[u][b]Post your configs from client and server, without comments:[/b][/u] [oconf=Client .ovpn file] client dev tun proto udp remote MY.PUBLIC.URL 1194 resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server auth SHA512 cipher AES-256-CBC ignore-unknown-option block-outside-dns block-outside-dns verb 4 -----BEGIN CERTIFICATE----- REMOVED -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- REMOVED -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- REMOVED -----END PRIVATE KEY----- -----BEGIN OpenVPN Static key V1----- REMOVED -----END OpenVPN Static key V1----- [/oconf] [oconf=etc_openvpn_server_server.conf] local 192.168.0.201 port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key dh dh.pem auth SHA512 tls-crypt tc.key topology subnet server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 192.168.0.0 255.255.255.0" push "redirect-gateway local def1" push "dhcp-option DNS 10.8.0.1" keepalive 10 120 cipher AES-256-CBC user nobody group nogroup persist-key persist-tun status openvpn-status.log log /var/log/openvpn.log verb 4 crl-verify crl.pem explicit-exit-notify [/oconf] [u][b]Tell us your goal:[/b][/u] To get Windows client to perform like the Android client. That is: Currently on my Android device, I can connect to the OpenVPN server that's home, from work. [list][*]Upon navigating to whatismyip.com, the [b]home [/b]IP address shows. That is right and good, imo. [*]Upon navigating to a page which uses PHP code $_SERVER['REMOTE_ADDR'], then the [b]home [/b]IP address shows. That is right and good, imo. [*]I can ping [b]work [/b]IP addresses. That is right and good, imo. [*]I can ping [b]home [/b]IP addresses. That is right and good, imo.[/list] Currently on my Windows 10 device, I can connect to the OpenVPN server that's at home, from work. [list][*]Upon navigating to whatismyip.com, the [b]home [/b]IP address shows. That is right and good, imo. [*]Upon navigating to a page which uses PHP code $_SERVER['REMOTE_ADDR'], then the [b]work [/b]IP address shows. That is [b]not[/b] right and good, imo. I think it ought to be the home IP, like the Android client does. [*]I can [b]not[/b] ping [b]work [/b]IP addresses. That is [b]not[/b] right and good, imo. [*]I can ping [b]home [/b]IP addresses. That is right and good, imo.[/list] [u][b]Additional Data:[/b][/u] I initially followed the setup guide at the following location (because I have pi-hole on raspi model 3b) [list][*][url]https://docs.pi-hole.net/guides/vpn/installation/[/url] [*][url]https://docs.pi-hole.net/guides/vpn/setup-openvpn-server/[/url][/list] For troubleshooting, I've Googled, and I've Googled with [i]site:https://forums.openvpn.net[/i] in the query, and have found a multitude of leads. However, none of them have bore any fruit. Sites, some semi-helpful, some not, some relevant, some not, are: [list][*][url]https://forums.openvpn.net/viewtopic.php?f=6&t=21237[/url] [*][url]https://forums.openvpn.net/viewtopic.php?f=6&t=10923[/url] [*][url]https://forums.openvpn.net/viewtopic.php?f=6&t=29156[/url] [*][url]https://forums.openvpn.net/viewtopic.php?f=24&t=22539[/url] [*][url]https://forums.openvpn.net/viewtopic.php?t=22505[/url] [*][url]https://forums.openvpn.net/viewtopic.php?t=25566[/url] [*][url]https://forums.openvpn.net/viewtopic.php?t=24322[/url] [*][url]https://openvpn.net/community-resources/how-to/#redirect[/url][/list]

[quote=geektbee post_id=87891 time=1573592387 user_id=48440] sake of that argument: my workplace does not use any 192.x.x.x addresses anywhere [/quote][quote=geektbee post_id=87876 time=1573570769 user_id=48440] local 192.168.0.201 push "route 192.168.0.0 255.255.255.0" [/quote] [quote=geektbee post_id=87891 time=1573592387 user_id=48440] Can this data successfully eliminate your theory? [/quote]Not really .. see above. [quote=geektbee post_id=87891 time=1573592387 user_id=48440] Nor do they use any 10.8.x.x for this matter [/quote]Technically, your VPN does but that was not the point of my first post ..

Android = Perfect; Windows = Wigady.Whack

geektbee

Post your configs from client and server, without comments:

client
dev tun
proto udp
remote MY.PUBLIC.URL 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
block-outside-dns
verb 4
<ca>
-----BEGIN CERTIFICATE-----
REMOVED
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
REMOVED
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
REMOVED
-----END PRIVATE KEY-----
</key>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
REMOVED
-----END OpenVPN Static key V1-----
</tls-crypt>

local 192.168.0.201
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway local def1"
push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 4
crl-verify crl.pem
explicit-exit-notify

Tell us your goal:
To get Windows client to perform like the Android client.

That is:
Currently on my Android device, I can connect to the OpenVPN server that's home, from work.

Upon navigating to whatismyip.com, the home IP address shows. That is right and good, imo.
Upon navigating to a page which uses PHP code $_SERVER['REMOTE_ADDR'], then the home IP address shows. That is right and good, imo.
I can ping work IP addresses. That is right and good, imo.
I can ping home IP addresses. That is right and good, imo.

Currently on my Windows 10 device, I can connect to the OpenVPN server that's at home, from work.

Upon navigating to whatismyip.com, the home IP address shows. That is right and good, imo.
Upon navigating to a page which uses PHP code $_SERVER['REMOTE_ADDR'], then the work IP address shows. That is not right and good, imo. I think it ought to be the home IP, like the Android client does.
I can not ping work IP addresses. That is not right and good, imo.
I can ping home IP addresses. That is right and good, imo.

