Hello everybody. I using openvpn (server) on debian vesrion 2.4.9 and OpenVPN 2.4.9 on Windows (and some other clients)... With established connection, I tried to send packet greater than tun-mtu from my network to connected client and tunnel is going down for ~10 seconds: [code] C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472 Pinging xx.xx.xx.2 with 1472 bytes of data: Reply from xx.xx.xx.2: bytes=1472 time=8ms TTL=122 Reply from xx.xx.xx.2: bytes=1472 time=9ms TTL=122 Ping statistics for xx.xx.xx.2: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 8ms, Maximum = 9ms, Average = 8ms Control-C ^C C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1473 Pinging xx.xx.xx.2 with 1473 bytes of data: Control-C ^C C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472 Pinging xx.xx.xx.2 with 1472 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for xx.xx.xx.2: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), Control-C ^C C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472 Pinging xx.xx.xx.2 with 1472 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for xx.xx.xx.2: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472 Pinging xx.xx.xx.2 with 1472 bytes of data: Reply from xx.xx.xx.2: bytes=1472 time=6ms TTL=122 Ping statistics for xx.xx.xx.2: Packets: Sent = 1, Received = 1, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 6ms, Maximum = 6ms, Average = 6ms [/code] I tried to set MTU less than 1500 (with fragment and mss-fix options): [oconf=example to set MTU less than 1500] tun-mtu 1400 mssfix 1300 fragment 1300 [/oconf] The result is the same: when I trying to ping with size greater than mtu-28 or udp packet with size greater than MTU - tunnel is going down for 10-15 seconds... I need to fragment packets with large MTU... How I can to solve this issue? [oconf=server.conf] port 443 proto udp ; tun-mtu 1400 ; mssfix 1300 ; fragment 1300 dev tun ca certs/ca.crt cert certs/prd-ovpn-02.crt key keys/prd-ovpn-02.key # This file should be kept secret crl-verify certs/crl.pem dh keys/dh.pem topology subnet mode server tls-server server 10.x.x.0 255.x.x.0 ifconfig-pool-persist /var/log/openvpn/ipp.txt push "route 10.x.x.x 255.x.x.x" push "dhcp-option DNS x.x.x.x" push "dhcp-option DNS x.x.x.y" push "dhcp-option DOMAIN mydomain.com" client-to-client keepalive 10 120 tls-auth keys/ta.key 0 # This file is secret cipher AES-256-CBC auth SHA256 user openvpn group openvpn persist-key persist-tun status /var/log/openvpn/openvpn-status.log log-append /var/log/openvpn/openvpn.log verb 3 explicit-exit-notify 1 script-security 2 client-connect '/etc/openvpn/scripts/client-connect.py /var/log/openvpn/client-connect.log' [/oconf] [oconf=client.ovpn] client remote vpn.mydomain.com 444 # tun-mtu 1400 # mssfix 1300 # fragment 1300 cipher aes-256-cbc auth sha256 dev tun proto udp tls-client key-direction 1 pull -----BEGIN OpenVPN Static key V1----- ... -----END OpenVPN Static key V1----- -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- ... -----END PRIVATE KEY----- [/oconf]

[quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] Its clean debian 10 installation. No another software [/quote]Except Windows on the other end .. [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] intermediate nodes ok [/quote]I'll take your word .. [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] I checked ping size to 16000 - to OpenVPN server - ok [/quote]From ? [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] to client - only less than 1472... [/quote]Client network has an issue then, most likely .. [quote=TinCanTech post_id=92976 time=1594383417 user_id=37053] Try --[b]mtu-test[/b] [/quote] :geek:

[quote=TinCanTech post_id=93003 time=1594402578 user_id=37053] [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] Its clean debian 10 installation. No another software [/quote]Except Windows on the other end .. [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] intermediate nodes ok [/quote]I'll take your word .. [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] I checked ping size to 16000 - to OpenVPN server - ok [/quote]From ?[/quote] Scheme is below... I Pinging from my working PC to my home notebook... [img]https://prnt.sc/tfiqba[/img] [url]https://prnt.sc/tfiqba[/url] [quote=TinCanTech post_id=93003 time=1594402578 user_id=37053] [quote=Yacudzer post_id=93001 time=1594402125 user_id=50190] to client - only less than 1472... [/quote]Client network has an issue then, most likely .. [quote=TinCanTech post_id=92976 time=1594383417 user_id=37053] Try --[b]mtu-test[/b] [/quote] :geek: [/quote] I did tun-mtu=1200... Result is the same: [code]C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1172 -t Pinging 10.aa.bb.cc with 1172 bytes of data: Reply from 10.aa.bb.cc: bytes=1172 time=4ms TTL=122 Reply from 10.aa.bb.cc: bytes=1172 time=3ms TTL=122 Reply from 10.aa.bb.cc: bytes=1172 time=3ms TTL=122 Reply from 10.aa.bb.cc: bytes=1172 time=4ms TTL=122 Ping statistics for 10.aa.bb.cc: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 3ms, Maximum = 4ms, Average = 3ms Control-C ^C C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1173 -t Pinging 10.aa.bb.cc with 1173 bytes of data: Request timed out. Ping statistics for 10.aa.bb.cc: Packets: Sent = 1, Received = 0, Lost = 1 (100% loss), Control-C ^C C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1172 -t Pinging 10.aa.bb.cc with 1172 bytes of data: Request timed out. Request timed out. Ping statistics for 10.aa.bb.cc: Packets: Sent = 2, Received = 0, Lost = 2 (100% loss), [/code]

[quote=TinCanTech post_id=93006 time=1594404931 user_id=37053] Try --[b]mtu-test[/b] [/quote] I did it... More ideas?

Tunnel down when with too large packed recieved

Yacudzer

Hello everybody.
I using openvpn (server) on debian vesrion 2.4.9 and OpenVPN 2.4.9 on Windows (and some other clients)...
With established connection, I tried to send packet greater than tun-mtu from my network to connected client and tunnel is going down for ~10 seconds:

C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472

Pinging xx.xx.xx.2 with 1472 bytes of data:
Reply from xx.xx.xx.2: bytes=1472 time=8ms TTL=122
Reply from xx.xx.xx.2: bytes=1472 time=9ms TTL=122

Ping statistics for xx.xx.xx.2:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 8ms, Maximum = 9ms, Average = 8ms
Control-C
^C
C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1473

Pinging xx.xx.xx.2 with 1473 bytes of data:
Control-C
^C
C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472

Pinging xx.xx.xx.2 with 1472 bytes of data:
Request timed out.
Request timed out.
Request timed out.

Ping statistics for xx.xx.xx.2:
    Packets: Sent = 3, Received = 0, Lost = 3 (100% loss),
Control-C
^C
C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472

Pinging xx.xx.xx.2 with 1472 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for xx.xx.xx.2:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Users\evgenii.iakubov>ping xx.xx.xx.2 -l 1472

Pinging xx.xx.xx.2 with 1472 bytes of data:
Reply from xx.xx.xx.2: bytes=1472 time=6ms TTL=122

Ping statistics for xx.xx.xx.2:
    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 6ms, Maximum = 6ms, Average = 6ms

I tried to set MTU less than 1500 (with fragment and mss-fix options):

tun-mtu 1400
mssfix 1300
fragment 1300

The result is the same: when I trying to ping with size greater than mtu-28 or udp packet with size greater than MTU - tunnel is going down for 10-15 seconds... I need to fragment packets with large MTU... How I can to solve this issue?

port 443
proto udp

; tun-mtu 1400
; mssfix 1300
; fragment 1300
dev tun
ca certs/ca.crt
cert certs/prd-ovpn-02.crt
key keys/prd-ovpn-02.key # This file should be kept secret
crl-verify certs/crl.pem
dh keys/dh.pem
topology subnet
mode server
tls-server
server 10.x.x.0 255.x.x.0
ifconfig-pool-persist /var/log/openvpn/ipp.txt
push "route 10.x.x.x 255.x.x.x"
push "dhcp-option DNS x.x.x.x"
push "dhcp-option DNS x.x.x.y"
push "dhcp-option DOMAIN mydomain.com"
client-to-client
keepalive 10 120
tls-auth keys/ta.key 0 # This file is secret
cipher AES-256-CBC
auth SHA256
user openvpn
group openvpn
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log-append /var/log/openvpn/openvpn.log
verb 3
explicit-exit-notify 1
script-security 2
client-connect '/etc/openvpn/scripts/client-connect.py /var/log/openvpn/client-connect.log'

client
remote vpn.mydomain.com 444
# tun-mtu 1400
# mssfix 1300
# fragment 1300
cipher aes-256-cbc
auth sha256
dev tun
proto udp
tls-client
key-direction 1
pull

<tls-auth>
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>

<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
</key>

TinCanTech

Try --mtu-test

Yacudzer

TinCanTech wrote Try --mtu-test

Only this option? Or with some another like fragment or mssfix?

