[Resolved] Error: --pull-filter cannot be used with --mode server

febox

Hi,

I'm trying to create an OpenVPN server on a Windows 10 laptop but I'm getting this error:

Options error: --pull-filter cannot be used with --mode server
Use --help for more information.

Why is that? There's no "pull" or "filter" inside my ovpn file:

port 3324
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1

Can someone help me please?

Thanks!

TinCanTech

febox wrote There's no "pull" or "filter" inside my ovpn file:

Then that is not the file causing the error.

febox

How can this be possible?

If I right-click OpenVPN's tray icon, then the profile's name, then "Edit config", I get this file. If I click CONNECT, I get this error.

Also, the log file as the same name as this ovpn file.

TinCanTech

The config file you have posted does not have --pull-filter in it so this file can not trigger this error.

febox

That's the reason for my post - I was even looking through the code responsible for this error. It makes no sense at all.

There's any way to debug this? As I've said before there's only 1 profile, 1 ovpn file, 1 log - all with the same name. This OVPN file IS triggering this error. For example, if I rename the OVPN file in my first post the tray icon profile name is also updated and if I click CONNECT I get the same error. Maybe there's some universal configuration that is being considered?

Already uninstalled OpenVPN (with Revo Uninstaller) and re-installed with the same results. I've also recreated all keys and certificates and the OVPN file, same thing.

TinCanTech

If you are using the OpenVPN-GUI then make sure you are looking in the correct folder.

Either under Program Files or under your User folder.
https://community.openvpn.net/openvpn/wiki/OpenVPN-GUI-New

febox

This is my current setup:

Folder: C:\Program Files\OpenVPN\config
Files: ca.crt, dh1024.pem, server.crt, server.key, ta.key

Folder: C:\Users\user\OpenVPN\config
Files: server.opn
Content:

port 3324
proto udp
dev tun
dev-node TAP
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 9
explicit-exit-notify 1

Tray icon: Right click, CONNECT, error.

Folder: C:\Users\user\OpenVPN\log
Files: server.log
Content:

Options error: --pull-filter cannot be used with --mode server
Use --help for more information.

TinCanTech

It appears you are correct and I am wrong (again..) sorry about that :oops:

In fact, --pull-filter is added to the openvpn config by the GUI itself to counter some other issues.

For now, please try starting your server config from the command line and I'll confirm the problem and update you.

Update: https://community.openvpn.net/openvpn/ticket/1164#ticket

febox

Thank you, it worked.

carlox97

I had the same problem with a correctly configfurated server, turned out starting OpenVPN GUI with admin rights prevented this error from happening.

bigzdog

Thanks for this. Same error here after updating to latest version

Vonage

As we are here to give you all the information about the Vonage Business Login in this article. Which will help you to understand about the Vonage Business Login

ezforumuser

TinCanTech wrote For now, please try starting your server config from the command line and I'll confirm the problem and update you.

Is it possible to get from you (or others?) specific instructions on how to do this (assuming it's the best way to work around the problem with --mode server)?

We have a couple of new Windows Server 2016 instances that we want to connect to our VPN (which is the commercial OpenVPN-AS)... not being Windows Server experts, we aren't sure how to do that with the OpenVPN-GUI installer for Windows Server (and commercial OpenVPN support is no help).

What we've tried thus far is installing the OpenVPN GUI download for Windows Server, putting the autologin profile in "Program Files/OpenVPN/config", starting the "OpenVPNService" Service, and setting its startup type to Automatic. That client account connects, but when the Admin account on the server signs out (of the RDP session), the connection to the VPN is dropped. Being a server, we want it connected 24/7.

We connected the VPN with command line $> openvpn --config profilename.ovpn and it will connect... but again, when the admin user disconnects it closes that Command Window and stops the connection.

Thanks for any help.

TinCanTech

ezforumuser wrote We have a couple of new Windows Server 2016 instances that we want to connect to our VPN (which is the commercial OpenVPN-AS

OpenVPN Access Server is not Openvpn Community edition.

ezforumuser wrote not being Windows Server experts

That's a shame ......

ezforumuser wrote and commercial OpenVPN support is no help

If you are not satisfied you can contact me here: tincanteksup <at> gmail

For further help Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603