Additional Data:
I initially followed the setup guide at the following location (because I have pi-hole on raspi model 3b)

For troubleshooting, I've Googled, and I've Googled with site:https://forums.openvpn.net in the query, and have found a multitude of leads. However, none of them have bore any fruit. Sites, some semi-helpful, some not, some relevant, some not, are:

TinCanTech

Starting with the obvious:

Your server log wrote NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

So change them for a start.

Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

geektbee

For sake of that argument: my workplace does not use any 192.x.x.x addresses anywhere. Nor do they use any 10.8.x.x for this matter. Can this data successfully eliminate your theory?

TinCanTech

geektbee wrote sake of that argument: my workplace does not use any 192.x.x.x addresses anywhere

geektbee wrote local 192.168.0.201
<s>
push "route 192.168.0.0 255.255.255.0"

geektbee wrote Can this data successfully eliminate your theory?

Not really .. see above.

geektbee wrote Nor do they use any 10.8.x.x for this matter

Technically, your VPN does but that was not the point of my first post ..

geektbee

I am missing the point. The first response discourages connecting from a public location that uses the same subnet. I am not connecting from a public location, and much less one that uses the same subnet. It's a private workplace organization, that uses a subnet that is not even close to 192.x.x.x.

TinCanTech

geektbee wrote I am not connecting from a public location, and much less one that uses the same subnet. It's a private workplace organization, that uses a subnet that is not even close to 192.x.x.x.

Very well ...

Please post logs at verb 4

geektbee

Cool, thanks!

Server Log

173.x.x.x:5xxxx TLS: Initial packet from [AF_INET]173.x.x.x:5xxxx, sid=1c4b87ee a8525fe2
173.x.x.x:5xxxx VERIFY OK: depth=1, CN=ChangeMe
173.x.x.x:5xxxx VERIFY OK: depth=0, CN=ComName
173.x.x.x:5xxxx peer info: IV_VER=2.4.7
173.x.x.x:5xxxx peer info: IV_PLAT=win
173.x.x.x:5xxxx peer info: IV_PROTO=2
173.x.x.x:5xxxx peer info: IV_NCP=2
173.x.x.x:5xxxx peer info: IV_LZ4=1
173.x.x.x:5xxxx peer info: IV_LZ4v2=1
173.x.x.x:5xxxx peer info: IV_LZO=1
173.x.x.x:5xxxx peer info: IV_COMP_STUB=1
173.x.x.x:5xxxx peer info: IV_COMP_STUBv2=1
173.x.x.x:5xxxx peer info: IV_TCPNL=1
173.x.x.x:5xxxx peer info: IV_GUI_VER=OpenVPN_GUI_11
173.x.x.x:5xxxx Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
173.x.x.x:5xxxx [ComName] Peer Connection Initiated with [AF_INET]173.x.x.x:5xxxx
ComName/173.x.x.x:5xxxx MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
ComName/173.x.x.x:5xxxx MULTI: Learn: 10.8.0.2 -> ComName/173.x.x.x:5xxxx
ComName/173.x.x.x:5xxxx MULTI: primary virtual IP for ComName/173.x.x.x:5xxxx: 10.8.0.2
ComName/173.x.x.x:5xxxx PUSH: Received control message: 'PUSH_REQUEST'
ComName/173.x.x.x:5xxxx SENT CONTROL [ComName]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
ComName/173.x.x.x:5xxxx Data Channel: using negotiated cipher 'AES-256-GCM'
ComName/173.x.x.x:5xxxx Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
ComName/173.x.x.x:5xxxx Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

