Setting OpenVPN Communication error

flatoveloz

Hello forum, I'm trying to connect to my OpenVPN Server and I'm getting a timeout when connecting , I've tried through a linux client and it times out with the log error:

root@XXXX:~# sudo openvpn --config /XXXX.ovpn
Tue Mar 12 11:38:20 2019 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Tue Mar 12 11:38:20 2019 library versions: OpenSSL 1.1.1a  20 Nov 2018, LZO 2.10
Tue Mar 12 11:38:20 2019 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Mar 12 11:38:20 2019 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 12 11:38:20 2019 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 12 11:38:20 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]X.X.X.X:1194
Tue Mar 12 11:38:20 2019 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Mar 12 11:38:20 2019 Attempting to establish TCP connection with [AF_INET]X.X.X.X:1194 [nonblock]
Tue Mar 12 11:40:20 2019 TCP: connect to [AF_INET]X.X.X.X:1194 failed: Connection timed out
Tue Mar 12 11:40:20 2019 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Tue Mar 12 11:40:20 2019 SIGUSR1[connection failed(soft),init_ins

My OpenVPN server is behind a router and i have configured it so that the traffic coming from internet in port 1194, redirects to the internal IP of the server. Besides science my ISP has a dinamic IP, I've set in my client conf a Dyndns name so that the client can connect to my router.

Follows relevant logs and conf files

I'm new at this forum please bear with me if something is missing, I'll post more information if needed.

Thanks in advance

Server Configuration:

# Which local IP address should OpenVPN
# listen on? (optional)
;local a.b.c.d

# Which TCP/UDP port should OpenVPN listen on?
# If you want to run multiple OpenVPN instances
# on the same machine, use a different port
# number for each one. You will need to
# open up this port on your firewall.
port 1194

# TCP or UDP server?
proto tcp
;proto udp

# "dev tun" will create a routed IP tunnel,
# "dev tap" will create an ethernet tunnel.
# Use "dev tap0" if you are ethernet bridging
# and have precreated a tap0 virtual interface
# and bridged it with your ethernet interface.
# If you want to control access policies
# over the VPN, you must create firewall
# rules for the the TUN/TAP interface.
# On non-Windows systems, you can give
# an explicit unit number, such as tun0.
# On Windows, use "dev-node" for this.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel if you
# have more than one. On XP SP2 or higher,
# you may need to selectively disable the
# Windows firewall for the TAP adapter.
# Non-Windows systems usually don't need this.
;dev-node MyTap

# SSL/TLS root certificate (ca), certificate
# (cert), and private key (key). Each client
# and the server must have their own cert and
# key file. The server and all clients will
# use the same ca file.
#
# See the "easy-rsa" directory for a series
# of scripts for generating RSA certificates
# and private keys. Remember to use
# a unique Common Name for the server
# and each of the client certificates.
#
# Any X509 key management system can be used.
# OpenVPN can also use a PKCS #12 formatted key file
# (see "pkcs12" directive in man page).
ca ca.crt
cert server.crt
key server.key # This file should be kept secret

# Diffie hellman parameters.
# Generate your own with:
# openssl dhparam -out dh2048.pem 2048
dh dh.pem

# Network topology
# Should be subnet (addressing via IP)
# unless Windows clients v2.0.9 and lower have to
# be supported (then net30, i.e. a /30 per client)
# Defaults to net30 (not recommended)
;topology subnet

# Configure server mode and supply a VPN subnet
# for OpenVPN to draw client addresses from.
# The server will take 10.8.0.1 for itself,
# the rest will be made available to clients.
# Each client will be able to reach the server
# on 10.8.0.1. Comment this line out if you are
# ethernet bridging. See the man page for more info.
server 10.8.0.0 255.255.255.0

# Maintain a record of client <-> virtual IP address
# associations in this file. If OpenVPN goes down or
# is restarted, reconnecting clients can be assigned
# the same virtual IP address from the pool that was
# previously assigned.
ifconfig-pool-persist /var/log/openvpn/ipp.txt

