Working cert files on Android, no internet or access to lan via Windows

-Ricky-

Hello,

Here is my conf file on Android :

# Enables connection to GUI
management /data/user/0/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold

setenv IV_GUI_VER "de.blinkt.openvpn 0.6.73" 
setenv IV_PLAT_VER "24 7.0 arm64-v8a samsung universal8895 SM-G950F"
machine-readable-output
allow-recursive-routing
ifconfig-nowarn
client
verb 4
connect-retry 2 300
resolv-retry 60
dev tun
remote ip.myserver.com 1194 udp
<ca>
-----BEGIN CERTIFICATE-----
x
x
x
-----END CERTIFICATE-----
</ca>

<key>
-----BEGIN PRIVATE KEY-----
x
x
x
-----END PRIVATE KEY-----
</key>

<cert>
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4c:64:3f:fc:68:ca:df:27:1d:21:e1:f3:f0:90:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=server
        Validity
            Not Before: Sep 24 15:13:06 2017 GMT
            Not After : Sep 22 15:13:06 2027 GMT
        Subject: CN=Richard
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:bd:d4:e6:24:1f:a5:68:28:08:4e:87:ae:
                    c8:fa:8c:a7:ff:41:c4:3a:c5:fe:19:e4:48:10:2b:
                    af:a9:20:b9:40:07:a5:59:bc:7a:62:3b:cb:eb:60:
                    cb:3e:40:3d:2e:68:a7:01:52:73:9a:25:84:25:37:
                    80:b5:50:e8:f4:48:eb:25:da:86:15:fd:c4:eb:24:
                    ff:e9:2e:c1:4b:54:14:53:2d:de:1a:3a:e1:26:de:
                    c2:d4:13:47:22:65:31:5e:9a:c7:82:2d:d5:17:fa:
                    b7:20:01:10:c8:f4:78:98:03:ee:a9:c7:97:60:e2:
                    75:b2:a8:80:56:29:be:d9:d5:77:0f:5a:7c:04:c2:
                    6f:7a:ca:9b:ef:f7:75:fc:3a:a5:d8:5d:a5:80:54:
                    1d:32:14:64:1c:e7:b9:a9:04:4c:34:ca:46:c7:36:
                    4f:81:5c:4c:4c:0d:46:f2:26:9c:3c:e4:5a:a6:e0:
                    d5:95:ec:d9:36:d6:ba:ea:e3:05:3f:d6:b1:c4:15:
                    92:86:ea:7a:18:37:62:95:8f:bb:a4:60:7d:c4:92:
                    20:94:40:63:7a:ac:28:ed:f0:3f:50:4f:0c:4f:c6:
                    30:cb:3f:64:05:12:90:8d:70:d5:17:85:ae:87:8c:
                    02:52:cd:b4:ad:05:d8:97:cf:49:be:e0:59:96:0d:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CC:E2:35:3D:BA:A9:F9:C6:AF:3F:77:52:ED:35:21:A3:18:4D:44:EE
            X509v3 Authority Key Identifier: 
                keyid:DE:83:5D:2A:DB:78:97:24:DB:4C:E1:3C:2C:C0:35:85:88:E3:8C:96
                DirName:/CN=server
                serial:B0:AC:80:95:A5:5C:83:54