Windows Client

Wed Nov 13 06:37:44 2019 us=910275 Current Parameter Settings:
Wed Nov 13 06:37:44 2019 us=910275   config = 'ComName.ovpn'
Wed Nov 13 06:37:44 2019 us=910275   mode = 0
Wed Nov 13 06:37:44 2019 us=910275   show_ciphers = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   show_digests = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   show_engines = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   genkey = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   key_pass_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   show_tls_ciphers = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   connect_retry_max = 0
Wed Nov 13 06:37:44 2019 us=910275 Connection profiles [0]:
Wed Nov 13 06:37:44 2019 us=910275   proto = udp
Wed Nov 13 06:37:44 2019 us=910275   local = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   local_port = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   remote = 'REDACTED'
Wed Nov 13 06:37:44 2019 us=910275   remote_port = '1194'
Wed Nov 13 06:37:44 2019 us=910275   remote_float = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   bind_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   bind_local = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   bind_ipv6_only = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   connect_retry_seconds = 5
Wed Nov 13 06:37:44 2019 us=910275   connect_timeout = 120
Wed Nov 13 06:37:44 2019 us=910275   socks_proxy_server = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   socks_proxy_port = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   tun_mtu = 1500
Wed Nov 13 06:37:44 2019 us=910275   tun_mtu_defined = ENABLED
Wed Nov 13 06:37:44 2019 us=910275   link_mtu = 1500
Wed Nov 13 06:37:44 2019 us=910275   link_mtu_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   tun_mtu_extra = 0
Wed Nov 13 06:37:44 2019 us=910275   tun_mtu_extra_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   mtu_discover_type = -1
Wed Nov 13 06:37:44 2019 us=910275   fragment = 0
Wed Nov 13 06:37:44 2019 us=910275   mssfix = 1450
Wed Nov 13 06:37:44 2019 us=910275   explicit_exit_notification = 0
Wed Nov 13 06:37:44 2019 us=910275 Connection profiles END
Wed Nov 13 06:37:44 2019 us=910275   remote_random = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   ipchange = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   dev = 'tun'
Wed Nov 13 06:37:44 2019 us=910275   dev_type = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   dev_node = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   lladdr = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   topology = 1
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_local = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_remote_netmask = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_noexec = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_nowarn = DISABLED
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_ipv6_local = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_ipv6_netbits = 0
Wed Nov 13 06:37:44 2019 us=910275   ifconfig_ipv6_remote = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=910275   shaper = 0
Wed Nov 13 06:37:44 2019 us=910275   mtu_test = 0
Wed Nov 13 06:37:44 2019 us=912334   mlock = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   keepalive_ping = 0
Wed Nov 13 06:37:44 2019 us=912334   keepalive_timeout = 0
Wed Nov 13 06:37:44 2019 us=912334   inactivity_timeout = 0
Wed Nov 13 06:37:44 2019 us=912334   ping_send_timeout = 0
Wed Nov 13 06:37:44 2019 us=912334   ping_rec_timeout = 0
Wed Nov 13 06:37:44 2019 us=912334   ping_rec_timeout_action = 0
Wed Nov 13 06:37:44 2019 us=912334   ping_timer_remote = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   remap_sigusr1 = 0
Wed Nov 13 06:37:44 2019 us=912334   persist_tun = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   persist_local_ip = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   persist_remote_ip = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   persist_key = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   passtos = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   resolve_retry_seconds = 1000000000
Wed Nov 13 06:37:44 2019 us=912334   resolve_in_advance = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   username = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   groupname = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   chroot_dir = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   cd_dir = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   writepid = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   up_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   down_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   down_pre = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   up_restart = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   up_delay = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   daemon = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   inetd = 0
Wed Nov 13 06:37:44 2019 us=912334   log = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   suppress_timestamps = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   machine_readable_output = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   nice = 0
Wed Nov 13 06:37:44 2019 us=912334   verbosity = 4
Wed Nov 13 06:37:44 2019 us=912334   mute = 0
Wed Nov 13 06:37:44 2019 us=912334   gremlin = 0
Wed Nov 13 06:37:44 2019 us=912334   status_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   status_file_version = 1
Wed Nov 13 06:37:44 2019 us=912334   status_file_update_freq = 60
Wed Nov 13 06:37:44 2019 us=912334   occ = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   rcvbuf = 0
Wed Nov 13 06:37:44 2019 us=912334   sndbuf = 0
Wed Nov 13 06:37:44 2019 us=912334   sockflags = 0
Wed Nov 13 06:37:44 2019 us=912334   fast_io = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   comp.alg = 0
Wed Nov 13 06:37:44 2019 us=912334   comp.flags = 0
Wed Nov 13 06:37:44 2019 us=912334   route_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   route_default_gateway = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   route_default_metric = 0
Wed Nov 13 06:37:44 2019 us=912334   route_noexec = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   route_delay = 5
Wed Nov 13 06:37:44 2019 us=912334   route_delay_window = 30
Wed Nov 13 06:37:44 2019 us=912334   route_delay_defined = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   route_nopull = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   route_gateway_via_dhcp = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   allow_pull_fqdn = DISABLED
Wed Nov 13 06:37:44 2019 us=912334   management_addr = '127.0.0.1'
Wed Nov 13 06:37:44 2019 us=912334   management_port = '25340'
Wed Nov 13 06:37:44 2019 us=912334   management_user_pass = 'stdin'
Wed Nov 13 06:37:44 2019 us=912334   management_log_history_cache = 250
Wed Nov 13 06:37:44 2019 us=912334   management_echo_buffer_size = 100
Wed Nov 13 06:37:44 2019 us=912334   management_write_peer_info_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   management_client_user = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   management_client_group = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   management_flags = 6
Wed Nov 13 06:37:44 2019 us=912334   shared_secret_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=912334   key_direction = not set
Wed Nov 13 06:37:44 2019 us=912334   ciphername = 'AES-256-CBC'
Wed Nov 13 06:37:44 2019 us=912334   ncp_enabled = ENABLED