# Configure server mode for ethernet bridging.
# You must first use your OS's bridging capability
# to bridge the TAP interface with the ethernet
# NIC interface. Then you must manually set the
# IP/netmask on the bridge interface, here we
# assume 10.8.0.4/255.255.255.0. Finally we
# must set aside an IP range in this subnet
# (start=10.8.0.50 end=10.8.0.100) to allocate
# to connecting clients. Leave this line commented
# out unless you are ethernet bridging.
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

# Configure server mode for ethernet bridging
# using a DHCP-proxy, where clients talk
# to the OpenVPN server-side DHCP server
# to receive their IP address allocation
# and DNS server addresses. You must first use
# your OS's bridging capability to bridge the TAP
# interface with the ethernet NIC interface.
# Note: this mode only works on clients (such as
# Windows), where the client-side TAP adapter is
# bound to a DHCP client.
;server-bridge

# Push routes to the client to allow it
# to reach other private subnets behind
# the server. Remember that these
# private subnets will also need
# to know to route the OpenVPN client
# address pool (10.8.0.0/255.255.255.0)
# back to the OpenVPN server.
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

# To assign specific IP addresses to specific
# clients or if a connecting client has a private
# subnet behind it that should also have VPN access,
# use the subdirectory "ccd" for client-specific
# configuration files (see man page for more info).

# EXAMPLE: Suppose the client
# having the certificate common name "Thelonious"
# also has a small subnet behind his connecting
# machine, such as 192.168.40.128/255.255.255.248.
# First, uncomment out these lines:
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
# Then create a file ccd/Thelonious with this line:
# iroute 192.168.40.128 255.255.255.248
# This will allow Thelonious' private subnet to
# access the VPN. This example will only work
# if you are routing, not bridging, i.e. you are
# using "dev tun" and "server" directives.

# EXAMPLE: Suppose you want to give
# Thelonious a fixed VPN IP address of 10.9.0.1.
# First uncomment out these lines:
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
# Then add this line to ccd/Thelonious:
# ifconfig-push 10.9.0.1 10.9.0.2

# Suppose that you want to enable different
# firewall access policies for different groups
# of clients. There are two methods:
# (1) Run multiple OpenVPN daemons, one for each
# group, and firewall the TUN/TAP interface
# for each group/daemon appropriately.
# (2) (Advanced) Create a script to dynamically
# modify the firewall in response to access
# from different clients. See man
# page for more info on learn-address script.
;learn-address ./script

# If enabled, this directive will configure
# all clients to redirect their default
# network gateway through the VPN, causing
# all IP traffic such as web browsing and
# and DNS lookups to go through the VPN
# (The OpenVPN server machine may need to NAT
# or bridge the TUN/TAP interface to the internet
# in order for this to work properly).
push "redirect-gateway def1 bypass-dhcp"

# Certain Windows-specific network settings
# can be pushed to clients, such as DNS
# or WINS server addresses. CAVEAT:
# http://openvpn.net/faq.html#dhcpcaveats
# The addresses below refer to the public
# DNS servers provided by opendns.com.
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"

# Uncomment this directive to allow different
# clients to be able to "see" each other.
# By default, clients will only see the server.
# To force clients to only see the server, you
# will also need to appropriately firewall the
# server's TUN/TAP interface.
;client-to-client

# Uncomment this directive if multiple clients
# might connect with the same certificate/key
# files or common names. This is recommended
# only for testing purposes. For production use,
# each client should have its own certificate/key
# pair.
#
# IF YOU HAVE NOT GENERATED INDIVIDUAL
# CERTIFICATE/KEY PAIRS FOR EACH CLIENT,
# EACH HAVING ITS OWN UNIQUE "COMMON NAME",
# UNCOMMENT THIS LINE OUT.
;duplicate-cn

# The keepalive directive causes ping-like
# messages to be sent back and forth over
# the link so that each side knows when
# the other side has gone down.
# Ping every 10 seconds, assume that remote
# peer is down if no ping received during
# a 120 second time period.
keepalive 10 120

