010   connect_timeout = 10
Tue Oct 31 09:12:03 2017 us=592020   connect_retry_max = 0
Tue Oct 31 09:12:03 2017 us=592030   socks_proxy_server = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592039   socks_proxy_port = 0
Tue Oct 31 09:12:03 2017 us=592048   socks_proxy_retry = DISABLED
Tue Oct 31 09:12:03 2017 us=592057   tun_mtu = 1500
Tue Oct 31 09:12:03 2017 us=592066   tun_mtu_defined = ENABLED
Tue Oct 31 09:12:03 2017 us=592075   link_mtu = 1500
Tue Oct 31 09:12:03 2017 us=592084   link_mtu_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=592093   tun_mtu_extra = 0
Tue Oct 31 09:12:03 2017 us=592102   tun_mtu_extra_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=592111   mtu_discover_type = -1
Tue Oct 31 09:12:03 2017 us=592120   fragment = 0
Tue Oct 31 09:12:03 2017 us=592130   mssfix = 1450
Tue Oct 31 09:12:03 2017 us=592139   explicit_exit_notification = 0
Tue Oct 31 09:12:03 2017 us=592149 Connection profiles END
Tue Oct 31 09:12:03 2017 us=592158   remote_random = DISABLED
Tue Oct 31 09:12:03 2017 us=592167   ipchange = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592177   dev = 'tun'
Tue Oct 31 09:12:03 2017 us=592185   dev_type = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592194   dev_node = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592203   lladdr = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592212   topology = 1
Tue Oct 31 09:12:03 2017 us=592221   tun_ipv6 = DISABLED
Tue Oct 31 09:12:03 2017 us=592230   ifconfig_local = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592239   ifconfig_remote_netmask = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592248   ifconfig_noexec = DISABLED
Tue Oct 31 09:12:03 2017 us=592257   ifconfig_nowarn = DISABLED
Tue Oct 31 09:12:03 2017 us=592267   ifconfig_ipv6_local = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592276   ifconfig_ipv6_netbits = 0
Tue Oct 31 09:12:03 2017 us=592287   ifconfig_ipv6_remote = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592295   shaper = 0
Tue Oct 31 09:12:03 2017 us=592304   mtu_test = 0
Tue Oct 31 09:12:03 2017 us=592313   mlock = DISABLED
Tue Oct 31 09:12:03 2017 us=592322   keepalive_ping = 0
Tue Oct 31 09:12:03 2017 us=592331   keepalive_timeout = 0
Tue Oct 31 09:12:03 2017 us=592340   inactivity_timeout = 0
Tue Oct 31 09:12:03 2017 us=592350   ping_send_timeout = 0
Tue Oct 31 09:12:03 2017 us=592359   ping_rec_timeout = 0
Tue Oct 31 09:12:03 2017 us=592368   ping_rec_timeout_action = 0
Tue Oct 31 09:12:03 2017 us=592377   ping_timer_remote = DISABLED
Tue Oct 31 09:12:03 2017 us=592387   remap_sigusr1 = 0
Tue Oct 31 09:12:03 2017 us=592396   persist_tun = ENABLED
Tue Oct 31 09:12:03 2017 us=592405   persist_local_ip = DISABLED
Tue Oct 31 09:12:03 2017 us=592415   persist_remote_ip = DISABLED
Tue Oct 31 09:12:03 2017 us=592424   persist_key = ENABLED
Tue Oct 31 09:12:03 2017 us=592434   passtos = DISABLED
Tue Oct 31 09:12:03 2017 us=592444   resolve_retry_seconds = 1000000000
Tue Oct 31 09:12:03 2017 us=592464   username = 'nobody'
Tue Oct 31 09:12:03 2017 us=592473   groupname = 'nogroup'
Tue Oct 31 09:12:03 2017 us=592482   chroot_dir = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592491   cd_dir = '/etc/openvpn'
Tue Oct 31 09:12:03 2017 us=592500   writepid = '/run/openvpn/client.pid'
Tue Oct 31 09:12:03 2017 us=592510   up_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592520   down_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592529   down_pre = DISABLED
Tue Oct 31 09:12:03 2017 us=592538   up_restart = DISABLED
Tue Oct 31 09:12:03 2017 us=592552   up_delay = DISABLED
Tue Oct 31 09:12:03 2017 us=592561   daemon = ENABLED
Tue Oct 31 09:12:03 2017 us=592570   inetd = 0
Tue Oct 31 09:12:03 2017 us=592579   log = ENABLED
Tue Oct 31 09:12:03 2017 us=592588   suppress_timestamps = DISABLED
Tue Oct 31 09:12:03 2017 us=592597   nice = 0
Tue Oct 31 09:12:03 2017 us=592606   verbosity = 4
Tue Oct 31 09:12:03 2017 us=592615   mute = 0
Tue Oct 31 09:12:03 2017 us=592623   gremlin = 0
Tue Oct 31 09:12:03 2017 us=592632   status_file = '/run/openvpn/client.status'
Tue Oct 31 09:12:03 2017 us=592642   status_file_version = 1
Tue Oct 31 09:12:03 2017 us=592651   status_file_update_freq = 10
Tue Oct 31 09:12:03 2017 us=592660   occ = ENABLED
Tue Oct 31 09:12:03 2017 us=592669   rcvbuf = 65536
Tue Oct 31 09:12:03 2017 us=592678   sndbuf = 65536
Tue Oct 31 09:12:03 2017 us=592687   mark = 0
Tue Oct 31 09:12:03 2017 us=592696   sockflags = 0
Tue Oct 31 09:12:03 2017 us=592705   fast_io = DISABLED
Tue Oct 31 09:12:03 2017 us=592714   lzo = 7
Tue Oct 31 09:12:03 2017 us=592723   route_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592734   route_default_gateway = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592743   route_default_metric = 0
Tue Oct 31 09:12:03 2017 us=592753   route_noexec = DISABLED
Tue Oct 31 09:12:03 2017 us=592762   route_delay = 0
Tue Oct 31 09:12:03 2017 us=592772   route_delay_window = 30
Tue Oct 31 09:12:03 2017 us=592782   route_delay_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=592791   route_nopull = DISABLED
Tue Oct 31 09:12:03 2017 us=592801   route_gateway_via_dhcp = DISABLED
Tue Oct 31 09:12:03 2017 us=592810   max_routes = 100
Tue Oct 31 09:12:03 2017 us=592819   allow_pull_fqdn = DISABLED
Tue Oct 31 09:12:03 2017 us=592830   management_addr = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592839   management_port = 0
Tue Oct 31 09:12:03 2017 us=592848   management_user_pass = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592857   management_log_history_cache = 250
Tue Oct 31 09:12:03 2017 us=592867   management_echo_buffer_size = 100
Tue Oct 31 09:12:03 2017 us=592876   management_write_peer_info_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592885   management_client_user = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592895   management_client_group = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592904   management_flags = 0
Tue Oct 31 09:12:03 2017 us=592913   shared_secret_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=592922   key_direction = 0
Tue Oct 31 09:12:03 2017 us=592931   ciphername_defined = ENABLED
Tue Oct 31 09:12:03 2017 us=592941   ciphername = 'AES-128-CBC'
Tue Oct 31 09:12:03 2017 us=592950   authname_defined = ENABLED
Tue Oct 31 09:12:03 2017 us=592960   authname = 'SHA1'
Tue Oct 31 09:12:03 2017 us=592969   prng_hash = 'SHA1'
Tue Oct 31 09:12:03 2017 us=592979   prng_nonce_secret_len = 16
Tue Oct 31 09:12:03 2017 us=592988   keysize = 0
Tue Oct 31 09:12:03 2017 us=592997   engine = DISABLED
Tue Oct 31 09:12:03 2017 us=593007   replay = ENABLED