Sorry, I can to use this option myself, but I need to solve issue with a lot of my clients. I cannot to run openvpn with this option for every client. A lot of clients use android OS, macOS, etc..
Packet with size 1500 successfully going between peers. Bun not inside tunnel....

TinCanTech

If you don't know your PMTU then use --mtu-test to figure it out.

Yacudzer wrote Packet with size 1500 successfully going between peers. Bun not inside tunnel....

Does not sound like an MTU issue then ...

How about you post your logs at --verb 4 showing the problem.

Yacudzer

I sent ping about 16:53:27...

Fri Jul 10 16:51:16 2020 us=702312 Initialization Sequence Completed
Fri Jul 10 16:52:35 2020 us=574701 MULTI: multi_create_instance called
Fri Jul 10 16:52:35 2020 us=574831 zz.zz.zz.zz:1194 Re-using SSL/TLS context
Fri Jul 10 16:52:35 2020 us=575217 zz.zz.zz.zz:1194 Control Channel MTU parms [ L:1621 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Fri Jul 10 16:52:35 2020 us=575249 zz.zz.zz.zz:1194 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Fri Jul 10 16:52:35 2020 us=575370 zz.zz.zz.zz:1194 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jul 10 16:52:35 2020 us=575390 zz.zz.zz.zz:1194 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jul 10 16:52:35 2020 us=575449 zz.zz.zz.zz:1194 TLS: Initial packet from [AF_INET]zz.zz.zz.zz:1194, sid=640ae1e3 30ea91f8
Fri Jul 10 16:52:35 2020 us=603879 zz.zz.zz.zz:1194 VERIFY OK: depth=1, CN=vpn.monopoly.su
Fri Jul 10 16:52:35 2020 us=604192 zz.zz.zz.zz:1194 VERIFY OK: depth=0, C=RU, ST=LenObl, L=Saint-Petersburg, O=Fortis, OU=SysAdmins, CN=yacudzer, emailAddress=admin@monopoly.su
Fri Jul 10 16:52:35 2020 us=604562 zz.zz.zz.zz:1194 peer info: IV_VER=2.4.9
Fri Jul 10 16:52:35 2020 us=604626 zz.zz.zz.zz:1194 peer info: IV_PLAT=win
Fri Jul 10 16:52:35 2020 us=604684 zz.zz.zz.zz:1194 peer info: IV_PROTO=2
Fri Jul 10 16:52:35 2020 us=604736 zz.zz.zz.zz:1194 peer info: IV_NCP=2
Fri Jul 10 16:52:35 2020 us=604788 zz.zz.zz.zz:1194 peer info: IV_LZ4=1
Fri Jul 10 16:52:35 2020 us=604859 zz.zz.zz.zz:1194 peer info: IV_LZ4v2=1
Fri Jul 10 16:52:35 2020 us=604909 zz.zz.zz.zz:1194 peer info: IV_LZO=1
Fri Jul 10 16:52:35 2020 us=604994 zz.zz.zz.zz:1194 peer info: IV_COMP_STUB=1
Fri Jul 10 16:52:35 2020 us=605043 zz.zz.zz.zz:1194 peer info: IV_COMP_STUBv2=1
Fri Jul 10 16:52:35 2020 us=605100 zz.zz.zz.zz:1194 peer info: IV_TCPNL=1
Fri Jul 10 16:52:35 2020 us=605147 zz.zz.zz.zz:1194 peer info: IV_GUI_VER=OpenVPN_GUI_11
Fri Jul 10 16:52:35 2020 us=607938 zz.zz.zz.zz:1194 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Fri Jul 10 16:52:35 2020 us=608130 zz.zz.zz.zz:1194 [yacudzer] Peer Connection Initiated with [AF_INET]zz.zz.zz.zz:1194
Fri Jul 10 16:52:35 2020 us=608281 yacudzer/zz.zz.zz.zz:1194 MULTI_sva: pool returned IPv4=10.aa.bb.2, IPv6=(Not enabled)
Fri Jul 10 16:52:35 2020 us=635713 yacudzer/zz.zz.zz.zz:1194 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_6da408e77bf06d24.tmp
Fri Jul 10 16:52:35 2020 us=635818 yacudzer/zz.zz.zz.zz:1194 MULTI: Learn: 10.aa.bb.2 -> yacudzer/zz.zz.zz.zz:1194
Fri Jul 10 16:52:35 2020 us=635831 yacudzer/zz.zz.zz.zz:1194 MULTI: primary virtual IP for yacudzer/zz.zz.zz.zz:1194: 10.aa.bb.2
Fri Jul 10 16:52:36 2020 us=683222 yacudzer/zz.zz.zz.zz:1194 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jul 10 16:52:36 2020 us=683366 yacudzer/zz.zz.zz.zz:1194 SENT CONTROL [yacudzer]: 'PUSH_REPLY,route 10.aa.bb.0 255.252.0.0,dhcp-option DNS 10.aa.bb.10,dhcp-option DNS 10.aa.bb.10,dhcp-option DOMAIN monopoly.su,route-gateway 10.aa.bb.1,topology subnet,ping 10,ping-restart 120,route 10.aa.bb.0 255.255.255.0,route 172.17.100.0 255.255.255.0,route 192.168.0.0 255.255.128.0,ifconfig 10.aa.bb.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Jul 10 16:52:36 2020 us=683397 yacudzer/zz.zz.zz.zz:1194 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jul 10 16:52:36 2020 us=683444 yacudzer/zz.zz.zz.zz:1194 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Fri Jul 10 16:52:36 2020 us=683628 yacudzer/zz.zz.zz.zz:1194 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 10 16:52:36 2020 us=683677 yacudzer/zz.zz.zz.zz:1194 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

