[SOLVED] Can't browse anymore after changing subnet where OpenVPN server is on

stuif

Hi all,

I got an OpenVPN server (installed with roadwarrior script) running at a Raspberry at my parents home. Because they had the same subnet (192.168.2.0/24) as at my home and I was having issues, I changed their subnet to 192.168.9.0/24.

When I am directly on their network, everything is working fine. All devices got ip addresses in the new subnet, including the Raspberry.
The only thing I changed to the OpenVPN server in the server.conf so it is listening to its new ip address. Now I can connect to their network. The problem is, I can't access anything using my browser: Not there modem and nvr webguis on their network, but also no external internetsites. But I can ping and traceroute internal and external ip addresses and dns successfully.

I hope someone can help me or push me in the right direction.

Here are my configs and logs:

server

Linux raspberrypi 4.19.97-v7+ #1294 SMP Thu Jan 30 13:15:58 GMT 2020 armv7l GNU/Linux

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.9.1  netmask 255.255.255.0  broadcast 192.168.9.255
        inet6 fe80::f881:4350:f6db:8da4  prefixlen 64  scopeid 0x20<link>
        ether b8:27:eb:2c:61:54  txqueuelen 1000  (Ethernet)
        RX packets 4826  bytes 382138 (373.1 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1611  bytes 161460 (157.6 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.1  netmask 255.255.255.0  destination 10.8.0.1
        inet6 fe80::fabc:af47:122f:c354  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 1430  bytes 96467 (94.2 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 147  bytes 19647 (19.1 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

local 192.168.9.1
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
crl-verify crl.pem
explicit-exit-notify

I doubt if this log below is the right one...

TITLE,OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
TIME,Tue Mar 10 06:41:37 2020,1583818897
HEADER,CLIENT_LIST,Common Name,Real Address,Virtual Address,Virtual IPv6 Address,Bytes Received,Bytes Sent,Connected Since,Connected Since (time_t),Username,Client ID,Peer ID
CLIENT_LIST,laptop,X:X:X:X:52981,10.8.0.2,,55577,17571,Tue Mar 10 06:38:52 2020,1583818732,UNDEF,0,0
HEADER,ROUTING_TABLE,Virtual Address,Common Name,Real Address,Last Ref,Last Ref (time_t)
ROUTING_TABLE,10.8.0.2,laptop,X:X:X:X:52981,Tue Mar 10 06:41:36 2020,1583818896
GLOBAL_STATS,Max bcast/mcast queue length,1
END

client

Microsoft Windows [Version 10.0.18362.657]

Windows IP Configuration

   Host Name . . . . . . . . . . . . : laptop
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : local

Ethernet adapter Ethernet 3:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-42-4D-AD-08
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::84e3:3728:b951:6a3c%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.8.0.2(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, 10 March 2020 06:38:54
   Lease Expires . . . . . . . . . . : Wednesday, 10 March 2021 06:38:54
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.8.0.254
   DHCPv6 IAID . . . . . . . . . . . : 654376770
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-20-F9-5F-F9-D4-81-D7-F9-0D-24
   DNS Servers . . . . . . . . . . . : 1.1.1.1
                                       1.0.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) Ethernet Connection (4) I219-LM
   Physical Address. . . . . . . . . : D4-81-D7-F9-0D-24
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

   Connection-specific DNS Suffix  . : stuif.local
   Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 8265
   Physical Address. . . . . . . . . : 34-F6-4B-98-9D-79
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::e57f:1ba4:cbd3:e8f6%8(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.2.13(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Monday, 9 March 2020 21:46:27
   Lease Expires . . . . . . . . . . : Wednesday, 11 March 2020 06:24:53
   Default Gateway . . . . . . . . . : 192.168.2.1
   DHCP Server . . . . . . . . . . . : 192.168.2.1
   DHCPv6 IAID . . . . . . . . . . . : 53802571
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-20-F9-5F-F9-D4-81-D7-F9-0D-24
   DNS Servers . . . . . . . . . . . : 192.168.2.63
   NetBIOS over Tcpip. . . . . . . . : Enabled
   Connection-specific DNS Suffix Search List :
                                       stuif.local

client
dev tun
proto udp
remote X:X:X:X 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
block-outside-dns
verb 4