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Key Usage: 
                Digital Signature
    Signature Algorithm: sha256WithRSAEncryption
         44:59:72:e8:13:57:4f:97:f8:9d:89:0b:5d:5c:79:3d:ad:53:
         57:33:93:19:2b:82:8e:c7:c5:ee:11:19:2e:ce:99:93:5c:5d:
         8b:0d:88:fd:26:30:6c:ce:de:fe:93:a8:9c:99:bb:54:3f:54:
         50:10:db:66:77:dd:d4:0f:78:1c:aa:52:94:f5:94:2e:ce:71:
         65:39:c3:86:ea:4d:50:0c:81:dc:29:44:46:49:1f:bf:89:94:
         ef:18:d7:81:98:e7:1e:d0:8e:be:25:17:3f:e9:c1:9e:62:83:
         5d:e9:a1:50:6c:be:51:52:18:af:61:f5:c3:63:6c:e1:81:7d:
         07:9f:3f:8d:9a:a7:59:3e:fb:4c:6c:a1:2d:eb:0e:22:e2:41:
         37:dc:d8:ba:23:3f:00:7a:db:6d:3b:b6:73:f3:af:13:57:e4:
         29:f4:90:0f:30:e2:63:1f:58:f4:90:d9:af:30:cb:0d:83:87:
         a8:50:3c:29:fe:a2:92:9b:05:4c:53:4e:68:db:35:5b:f4:0c:
         6f:8c:ec:03:d1:bb:b0:27:5c:2a:69:1b:c2:85:0d:05:a0:f4:
         e1:39:26:e4:8c:58:ba:d1:11:18:96:58:18:9f:5e:f1:4f:51:
         c5:33:21:18:cb:f4:38:79:c0:d0:b2:33:14:6e:e7:19:e6:59:
         ca:19:7e:73
-----BEGIN CERTIFICATE-----
x
x
x
-----END CERTIFICATE-----
</cert>

comp-lzo
nobind
persist-tun
# persist-tun also enables pre resolving to avoid DNS resolve problem
preresolve
# Use system proxy setting
management-query-proxy
# Custom configuration options
# You are on your on own here :)
# These options found in the config file do not map to config settings:
resolv-retry infinite

How can I make it work on Windows ? I can connect but have no access to NAS or internet...

Thanks

Richard

TinCanTech

Please see:
HOWTO: Request Help !

-Ricky-

Hello,

I have OpenVPN server enabled on my DD WRT router, the client is on a Windows 10 computer.

* Server *

Start Type WAN Up
Config as Server
Server mode Router (TUN)
Network 10.0.0.0
Netmask 255.255.255.0
Port 1194
Tunnel du Protocole UDP
Encryption Cipher AES 256 CBC
Hash Algorithm SHA1

Additionnal config :

push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway local def1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
verb 3

Iptables :

iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -j MASQUERADE
iptables -I FORWARD -p udp -s 10.0.0.0/24 -j ACCEPT
iptables -I INPUT -p udp --dport=1194 -j ACCEPT
iptables -I OUTPUT -p udp --sport=1194 -j ACCEPT

iptables -I INPUT -p udp -i eth0 -j ACCEPT
iptables -I FORWARD -i eth0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o eth0 -j ACCEPT

iptables -I INPUT -p udp -i br0 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

* Client *

client
dev tun
proto udp
remote ip.xxx.ooo 1194
comp-lzo
nobind
persist-tun

* Client log *

Sun Feb 25 10:58:40 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Sun Feb 25 10:58:40 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Feb 25 10:58:40 2018 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Sun Feb 25 10:58:40 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Feb 25 10:58:41 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]109.10.97.62:1194
Sun Feb 25 10:58:41 2018 UDP link local: (not bound)
Sun Feb 25 10:58:41 2018 UDP link remote: [AF_INET]109.10.97.62:1194
Sun Feb 25 10:58:42 2018 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1558'
Sun Feb 25 10:58:42 2018 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC'
Sun Feb 25 10:58:42 2018 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
Sun Feb 25 10:58:42 2018 [server] Peer Connection Initiated with [AF_INET]109.10.97.62:1194
Sun Feb 25 10:58:43 2018 open_tun
Sun Feb 25 10:58:43 2018 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{F836D3BD-1F26-4F29-9C43-5C1282A8D525}.tap
Sun Feb 25 10:58:43 2018 Set TAP-Windows TUN subnet mode network/local/netmask = 10.0.0.0/10.0.0.3/255.255.255.0 [SUCCEEDED]
Sun Feb 25 10:58:43 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.0.3/255.255.255.0 on interface {F836D3BD-1F26-4F29-9C43-5C1282A8D525} [DHCP-serv: 10.0.0.254, lease-time: 31536000]
Sun Feb 25 10:58:43 2018 Successful ARP Flush on interface [17] {F836D3BD-1F26-4F29-9C43-5C1282A8D525}
Sun Feb 25 10:58:43 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Feb 25 10:58:48 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Feb 25 10:58:48 2018 Initialization Sequence Completed

I can connect without any problem with my Android phone. With my Windows 10 laptop, I'm connected, but have no internet or LAN access...