Tue Oct 31 09:12:03 2017 us=593016   mute_replay_warnings = DISABLED
Tue Oct 31 09:12:03 2017 us=593026   replay_window = 64
Tue Oct 31 09:12:03 2017 us=593035   replay_time = 15
Tue Oct 31 09:12:03 2017 us=593044   packet_id_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593053   use_iv = ENABLED
Tue Oct 31 09:12:03 2017 us=593063   test_crypto = DISABLED
Tue Oct 31 09:12:03 2017 us=593073   tls_server = DISABLED
Tue Oct 31 09:12:03 2017 us=593081   tls_client = ENABLED
Tue Oct 31 09:12:03 2017 us=593090   key_method = 2
Tue Oct 31 09:12:03 2017 us=593100   ca_file = '/home/media/keys1/ca.crt'
Tue Oct 31 09:12:03 2017 us=593118   ca_path = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593128   dh_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593137   cert_file = '/home/media/keys1/user1.crt'
Tue Oct 31 09:12:03 2017 us=593147   priv_key_file = '/home/media/keys1/user1.key'
Tue Oct 31 09:12:03 2017 us=593157   pkcs12_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593166   cipher_list = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593175   tls_verify = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593185   tls_export_cert = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593194   verify_x509_type = 0
Tue Oct 31 09:12:03 2017 us=593203   verify_x509_name = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593212   crl_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593222   ns_cert_type = 1
Tue Oct 31 09:12:03 2017 us=593231   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593241   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593249   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593258   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593267   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593275   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593284   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593292   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593301   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593310   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593318   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593327   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593335   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593344   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593353   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593361   remote_cert_ku[i] = 0
Tue Oct 31 09:12:03 2017 us=593371   remote_cert_eku = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593381   ssl_flags = 0
Tue Oct 31 09:12:03 2017 us=593389   tls_timeout = 2
Tue Oct 31 09:12:03 2017 us=593399   renegotiate_bytes = 0
Tue Oct 31 09:12:03 2017 us=593407   renegotiate_packets = 0
Tue Oct 31 09:12:03 2017 us=593416   renegotiate_seconds = 3600
Tue Oct 31 09:12:03 2017 us=593426   handshake_window = 60
Tue Oct 31 09:12:03 2017 us=593434   transition_window = 3600
Tue Oct 31 09:12:03 2017 us=593444   single_session = DISABLED
Tue Oct 31 09:12:03 2017 us=593453   push_peer_info = DISABLED
Tue Oct 31 09:12:03 2017 us=593462   tls_exit = DISABLED
Tue Oct 31 09:12:03 2017 us=593471   tls_auth_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593481   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593490   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593500   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593508   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593517   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593526   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593535   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593543   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593552   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593561   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593569   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593578   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593587   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593596   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593605   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593613   pkcs11_protected_authentication = DISABLED
Tue Oct 31 09:12:03 2017 us=593624   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593633   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593642   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593651   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593660   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593676   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593685   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593694   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593703   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593712   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593721   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593729   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593738   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593747   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593756   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593765   pkcs11_private_mode = 00000000
Tue Oct 31 09:12:03 2017 us=593775   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593784   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593792   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593801   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593809   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593818   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593827   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593836   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593845   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593854   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593862   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593871   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593880   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593888   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593897   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593906   pkcs11_cert_private = DISABLED
Tue Oct 31 09:12:03 2017 us=593915   pkcs11_pin_cache_period = -1
Tue Oct 31 09:12:03 2017 us=593924   pkcs11_id = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=593932   pkcs11_id_management = DISABLED
Tue Oct 31 09:12:03 2017 us=593949   server_network = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=593960   server_netmask = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=593975   server_network_ipv6 = ::
Tue Oct 31 09:12:03 2017 us=593984   server_netbits_ipv6 = 0