Tue Mar 10 06:38:51 2020 us=447381 Current Parameter Settings:
Tue Mar 10 06:38:51 2020 us=448273   config = 'parents.ovpn'
Tue Mar 10 06:38:51 2020 us=448273   mode = 0
Tue Mar 10 06:38:51 2020 us=448273   show_ciphers = DISABLED
Tue Mar 10 06:38:51 2020 us=448273   show_digests = DISABLED
Tue Mar 10 06:38:51 2020 us=448273   show_engines = DISABLED
Tue Mar 10 06:38:51 2020 us=448273   genkey = DISABLED
Tue Mar 10 06:38:51 2020 us=448273   key_pass_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=448273   show_tls_ciphers = DISABLED
Tue Mar 10 06:38:51 2020 us=448273   connect_retry_max = 0
Tue Mar 10 06:38:51 2020 us=450455 Connection profiles [0]:
Tue Mar 10 06:38:51 2020 us=450455   proto = udp
Tue Mar 10 06:38:51 2020 us=450455   local = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=450455   local_port = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=450455   remote = 'X:X:X:X'
Tue Mar 10 06:38:51 2020 us=450455   remote_port = '1194'
Tue Mar 10 06:38:51 2020 us=450455   remote_float = DISABLED
Tue Mar 10 06:38:51 2020 us=450455   bind_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=450455   bind_local = DISABLED
Tue Mar 10 06:38:51 2020 us=450455   bind_ipv6_only = DISABLED
Tue Mar 10 06:38:51 2020 us=450455   connect_retry_seconds = 5
Tue Mar 10 06:38:51 2020 us=450455   connect_timeout = 120
Tue Mar 10 06:38:51 2020 us=450455   socks_proxy_server = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=450455   socks_proxy_port = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=450455   tun_mtu = 1500
Tue Mar 10 06:38:51 2020 us=450455   tun_mtu_defined = ENABLED
Tue Mar 10 06:38:51 2020 us=450455   link_mtu = 1500
Tue Mar 10 06:38:51 2020 us=450455   link_mtu_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=450455   tun_mtu_extra = 0
Tue Mar 10 06:38:51 2020 us=450455   tun_mtu_extra_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   mtu_discover_type = -1
Tue Mar 10 06:38:51 2020 us=451267   fragment = 0
Tue Mar 10 06:38:51 2020 us=451267   mssfix = 1450
Tue Mar 10 06:38:51 2020 us=451267   explicit_exit_notification = 0
Tue Mar 10 06:38:51 2020 us=451267 Connection profiles END
Tue Mar 10 06:38:51 2020 us=451267   remote_random = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   ipchange = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   dev = 'tun'
Tue Mar 10 06:38:51 2020 us=451267   dev_type = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   dev_node = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   lladdr = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   topology = 1
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_local = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_remote_netmask = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_noexec = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_nowarn = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_ipv6_local = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_ipv6_netbits = 0
Tue Mar 10 06:38:51 2020 us=451267   ifconfig_ipv6_remote = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   shaper = 0
Tue Mar 10 06:38:51 2020 us=451267   mtu_test = 0
Tue Mar 10 06:38:51 2020 us=451267   mlock = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   keepalive_ping = 0
Tue Mar 10 06:38:51 2020 us=451267   keepalive_timeout = 0
Tue Mar 10 06:38:51 2020 us=451267   inactivity_timeout = 0
Tue Mar 10 06:38:51 2020 us=451267   ping_send_timeout = 0
Tue Mar 10 06:38:51 2020 us=451267   ping_rec_timeout = 0
Tue Mar 10 06:38:51 2020 us=451267   ping_rec_timeout_action = 0
Tue Mar 10 06:38:51 2020 us=451267   ping_timer_remote = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   remap_sigusr1 = 0
Tue Mar 10 06:38:51 2020 us=451267   persist_tun = ENABLED
Tue Mar 10 06:38:51 2020 us=451267   persist_local_ip = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   persist_remote_ip = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   persist_key = ENABLED
Tue Mar 10 06:38:51 2020 us=451267   passtos = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   resolve_retry_seconds = 1000000000