Thanks in advance !

TinCanTech

Set --verb 4 in your client config and post a new log.

-Ricky-

Sun Feb 25 14:20:16 2018 us=180534 Current Parameter Settings:
Sun Feb 25 14:20:16 2018 us=180534   config = 'Richard-PC.ovpn'
Sun Feb 25 14:20:16 2018 us=180534   mode = 0
Sun Feb 25 14:20:16 2018 us=180534   show_ciphers = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   show_digests = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   show_engines = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   genkey = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   key_pass_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   show_tls_ciphers = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   connect_retry_max = 0
Sun Feb 25 14:20:16 2018 us=180534 Connection profiles [0]:
Sun Feb 25 14:20:16 2018 us=180534   proto = udp
Sun Feb 25 14:20:16 2018 us=180534   local = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   local_port = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   remote = 'ip.richard.ooo'
Sun Feb 25 14:20:16 2018 us=180534   remote_port = '1194'
Sun Feb 25 14:20:16 2018 us=180534   remote_float = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   bind_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   bind_local = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   bind_ipv6_only = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   connect_retry_seconds = 5
Sun Feb 25 14:20:16 2018 us=180534   connect_timeout = 120
Sun Feb 25 14:20:16 2018 us=180534   socks_proxy_server = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   socks_proxy_port = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   tun_mtu = 1500
Sun Feb 25 14:20:16 2018 us=180534   tun_mtu_defined = ENABLED
Sun Feb 25 14:20:16 2018 us=180534   link_mtu = 1500
Sun Feb 25 14:20:16 2018 us=180534   link_mtu_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   tun_mtu_extra = 0
Sun Feb 25 14:20:16 2018 us=180534   tun_mtu_extra_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   mtu_discover_type = -1
Sun Feb 25 14:20:16 2018 us=180534   fragment = 0
Sun Feb 25 14:20:16 2018 us=180534   mssfix = 1450
Sun Feb 25 14:20:16 2018 us=180534   explicit_exit_notification = 0
Sun Feb 25 14:20:16 2018 us=180534 Connection profiles END
Sun Feb 25 14:20:16 2018 us=180534   remote_random = DISABLED
Sun Feb 25 14:20:16 2018 us=180534   ipchange = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   dev = 'tun'
Sun Feb 25 14:20:16 2018 us=180534   dev_type = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   dev_node = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   lladdr = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   topology = 1
Sun Feb 25 14:20:16 2018 us=180534   ifconfig_local = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   ifconfig_remote_netmask = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=180534   ifconfig_noexec = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_nowarn = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_local = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_netbits = 0
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_remote = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   shaper = 0
Sun Feb 25 14:20:16 2018 us=196152   mtu_test = 0
Sun Feb 25 14:20:16 2018 us=196152   mlock = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   keepalive_ping = 0
Sun Feb 25 14:20:16 2018 us=196152   keepalive_timeout = 0
Sun Feb 25 14:20:16 2018 us=196152   inactivity_timeout = 0
Sun Feb 25 14:20:16 2018 us=196152   ping_send_timeout = 0
Sun Feb 25 14:20:16 2018 us=196152   ping_rec_timeout = 0
Sun Feb 25 14:20:16 2018 us=196152   ping_rec_timeout_action = 0
Sun Feb 25 14:20:16 2018 us=196152   ping_timer_remote = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   remap_sigusr1 = 0
Sun Feb 25 14:20:16 2018 us=196152   persist_tun = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   persist_local_ip = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   persist_remote_ip = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   persist_key = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   passtos = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   resolve_retry_seconds = 1000000000
Sun Feb 25 14:20:16 2018 us=196152   resolve_in_advance = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   username = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   groupname = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   chroot_dir = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   cd_dir = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   writepid = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   up_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   down_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   down_pre = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   up_restart = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   up_delay = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   daemon = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   inetd = 0