# For extra security beyond that provided
# by SSL/TLS, create an "HMAC firewall"
# to help block DoS attacks and UDP port flooding.
#
# Generate with:
# openvpn --genkey --secret ta.key
#
# The server and each client must have
# a copy of this key.
# The second parameter should be '0'
# on the server and '1' on the clients.
tls-auth ta.key 0 # This file is secret
key-direction 0

# Select a cryptographic cipher.
# This config item must be copied to
# the client config file as well.
# Note that v2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
auth SHA256

# Enable compression on the VPN link and push the
# option to the client (v2.4+ only, for earlier
# versions see below)
;compress lz4-v2
;push "compress lz4-v2"

# For compression compatible with older clients use comp-lzo
# If you enable it here, you must also
# enable it in the client config file.
;comp-lzo

# The maximum number of concurrently connected
# clients we want to allow.
;max-clients 100

# It's a good idea to reduce the OpenVPN
# daemon's privileges after initialization.
#
# You can uncomment this out on
# non-Windows systems.
user nobody
group nogroup

# The persist options will try to avoid
# accessing certain resources on restart
# that may no longer be accessible because
# of the privilege downgrade.
persist-key
persist-tun

# Output a short status file showing
# current connections, truncated
# and rewritten every minute.
status /var/log/openvpn/openvpn-status.log

# By default, log messages will go to the syslog (or
# on Windows, if running as a service, they will go to
# the "\Program Files\OpenVPN\log" directory).
# Use log or log-append to override this default.
# "log" will truncate the log file on OpenVPN startup,
# while "log-append" will append to it. Use one
# or the other (but not both).
;log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log

# Set the appropriate level of log
# file verbosity.
#
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 4

# Silence repeating messages. At most 20
# sequential messages of the same message
# category will be output to the log.
;mute 20

# Notify the client that when the server restarts so it
# can automatically reconnect.
explicit-exit-notify 0

Client Configuration:

Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap

# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
proto tcp
;proto udp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote XXXXXX.dyndns.org 1194
;remote my-server-2 1194

# Choose a random host from the remote
# list for load-balancing. Otherwise
# try hosts in the order specified.
;remote-random

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Downgrade privileges after initialization (non-Windows only)
user nobody
group nogroup

# Try to preserve some state across restarts.
persist-key
persist-tun

# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings

# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
#ca ca.crt
#cert client.crt
#key client.key

# Verify server certificate by checking that the
# certicate has the correct key usage set.
# This is an important precaution to protect against
# a potential attack discussed here:
# http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the keyUsage set to
# digitalSignature, keyEncipherment
# and the extendedKeyUsage to
# serverAuth
# EasyRSA can do this for you.
remote-cert-tls server

# If a tls-auth key is used on the server
# then every client must also have the key.
#tls-auth ta.key 1

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
# Note that v2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
auth SHA256
key-direction 1

#Solo para clientes de linux
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
#If your client is running Linux and has an /etc/openvpn/update-resolv-conf file, uncomment these lines from the
#client???s configuration file after it has been generated.If your client is running Linux and has an /etc/openvpn/update-resolv-conf file,
#uncomment these lines from the client???s configuration file after it has been generated.

# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
#comp-lzo

# Set log file verbosity.
verb 3

# Silence repeating messages
;mute 20
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Easy-RSA CA
Validity
Not Before: Mar 6 18:28:37 2019 GMT
Not After : Mar 3 18:28:37 2029 GMT
Subject: CN=sandman
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
X509v3 Authority Key Identifier:
keyid:
DirName:/CN=Easy-RSA CA
serial:

X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----</tls-auth>

Server Log File

[oconf= Server Log File]
#(--verb 4)
Tue Mar 12 12:01:05 2019 us=33924 Current Parameter Settings:
Tue Mar 12 12:01:05 2019 us=62318   config = '/etc/openvpn/server.conf'
Tue Mar 12 12:01:05 2019 us=62344   mode = 1
Tue Mar 12 12:01:05 2019 us=62352   persist_config = DISABLED
Tue Mar 12 12:01:05 2019 us=62359   persist_mode = 1
Tue Mar 12 12:01:05 2019 us=62365   show_ciphers = DISABLED
Tue Mar 12 12:01:05 2019 us=62372   show_digests = DISABLED
Tue Mar 12 12:01:05 2019 us=62386   show_engines = DISABLED
Tue Mar 12 12:01:05 2019 us=62392   genkey = DISABLED
Tue Mar 12 12:01:05 2019 us=62399   key_pass_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62405   show_tls_ciphers = DISABLED
Tue Mar 12 12:01:05 2019 us=62420   connect_retry_max = 0
Tue Mar 12 12:01:05 2019 us=62427 Connection profiles [0]:
Tue Mar 12 12:01:05 2019 us=62434   proto = tcp-server
Tue Mar 12 12:01:05 2019 us=62440   local = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62455   local_port = '1194'
Tue Mar 12 12:01:05 2019 us=62461   remote = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62467   remote_port = '1194'
Tue Mar 12 12:01:05 2019 us=62473   remote_float = DISABLED
Tue Mar 12 12:01:05 2019 us=62480   bind_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=62486   bind_local = ENABLED
Tue Mar 12 12:01:05 2019 us=62492   bind_ipv6_only = DISABLED
Tue Mar 12 12:01:05 2019 us=62498   connect_retry_seconds = 5
Tue Mar 12 12:01:05 2019 us=62504   connect_timeout = 120
Tue Mar 12 12:01:05 2019 us=62511   socks_proxy_server = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62517   socks_proxy_port = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62523   tun_mtu = 1500
Tue Mar 12 12:01:05 2019 us=62529   tun_mtu_defined = ENABLED
Tue Mar 12 12:01:05 2019 us=62535   link_mtu = 1500
Tue Mar 12 12:01:05 2019 us=62548   link_mtu_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=62555   tun_mtu_extra = 0
Tue Mar 12 12:01:05 2019 us=62561   tun_mtu_extra_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=62575   mtu_discover_type = -1
Tue Mar 12 12:01:05 2019 us=62581   fragment = 0
Tue Mar 12 12:01:05 2019 us=62587   mssfix = 1450
Tue Mar 12 12:01:05 2019 us=62593   explicit_exit_notification = 0
Tue Mar 12 12:01:05 2019 us=62598 Connection profiles END
Tue Mar 12 12:01:05 2019 us=62604   remote_random = DISABLED
Tue Mar 12 12:01:05 2019 us=62610   ipchange = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62615   dev = 'tun'
Tue Mar 12 12:01:05 2019 us=62621   dev_type = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62627   dev_node = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62632   lladdr = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62638   topology = 1
Tue Mar 12 12:01:05 2019 us=62644   ifconfig_local = '10.8.0.1'
Tue Mar 12 12:01:05 2019 us=62650   ifconfig_remote_netmask = '10.8.0.2'
Tue Mar 12 12:01:05 2019 us=62655   ifconfig_noexec = DISABLED
Tue Mar 12 12:01:05 2019 us=62661   ifconfig_nowarn = DISABLED
Tue Mar 12 12:01:05 2019 us=62666   ifconfig_ipv6_local = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62672   ifconfig_ipv6_netbits = 0
Tue Mar 12 12:01:05 2019 us=62678   ifconfig_ipv6_remote = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62683   shaper = 0
Tue Mar 12 12:01:05 2019 us=62689   mtu_test = 0
Tue Mar 12 12:01:05 2019 us=62695   mlock = DISABLED
Tue Mar 12 12:01:05 2019 us=62701   keepalive_ping = 10
Tue Mar 12 12:01:05 2019 us=62706   keepalive_timeout = 120
Tue Mar 12 12:01:05 2019 us=62712   inactivity_timeout = 0
Tue Mar 12 12:01:05 2019 us=62717   ping_send_timeout = 10
Tue Mar 12 12:01:05 2019 us=62723   ping_rec_timeout = 240
Tue Mar 12 12:01:05 2019 us=62729   ping_rec_timeout_action = 2
Tue Mar 12 12:01:05 2019 us=62734   ping_timer_remote = DISABLED
Tue Mar 12 12:01:05 2019 us=62740   remap_sigusr1 = 0
Tue Mar 12 12:01:05 2019 us=62746   persist_tun = ENABLED
Tue Mar 12 12:01:05 2019 us=62751   persist_local_ip = DISABLED
Tue Mar 12 12:01:05 2019 us=62757   persist_remote_ip = DISABLED
Tue Mar 12 12:01:05 2019 us=62762   persist_key = ENABLED
Tue Mar 12 12:01:05 2019 us=62768   passtos = DISABLED