Tue Mar 10 06:38:51 2020 us=451267   resolve_in_advance = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   username = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   groupname = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   chroot_dir = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   cd_dir = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   writepid = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   up_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   down_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   down_pre = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   up_restart = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   up_delay = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   daemon = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   inetd = 0
Tue Mar 10 06:38:51 2020 us=451267   log = ENABLED
Tue Mar 10 06:38:51 2020 us=451267   suppress_timestamps = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   machine_readable_output = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   nice = 0
Tue Mar 10 06:38:51 2020 us=451267   verbosity = 4
Tue Mar 10 06:38:51 2020 us=451267   mute = 0
Tue Mar 10 06:38:51 2020 us=451267   gremlin = 0
Tue Mar 10 06:38:51 2020 us=451267   status_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   status_file_version = 1
Tue Mar 10 06:38:51 2020 us=451267   status_file_update_freq = 60
Tue Mar 10 06:38:51 2020 us=451267   occ = ENABLED
Tue Mar 10 06:38:51 2020 us=451267   rcvbuf = 0
Tue Mar 10 06:38:51 2020 us=451267   sndbuf = 0
Tue Mar 10 06:38:51 2020 us=451267   sockflags = 0
Tue Mar 10 06:38:51 2020 us=451267   fast_io = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   comp.alg = 0
Tue Mar 10 06:38:51 2020 us=451267   comp.flags = 0
Tue Mar 10 06:38:51 2020 us=451267   route_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   route_default_gateway = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=451267   route_default_metric = 0
Tue Mar 10 06:38:51 2020 us=451267   route_noexec = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   route_delay = 5
Tue Mar 10 06:38:51 2020 us=451267   route_delay_window = 30
Tue Mar 10 06:38:51 2020 us=451267   route_delay_defined = ENABLED
Tue Mar 10 06:38:51 2020 us=451267   route_nopull = DISABLED
Tue Mar 10 06:38:51 2020 us=451267   route_gateway_via_dhcp = DISABLED
Tue Mar 10 06:38:51 2020 us=452263   allow_pull_fqdn = DISABLED
Tue Mar 10 06:38:51 2020 us=452263   management_addr = '127.0.0.1'
Tue Mar 10 06:38:51 2020 us=452263   management_port = '25340'
Tue Mar 10 06:38:51 2020 us=452263   management_user_pass = 'stdin'
Tue Mar 10 06:38:51 2020 us=452263   management_log_history_cache = 250
Tue Mar 10 06:38:51 2020 us=452263   management_echo_buffer_size = 100
Tue Mar 10 06:38:51 2020 us=452263   management_write_peer_info_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452263   management_client_user = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452263   management_client_group = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452263   management_flags = 6
Tue Mar 10 06:38:51 2020 us=452263   shared_secret_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   key_direction = not set
Tue Mar 10 06:38:51 2020 us=452432   ciphername = 'AES-256-CBC'
Tue Mar 10 06:38:51 2020 us=452432   ncp_enabled = ENABLED
Tue Mar 10 06:38:51 2020 us=452432   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Mar 10 06:38:51 2020 us=452432   authname = 'SHA512'
Tue Mar 10 06:38:51 2020 us=452432   prng_hash = 'SHA1'
Tue Mar 10 06:38:51 2020 us=452432   prng_nonce_secret_len = 16
Tue Mar 10 06:38:51 2020 us=452432   keysize = 0
Tue Mar 10 06:38:51 2020 us=452432   engine = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   replay = ENABLED
Tue Mar 10 06:38:51 2020 us=452432   mute_replay_warnings = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   replay_window = 64
Tue Mar 10 06:38:51 2020 us=452432   replay_time = 15
Tue Mar 10 06:38:51 2020 us=452432   packet_id_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   use_iv = ENABLED
Tue Mar 10 06:38:51 2020 us=452432   test_crypto = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   tls_server = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   tls_client = ENABLED