Sun Feb 25 14:20:16 2018 us=196152   log = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   suppress_timestamps = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   machine_readable_output = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   nice = 0
Sun Feb 25 14:20:16 2018 us=196152   verbosity = 4
Sun Feb 25 14:20:16 2018 us=196152   mute = 0
Sun Feb 25 14:20:16 2018 us=196152   gremlin = 0
Sun Feb 25 14:20:16 2018 us=196152   status_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   status_file_version = 1
Sun Feb 25 14:20:16 2018 us=196152   status_file_update_freq = 60
Sun Feb 25 14:20:16 2018 us=196152   occ = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   rcvbuf = 0
Sun Feb 25 14:20:16 2018 us=196152   sndbuf = 0
Sun Feb 25 14:20:16 2018 us=196152   sockflags = 0
Sun Feb 25 14:20:16 2018 us=196152   fast_io = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   comp.alg = 2
Sun Feb 25 14:20:16 2018 us=196152   comp.flags = 1
Sun Feb 25 14:20:16 2018 us=196152   route_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   route_default_gateway = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   route_default_metric = 0
Sun Feb 25 14:20:16 2018 us=196152   route_noexec = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   route_delay = 5
Sun Feb 25 14:20:16 2018 us=196152   route_delay_window = 30
Sun Feb 25 14:20:16 2018 us=196152   route_delay_defined = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   route_nopull = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   route_gateway_via_dhcp = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   allow_pull_fqdn = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   management_addr = '127.0.0.1'
Sun Feb 25 14:20:16 2018 us=196152   management_port = '25340'
Sun Feb 25 14:20:16 2018 us=196152   management_user_pass = 'stdin'
Sun Feb 25 14:20:16 2018 us=196152   management_log_history_cache = 250
Sun Feb 25 14:20:16 2018 us=196152   management_echo_buffer_size = 100
Sun Feb 25 14:20:16 2018 us=196152   management_write_peer_info_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   management_client_user = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   management_client_group = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   management_flags = 6
Sun Feb 25 14:20:16 2018 us=196152   shared_secret_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   key_direction = 0
Sun Feb 25 14:20:16 2018 us=196152   ciphername = 'BF-CBC'
Sun Feb 25 14:20:16 2018 us=196152   ncp_enabled = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Feb 25 14:20:16 2018 us=196152   authname = 'SHA1'
Sun Feb 25 14:20:16 2018 us=196152   prng_hash = 'SHA1'
Sun Feb 25 14:20:16 2018 us=196152   prng_nonce_secret_len = 16
Sun Feb 25 14:20:16 2018 us=196152   keysize = 0
Sun Feb 25 14:20:16 2018 us=196152   engine = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   replay = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   mute_replay_warnings = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   replay_window = 64
Sun Feb 25 14:20:16 2018 us=196152   replay_time = 15
Sun Feb 25 14:20:16 2018 us=196152   packet_id_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   use_iv = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   test_crypto = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   tls_server = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   tls_client = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   key_method = 2
Sun Feb 25 14:20:16 2018 us=196152   ca_file = '[[INLINE]]'
Sun Feb 25 14:20:16 2018 us=196152   ca_path = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   dh_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   cert_file = '[[INLINE]]'
Sun Feb 25 14:20:16 2018 us=196152   extra_certs_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   priv_key_file = '[[INLINE]]'
Sun Feb 25 14:20:16 2018 us=196152   pkcs12_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   cryptoapi_cert = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   cipher_list = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   tls_verify = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   tls_export_cert = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   verify_x509_type = 0
Sun Feb 25 14:20:16 2018 us=196152   verify_x509_name = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   crl_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   ns_cert_type = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_ku[i] = 0
Sun Feb 25 14:20:16 2018 us=196152   remote_cert_eku = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   ssl_flags = 0
Sun Feb 25 14:20:16 2018 us=196152   tls_timeout = 2
Sun Feb 25 14:20:16 2018 us=196152   renegotiate_bytes = -1
Sun Feb 25 14:20:16 2018 us=196152   renegotiate_packets = 0
Sun Feb 25 14:20:16 2018 us=196152   renegotiate_seconds = 3600
Sun Feb 25 14:20:16 2018 us=196152   handshake_window = 60
Sun Feb 25 14:20:16 2018 us=196152   transition_window = 3600