Tue Oct 31 09:12:03 2017 us=593994   server_bridge_ip = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594004   server_bridge_netmask = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594014   server_bridge_pool_start = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594023   server_bridge_pool_end = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594033   push_entry = 'dhcp-option DNS 208.67.222.222'
Tue Oct 31 09:12:03 2017 us=594042   push_entry = 'dhcp-option DNS 208.67.220.220'
Tue Oct 31 09:12:03 2017 us=594051   ifconfig_pool_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=594060   ifconfig_pool_start = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594070   ifconfig_pool_end = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594080   ifconfig_pool_netmask = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594089   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594098   ifconfig_pool_persist_refresh_freq = 600
Tue Oct 31 09:12:03 2017 us=594107   ifconfig_ipv6_pool_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=594116   ifconfig_ipv6_pool_base = ::
Tue Oct 31 09:12:03 2017 us=594125   ifconfig_ipv6_pool_netbits = 0
Tue Oct 31 09:12:03 2017 us=594134   n_bcast_buf = 256
Tue Oct 31 09:12:03 2017 us=594143   tcp_queue_limit = 64
Tue Oct 31 09:12:03 2017 us=594152   real_hash_size = 256
Tue Oct 31 09:12:03 2017 us=594160   virtual_hash_size = 256
Tue Oct 31 09:12:03 2017 us=594169   client_connect_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594178   learn_address_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594186   client_disconnect_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594195   client_config_dir = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594204   ccd_exclusive = DISABLED
Tue Oct 31 09:12:03 2017 us=594212   tmp_dir = '/tmp'
Tue Oct 31 09:12:03 2017 us=594221   push_ifconfig_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=594231   push_ifconfig_local = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594245   push_ifconfig_remote_netmask = 0.0.0.0
Tue Oct 31 09:12:03 2017 us=594255   push_ifconfig_ipv6_defined = DISABLED
Tue Oct 31 09:12:03 2017 us=594264   push_ifconfig_ipv6_local = ::/0
Tue Oct 31 09:12:03 2017 us=594274   push_ifconfig_ipv6_remote = ::
Tue Oct 31 09:12:03 2017 us=594282   enable_c2c = DISABLED
Tue Oct 31 09:12:03 2017 us=594291   duplicate_cn = DISABLED
Tue Oct 31 09:12:03 2017 us=594300   cf_max = 0
Tue Oct 31 09:12:03 2017 us=594309   cf_per = 0
Tue Oct 31 09:12:03 2017 us=594317   max_clients = 1024
Tue Oct 31 09:12:03 2017 us=594326   max_routes_per_client = 256
Tue Oct 31 09:12:03 2017 us=594335   auth_user_pass_verify_script = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594344   auth_user_pass_verify_script_via_file = DISABLED
Tue Oct 31 09:12:03 2017 us=594353   port_share_host = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594362   port_share_port = 0
Tue Oct 31 09:12:03 2017 us=594371   client = ENABLED
Tue Oct 31 09:12:03 2017 us=594379   pull = ENABLED
Tue Oct 31 09:12:03 2017 us=594388   auth_user_pass_file = '[UNDEF]'
Tue Oct 31 09:12:03 2017 us=594398 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jun 22 2017
Tue Oct 31 09:12:07 2017 us=768373 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 31 09:12:07 2017 us=779445 LZO compression initialized
Tue Oct 31 09:12:07 2017 us=779546 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Oct 31 09:12:07 2017 us=779589 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Oct 31 09:12:07 2017 us=779617 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Oct 31 09:12:07 2017 us=779639 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Oct 31 09:12:07 2017 us=779649 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Oct 31 09:12:07 2017 us=779670 Local Options hash (VER=V4): '66096c33'
Tue Oct 31 09:12:07 2017 us=779686 Expected Remote Options hash (VER=V4): '691e95c7'
Tue Oct 31 09:12:07 2017 us=780771 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Tue Oct 31 09:12:07 2017 us=780883 UDPv4 link local: [undef]
Tue Oct 31 09:12:07 2017 us=780926 UDPv4 link remote: [AF_INET]192.168.10.150:1194
Tue Oct 31 09:12:07 2017 us=788935 TLS: Initial packet from [AF_INET]192.168.10.150:1194, sid=c8a0058a 5804b28d
Tue Oct 31 09:12:07 2017 us=873767 VERIFY OK: depth=1, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Tue Oct 31 09:12:07 2017 us=874343 VERIFY OK: nsCertType=SERVER
Tue Oct 31 09:12:07 2017 us=874369 VERIFY OK: depth=0, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Tue Oct 31 09:12:07 2017 us=994027 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 09:12:07 2017 us=994124 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 09:12:07 2017 us=994151 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 09:12:07 2017 us=994176 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 09:12:07 2017 us=994275 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Oct 31 09:12:07 2017 us=994326 [server] Peer Connection Initiated with [AF_INET]192.168.10.150:1194
Tue Oct 31 09:12:10 2017 us=394894 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Oct 31 09:12:10 2017 us=400220 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Tue Oct 31 09:12:10 2017 us=400382 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 31 09:12:10 2017 us=400405 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 31 09:12:10 2017 us=400423 OPTIONS IMPORT: route options modified
Tue Oct 31 09:12:10 2017 us=400439 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 31 09:12:10 2017 us=400731 ROUTE_GATEWAY 192.168.10.1/255.255.255.0 IFACE=eth1 HWADDR=00:04:75:ea:5b:05
Tue Oct 31 09:12:10 2017 us=401233 TUN/TAP device tun1 opened
Tue Oct 31 09:12:10 2017 us=401273 TUN/TAP TX queue length set to 100
Tue Oct 31 09:12:10 2017 us=401306 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 31 09:12:10 2017 us=401353 /sbin/ip link set dev tun1 up mtu 1500
Tue Oct 31 09:12:10 2017 us=403783 /sbin/ip addr add dev tun1 local 10.8.0.6 peer 10.8.0.5
Tue Oct 31 09:12:10 2017 us=406477 /sbin/ip route add 192.168.10.150/32 via 192.168.10.1
RTNETLINK answers: File exists
Tue Oct 31 09:12:10 2017 us=408562 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Oct 31 09:12:10 2017 us=408662 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Tue Oct 31 09:12:10 2017 us=410582 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Tue Oct 31 09:12:10 2017 us=412647 /sbin/ip route add 10.8.0.0/24 via 10.8.0.5
Tue Oct 31 09:12:10 2017 us=414655 GID set to nogroup
Tue Oct 31 09:12:10 2017 us=414690 UID set to nobody
Tue Oct 31 09:12:10 2017 us=414702 Initialization Sequence Completed