Fri Jul 10 16:52:31 2020 us=795973 Current Parameter Settings:
Fri Jul 10 16:52:31 2020 us=795973   config = 'yacudzer_tst.ovpn'
Fri Jul 10 16:52:31 2020 us=795973   mode = 0
Fri Jul 10 16:52:31 2020 us=795973   show_ciphers = DISABLED
Fri Jul 10 16:52:31 2020 us=795973   show_digests = DISABLED
Fri Jul 10 16:52:31 2020 us=795973   show_engines = DISABLED
Fri Jul 10 16:52:31 2020 us=795973   genkey = DISABLED
Fri Jul 10 16:52:31 2020 us=795973   key_pass_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=795973   show_tls_ciphers = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   connect_retry_max = 0
Fri Jul 10 16:52:31 2020 us=796973 Connection profiles [0]:
Fri Jul 10 16:52:31 2020 us=796973   proto = udp
Fri Jul 10 16:52:31 2020 us=796973   local = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   local_port = '1194'
Fri Jul 10 16:52:31 2020 us=796973   remote = 'vpn.monopoly.su'
Fri Jul 10 16:52:31 2020 us=796973   remote_port = '444'
Fri Jul 10 16:52:31 2020 us=796973   remote_float = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   bind_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   bind_local = ENABLED
Fri Jul 10 16:52:31 2020 us=796973   bind_ipv6_only = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   connect_retry_seconds = 5
Fri Jul 10 16:52:31 2020 us=796973   connect_timeout = 120
Fri Jul 10 16:52:31 2020 us=796973   socks_proxy_server = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   socks_proxy_port = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   tun_mtu = 1500
Fri Jul 10 16:52:31 2020 us=796973   tun_mtu_defined = ENABLED
Fri Jul 10 16:52:31 2020 us=796973   link_mtu = 1500
Fri Jul 10 16:52:31 2020 us=796973   link_mtu_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   tun_mtu_extra = 0
Fri Jul 10 16:52:31 2020 us=796973   tun_mtu_extra_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   mtu_discover_type = -1
Fri Jul 10 16:52:31 2020 us=796973   fragment = 0
Fri Jul 10 16:52:31 2020 us=796973   mssfix = 1450
Fri Jul 10 16:52:31 2020 us=796973   explicit_exit_notification = 0
Fri Jul 10 16:52:31 2020 us=796973 Connection profiles END
Fri Jul 10 16:52:31 2020 us=796973   remote_random = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   ipchange = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   dev = 'tun'
Fri Jul 10 16:52:31 2020 us=796973   dev_type = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   dev_node = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   lladdr = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   topology = 1
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_local = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_remote_netmask = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_noexec = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_nowarn = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_ipv6_local = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_ipv6_netbits = 0
Fri Jul 10 16:52:31 2020 us=796973   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=796973   shaper = 0
Fri Jul 10 16:52:31 2020 us=796973   mtu_test = 0
Fri Jul 10 16:52:31 2020 us=796973   mlock = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   keepalive_ping = 0
Fri Jul 10 16:52:31 2020 us=796973   keepalive_timeout = 0
Fri Jul 10 16:52:31 2020 us=796973   inactivity_timeout = 0
Fri Jul 10 16:52:31 2020 us=796973   ping_send_timeout = 0
Fri Jul 10 16:52:31 2020 us=796973   ping_rec_timeout = 0
Fri Jul 10 16:52:31 2020 us=796973   ping_rec_timeout_action = 0
Fri Jul 10 16:52:31 2020 us=796973   ping_timer_remote = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   remap_sigusr1 = 0
Fri Jul 10 16:52:31 2020 us=796973   persist_tun = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   persist_local_ip = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   persist_remote_ip = DISABLED
Fri Jul 10 16:52:31 2020 us=796973   persist_key = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   passtos = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   resolve_retry_seconds = 1000000000