Tue Mar 10 06:38:51 2020 us=452432   key_method = 2
Tue Mar 10 06:38:51 2020 us=452432   ca_file = '[[INLINE]]'
Tue Mar 10 06:38:51 2020 us=452432   ca_path = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   dh_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   cert_file = '[[INLINE]]'
Tue Mar 10 06:38:51 2020 us=452432   extra_certs_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   priv_key_file = '[[INLINE]]'
Tue Mar 10 06:38:51 2020 us=452432   pkcs12_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   cryptoapi_cert = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   cipher_list = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   tls_cert_profile = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   tls_verify = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   tls_export_cert = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   verify_x509_type = 0
Tue Mar 10 06:38:51 2020 us=452432   verify_x509_name = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   crl_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   ns_cert_type = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 65535
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_ku[i] = 0
Tue Mar 10 06:38:51 2020 us=452432   remote_cert_eku = 'TLS Web Server Authentication'
Tue Mar 10 06:38:51 2020 us=452432   ssl_flags = 0
Tue Mar 10 06:38:51 2020 us=452432   tls_timeout = 2
Tue Mar 10 06:38:51 2020 us=452432   renegotiate_bytes = -1
Tue Mar 10 06:38:51 2020 us=452432   renegotiate_packets = 0
Tue Mar 10 06:38:51 2020 us=452432   renegotiate_seconds = 3600
Tue Mar 10 06:38:51 2020 us=452432   handshake_window = 60
Tue Mar 10 06:38:51 2020 us=452432   transition_window = 3600
Tue Mar 10 06:38:51 2020 us=452432   single_session = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   push_peer_info = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   tls_exit = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   tls_auth_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=452432   tls_crypt_file = '[[INLINE]]'
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_protected_authentication = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_private_mode = 00000000
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=452432   pkcs11_cert_private = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   pkcs11_pin_cache_period = -1
Tue Mar 10 06:38:51 2020 us=453259   pkcs11_id = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   pkcs11_id_management = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   server_network = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   server_netmask = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   server_network_ipv6 = ::
Tue Mar 10 06:38:51 2020 us=453259   server_netbits_ipv6 = 0
Tue Mar 10 06:38:51 2020 us=453259   server_bridge_ip = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   server_bridge_netmask = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   server_bridge_pool_start = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   server_bridge_pool_end = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_start = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_end = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_netmask = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_pool_persist_refresh_freq = 600
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_ipv6_pool_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_ipv6_pool_base = ::
Tue Mar 10 06:38:51 2020 us=453259   ifconfig_ipv6_pool_netbits = 0
Tue Mar 10 06:38:51 2020 us=453259   n_bcast_buf = 256
Tue Mar 10 06:38:51 2020 us=453259   tcp_queue_limit = 64
Tue Mar 10 06:38:51 2020 us=453259   real_hash_size = 256
Tue Mar 10 06:38:51 2020 us=453259   virtual_hash_size = 256
Tue Mar 10 06:38:51 2020 us=453259   client_connect_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   learn_address_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   client_disconnect_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   client_config_dir = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   ccd_exclusive = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   tmp_dir = 'C:\Users\HANSST~1\AppData\Local\Temp\'