TinCanTech

coolfi wrote made the changes and still the same

No .. it is not the same.

Also, you are looking at the wrong client log ..

Server log:

coolfi wrote Tue Oct 31 09:12:10 2017 us=350427 user1/192.168.10.3:43351 SENT CONTROL [user1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Client log:

coolfi wrote Mon Oct 30 14:58:56 2017 us=155828 PUSH: Received control message: 'PUSH_REPLY,route 192.168.20.0 255.255.255.255,route 192.168.20.0 255.255.255.255,route 192.168.10.150 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 192.168.20.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.20.6 192.168.20.5'

coolfi

Sorry I should have worded that better, what meant was I am connected to internet with the changes made, but the IP still remains the same as before, with no proxy detected.

The client log you are looking at is old one from Monday, not the one I posted today, anyhow here is new one.

Tue Oct 31 17:50:41 2017 us=597569 Current Parameter Settings:
Tue Oct 31 17:50:41 2017 us=597678   config = '/etc/openvpn/client.conf'
Tue Oct 31 17:50:41 2017 us=597702   mode = 0
Tue Oct 31 17:50:41 2017 us=597721   persist_config = DISABLED
Tue Oct 31 17:50:41 2017 us=597740   persist_mode = 1
Tue Oct 31 17:50:41 2017 us=597757   show_ciphers = DISABLED
Tue Oct 31 17:50:41 2017 us=597774   show_digests = DISABLED
Tue Oct 31 17:50:41 2017 us=597791   show_engines = DISABLED
Tue Oct 31 17:50:41 2017 us=597808   genkey = DISABLED
Tue Oct 31 17:50:41 2017 us=597825   key_pass_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=597842   show_tls_ciphers = DISABLED
Tue Oct 31 17:50:41 2017 us=597859 Connection profiles [default]:
Tue Oct 31 17:50:41 2017 us=597876   proto = udp
Tue Oct 31 17:50:41 2017 us=597892   local = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=597909   local_port = 0
Tue Oct 31 17:50:41 2017 us=597926   remote = '192.168.10.150'
Tue Oct 31 17:50:41 2017 us=597943   remote_port = 1194
Tue Oct 31 17:50:41 2017 us=597960   remote_float = DISABLED
Tue Oct 31 17:50:41 2017 us=597977   bind_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=597993   bind_local = DISABLED
Tue Oct 31 17:50:41 2017 us=598013   connect_retry_seconds = 5
Tue Oct 31 17:50:41 2017 us=598029   connect_timeout = 10
Tue Oct 31 17:50:41 2017 us=598046   connect_retry_max = 0
Tue Oct 31 17:50:41 2017 us=598062   socks_proxy_server = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598079   socks_proxy_port = 0
Tue Oct 31 17:50:41 2017 us=598096   socks_proxy_retry = DISABLED
Tue Oct 31 17:50:41 2017 us=598112   tun_mtu = 1500
Tue Oct 31 17:50:41 2017 us=598129   tun_mtu_defined = ENABLED
Tue Oct 31 17:50:41 2017 us=598148   link_mtu = 1500
Tue Oct 31 17:50:41 2017 us=598165   link_mtu_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=598181   tun_mtu_extra = 0
Tue Oct 31 17:50:41 2017 us=598198   tun_mtu_extra_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=598215   mtu_discover_type = -1
Tue Oct 31 17:50:41 2017 us=598231   fragment = 0
Tue Oct 31 17:50:41 2017 us=598248   mssfix = 1450
Tue Oct 31 17:50:41 2017 us=598265   explicit_exit_notification = 0
Tue Oct 31 17:50:41 2017 us=598281 Connection profiles END
Tue Oct 31 17:50:41 2017 us=598298   remote_random = DISABLED
Tue Oct 31 17:50:41 2017 us=598315   ipchange = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598331   dev = 'tun'
Tue Oct 31 17:50:41 2017 us=598348   dev_type = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598364   dev_node = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598381   lladdr = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598400   topology = 1
Tue Oct 31 17:50:41 2017 us=598416   tun_ipv6 = DISABLED
Tue Oct 31 17:50:41 2017 us=598433   ifconfig_local = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598450   ifconfig_remote_netmask = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598467   ifconfig_noexec = DISABLED
Tue Oct 31 17:50:41 2017 us=598483   ifconfig_nowarn = DISABLED
Tue Oct 31 17:50:41 2017 us=598500   ifconfig_ipv6_local = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598519   ifconfig_ipv6_netbits = 0
Tue Oct 31 17:50:41 2017 us=598535   ifconfig_ipv6_remote = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598552   shaper = 0
Tue Oct 31 17:50:41 2017 us=598569   mtu_test = 0
Tue Oct 31 17:50:41 2017 us=598585   mlock = DISABLED
Tue Oct 31 17:50:41 2017 us=598602   keepalive_ping = 0
Tue Oct 31 17:50:41 2017 us=598618   keepalive_timeout = 0
Tue Oct 31 17:50:41 2017 us=598635   inactivity_timeout = 0
Tue Oct 31 17:50:41 2017 us=598652   ping_send_timeout = 0
Tue Oct 31 17:50:41 2017 us=598668   ping_rec_timeout = 0
Tue Oct 31 17:50:41 2017 us=598685   ping_rec_timeout_action = 0
Tue Oct 31 17:50:41 2017 us=598701   ping_timer_remote = DISABLED
Tue Oct 31 17:50:41 2017 us=598718   remap_sigusr1 = 0
Tue Oct 31 17:50:41 2017 us=598734   persist_tun = ENABLED
Tue Oct 31 17:50:41 2017 us=598751   persist_local_ip = DISABLED
Tue Oct 31 17:50:41 2017 us=598768   persist_remote_ip = DISABLED
Tue Oct 31 17:50:41 2017 us=598784   persist_key = ENABLED
Tue Oct 31 17:50:41 2017 us=598801   passtos = DISABLED
Tue Oct 31 17:50:41 2017 us=598818   resolve_retry_seconds = 1000000000
Tue Oct 31 17:50:41 2017 us=598844   username = 'nobody'
Tue Oct 31 17:50:41 2017 us=598861   groupname = 'nogroup'
Tue Oct 31 17:50:41 2017 us=598879   chroot_dir = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598896   cd_dir = '/etc/openvpn'
Tue Oct 31 17:50:41 2017 us=598913   writepid = '/run/openvpn/client.pid'
Tue Oct 31 17:50:41 2017 us=598930   up_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598946   down_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=598963   down_pre = DISABLED
Tue Oct 31 17:50:41 2017 us=598979   up_restart = DISABLED
Tue Oct 31 17:50:41 2017 us=599000   up_delay = DISABLED
Tue Oct 31 17:50:41 2017 us=599018   daemon = ENABLED