Tue Mar 12 12:01:05 2019 us=62774   resolve_retry_seconds = 1000000000
Tue Mar 12 12:01:05 2019 us=62779   resolve_in_advance = DISABLED
Tue Mar 12 12:01:05 2019 us=62785   username = 'nobody'
Tue Mar 12 12:01:05 2019 us=62791   groupname = 'nogroup'
Tue Mar 12 12:01:05 2019 us=62796   chroot_dir = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62802   cd_dir = '/etc/openvpn'
Tue Mar 12 12:01:05 2019 us=62808   writepid = '/run/openvpn/server.pid'
Tue Mar 12 12:01:05 2019 us=62813   up_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62819   down_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62824   down_pre = DISABLED
Tue Mar 12 12:01:05 2019 us=62830   up_restart = DISABLED
Tue Mar 12 12:01:05 2019 us=62836   up_delay = DISABLED
Tue Mar 12 12:01:05 2019 us=62841   daemon = ENABLED
Tue Mar 12 12:01:05 2019 us=62847   inetd = 0
Tue Mar 12 12:01:05 2019 us=62853   log = ENABLED
Tue Mar 12 12:01:05 2019 us=62858   suppress_timestamps = DISABLED
Tue Mar 12 12:01:05 2019 us=62864   machine_readable_output = DISABLED
Tue Mar 12 12:01:05 2019 us=62869   nice = 0
Tue Mar 12 12:01:05 2019 us=62875   verbosity = 4
Tue Mar 12 12:01:05 2019 us=62880   mute = 0
Tue Mar 12 12:01:05 2019 us=62886   gremlin = 0
Tue Mar 12 12:01:05 2019 us=62892   status_file = '/var/log/openvpn/openvpn-status.log'
Tue Mar 12 12:01:05 2019 us=62897   status_file_version = 1
Tue Mar 12 12:01:05 2019 us=62903   status_file_update_freq = 10
Tue Mar 12 12:01:05 2019 us=62909   occ = ENABLED
Tue Mar 12 12:01:05 2019 us=62914   rcvbuf = 0
Tue Mar 12 12:01:05 2019 us=62920   sndbuf = 0
Tue Mar 12 12:01:05 2019 us=62926   mark = 0
Tue Mar 12 12:01:05 2019 us=62931   sockflags = 0
Tue Mar 12 12:01:05 2019 us=62937   fast_io = DISABLED
Tue Mar 12 12:01:05 2019 us=62942   comp.alg = 0
Tue Mar 12 12:01:05 2019 us=62948   comp.flags = 0
Tue Mar 12 12:01:05 2019 us=62954   route_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62962   route_default_gateway = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=62969   route_default_metric = 0
Tue Mar 12 12:01:05 2019 us=62974   route_noexec = DISABLED
Tue Mar 12 12:01:05 2019 us=62980   route_delay = 0
Tue Mar 12 12:01:05 2019 us=62986   route_delay_window = 30
Tue Mar 12 12:01:05 2019 us=62991   route_delay_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=62997   route_nopull = DISABLED
Tue Mar 12 12:01:05 2019 us=63003   route_gateway_via_dhcp = DISABLED
Tue Mar 12 12:01:05 2019 us=63008   allow_pull_fqdn = DISABLED
Tue Mar 12 12:01:05 2019 us=63015   route 10.8.0.0/255.255.255.0/default (not set)/default (not set)
Tue Mar 12 12:01:05 2019 us=63021   management_addr = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63027   management_port = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63032   management_user_pass = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63038   management_log_history_cache = 250
Tue Mar 12 12:01:05 2019 us=63044   management_echo_buffer_size = 100
Tue Mar 12 12:01:05 2019 us=63050   management_write_peer_info_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63056   management_client_user = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63062   management_client_group = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63068   management_flags = 0
Tue Mar 12 12:01:05 2019 us=63073   shared_secret_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63079   key_direction = 1
Tue Mar 12 12:01:05 2019 us=63085   ciphername = 'AES-256-CBC'
Tue Mar 12 12:01:05 2019 us=63091   ncp_enabled = ENABLED
Tue Mar 12 12:01:05 2019 us=63097   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Mar 12 12:01:05 2019 us=63103   authname = 'SHA256'
Tue Mar 12 12:01:05 2019 us=63108   prng_hash = 'SHA1'
Tue Mar 12 12:01:05 2019 us=63114   prng_nonce_secret_len = 16
Tue Mar 12 12:01:05 2019 us=63120   keysize = 0
Tue Mar 12 12:01:05 2019 us=63126   engine = DISABLED
Tue Mar 12 12:01:05 2019 us=63131   replay = ENABLED
Tue Mar 12 12:01:05 2019 us=63137   mute_replay_warnings = DISABLED
Tue Mar 12 12:01:05 2019 us=63143   replay_window = 64
Tue Mar 12 12:01:05 2019 us=63149   replay_time = 15
Tue Mar 12 12:01:05 2019 us=63154   packet_id_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63160   use_iv = ENABLED