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_local = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_ipv6_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_ipv6_local = ::/0
Tue Mar 10 06:38:51 2020 us=453259   push_ifconfig_ipv6_remote = ::
Tue Mar 10 06:38:51 2020 us=453259   enable_c2c = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   duplicate_cn = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   cf_max = 0
Tue Mar 10 06:38:51 2020 us=453259   cf_per = 0
Tue Mar 10 06:38:51 2020 us=453259   max_clients = 1024
Tue Mar 10 06:38:51 2020 us=453259   max_routes_per_client = 256
Tue Mar 10 06:38:51 2020 us=453259   auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   auth_token_generate = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   auth_token_lifetime = 0
Tue Mar 10 06:38:51 2020 us=453259   client = ENABLED
Tue Mar 10 06:38:51 2020 us=453259   pull = ENABLED
Tue Mar 10 06:38:51 2020 us=453259   auth_user_pass_file = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   show_net_up = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   route_method = 3
Tue Mar 10 06:38:51 2020 us=453259   block_outside_dns = ENABLED
Tue Mar 10 06:38:51 2020 us=453259   ip_win32_defined = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   ip_win32_type = 3
Tue Mar 10 06:38:51 2020 us=453259   dhcp_masq_offset = 0
Tue Mar 10 06:38:51 2020 us=453259   dhcp_lease_time = 31536000
Tue Mar 10 06:38:51 2020 us=453259   tap_sleep = 0
Tue Mar 10 06:38:51 2020 us=453259   dhcp_options = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   dhcp_renew = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   dhcp_pre_release = DISABLED
Tue Mar 10 06:38:51 2020 us=453259   domain = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   netbios_scope = '[UNDEF]'
Tue Mar 10 06:38:51 2020 us=453259   netbios_node_type = 0
Tue Mar 10 06:38:51 2020 us=453259   disable_nbt = DISABLED
Tue Mar 10 06:38:51 2020 us=453259 OpenVPN 2.4.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar  1 2018
Tue Mar 10 06:38:51 2020 us=453259 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Mar 10 06:38:51 2020 us=453259 library versions: OpenSSL 1.1.0f  25 May 2017, LZO 2.10
Enter Management Password:
Tue Mar 10 06:38:51 2020 us=454354 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Mar 10 06:38:51 2020 us=454354 Need hold release from management interface, waiting...
Tue Mar 10 06:38:51 2020 us=902068 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Mar 10 06:38:52 2020 us=4032 MANAGEMENT: CMD 'state on'
Tue Mar 10 06:38:52 2020 us=4800 MANAGEMENT: CMD 'log all on'
Tue Mar 10 06:38:52 2020 us=663030 MANAGEMENT: CMD 'echo all on'
Tue Mar 10 06:38:52 2020 us=671004 MANAGEMENT: CMD 'bytecount 5'
Tue Mar 10 06:38:52 2020 us=677204 MANAGEMENT: CMD 'hold off'
Tue Mar 10 06:38:52 2020 us=683055 MANAGEMENT: CMD 'hold release'
Tue Mar 10 06:38:52 2020 us=689952 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Mar 10 06:38:52 2020 us=689952 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 10 06:38:52 2020 us=689952 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Mar 10 06:38:52 2020 us=689952 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Mar 10 06:38:52 2020 us=689952 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Mar 10 06:38:52 2020 us=689952 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Mar 10 06:38:52 2020 us=690950 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Tue Mar 10 06:38:52 2020 us=691043 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Tue Mar 10 06:38:52 2020 us=691043 TCP/UDP: Preserving recently used remote address: [AF_INET]X:X:X:X:1194
Tue Mar 10 06:38:52 2020 us=691043 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Mar 10 06:38:52 2020 us=691043 UDP link local: (not bound)
Tue Mar 10 06:38:52 2020 us=691043 UDP link remote: [AF_INET]X:X:X:X:1194
Tue Mar 10 06:38:52 2020 us=691043 MANAGEMENT: >STATE:1583818732,WAIT,,,,,,
Tue Mar 10 06:38:52 2020 us=718909 MANAGEMENT: >STATE:1583818732,AUTH,,,,,,
Tue Mar 10 06:38:52 2020 us=718909 TLS: Initial packet from [AF_INET]X:X:X:X:1194, sid=00b576f7 bd43a819