Tue Oct 31 17:50:41 2017 us=599034   inetd = 0
Tue Oct 31 17:50:41 2017 us=599051   log = ENABLED
Tue Oct 31 17:50:41 2017 us=599068   suppress_timestamps = DISABLED
Tue Oct 31 17:50:41 2017 us=599084   nice = 0
Tue Oct 31 17:50:41 2017 us=599101   verbosity = 4
Tue Oct 31 17:50:41 2017 us=599117   mute = 0
Tue Oct 31 17:50:41 2017 us=599134   gremlin = 0
Tue Oct 31 17:50:41 2017 us=599151   status_file = '/run/openvpn/client.status'
Tue Oct 31 17:50:41 2017 us=599168   status_file_version = 1
Tue Oct 31 17:50:41 2017 us=599184   status_file_update_freq = 10
Tue Oct 31 17:50:41 2017 us=599201   occ = ENABLED
Tue Oct 31 17:50:41 2017 us=599218   rcvbuf = 65536
Tue Oct 31 17:50:41 2017 us=599234   sndbuf = 65536
Tue Oct 31 17:50:41 2017 us=599251   mark = 0
Tue Oct 31 17:50:41 2017 us=599267   sockflags = 0
Tue Oct 31 17:50:41 2017 us=599284   fast_io = DISABLED
Tue Oct 31 17:50:41 2017 us=599301   lzo = 7
Tue Oct 31 17:50:41 2017 us=599317   route_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599334   route_default_gateway = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599351   route_default_metric = 0
Tue Oct 31 17:50:41 2017 us=599368   route_noexec = DISABLED
Tue Oct 31 17:50:41 2017 us=599388   route_delay = 0
Tue Oct 31 17:50:41 2017 us=599405   route_delay_window = 30
Tue Oct 31 17:50:41 2017 us=599422   route_delay_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=599439   route_nopull = DISABLED
Tue Oct 31 17:50:41 2017 us=599457   route_gateway_via_dhcp = DISABLED
Tue Oct 31 17:50:41 2017 us=599474   max_routes = 100
Tue Oct 31 17:50:41 2017 us=599491   allow_pull_fqdn = DISABLED
Tue Oct 31 17:50:41 2017 us=599512   management_addr = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599529   management_port = 0
Tue Oct 31 17:50:41 2017 us=599546   management_user_pass = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599563   management_log_history_cache = 250
Tue Oct 31 17:50:41 2017 us=599580   management_echo_buffer_size = 100
Tue Oct 31 17:50:41 2017 us=599597   management_write_peer_info_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599614   management_client_user = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599631   management_client_group = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599651   management_flags = 0
Tue Oct 31 17:50:41 2017 us=599668   shared_secret_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599685   key_direction = 0
Tue Oct 31 17:50:41 2017 us=599702   ciphername_defined = ENABLED
Tue Oct 31 17:50:41 2017 us=599719   ciphername = 'AES-128-CBC'
Tue Oct 31 17:50:41 2017 us=599736   authname_defined = ENABLED
Tue Oct 31 17:50:41 2017 us=599755   authname = 'SHA1'
Tue Oct 31 17:50:41 2017 us=599774   prng_hash = 'SHA1'
Tue Oct 31 17:50:41 2017 us=599791   prng_nonce_secret_len = 16
Tue Oct 31 17:50:41 2017 us=599808   keysize = 0
Tue Oct 31 17:50:41 2017 us=599824   engine = DISABLED
Tue Oct 31 17:50:41 2017 us=599860   replay = ENABLED
Tue Oct 31 17:50:41 2017 us=599877   mute_replay_warnings = DISABLED
Tue Oct 31 17:50:41 2017 us=599894   replay_window = 64
Tue Oct 31 17:50:41 2017 us=599911   replay_time = 15
Tue Oct 31 17:50:41 2017 us=599927   packet_id_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=599944   use_iv = ENABLED
Tue Oct 31 17:50:41 2017 us=599961   test_crypto = DISABLED
Tue Oct 31 17:50:41 2017 us=599978   tls_server = DISABLED
Tue Oct 31 17:50:41 2017 us=599995   tls_client = ENABLED
Tue Oct 31 17:50:41 2017 us=600013   key_method = 2
Tue Oct 31 17:50:41 2017 us=600030   ca_file = '/home/media/keys1/ca.crt'
Tue Oct 31 17:50:41 2017 us=600061   ca_path = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600080   dh_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600097   cert_file = '/home/media/keys1/user1.crt'
Tue Oct 31 17:50:41 2017 us=600114   priv_key_file = '/home/media/keys1/user1.key'
Tue Oct 31 17:50:41 2017 us=600134   pkcs12_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600151   cipher_list = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600167   tls_verify = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600184   tls_export_cert = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600201   verify_x509_type = 0
Tue Oct 31 17:50:41 2017 us=600218   verify_x509_name = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600235   crl_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600252   ns_cert_type = 1
Tue Oct 31 17:50:41 2017 us=600268   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600285   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600301   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600318   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600334   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600351   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600367   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600384   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600400   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600416   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600433   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600449   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600466   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600482   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600498   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600518   remote_cert_ku[i] = 0
Tue Oct 31 17:50:41 2017 us=600535   remote_cert_eku = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600551   ssl_flags = 0
Tue Oct 31 17:50:41 2017 us=600568   tls_timeout = 2
Tue Oct 31 17:50:41 2017 us=600585   renegotiate_bytes = 0
Tue Oct 31 17:50:41 2017 us=600601   renegotiate_packets = 0
Tue Oct 31 17:50:41 2017 us=600618   renegotiate_seconds = 3600
Tue Oct 31 17:50:41 2017 us=600638   handshake_window = 60
Tue Oct 31 17:50:41 2017 us=600655   transition_window = 3600