Sun Feb 25 14:20:16 2018 us=196152   single_session = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   push_peer_info = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   tls_exit = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   tls_auth_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   tls_crypt_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_protected_authentication = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_private_mode = 00000000
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_cert_private = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_pin_cache_period = -1
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_id = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   pkcs11_id_management = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   server_network = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   server_netmask = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   server_network_ipv6 = ::
Sun Feb 25 14:20:16 2018 us=196152   server_netbits_ipv6 = 0
Sun Feb 25 14:20:16 2018 us=196152   server_bridge_ip = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   server_bridge_netmask = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   server_bridge_pool_start = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   server_bridge_pool_end = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_start = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_end = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_netmask = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_pool_persist_refresh_freq = 600
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_pool_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_pool_base = ::
Sun Feb 25 14:20:16 2018 us=196152   ifconfig_ipv6_pool_netbits = 0
Sun Feb 25 14:20:16 2018 us=196152   n_bcast_buf = 256
Sun Feb 25 14:20:16 2018 us=196152   tcp_queue_limit = 64
Sun Feb 25 14:20:16 2018 us=196152   real_hash_size = 256
Sun Feb 25 14:20:16 2018 us=196152   virtual_hash_size = 256
Sun Feb 25 14:20:16 2018 us=196152   client_connect_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   learn_address_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   client_disconnect_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   client_config_dir = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   ccd_exclusive = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   tmp_dir = 'C:\Users\Ricky\AppData\Local\Temp\'
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_local = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_remote_netmask = 0.0.0.0
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_ipv6_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_ipv6_local = ::/0
Sun Feb 25 14:20:16 2018 us=196152   push_ifconfig_ipv6_remote = ::
Sun Feb 25 14:20:16 2018 us=196152   enable_c2c = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   duplicate_cn = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   cf_max = 0
Sun Feb 25 14:20:16 2018 us=196152   cf_per = 0
Sun Feb 25 14:20:16 2018 us=196152   max_clients = 1024
Sun Feb 25 14:20:16 2018 us=196152   max_routes_per_client = 256
Sun Feb 25 14:20:16 2018 us=196152   auth_user_pass_verify_script = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   auth_user_pass_verify_script_via_file = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   auth_token_generate = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   auth_token_lifetime = 0
Sun Feb 25 14:20:16 2018 us=196152   client = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   pull = ENABLED
Sun Feb 25 14:20:16 2018 us=196152   auth_user_pass_file = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   show_net_up = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   route_method = 3
Sun Feb 25 14:20:16 2018 us=196152   block_outside_dns = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ip_win32_defined = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   ip_win32_type = 3
Sun Feb 25 14:20:16 2018 us=196152   dhcp_masq_offset = 0
Sun Feb 25 14:20:16 2018 us=196152   dhcp_lease_time = 31536000
Sun Feb 25 14:20:16 2018 us=196152   tap_sleep = 0
Sun Feb 25 14:20:16 2018 us=196152   dhcp_options = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   dhcp_renew = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   dhcp_pre_release = DISABLED
Sun Feb 25 14:20:16 2018 us=196152   domain = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   netbios_scope = '[UNDEF]'
Sun Feb 25 14:20:16 2018 us=196152   netbios_node_type = 0
Sun Feb 25 14:20:16 2018 us=196152   disable_nbt = DISABLED
Sun Feb 25 14:20:16 2018 us=196152 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Sun Feb 25 14:20:16 2018 us=196152 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Feb 25 14:20:16 2018 us=196152 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Sun Feb 25 14:20:16 2018 us=196152 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Feb 25 14:20:16 2018 us=196152 Need hold release from management interface, waiting...
Sun Feb 25 14:20:16 2018 us=586842 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Feb 25 14:20:16 2018 us=703102 MANAGEMENT: CMD 'state on'
Sun Feb 25 14:20:16 2018 us=703102 MANAGEMENT: CMD 'log all on'
Sun Feb 25 14:20:16 2018 us=919516 MANAGEMENT: CMD 'echo all on'
Sun Feb 25 14:20:16 2018 us=919516 MANAGEMENT: CMD 'hold off'