Tue Mar 12 12:01:05 2019 us=63166   test_crypto = DISABLED
Tue Mar 12 12:01:05 2019 us=63171   tls_server = ENABLED
Tue Mar 12 12:01:05 2019 us=63177   tls_client = DISABLED
Tue Mar 12 12:01:05 2019 us=63183   key_method = 2
Tue Mar 12 12:01:05 2019 us=63189   ca_file = 'ca.crt'
Tue Mar 12 12:01:05 2019 us=63194   ca_path = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63200   dh_file = 'dh.pem'
Tue Mar 12 12:01:05 2019 us=63206   cert_file = 'server.crt'
Tue Mar 12 12:01:05 2019 us=63212   extra_certs_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63218   priv_key_file = 'server.key'
Tue Mar 12 12:01:05 2019 us=63223   pkcs12_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63229   cipher_list = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63235   tls_verify = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63240   tls_export_cert = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63246   verify_x509_type = 0
Tue Mar 12 12:01:05 2019 us=63252   verify_x509_name = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63258   crl_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63263   ns_cert_type = 0
Tue Mar 12 12:01:05 2019 us=63269   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63275   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63280   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63286   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63292   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63297   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63303   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63309   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63314   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63320   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63325   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63331   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63337   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63342   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63351   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63358   remote_cert_ku[i] = 0
Tue Mar 12 12:01:05 2019 us=63363   remote_cert_eku = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63369   ssl_flags = 0
Tue Mar 12 12:01:05 2019 us=63375   tls_timeout = 2
Tue Mar 12 12:01:05 2019 us=63381   renegotiate_bytes = -1
Tue Mar 12 12:01:05 2019 us=63386   renegotiate_packets = 0
Tue Mar 12 12:01:05 2019 us=63392   renegotiate_seconds = 3600
Tue Mar 12 12:01:05 2019 us=63398   handshake_window = 60
Tue Mar 12 12:01:05 2019 us=63404   transition_window = 3600
Tue Mar 12 12:01:05 2019 us=63410   single_session = DISABLED
Tue Mar 12 12:01:05 2019 us=63415   push_peer_info = DISABLED
Tue Mar 12 12:01:05 2019 us=63421   tls_exit = DISABLED
Tue Mar 12 12:01:05 2019 us=63427   tls_auth_file = 'ta.key'
Tue Mar 12 12:01:05 2019 us=63433   tls_crypt_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63438   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63444   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63450   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63458   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63464   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63470   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63476   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63482   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63487   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63493   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63499   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63505   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63510   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63516   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63522   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63528   pkcs11_protected_authentication = DISABLED