Tue Oct 31 17:50:41 2017 us=600672   single_session = DISABLED
Tue Oct 31 17:50:41 2017 us=600688   push_peer_info = DISABLED
Tue Oct 31 17:50:41 2017 us=600705   tls_exit = DISABLED
Tue Oct 31 17:50:41 2017 us=600721   tls_auth_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=600738   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600755   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600775   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600805   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600826   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600843   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600860   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600877   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600897   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600913   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600930   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600947   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600964   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600981   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=600998   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=601014   pkcs11_protected_authentication = DISABLED
Tue Oct 31 17:50:41 2017 us=601032   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601050   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601067   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601084   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601101   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601126   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601146   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601163   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601180   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601197   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601214   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601231   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601248   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601265   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601281   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601298   pkcs11_private_mode = 00000000
Tue Oct 31 17:50:41 2017 us=601315   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601332   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601348   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601365   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601382   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601400   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601417   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601433   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601450   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601467   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601483   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601500   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601516   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601533   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601550   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601566   pkcs11_cert_private = DISABLED
Tue Oct 31 17:50:41 2017 us=601583   pkcs11_pin_cache_period = -1
Tue Oct 31 17:50:41 2017 us=601600   pkcs11_id = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=601617   pkcs11_id_management = DISABLED
Tue Oct 31 17:50:41 2017 us=601648   server_network = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601669   server_netmask = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601697   server_network_ipv6 = ::
Tue Oct 31 17:50:41 2017 us=601715   server_netbits_ipv6 = 0
Tue Oct 31 17:50:41 2017 us=601734   server_bridge_ip = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601752   server_bridge_netmask = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601774   server_bridge_pool_start = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601793   server_bridge_pool_end = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601810   push_entry = 'dhcp-option DNS 208.67.222.222'
Tue Oct 31 17:50:41 2017 us=601827   push_entry = 'dhcp-option DNS 208.67.220.220'
Tue Oct 31 17:50:41 2017 us=601844   ifconfig_pool_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=601863   ifconfig_pool_start = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601885   ifconfig_pool_end = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601904   ifconfig_pool_netmask = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=601920   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=601938   ifconfig_pool_persist_refresh_freq = 600
Tue Oct 31 17:50:41 2017 us=601954   ifconfig_ipv6_pool_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=601973   ifconfig_ipv6_pool_base = ::
Tue Oct 31 17:50:41 2017 us=601989   ifconfig_ipv6_pool_netbits = 0
Tue Oct 31 17:50:41 2017 us=602009   n_bcast_buf = 256
Tue Oct 31 17:50:41 2017 us=602025   tcp_queue_limit = 64
Tue Oct 31 17:50:41 2017 us=602042   real_hash_size = 256
Tue Oct 31 17:50:41 2017 us=602059   virtual_hash_size = 256
Tue Oct 31 17:50:41 2017 us=602075   client_connect_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602092   learn_address_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602108   client_disconnect_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602125   client_config_dir = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602142   ccd_exclusive = DISABLED
Tue Oct 31 17:50:41 2017 us=602159   tmp_dir = '/tmp'
Tue Oct 31 17:50:41 2017 us=602175   push_ifconfig_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=602194   push_ifconfig_local = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=602224   push_ifconfig_remote_netmask = 0.0.0.0
Tue Oct 31 17:50:41 2017 us=602242   push_ifconfig_ipv6_defined = DISABLED