Sun Feb 25 14:20:16 2018 us=935142 MANAGEMENT: CMD 'hold release'
Sun Feb 25 14:20:16 2018 us=935142 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Feb 25 14:20:17 2018 us=705718 LZO compression initializing
Sun Feb 25 14:20:17 2018 us=705718 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Feb 25 14:20:17 2018 us=705718 MANAGEMENT: >STATE:1519564817,RESOLVE,,,,,,
Sun Feb 25 14:20:18 2018 us=393286 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun Feb 25 14:20:18 2018 us=393286 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Feb 25 14:20:18 2018 us=393286 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Feb 25 14:20:18 2018 us=393286 TCP/UDP: Preserving recently used remote address: [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:18 2018 us=393286 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Feb 25 14:20:18 2018 us=393286 UDP link local: (not bound)
Sun Feb 25 14:20:18 2018 us=393286 UDP link remote: [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:18 2018 us=393286 MANAGEMENT: >STATE:1519564818,WAIT,,,,,,
Sun Feb 25 14:20:18 2018 us=455742 MANAGEMENT: >STATE:1519564818,AUTH,,,,,,
Sun Feb 25 14:20:18 2018 us=455742 TLS: Initial packet from [AF_INET]109.10.97.62:1194, sid=5a055955 b1419fbd
Sun Feb 25 14:20:18 2018 us=713942 VERIFY OK: depth=1, CN=server
Sun Feb 25 14:20:18 2018 us=713942 VERIFY OK: depth=0, CN=server
Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1558'
Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC'
Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
Sun Feb 25 14:20:18 2018 us=885822 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Feb 25 14:20:18 2018 us=885822 [server] Peer Connection Initiated with [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:19 2018 us=922503 MANAGEMENT: >STATE:1519564819,GET_CONFIG,,,,,,
Sun Feb 25 14:20:19 2018 us=922503 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Feb 25 14:20:20 2018 us=626 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 192.168.0.0 255.255.255.0,redirect-gateway local def1,dhcp-option DNS 8.8.8.8,route-gateway 10.0.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.0.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: timers and/or timeouts modified
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: --ifconfig/up options modified
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: route options modified
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: route-related options modified
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: peer-id set
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: adjusting link_mtu to 1625
Sun Feb 25 14:20:20 2018 us=626 OPTIONS IMPORT: data channel crypto options modified
Sun Feb 25 14:20:20 2018 us=626 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Feb 25 14:20:20 2018 us=626 Data Channel MTU parms [ L:1553 D:1450 EF:53 EB:406 ET:0 EL:3 ]
Sun Feb 25 14:20:20 2018 us=626 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Feb 25 14:20:20 2018 us=626 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Feb 25 14:20:20 2018 us=626 interactive service msg_channel=692
Sun Feb 25 14:20:20 2018 us=16201 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=4 HWADDR=7c:5c:f8:6e:65:fe
Sun Feb 25 14:20:20 2018 us=31825 open_tun
Sun Feb 25 14:20:20 2018 us=31825 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{F836D3BD-1F26-4F29-9C43-5C1282A8D525}.tap
Sun Feb 25 14:20:20 2018 us=31825 TAP-Windows Driver Version 9.21 
Sun Feb 25 14:20:20 2018 us=31825 TAP-Windows MTU=1500
Sun Feb 25 14:20:20 2018 us=31825 Set TAP-Windows TUN subnet mode network/local/netmask = 10.0.0.0/10.0.0.2/255.255.255.0 [SUCCEEDED]
Sun Feb 25 14:20:20 2018 us=31825 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.0.2/255.255.255.0 on interface {F836D3BD-1F26-4F29-9C43-5C1282A8D525} [DHCP-serv: 10.0.0.254, lease-time: 31536000]
Sun Feb 25 14:20:20 2018 us=31825 DHCP option string: 06040808 0808
Sun Feb 25 14:20:20 2018 us=31825 Successful ARP Flush on interface [17] {F836D3BD-1F26-4F29-9C43-5C1282A8D525}
Sun Feb 25 14:20:20 2018 us=31825 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Feb 25 14:20:20 2018 us=31825 MANAGEMENT: >STATE:1519564820,ASSIGN_IP,,10.0.0.2,,,,
Sun Feb 25 14:20:25 2018 us=837638 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sun Feb 25 14:20:25 2018 us=837638 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.0.0.1
Sun Feb 25 14:20:25 2018 us=837638 Route addition via service succeeded
Sun Feb 25 14:20:25 2018 us=837638 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.0.0.1
Sun Feb 25 14:20:25 2018 us=837638 Route addition via service succeeded
Sun Feb 25 14:20:25 2018 us=837638 MANAGEMENT: >STATE:1519564825,ADD_ROUTES,,,,,,
Sun Feb 25 14:20:25 2018 us=837638 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.0.0.1
Sun Feb 25 14:20:25 2018 us=853261 Route addition via service succeeded
Sun Feb 25 14:20:25 2018 us=853261 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Feb 25 14:20:25 2018 us=853261 Initialization Sequence Completed
Sun Feb 25 14:20:25 2018 us=853261 MANAGEMENT: >STATE:1519564825,CONNECTED,SUCCESS,10.0.0.2,109.10.97.62,1194,,