Wed Nov 13 06:37:44 2019 us=912334   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Nov 13 06:37:44 2019 us=912334   authname = 'SHA512'
Wed Nov 13 06:37:44 2019 us=912334   prng_hash = 'SHA1'
Wed Nov 13 06:37:44 2019 us=912334   prng_nonce_secret_len = 16
Wed Nov 13 06:37:44 2019 us=912334   keysize = 0
Wed Nov 13 06:37:44 2019 us=912334   engine = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   replay = ENABLED
Wed Nov 13 06:37:44 2019 us=913331   mute_replay_warnings = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   replay_window = 64
Wed Nov 13 06:37:44 2019 us=913331   replay_time = 15
Wed Nov 13 06:37:44 2019 us=913331   packet_id_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   use_iv = ENABLED
Wed Nov 13 06:37:44 2019 us=913331   test_crypto = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   tls_server = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   tls_client = ENABLED
Wed Nov 13 06:37:44 2019 us=913331   key_method = 2
Wed Nov 13 06:37:44 2019 us=913331   ca_file = '[[INLINE]]'
Wed Nov 13 06:37:44 2019 us=913331   ca_path = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   dh_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   cert_file = '[[INLINE]]'
Wed Nov 13 06:37:44 2019 us=913331   extra_certs_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   priv_key_file = '[[INLINE]]'
Wed Nov 13 06:37:44 2019 us=913331   pkcs12_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   cryptoapi_cert = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   cipher_list = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   cipher_list_tls13 = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   tls_cert_profile = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   tls_verify = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   tls_export_cert = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   verify_x509_type = 0
Wed Nov 13 06:37:44 2019 us=913331   verify_x509_name = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   crl_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   ns_cert_type = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 65535
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_ku[i] = 0
Wed Nov 13 06:37:44 2019 us=913331   remote_cert_eku = 'TLS Web Server Authentication'
Wed Nov 13 06:37:44 2019 us=913331   ssl_flags = 0
Wed Nov 13 06:37:44 2019 us=913331   tls_timeout = 2
Wed Nov 13 06:37:44 2019 us=913331   renegotiate_bytes = -1
Wed Nov 13 06:37:44 2019 us=913331   renegotiate_packets = 0
Wed Nov 13 06:37:44 2019 us=913331   renegotiate_seconds = 3600
Wed Nov 13 06:37:44 2019 us=913331   handshake_window = 60
Wed Nov 13 06:37:44 2019 us=913331   transition_window = 3600
Wed Nov 13 06:37:44 2019 us=913331   single_session = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   push_peer_info = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   tls_exit = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   tls_auth_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=913331   tls_crypt_file = '[[INLINE]]'
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_protected_authentication = DISABLED
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=913331   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_private_mode = 00000000
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_cert_private = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_pin_cache_period = -1
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_id = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   pkcs11_id_management = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   server_network = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   server_netmask = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   server_network_ipv6 = ::
Wed Nov 13 06:37:44 2019 us=914327   server_netbits_ipv6 = 0
Wed Nov 13 06:37:44 2019 us=914327   server_bridge_ip = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   server_bridge_netmask = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   server_bridge_pool_start = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   server_bridge_pool_end = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_start = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_end = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_netmask = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_pool_persist_refresh_freq = 600
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_ipv6_pool_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_ipv6_pool_base = ::
Wed Nov 13 06:37:44 2019 us=914327   ifconfig_ipv6_pool_netbits = 0
Wed Nov 13 06:37:44 2019 us=914327   n_bcast_buf = 256
Wed Nov 13 06:37:44 2019 us=914327   tcp_queue_limit = 64
Wed Nov 13 06:37:44 2019 us=914327   real_hash_size = 256
Wed Nov 13 06:37:44 2019 us=914327   virtual_hash_size = 256
Wed Nov 13 06:37:44 2019 us=914327   client_connect_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   learn_address_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   client_disconnect_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   client_config_dir = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   ccd_exclusive = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   tmp_dir = 'C:\Users\CLBENT~1\AppData\Local\Temp\'
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_local = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_remote_netmask = 0.0.0.0
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_ipv6_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_ipv6_local = ::/0
Wed Nov 13 06:37:44 2019 us=914327   push_ifconfig_ipv6_remote = ::
Wed Nov 13 06:37:44 2019 us=914327   enable_c2c = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   duplicate_cn = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   cf_max = 0
Wed Nov 13 06:37:44 2019 us=914327   cf_per = 0
Wed Nov 13 06:37:44 2019 us=914327   max_clients = 1024
Wed Nov 13 06:37:44 2019 us=914327   max_routes_per_client = 256
Wed Nov 13 06:37:44 2019 us=914327   auth_user_pass_verify_script = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   auth_user_pass_verify_script_via_file = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   auth_token_generate = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   auth_token_lifetime = 0
Wed Nov 13 06:37:44 2019 us=914327   client = ENABLED
Wed Nov 13 06:37:44 2019 us=914327   pull = ENABLED
Wed Nov 13 06:37:44 2019 us=914327   auth_user_pass_file = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   show_net_up = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   route_method = 0
Wed Nov 13 06:37:44 2019 us=914327   block_outside_dns = ENABLED
Wed Nov 13 06:37:44 2019 us=914327   ip_win32_defined = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   ip_win32_type = 3
Wed Nov 13 06:37:44 2019 us=914327   dhcp_masq_offset = 0
Wed Nov 13 06:37:44 2019 us=914327   dhcp_lease_time = 31536000
Wed Nov 13 06:37:44 2019 us=914327   tap_sleep = 0
Wed Nov 13 06:37:44 2019 us=914327   dhcp_options = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   dhcp_renew = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   dhcp_pre_release = DISABLED
Wed Nov 13 06:37:44 2019 us=914327   domain = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   netbios_scope = '[UNDEF]'
Wed Nov 13 06:37:44 2019 us=914327   netbios_node_type = 0
Wed Nov 13 06:37:44 2019 us=914327   disable_nbt = DISABLED
Wed Nov 13 06:37:44 2019 us=914327 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Wed Nov 13 06:37:44 2019 us=914327 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Nov 13 06:37:44 2019 us=914327 library versions: OpenSSL 1.1.0j  20 Nov 2018, LZO 2.10