Tue Oct 31 17:50:41 2017 us=602261   push_ifconfig_ipv6_local = ::/0
Tue Oct 31 17:50:41 2017 us=602280   push_ifconfig_ipv6_remote = ::
Tue Oct 31 17:50:41 2017 us=602296   enable_c2c = DISABLED
Tue Oct 31 17:50:41 2017 us=602313   duplicate_cn = DISABLED
Tue Oct 31 17:50:41 2017 us=602329   cf_max = 0
Tue Oct 31 17:50:41 2017 us=602346   cf_per = 0
Tue Oct 31 17:50:41 2017 us=602363   max_clients = 1024
Tue Oct 31 17:50:41 2017 us=602381   max_routes_per_client = 256
Tue Oct 31 17:50:41 2017 us=602398   auth_user_pass_verify_script = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602415   auth_user_pass_verify_script_via_file = DISABLED
Tue Oct 31 17:50:41 2017 us=602432   port_share_host = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602449   port_share_port = 0
Tue Oct 31 17:50:41 2017 us=602465   client = ENABLED
Tue Oct 31 17:50:41 2017 us=602481   pull = ENABLED
Tue Oct 31 17:50:41 2017 us=602498   auth_user_pass_file = '[UNDEF]'
Tue Oct 31 17:50:41 2017 us=602518 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jun 22 2017
Tue Oct 31 17:50:46 2017 us=239908 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 31 17:50:46 2017 us=254555 LZO compression initialized
Tue Oct 31 17:50:46 2017 us=254734 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Oct 31 17:50:46 2017 us=254802 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Oct 31 17:50:46 2017 us=254848 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Oct 31 17:50:46 2017 us=254887 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Oct 31 17:50:46 2017 us=254904 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Oct 31 17:50:46 2017 us=254943 Local Options hash (VER=V4): '66096c33'
Tue Oct 31 17:50:46 2017 us=254976 Expected Remote Options hash (VER=V4): '691e95c7'
Tue Oct 31 17:50:46 2017 us=256450 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Tue Oct 31 17:50:46 2017 us=256573 UDPv4 link local: [undef]
Tue Oct 31 17:50:46 2017 us=256607 UDPv4 link remote: [AF_INET]192.168.10.150:1194
Tue Oct 31 17:50:46 2017 us=264053 TLS: Initial packet from [AF_INET]192.168.10.150:1194, sid=dd8026cd d6b58f37
Tue Oct 31 17:50:46 2017 us=349093 VERIFY OK: depth=1, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Tue Oct 31 17:50:46 2017 us=349482 VERIFY OK: nsCertType=SERVER
Tue Oct 31 17:50:46 2017 us=349498 VERIFY OK: depth=0, C=UK, ST=LO, L=London, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Tue Oct 31 17:50:46 2017 us=472520 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 17:50:46 2017 us=472599 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 17:50:46 2017 us=472625 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Oct 31 17:50:46 2017 us=472651 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 31 17:50:46 2017 us=472703 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Oct 31 17:50:46 2017 us=472748 [server] Peer Connection Initiated with [AF_INET]192.168.10.150:1194
Tue Oct 31 17:50:48 2017 us=961421 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Oct 31 17:50:48 2017 us=965656 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Tue Oct 31 17:50:48 2017 us=965823 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 31 17:50:48 2017 us=965846 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 31 17:50:48 2017 us=965863 OPTIONS IMPORT: route options modified
Tue Oct 31 17:50:48 2017 us=965879 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 31 17:50:48 2017 us=966162 ROUTE_GATEWAY 192.168.10.1/255.255.255.0 IFACE=eth1 HWADDR=00:04:75:ea:5b:05
Tue Oct 31 17:50:48 2017 us=966667 TUN/TAP device tun1 opened
Tue Oct 31 17:50:48 2017 us=966702 TUN/TAP TX queue length set to 100
Tue Oct 31 17:50:48 2017 us=966733 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 31 17:50:48 2017 us=966776 /sbin/ip link set dev tun1 up mtu 1500
Tue Oct 31 17:50:48 2017 us=969115 /sbin/ip addr add dev tun1 local 10.8.0.6 peer 10.8.0.5
Tue Oct 31 17:50:48 2017 us=972327 /sbin/ip route add 192.168.10.150/32 via 192.168.10.1
Tue Oct 31 17:50:48 2017 us=974708 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Tue Oct 31 17:50:48 2017 us=977369 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Tue Oct 31 17:50:48 2017 us=984126 /sbin/ip route add 10.8.0.0/24 via 10.8.0.5
Tue Oct 31 17:50:48 2017 us=986601 GID set to nogroup
Tue Oct 31 17:50:48 2017 us=986668 UID set to nobody
Tue Oct 31 17:50:48 2017 us=986688 Initialization Sequence Completed
Tue Oct 31 18:00:55 2017 us=398388 event_wait : Interrupted system call (code=4)
Tue Oct 31 18:00:55 2017 us=399173 TCP/UDP: Closing socket
Tue Oct 31 18:00:55 2017 us=399322 /sbin/ip route del 10.8.0.0/24
RTNETLINK answers: Operation not permitted
Tue Oct 31 18:00:55 2017 us=401380 ERROR: Linux route delete command failed: external program exited with error status: 2
Tue Oct 31 18:00:55 2017 us=401452 /sbin/ip route del 192.168.10.150/32
RTNETLINK answers: Operation not permitted
Tue Oct 31 18:00:55 2017 us=402465 ERROR: Linux route delete command failed: external program exited with error status: 2
Tue Oct 31 18:00:55 2017 us=402500 /sbin/ip route del 0.0.0.0/1
RTNETLINK answers: Operation not permitted
Tue Oct 31 18:00:55 2017 us=403357 ERROR: Linux route delete command failed: external program exited with error status: 2
Tue Oct 31 18:00:55 2017 us=403389 /sbin/ip route del 128.0.0.0/1
RTNETLINK answers: Operation not permitted
Tue Oct 31 18:00:55 2017 us=404231 ERROR: Linux route delete command failed: external program exited with error status: 2
Tue Oct 31 18:00:55 2017 us=404253 Closing TUN/TAP interface
Tue Oct 31 18:00:55 2017 us=404275 /sbin/ip addr del dev tun1 local 10.8.0.6 peer 10.8.0.5
RTNETLINK answers: Operation not permitted
Tue Oct 31 18:00:55 2017 us=405190 Linux ip addr del failed: external program exited with error status: 2
Tue Oct 31 18:00:55 2017 us=432841 SIGTERM[hard,] received, process exiting