Sun Feb 25 14:20:25 2018 us=868886 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:26 2018 us=353266 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:26 2018 us=670025 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:26 2018 us=670526 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:26 2018 us=870669 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:27 2018 us=383029 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:27 2018 us=679739 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:27 2018 us=680240 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:27 2018 us=880881 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=113557 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=166590 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=167592 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=363231 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=687960 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:28 2018 us=687960 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:29 2018 us=169383 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:29 2018 us=170383 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:29 2018 us=387108 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:29 2018 us=888377 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:30 2018 us=267279 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:30 2018 us=373554 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:30 2018 us=520274 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:30 2018 us=689548 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:30 2018 us=689548 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=5973 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=90613 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=190877 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=190877 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=596443 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:31 2018 us=963541 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:32 2018 us=376548 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:32 2018 us=595307 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:32 2018 us=610921 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:33 2018 us=423619 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:33 2018 us=595549 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:33 2018 us=612756 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:33 2018 us=878374 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:33 2018 us=894056 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:34 2018 us=597589 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:34 2018 us=613156 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:34 2018 us=689842 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:34 2018 us=689842 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:35 2018 us=627026 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:35 2018 us=627026 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:35 2018 us=893253 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:36 2018 us=471638 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:36 2018 us=600310 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:36 2018 us=640014 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:37 2018 us=903244 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:37 2018 us=903244 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=653256 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=700129 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=700129 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=700129 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=700129 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194
Sun Feb 25 14:20:38 2018 us=918828 Recursive routing detected, drop tun packet to [AF_INET]109.10.97.62:1194

TinCanTech

In your server change this

push "redirect-gateway local def1"

push "redirect-gateway def1"

Then connect from a different network outside of your home.

Another way to connect from inside your home for test purpose is to use

pull-filter ignore "redirect-gateway"

in the client config while connecting from the same LAN.

See --pull-filter in The Manual v24x

Also,

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet.
For example: 192.168.143.0/24

-Ricky-

It's working now ! I just had to remove "local" in the command line.

Do you know how to get rid of the red messages ?

Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1558'
Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC'
Sun Feb 25 14:20:18 2018 us=885822 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'

Is it important ?

Thanks

TinCanTech

-Ricky- wrote Is it important ?

Those messages can probably be ignored for now .. they are related to code bugs.

-Ricky- wrote It's working now !

8-) .. so just ignore those Warnings for now.

-Ricky-

In fact, I can access internet, my router and NAS control panels but my lan devices don't appear on on my Windows 10 laptop under "network"

TinCanTech

Openvpn does not support native netbios .. you need a WINS or SAAMBA server or some DNS stuff.