Enter Management Password:
Wed Nov 13 06:37:44 2019 us=915246 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Nov 13 06:37:44 2019 us=915246 Need hold release from management interface, waiting...
Wed Nov 13 06:37:45 2019 us=386490 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Nov 13 06:37:45 2019 us=503835 MANAGEMENT: CMD 'state on'
Wed Nov 13 06:37:45 2019 us=503835 MANAGEMENT: CMD 'log all on'
Wed Nov 13 06:37:45 2019 us=946410 MANAGEMENT: CMD 'echo all on'
Wed Nov 13 06:37:45 2019 us=949372 MANAGEMENT: CMD 'bytecount 5'
Wed Nov 13 06:37:45 2019 us=951982 MANAGEMENT: CMD 'hold off'
Wed Nov 13 06:37:45 2019 us=956082 MANAGEMENT: CMD 'hold release'
Wed Nov 13 06:37:45 2019 us=960870 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 06:37:45 2019 us=960870 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 06:37:45 2019 us=960870 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 06:37:45 2019 us=960870 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 06:37:45 2019 us=960870 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Wed Nov 13 06:37:45 2019 us=960870 MANAGEMENT: >STATE:1573645065,RESOLVE,,,,,,
Wed Nov 13 06:37:45 2019 us=988236 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Wed Nov 13 06:37:45 2019 us=988236 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Wed Nov 13 06:37:45 2019 us=988236 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Wed Nov 13 06:37:45 2019 us=988236 TCP/UDP: Preserving recently used remote address: [AF_INET]45.x.x.x:1194
Wed Nov 13 06:37:45 2019 us=988236 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Nov 13 06:37:45 2019 us=988236 UDP link local: (not bound)
Wed Nov 13 06:37:45 2019 us=988236 UDP link remote: [AF_INET]45.x.x.x:1194
Wed Nov 13 06:37:45 2019 us=988236 MANAGEMENT: >STATE:1573645065,WAIT,,,,,,
Wed Nov 13 06:37:46 2019 us=258560 MANAGEMENT: >STATE:1573645066,AUTH,,,,,,
Wed Nov 13 06:37:46 2019 us=258560 TLS: Initial packet from [AF_INET]45.x.x.x:1194, sid=a2aee34b efa2cea7
Wed Nov 13 06:37:46 2019 us=446521 VERIFY OK: depth=1, CN=ChangeMe
Wed Nov 13 06:37:46 2019 us=446521 VERIFY KU OK
Wed Nov 13 06:37:46 2019 us=446521 Validating certificate extended key usage
Wed Nov 13 06:37:46 2019 us=446521 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 13 06:37:46 2019 us=446521 VERIFY EKU OK
Wed Nov 13 06:37:46 2019 us=446521 VERIFY OK: depth=0, CN=server
Wed Nov 13 06:37:46 2019 us=698837 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Nov 13 06:37:46 2019 us=698837 [server] Peer Connection Initiated with [AF_INET]45.x.x.x:1194
Wed Nov 13 06:37:47 2019 us=925152 MANAGEMENT: >STATE:1573645067,GET_CONFIG,,,,,,
Wed Nov 13 06:37:47 2019 us=925338 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Nov 13 06:37:48 2019 us=172243 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: route options modified
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: route-related options modified
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: peer-id set
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: adjusting link_mtu to 1624
Wed Nov 13 06:37:48 2019 us=172243 OPTIONS IMPORT: data channel crypto options modified
Wed Nov 13 06:37:48 2019 us=172243 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Nov 13 06:37:48 2019 us=172243 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Wed Nov 13 06:37:48 2019 us=172243 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 06:37:48 2019 us=172243 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 06:37:48 2019 us=172243 interactive service msg_channel=0
Wed Nov 13 06:37:48 2019 us=188314 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=12 HWADDR=14:ab:c5:38:fd:6f
Wed Nov 13 06:37:48 2019 us=225319 open_tun
Wed Nov 13 06:37:48 2019 us=230906 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{AF2467A9-C7D2-4C37-8207-9D4B81CC186D}.tap
Wed Nov 13 06:37:48 2019 us=231937 TAP-Windows Driver Version 9.23 
Wed Nov 13 06:37:48 2019 us=231937 TAP-Windows MTU=1500
Wed Nov 13 06:37:48 2019 us=236515 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed Nov 13 06:37:48 2019 us=236515 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {AF2467A9-C7D2-4C37-8207-9D4B81CC186D} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Nov 13 06:37:48 2019 us=236515 DHCP option string: 06040a08 0001
Wed Nov 13 06:37:48 2019 us=237649 Successful ARP Flush on interface [22] {AF2467A9-C7D2-4C37-8207-9D4B81CC186D}
Wed Nov 13 06:37:48 2019 us=284350 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Nov 13 06:37:48 2019 us=284350 MANAGEMENT: >STATE:1573645068,ASSIGN_IP,,10.8.0.2,,,,
Wed Nov 13 06:37:48 2019 us=284350 Blocking outside DNS
Wed Nov 13 06:37:48 2019 us=309246 Block_DNS: WFP engine opened
Wed Nov 13 06:37:48 2019 us=310244 Block_DNS: Using existing sublayer
Wed Nov 13 06:37:48 2019 us=311241 Block_DNS: Added permit filters for exe_path
Wed Nov 13 06:37:48 2019 us=324149 Block_DNS: Added block filters for all interfaces
Wed Nov 13 06:37:48 2019 us=353685 Block_DNS: Added permit filters for TAP interface
Wed Nov 13 06:37:53 2019 us=86892 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Nov 13 06:37:53 2019 us=86892 C:\WINDOWS\system32\route.exe ADD 45.x.x.x MASK 255.255.255.255 192.168.1.1
Wed Nov 13 06:37:53 2019 us=92221 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=55 and dwForwardType=4
Wed Nov 13 06:37:53 2019 us=92221 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 06:37:53 2019 us=92221 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 06:37:53 2019 us=104027 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 06:37:53 2019 us=104579 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 06:37:53 2019 us=104579 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 06:37:53 2019 us=113408 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 06:37:53 2019 us=113408 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 06:37:53 2019 us=113408 MANAGEMENT: >STATE:1573645073,ADD_ROUTES,,,,,,
Wed Nov 13 06:37:53 2019 us=114328 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.8.0.1
Wed Nov 13 06:37:53 2019 us=119382 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 06:37:53 2019 us=119874 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 06:37:53 2019 us=119874 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Nov 13 06:37:53 2019 us=119874 Initialization Sequence Completed
Wed Nov 13 06:37:53 2019 us=119874 MANAGEMENT: >STATE:1573645073,CONNECTED,SUCCESS,10.8.0.2,45.x.x.x,1194,,
Wed Nov 13 06:38:05 2019 us=303182 TCP/UDP: Closing socket
Wed Nov 13 06:38:05 2019 us=303182 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.8.0.1
Wed Nov 13 06:38:05 2019 us=308169 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 06:38:05 2019 us=308314 C:\WINDOWS\system32\route.exe DELETE 45.x.x.x MASK 255.255.255.255 192.168.1.1
Wed Nov 13 06:38:05 2019 us=313081 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 06:38:05 2019 us=313081 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 06:38:05 2019 us=315820 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 06:38:05 2019 us=316817 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 06:38:05 2019 us=319128 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 06:38:05 2019 us=319128 Closing TUN/TAP interface
Wed Nov 13 06:38:05 2019 us=402687 TAP: DHCP address released
Wed Nov 13 06:38:05 2019 us=405413 Uninitializing WFP
Wed Nov 13 06:38:05 2019 us=432275 SIGTERM[hard,] received, process exiting
Wed Nov 13 06:38:05 2019 us=432275 MANAGEMENT: >STATE:1573645085,EXITING,SIGTERM,,,,,