Tue Mar 12 12:01:05 2019 us=63534   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63540   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63545   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63551   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63557   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63563   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63569   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63574   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63580   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63586   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63592   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63598   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63603   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63609   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63615   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63620   pkcs11_private_mode = 00000000
Tue Mar 12 12:01:05 2019 us=63626   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63632   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63637   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63643   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63648   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63654   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63660   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63665   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63671   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63677   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63682   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63688   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63694   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63702   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63708   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63714   pkcs11_cert_private = DISABLED
Tue Mar 12 12:01:05 2019 us=63720   pkcs11_pin_cache_period = -1
Tue Mar 12 12:01:05 2019 us=63726   pkcs11_id = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63731   pkcs11_id_management = DISABLED
Tue Mar 12 12:01:05 2019 us=63738   server_network = 10.8.0.0
Tue Mar 12 12:01:05 2019 us=63744   server_netmask = 255.255.255.0
Tue Mar 12 12:01:05 2019 us=63751   server_network_ipv6 = ::
Tue Mar 12 12:01:05 2019 us=63757   server_netbits_ipv6 = 0
Tue Mar 12 12:01:05 2019 us=63763   server_bridge_ip = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63769   server_bridge_netmask = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63775   server_bridge_pool_start = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63782   server_bridge_pool_end = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63787   push_entry = 'redirect-gateway def1 bypass-dhcp'
Tue Mar 12 12:01:05 2019 us=63793   push_entry = 'dhcp-option DNS 208.67.222.222'
Tue Mar 12 12:01:05 2019 us=63799   push_entry = 'dhcp-option DNS 208.67.220.220'
Tue Mar 12 12:01:05 2019 us=63805   push_entry = 'route 10.8.0.1'
Tue Mar 12 12:01:05 2019 us=63811   push_entry = 'topology net30'
Tue Mar 12 12:01:05 2019 us=63816   push_entry = 'ping 10'
Tue Mar 12 12:01:05 2019 us=63822   push_entry = 'ping-restart 120'
Tue Mar 12 12:01:05 2019 us=63828   ifconfig_pool_defined = ENABLED
Tue Mar 12 12:01:05 2019 us=63834   ifconfig_pool_start = 10.8.0.4
Tue Mar 12 12:01:05 2019 us=63840   ifconfig_pool_end = 10.8.0.251
Tue Mar 12 12:01:05 2019 us=63846   ifconfig_pool_netmask = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63852   ifconfig_pool_persist_filename = '/var/log/openvpn/ipp.txt'
Tue Mar 12 12:01:05 2019 us=63858   ifconfig_pool_persist_refresh_freq = 600
Tue Mar 12 12:01:05 2019 us=63864   ifconfig_ipv6_pool_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=63870   ifconfig_ipv6_pool_base = ::
Tue Mar 12 12:01:05 2019 us=63876   ifconfig_ipv6_pool_netbits = 0
Tue Mar 12 12:01:05 2019 us=63882   n_bcast_buf = 256
Tue Mar 12 12:01:05 2019 us=63887   tcp_queue_limit = 64
Tue Mar 12 12:01:05 2019 us=63893   real_hash_size = 256
Tue Mar 12 12:01:05 2019 us=63899   virtual_hash_size = 256
Tue Mar 12 12:01:05 2019 us=63905   client_connect_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63910   learn_address_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63916   client_disconnect_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63922   client_config_dir = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=63927   ccd_exclusive = DISABLED
Tue Mar 12 12:01:05 2019 us=63933   tmp_dir = '/tmp'