Thanks

TinCanTech

coolfi wrote the IP still remains the same as before

Because you are on your home LAN .. exactly what IP do you expect it to change to ?

coolfi

TinCanTech wrote
coolfi wrote the IP still remains the same as before
Because you are on your home LAN .. exactly what IP do you expect it to change to ?

Should I not have proxy IP from openvpn-dns? I thought you can have private browsing from you own network by routing traffic through Openvpn?

Also as per the guide " DNSLeakTest's Extended Test will check your DNS settings and confirm you are now using the DNS resolvers pushed by your VPN." But am still showing my ISP resolvers.

Gaius380

Sorry to hijack this post, but I've got exactly the same problem (yet another "no internet but everything else works") ever since I've upgraded from Ubuntu 14.04 to 16.04.
I use the android Openvpn client, and when I ping 8.8.8.8 from it (using a terminal emulator)... I can see the following tcpdump on the server side :

tcpdump -i tun0 icmp

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
07:51:06.715970 IP 10.8.0.2 > google-public-dns-a.google.com: ICMP echo request, id 3, seq 1, length 64
07:51:07.696526 IP 10.8.0.2 > google-public-dns-a.google.com: ICMP echo request, id 3, seq 2, length 64
07:51:08.716327 IP 10.8.0.2 > google-public-dns-a.google.com: ICMP echo request, id 3, seq 3, length 64
07:51:09.709309 IP 10.8.0.2 > google-public-dns-a.google.com: ICMP echo request, id 3, seq 4, length 64

But somehow, the response never makes it back to the client.

I'm pretty sure it was working well before the upgrade, so it must be related to some IP forwarding / firewall configuration in Ubuntu.

/etc/ufw/before.rules :

#################################################
 12 # NAT (Network Address Translation) table rules
 13 *nat
 14 :POSTROUTING ACCEPT [0:0]
 15 -F
 16 # Allow traffic from clients to eth1
 17 -A POSTROUTING -s 10.8.0.0/24 -o eth1 -j MASQUERADE
 18
 19 # do not delete the "COMMIT" line or the NAT table rules above will not be processed
 20 COMMIT
 21 #################################################
 22

/etc/default/ufw

 DEFAULT_FORWARD_POLICY="ACCEPT"

sysctl -a | grep "forwarding = 1"
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.eth1.forwarding = 1
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.tun0.forwarding = 1

coolfi

Gaius380 wrote

Hi, yeah looks like firewall or kernel problem for sure if it's not getting through if you can't ping it, I was thinking of upgrading to 16.04 as am using 14.04 currently, did you try using client from ubuntu when it was working? And what was the results? Did your dns change? from same LAN?

This what I get from tcpdump, looks like am connected to openvpn but no traffic flowing through it, did you have to use a command on the client side to force all the traffic through tun device?

tcpdump -i tun0 icmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes

0 packets captured
0 packets received by filter
0 packets dropped by kernel

Please do post back if you find the solution.

Gaius380

Yes, as far as I remember, I was using my vpn from my phone (using the android client) and at work using Ubuntu 16.04 without any problem and with the exact same client.ovpn config file.

TinCanTech

@Gaius380

Gaius380 wrote Sorry to hijack this post, but I've got exactly the same problem

We really discourage hijacking threads .. especially when you do not have the same problem.

So a mod has agreed to close this thread.

Please start a new thread, see:
HOWTO: Request Help ! {2}

Also, include your firewall settings.

@coolfi

coolfi wrote
TinCanTech wrote
coolfi wrote the IP still remains the same as before
Because you are on your home LAN .. exactly what IP do you expect it to change to ?
Should I not have proxy IP from openvpn-dns? I thought you can have private browsing from you own network by routing traffic through Openvpn?

Also as per the guide " DNSLeakTest's Extended Test will check your DNS settings and confirm you are now using the DNS resolvers pushed by your VPN." But am still showing my ISP resolvers.

You do not understand what OpenVPN is ..

OpenVPN is a Free Open Source Software project which provides a Virtual Private Network .. it does not provide you with a proxy IP from openvpn-dns. What you are looking for is Google: a VPN Service Provider

Your home VPN is working as expected, try using your home VPN from a remote location, like a coffee shop.

* Closed *