TinCanTech

Please post your complete [sanitized] server log at verb 4. Please restart your server.

geektbee

That is the complete log that appeared after a restart and testing procedure..... I sanitized it myself.... how else can it be sanitized when olog didn't work in preview?

TinCanTech

That is not your complete server log. Please see --log in the manual.

Please don't use olog, it is rubbish.

geektbee

....

So.... I had already discovered the "--log" command and read elsewhere that placing a line like "log /var/log/openvpn.log" in the server.conf file is the equivalent. That's why I had it in there, and so your request has been done in advance, unless you can confirm "--log" in terminal is meant to do something different from option line "log /var/log/openvpn.log" I've placed in the conf file.....
Either way, I guess you were wanting the whole thing with startup configuration. Maybe let's try this for you:

Current Parameter Settings:
  config = 'server.conf'
  mode = 1
  persist_config = DISABLED
  persist_mode = 1
  show_ciphers = DISABLED
  show_digests = DISABLED
  show_engines = DISABLED
  genkey = DISABLED
  key_pass_file = '[UNDEF]'
  show_tls_ciphers = DISABLED
  connect_retry_max = 0
Connection profiles [0]:
  proto = udp
  local = '192.168.0.xxx'
  local_port = '1194'
  remote = '[UNDEF]'
  remote_port = '1194'
  remote_float = DISABLED
  bind_defined = DISABLED
  bind_local = ENABLED
  bind_ipv6_only = DISABLED
  connect_retry_seconds = 5
  connect_timeout = 120
  socks_proxy_server = '[UNDEF]'
  socks_proxy_port = '[UNDEF]'
  tun_mtu = 1500
  tun_mtu_defined = ENABLED
  link_mtu = 1500
  link_mtu_defined = DISABLED
  tun_mtu_extra = 0
  tun_mtu_extra_defined = DISABLED
  mtu_discover_type = -1
  fragment = 0
  mssfix = 1450
  explicit_exit_notification = 1
Connection profiles END
  remote_random = DISABLED
  ipchange = '[UNDEF]'
  dev = 'tun'
  dev_type = '[UNDEF]'
  dev_node = '[UNDEF]'
  lladdr = '[UNDEF]'
  topology = 3
  ifconfig_local = '10.8.0.1'
  ifconfig_remote_netmask = '255.255.255.0'
  ifconfig_noexec = DISABLED
  ifconfig_nowarn = DISABLED
  ifconfig_ipv6_local = '[UNDEF]'
  ifconfig_ipv6_netbits = 0
  ifconfig_ipv6_remote = '[UNDEF]'
  shaper = 0
  mtu_test = 0
  mlock = DISABLED
  keepalive_ping = 10
  keepalive_timeout = 120
  inactivity_timeout = 0
  ping_send_timeout = 10
  ping_rec_timeout = 240
  ping_rec_timeout_action = 2
  ping_timer_remote = DISABLED
  remap_sigusr1 = 0
  persist_tun = ENABLED
  persist_local_ip = DISABLED
  persist_remote_ip = DISABLED
  persist_key = ENABLED
  passtos = DISABLED
  resolve_retry_seconds = 1000000000
  resolve_in_advance = DISABLED
  username = 'nobody'
  groupname = 'nogroup'
  chroot_dir = '[UNDEF]'
  cd_dir = '[UNDEF]'
  writepid = '[UNDEF]'
  up_script = '[UNDEF]'
  down_script = '[UNDEF]'
  down_pre = DISABLED
  up_restart = DISABLED
  up_delay = DISABLED
  daemon = DISABLED
  inetd = 0
  log = ENABLED
  suppress_timestamps = ENABLED
  machine_readable_output = DISABLED
  nice = 0
  verbosity = 4
  mute = 0
  gremlin = 0
  status_file = 'openvpn-status.log'
  status_file_version = 2
  status_file_update_freq = 60
  occ = ENABLED
  rcvbuf = 0
  sndbuf = 0
  mark = 0
  sockflags = 0
  fast_io = DISABLED
  comp.alg = 0
  comp.flags = 0
  route_script = '[UNDEF]'
  route_default_gateway = '10.8.0.2'
  route_default_metric = 0
  route_noexec = DISABLED
  route_delay = 0
  route_delay_window = 30
  route_delay_defined = DISABLED
  route_nopull = DISABLED
  route_gateway_via_dhcp = DISABLED
  allow_pull_fqdn = DISABLED
  management_addr = '[UNDEF]'
  management_port = '[UNDEF]'
  management_user_pass = '[UNDEF]'
  management_log_history_cache = 250
  management_echo_buffer_size = 100
  management_write_peer_info_file = '[UNDEF]'
  management_client_user = '[UNDEF]'
  management_client_group = '[UNDEF]'
  management_flags = 0
  shared_secret_file = '[UNDEF]'
  key_direction = not set
  ciphername = 'AES-256-CBC'
  ncp_enabled = ENABLED
  ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
  authname = 'SHA512'
  prng_hash = 'SHA1'
  prng_nonce_secret_len = 16
  keysize = 0
  engine = DISABLED
  replay = ENABLED
  mute_replay_warnings = DISABLED
  replay_window = 64
  replay_time = 15
  packet_id_file = '[UNDEF]'
  use_iv = ENABLED
  test_crypto = DISABLED
  tls_server = ENABLED
  tls_client = DISABLED
  key_method = 2
  ca_file = 'ca.crt'
  ca_path = '[UNDEF]'
  dh_file = 'dh.pem'
  cert_file = 'server.crt'
  extra_certs_file = '[UNDEF]'
  priv_key_file = 'server.key'
  pkcs12_file = '[UNDEF]'
  cipher_list = '[UNDEF]'
  cipher_list_tls13 = '[UNDEF]'
  tls_cert_profile = '[UNDEF]'
  tls_verify = '[UNDEF]'
  tls_export_cert = '[UNDEF]'
  verify_x509_type = 0
  verify_x509_name = '[UNDEF]'
  crl_file = 'crl.pem'
  ns_cert_type = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_ku[i] = 0
  remote_cert_eku = '[UNDEF]'
  ssl_flags = 0
  tls_timeout = 2
  renegotiate_bytes = -1
  renegotiate_packets = 0
  renegotiate_seconds = 3600
  handshake_window = 60
  transition_window = 3600
  single_session = DISABLED
  push_peer_info = DISABLED
  tls_exit = DISABLED
  tls_auth_file = '[UNDEF]'
  tls_crypt_file = 'tc.key'
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_protected_authentication = DISABLED