Tue Mar 12 12:01:05 2019 us=63939   push_ifconfig_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=63945   push_ifconfig_local = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63953   push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 12 12:01:05 2019 us=63959   push_ifconfig_ipv6_defined = DISABLED
Tue Mar 12 12:01:05 2019 us=63966   push_ifconfig_ipv6_local = ::/0
Tue Mar 12 12:01:05 2019 us=63972   push_ifconfig_ipv6_remote = ::
Tue Mar 12 12:01:05 2019 us=63978   enable_c2c = DISABLED
Tue Mar 12 12:01:05 2019 us=63983   duplicate_cn = DISABLED
Tue Mar 12 12:01:05 2019 us=63989   cf_max = 0
Tue Mar 12 12:01:05 2019 us=63995   cf_per = 0
Tue Mar 12 12:01:05 2019 us=64001   max_clients = 1024
Tue Mar 12 12:01:05 2019 us=64007   max_routes_per_client = 256
Tue Mar 12 12:01:05 2019 us=64012   auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=64018   auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 12 12:01:05 2019 us=64024   auth_token_generate = DISABLED
Tue Mar 12 12:01:05 2019 us=64029   auth_token_lifetime = 0
Tue Mar 12 12:01:05 2019 us=64035   port_share_host = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=64041   port_share_port = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=64046   client = DISABLED
Tue Mar 12 12:01:05 2019 us=64052   pull = DISABLED
Tue Mar 12 12:01:05 2019 us=64058   auth_user_pass_file = '[UNDEF]'
Tue Mar 12 12:01:05 2019 us=64065 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep  5 2018
Tue Mar 12 12:01:05 2019 us=64078 library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.08
Tue Mar 12 12:01:05 2019 us=64257 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Mar 12 12:01:05 2019 us=109752 Diffie-Hellman initialized with 2048 bit key
Tue Mar 12 12:01:05 2019 us=139941 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 12 12:01:05 2019 us=139962 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 12 12:01:05 2019 us=139974 TLS-Auth MTU parms [ L:1623 D:1170 EF:80 EB:0 ET:0 EL:3 ]
Tue Mar 12 12:01:05 2019 us=140375 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eno1 HWADDR=2c:27:d7:44:e2:d9
Tue Mar 12 12:01:05 2019 us=140628 TUN/TAP device tun0 opened
Tue Mar 12 12:01:05 2019 us=140678 TUN/TAP TX queue length set to 100
Tue Mar 12 12:01:05 2019 us=140697 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Mar 12 12:01:05 2019 us=140721 /sbin/ip link set dev tun0 up mtu 1500
Tue Mar 12 12:01:05 2019 us=455080 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Tue Mar 12 12:01:05 2019 us=456547 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Tue Mar 12 12:01:05 2019 us=457735 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Mar 12 12:01:05 2019 us=458363 Could not determine IPv4/IPv6 protocol. Using AF_INET
Tue Mar 12 12:01:05 2019 us=458416 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Mar 12 12:01:05 2019 us=458463 Listening for incoming TCP connection on [AF_INET][undef]:1194
Tue Mar 12 12:01:05 2019 us=458504 TCPv4_SERVER link local (bound): [AF_INET][undef]:1194
Tue Mar 12 12:01:05 2019 us=458531 TCPv4_SERVER link remote: [AF_UNSPEC]
Tue Mar 12 12:01:05 2019 us=458550 GID set to nogroup
Tue Mar 12 12:01:05 2019 us=458570 UID set to nobody
Tue Mar 12 12:01:05 2019 us=458592 MULTI: multi_init called, r=256 v=256
Tue Mar 12 12:01:05 2019 us=458628 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Tue Mar 12 12:01:05 2019 us=458657 IFCONFIG POOL LIST
Tue Mar 12 12:01:05 2019 us=458690 MULTI: TCP INIT maxclients=1024 maxevents=1028
Tue Mar 12 12:01:05 2019 us=458759 Initialization Sequence Completed
[/oconf]
[code]

TinCanTech

flatoveloz wrote Tue Mar 12 11:38:20 2019 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019

flatoveloz wrote Tue Mar 12 12:01:05 2019 us=64065 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018

Your server was not running at the time.

flatoveloz

TinCanTech wrote Your server was not running at the time.

It is running, I can assure it. It's in front of me.

TinCanTech

Yes ... but was it running at the time you took your log ?

flatoveloz

Hi just figured out this matter, my DynDns updater soft, was not functioning, so i was hitting the wrong public IP address.

Thanks!

TinCanTech

Thanks for updating your thread 8-)