Tue Mar 10 06:38:52 2020 us=805740 VERIFY OK: depth=1, CN=ChangeMe
Tue Mar 10 06:38:52 2020 us=806641 VERIFY KU OK
Tue Mar 10 06:38:52 2020 us=806641 Validating certificate extended key usage
Tue Mar 10 06:38:52 2020 us=807642 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Mar 10 06:38:52 2020 us=807642 VERIFY EKU OK
Tue Mar 10 06:38:52 2020 us=807642 VERIFY OK: depth=0, CN=server
Tue Mar 10 06:38:52 2020 us=881618 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Mar 10 06:38:52 2020 us=882483 [server] Peer Connection Initiated with [AF_INET]X:X:X:X:1194
Tue Mar 10 06:38:54 2020 us=145210 MANAGEMENT: >STATE:1583818734,GET_CONFIG,,,,,,
Tue Mar 10 06:38:54 2020 us=145210 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Mar 10 06:38:54 2020 us=172033 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: timers and/or timeouts modified
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: --ifconfig/up options modified
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: route options modified
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: route-related options modified
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: peer-id set
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: adjusting link_mtu to 1624
Tue Mar 10 06:38:54 2020 us=172033 OPTIONS IMPORT: data channel crypto options modified
Tue Mar 10 06:38:54 2020 us=172033 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Mar 10 06:38:54 2020 us=172033 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Tue Mar 10 06:38:54 2020 us=173028 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Mar 10 06:38:54 2020 us=173028 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Mar 10 06:38:54 2020 us=173028 interactive service msg_channel=788
Tue Mar 10 06:38:54 2020 us=195077 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=8 HWADDR=34:f6:4b:98:9d:79
Tue Mar 10 06:38:54 2020 us=273717 open_tun
Tue Mar 10 06:38:54 2020 us=279704 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{424DAD08-C1BC-4432-824E-0900E0CAB6BA}.tap
Tue Mar 10 06:38:54 2020 us=280697 TAP-Windows Driver Version 9.21 
Tue Mar 10 06:38:54 2020 us=280697 TAP-Windows MTU=1500
Tue Mar 10 06:38:54 2020 us=290776 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Tue Mar 10 06:38:54 2020 us=290776 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {424DAD08-C1BC-4432-824E-0900E0CAB6BA} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Mar 10 06:38:54 2020 us=290776 DHCP option string: 06080101 01010100 0001
Tue Mar 10 06:38:54 2020 us=294661 Successful ARP Flush on interface [11] {424DAD08-C1BC-4432-824E-0900E0CAB6BA}
Tue Mar 10 06:38:54 2020 us=327571 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Mar 10 06:38:54 2020 us=327571 MANAGEMENT: >STATE:1583818734,ASSIGN_IP,,10.8.0.2,,,,
Tue Mar 10 06:38:54 2020 us=328568 Blocking outside DNS
Tue Mar 10 06:38:54 2020 us=328568 Using service to add block dns filters
Tue Mar 10 06:38:54 2020 us=363475 Blocking outside dns using service succeeded.
Tue Mar 10 06:38:59 2020 us=136790 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Tue Mar 10 06:38:59 2020 us=136790 C:\WINDOWS\system32\route.exe ADD X:X:X:X MASK 255.255.255.255 192.168.2.1
Tue Mar 10 06:38:59 2020 us=148872 Route addition via service succeeded
Tue Mar 10 06:38:59 2020 us=148872 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Mar 10 06:38:59 2020 us=164716 Route addition via service succeeded
Tue Mar 10 06:38:59 2020 us=164881 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Mar 10 06:38:59 2020 us=181671 Route addition via service succeeded
Tue Mar 10 06:38:59 2020 us=181671 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Mar 10 06:38:59 2020 us=181671 Initialization Sequence Completed
Tue Mar 10 06:38:59 2020 us=181671 MANAGEMENT: >STATE:1583818739,CONNECTED,SUCCESS,10.8.0.2,X:X:X:X,11994,,

stuif

Solved by changing firewall rule:

sudo iptables -t nat -A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to-source X:X:X:X
sudo iptables -t nat -D POSTROUTING 1

stuif

My last post was not the solution. When rebooting the iptables was reset.
It appeared the roadwarrior script made a service. Editing this file will solve this:

/etc/systemd/system/openvpn-iptables.service