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_private_mode = 00000000
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_cert_private = DISABLED
  pkcs11_pin_cache_period = -1
  pkcs11_id = '[UNDEF]'
  pkcs11_id_management = DISABLED
  server_network = 10.8.0.0
  server_netmask = 255.255.255.0
  server_network_ipv6 = ::
  server_netbits_ipv6 = 0
  server_bridge_ip = 0.0.0.0
  server_bridge_netmask = 0.0.0.0
  server_bridge_pool_start = 0.0.0.0
  server_bridge_pool_end = 0.0.0.0
  push_entry = 'route 192.168.0.0 255.255.255.0'
  push_entry = 'redirect-gateway def1'
  push_entry = 'dhcp-option DNS 10.8.0.1'
  push_entry = 'route-gateway 10.8.0.1'
  push_entry = 'topology subnet'
  push_entry = 'ping 10'
  push_entry = 'ping-restart 120'
  ifconfig_pool_defined = ENABLED
  ifconfig_pool_start = 10.8.0.2
  ifconfig_pool_end = 10.8.0.253
  ifconfig_pool_netmask = 255.255.255.0
  ifconfig_pool_persist_filename = 'ipp.txt'
  ifconfig_pool_persist_refresh_freq = 600
  ifconfig_ipv6_pool_defined = DISABLED
  ifconfig_ipv6_pool_base = ::
  ifconfig_ipv6_pool_netbits = 0
  n_bcast_buf = 256
  tcp_queue_limit = 64
  real_hash_size = 256
  virtual_hash_size = 256
  client_connect_script = '[UNDEF]'
  learn_address_script = '[UNDEF]'
  client_disconnect_script = '[UNDEF]'
  client_config_dir = '[UNDEF]'
  ccd_exclusive = DISABLED
  tmp_dir = '/tmp'
  push_ifconfig_defined = DISABLED
  push_ifconfig_local = 0.0.0.0
  push_ifconfig_remote_netmask = 0.0.0.0
  push_ifconfig_ipv6_defined = DISABLED
  push_ifconfig_ipv6_local = ::/0
  push_ifconfig_ipv6_remote = ::
  enable_c2c = DISABLED
  duplicate_cn = DISABLED
  cf_max = 0
  cf_per = 0
  max_clients = 1024
  max_routes_per_client = 256
  auth_user_pass_verify_script = '[UNDEF]'
  auth_user_pass_verify_script_via_file = DISABLED
  auth_token_generate = DISABLED
  auth_token_lifetime = 0
  port_share_host = '[UNDEF]'
  port_share_port = '[UNDEF]'
  client = DISABLED
  pull = DISABLED
  auth_user_pass_file = '[UNDEF]'
OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10
NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Diffie-Hellman initialized with 2048 bit key
Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
TLS-Auth MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
TUN/TAP device tun0 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun0 up mtu 1500
/sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Could not determine IPv4/IPv6 protocol. Using AF_INET
Socket Buffers: R=[163840->163840] S=[163840->163840]
UDPv4 link local (bound): [AF_INET]192.168.0.xxx:1194
UDPv4 link remote: [AF_UNSPEC]
GID set to nogroup
UID set to nobody
MULTI: multi_init called, r=256 v=256
IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
ifconfig_pool_read(), in='WorkLaptop,10.8.0.2', TODO: IPv6
succeeded -> ifconfig_pool_set()
ifconfig_pool_read(), in='PhoneName,10.8.0.3', TODO: IPv6
succeeded -> ifconfig_pool_set()
ifconfig_pool_read(), in='WorkDesktop,10.8.0.4', TODO: IPv6
succeeded -> ifconfig_pool_set()
IFCONFIG POOL LIST
WorkLaptop,10.8.0.2
PhoneName,10.8.0.3
WorkDesktop,10.8.0.4
Initialization Sequence Completed
MULTI: multi_create_instance called
173.xxx.xxx.xxx:51283 Re-using SSL/TLS context
173.xxx.xxx.xxx:51283 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
173.xxx.xxx.xxx:51283 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
173.xxx.xxx.xxx:51283 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
173.xxx.xxx.xxx:51283 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
173.xxx.xxx.xxx:51283 TLS: Initial packet from [AF_INET]173.xxx.xxx.xxx:51283, sid=85bd3fe0 8483afdd
173.xxx.xxx.xxx:51283 VERIFY OK: depth=1, CN=ChangeMe
173.xxx.xxx.xxx:51283 VERIFY OK: depth=0, CN=WorkLaptop
173.xxx.xxx.xxx:51283 peer info: IV_VER=2.4.7
173.xxx.xxx.xxx:51283 peer info: IV_PLAT=win
173.xxx.xxx.xxx:51283 peer info: IV_PROTO=2
173.xxx.xxx.xxx:51283 peer info: IV_NCP=2
173.xxx.xxx.xxx:51283 peer info: IV_LZ4=1
173.xxx.xxx.xxx:51283 peer info: IV_LZ4v2=1
173.xxx.xxx.xxx:51283 peer info: IV_LZO=1
173.xxx.xxx.xxx:51283 peer info: IV_COMP_STUB=1
173.xxx.xxx.xxx:51283 peer info: IV_COMP_STUBv2=1
173.xxx.xxx.xxx:51283 peer info: IV_TCPNL=1
173.xxx.xxx.xxx:51283 peer info: IV_GUI_VER=OpenVPN_GUI_11
173.xxx.xxx.xxx:51283 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
173.xxx.xxx.xxx:51283 [WorkLaptop] Peer Connection Initiated with [AF_INET]173.xxx.xxx.xxx:51283
WorkLaptop/173.xxx.xxx.xxx:51283 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
WorkLaptop/173.xxx.xxx.xxx:51283 MULTI: Learn: 10.8.0.2 -> WorkLaptop/173.xxx.xxx.xxx:51283
WorkLaptop/173.xxx.xxx.xxx:51283 MULTI: primary virtual IP for WorkLaptop/173.xxx.xxx.xxx:51283: 10.8.0.2
WorkLaptop/173.xxx.xxx.xxx:51283 PUSH: Received control message: 'PUSH_REQUEST'
WorkLaptop/173.xxx.xxx.xxx:51283 SENT CONTROL [WorkLaptop]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 10.8.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
WorkLaptop/173.xxx.xxx.xxx:51283 Data Channel: using negotiated cipher 'AES-256-GCM'
WorkLaptop/173.xxx.xxx.xxx:51283 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
WorkLaptop/173.xxx.xxx.xxx:51283 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
WorkLaptop/173.xxx.xxx.xxx:51283 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

