Connected to VPN, but no access to internet

thompol

I have the VPN package of Synology installed on several NAS systems. Recently I noticed that when connecting from my laptop, I can't access any external servers anymore. I have this issue with all of the NAS systems. But, when connecting from any other system (phone, desktop, etc) to any of the servers it works fine, with exact the same config.

Other things i tried (hope I dont forget any):
- Restart NAS systems
- Restart laptop
- Reinstall OpenVPN + TAP
- Change DNS settings
- Ping 8.8.8.8 - no connection
- Traceroute to 8.8.8.8 - no connection at all
- Change domain name in config to IP adress
- Remove 10.8.0.1 as DNS server

I checked the firewall of the NAS systems, they allow outgoing traffic from my IP range. And, as said, I only experience this issue from my laptop, none of my other devices are experiencing it, while on the same config.

I'm on Windows 8.1.

My .ovpn file (of one of the servers):
[oconf=]dev tun
tls-client

remote XX.XXX.nl 1194

redirect-gateway def1
pull
proto udp
block-outside-dns
script-security 2
dhcp-option DNS 192.168.0.11
dhcp-option DNS 10.8.0.1
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
XXXXX
-----END CERTIFICATE-----
</ca>[/oconf]

Hope anybody is able to help.

TinCanTech

Please see: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

thompol

Local log:

Thu Apr 04 22:14:37 2019 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Thu Apr 04 22:14:37 2019 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Apr 04 22:14:37 2019 library versions: OpenSSL 1.1.0j  20 Nov 2018, LZO 2.10
Enter Management Password:
Thu Apr 04 22:14:40 2019 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Apr 04 22:14:41 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]X.X.X:1194
Thu Apr 04 22:14:41 2019 UDP link local (bound): [AF_INET][undef]:1194
Thu Apr 04 22:14:41 2019 UDP link remote: [AF_INET]X.X.X:1194
Thu Apr 04 22:14:41 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Apr 04 22:14:43 2019 [synology.com] Peer Connection Initiated with [AF_INET]X.X.X.X:1194
Thu Apr 04 22:14:44 2019 open_tun
Thu Apr 04 22:14:44 2019 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{E6EA51D4-6122-4016-A477-C6122B0E404B}.tap
Thu Apr 04 22:14:44 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {E6EA51D4-6122-4016-A477-C6122B0E404B} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Thu Apr 04 22:14:44 2019 Successful ARP Flush on interface [8] {E6EA51D4-6122-4016-A477-C6122B0E404B}
Thu Apr 04 22:14:44 2019 Blocking outside dns using service succeeded.
Thu Apr 04 22:14:49 2019 Initialization Sequence Completed

thompol

TinCanTech wrote Please see: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

[olog]Thu Apr 04 22:22:10 2019 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Thu Apr 04 22:22:10 2019 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Apr 04 22:22:10 2019 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Enter Management Password:
Thu Apr 04 22:22:12 2019 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Apr 04 22:22:12 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]X.X.X.X:1194
Thu Apr 04 22:22:12 2019 UDP link local (bound): [AF_INET][undef]:1194
Thu Apr 04 22:22:12 2019 UDP link remote: [AF_INET]X.X.X.X:1194
Thu Apr 04 22:22:12 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Apr 04 22:22:15 2019 [synology.com] Peer Connection Initiated with [AF_INET]X.X.X.X:1194
Thu Apr 04 22:22:16 2019 open_tun
Thu Apr 04 22:22:16 2019 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{E6EA51D4-6122-4016-A477-C6122B0E404B}.tap
Thu Apr 04 22:22:16 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {E6EA51D4-6122-4016-A477-C6122B0E404B} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Thu Apr 04 22:22:16 2019 Successful ARP Flush on interface [8] {E6EA51D4-6122-4016-A477-C6122B0E404B}
Thu Apr 04 22:22:16 2019 Blocking outside dns using service succeeded.
Thu Apr 04 22:22:21 2019 Initialization Sequence Completed
Thu Apr 04 22:25:10 2019 [synology.com] Inactivity timeout (--ping-restart), restarting
Thu Apr 04 22:25:11 2019 Unblocking outside dns using service succeeded.
Thu Apr 04 22:25:11 2019 SIGUSR1[soft,ping-restart] received, process restarting
Thu Apr 04 22:25:16 2019 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Apr 04 22:25:16 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]X.X.X.X:1194
Thu Apr 04 22:25:16 2019 UDP link local (bound): [AF_INET][undef]:1194
Thu Apr 04 22:25:16 2019 UDP link remote: [AF_INET]X.X.X.X:1194
Thu Apr 04 22:25:17 2019 [synology.com] Peer Connection Initiated with [AF_INET]X.X.X.X:1194
Thu Apr 04 22:25:19 2019 open_tun
Thu Apr 04 22:25:19 2019 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{E6EA51D4-6122-4016-A477-C6122B0E404B}.tap
Thu Apr 04 22:25:19 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {E6EA51D4-6122-4016-A477-C6122B0E404B} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Thu Apr 04 22:25:19 2019 Successful ARP Flush on interface [8] {E6EA51D4-6122-4016-A477-C6122B0E404B}
Thu Apr 04 22:25:19 2019 Blocking outside dns using service succeeded.[/olog]

I dont have any server conf and log because it's synology, but I do have attached image for settings:

Network:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. Alle rechten voorbehouden.

C:\Windows\System32>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : HP-Thom
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Mixed
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : fritz.box

Ethernet adapter Ethernet 2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-E6-EA-51-D4
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::2169:1071:fa2b:cca0%8(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.8.0.14(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Lease Obtained. . . . . . . . . . : donderdag 4 april 2019 22:22:16
   Lease Expires . . . . . . . . . . : vrijdag 3 april 2020 22:22:16
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.8.0.13
   DHCPv6 IAID . . . . . . . . . . . : 134283238
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-48-8B-D2-14-58-D0-0A-4B-CE

   DNS Servers . . . . . . . . . . . : 192.168.0.1
                                       10.8.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Wireless LAN adapter LAN-verbinding* 4:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter
   Physical Address. . . . . . . . . : 32-3A-64-1E-29-E5
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter LAN-verbinding* 5:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
   Physical Address. . . . . . . . . : 30-3A-64-1E-29-E6
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

   Connection-specific DNS Suffix  . : fritz.box
   Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 3160
   Physical Address. . . . . . . . . : 30-3A-64-1E-29-E5
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::f4eb:f285:98c9:a5a0%4(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.114.26(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : donderdag 4 april 2019 19:10:24
   Lease Expires . . . . . . . . . . : zondag 14 april 2019 22:10:57
   Default Gateway . . . . . . . . . : 192.168.114.1
   DHCP Server . . . . . . . . . . . : 192.168.114.1
   DHCPv6 IAID . . . . . . . . . . . : 120601188
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-48-8B-D2-14-58-D0-0A-4B-CE

   DNS Servers . . . . . . . . . . . : 192.168.114.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : lan
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 14-58-D0-0A-4B-CE
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.fritz.box:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : fritz.box
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.lan:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #9
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{E6EA51D4-6122-4016-A477-C6122B0E404B}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #6
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

C:\Windows\System32>