And thank you; thank you for the time you've been taking for me thus far.

TinCanTech

This is the correct log, you can configure it as you see fit.

Now we need you to connect with the client and then wait for the client to disconnect and see if there is any new data in the server log (as above) after the client disconnects.

geektbee

I have not known the client to claim a disconnect yet, but okay, i'll try.

TinCanTech

Yeah, I cannot figure out what your question was ..

geektbee

When I'm connected via OpenVPN client in Windows at work, some servers report the home IP while other servers report the work IP.
When I'm connected via OpenVPN client in Android at work, all servers report the home IP.

The actual question is: how do I get Windows OpenVPN client at work to act like the Android client at work (which always report the home IP) does?

On top of that, how can I get the Windows client at work to still "talk" to all internal IPs at both home and at work... because the Android client does this with no problems, too.

I hope that helps......

TinCanTech

geektbee wrote When I'm connected via OpenVPN client in Windows at work, some servers report the home IP while other servers report the work IP

You have only posted one server config .. so your guess is as good as mine ..

geektbee

Gak! Poor choice of words on my part. I was attempting to refer to external website/webpages - those types of "servers" - that display your IP (like whatismyip.com).
However, since starting this thread, those sites are now reporting what I expect, but not my own hosted webpages at home. Webpages hosted at home seem to be the only one that is reporting the work IP address now. That's kind of a bummer, because I've set up some pages to act different dependent upon if I'm at home vs at an external computer without the OpenVPN client. I was expecting to connect via OpenVPN and have my pages act as if I'm at home. There's also the issue where when I connect the Windows OpenVPN at work to connect to home, I loose access to the internal-only work servers, services, and webpages. I think this is the bigger issue. I'm baffled, because the Android client doesn't loose the access to the internal-only work servers, services, and webpages, but still is able to have the home IP, and my home webpages act like I'm at home.

TinCanTech

Do not use the public IP of your webserver at home, use the tunnel IP or the local IP.

The public IP will always route via the internet because of --redirect-gateway.

geektbee

I'm using the Public IP given to me by my ISP. I thought this was desired......
But can you point me to a good guide for fixing that up well, then?

TinCanTech

Read about --redirect-gateway in the manual ..