Fri Jul 10 16:52:31 2020 us=797973   resolve_in_advance = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   username = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   groupname = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   chroot_dir = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   cd_dir = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   writepid = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   up_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   down_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   down_pre = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   up_restart = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   up_delay = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   daemon = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   inetd = 0
Fri Jul 10 16:52:31 2020 us=797973   log = ENABLED
Fri Jul 10 16:52:31 2020 us=797973   suppress_timestamps = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   machine_readable_output = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   nice = 0
Fri Jul 10 16:52:31 2020 us=797973   verbosity = 4
Fri Jul 10 16:52:31 2020 us=797973   mute = 0
Fri Jul 10 16:52:31 2020 us=797973   gremlin = 0
Fri Jul 10 16:52:31 2020 us=797973   status_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   status_file_version = 1
Fri Jul 10 16:52:31 2020 us=797973   status_file_update_freq = 60
Fri Jul 10 16:52:31 2020 us=797973   occ = ENABLED
Fri Jul 10 16:52:31 2020 us=797973   rcvbuf = 0
Fri Jul 10 16:52:31 2020 us=797973   sndbuf = 0
Fri Jul 10 16:52:31 2020 us=797973   sockflags = 0
Fri Jul 10 16:52:31 2020 us=797973   fast_io = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   comp.alg = 0
Fri Jul 10 16:52:31 2020 us=797973   comp.flags = 0
Fri Jul 10 16:52:31 2020 us=797973   route_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   route_default_gateway = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   route_default_metric = 0
Fri Jul 10 16:52:31 2020 us=797973   route_noexec = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   route_delay = 5
Fri Jul 10 16:52:31 2020 us=797973   route_delay_window = 30
Fri Jul 10 16:52:31 2020 us=797973   route_delay_defined = ENABLED
Fri Jul 10 16:52:31 2020 us=797973   route_nopull = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   route_gateway_via_dhcp = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   allow_pull_fqdn = DISABLED
Fri Jul 10 16:52:31 2020 us=797973   management_addr = '127.0.0.1'
Fri Jul 10 16:52:31 2020 us=797973   management_port = '25341'
Fri Jul 10 16:52:31 2020 us=797973   management_user_pass = 'stdin'
Fri Jul 10 16:52:31 2020 us=797973   management_log_history_cache = 250
Fri Jul 10 16:52:31 2020 us=797973   management_echo_buffer_size = 100
Fri Jul 10 16:52:31 2020 us=797973   management_write_peer_info_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   management_client_user = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   management_client_group = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=797973   management_flags = 6
Fri Jul 10 16:52:31 2020 us=798973   shared_secret_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   key_direction = 1
Fri Jul 10 16:52:31 2020 us=798973   ciphername = 'aes-256-cbc'
Fri Jul 10 16:52:31 2020 us=798973   ncp_enabled = ENABLED
Fri Jul 10 16:52:31 2020 us=798973   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Jul 10 16:52:31 2020 us=798973   authname = 'sha256'
Fri Jul 10 16:52:31 2020 us=798973   prng_hash = 'SHA1'
Fri Jul 10 16:52:31 2020 us=798973   prng_nonce_secret_len = 16
Fri Jul 10 16:52:31 2020 us=798973   keysize = 0
Fri Jul 10 16:52:31 2020 us=798973   engine = DISABLED
Fri Jul 10 16:52:31 2020 us=798973   replay = ENABLED
Fri Jul 10 16:52:31 2020 us=798973   mute_replay_warnings = DISABLED
Fri Jul 10 16:52:31 2020 us=798973   replay_window = 64
Fri Jul 10 16:52:31 2020 us=798973   replay_time = 15
Fri Jul 10 16:52:31 2020 us=798973   packet_id_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   use_iv = ENABLED
Fri Jul 10 16:52:31 2020 us=798973   test_crypto = DISABLED
Fri Jul 10 16:52:31 2020 us=798973   tls_server = DISABLED
Fri Jul 10 16:52:31 2020 us=798973   tls_client = ENABLED
Fri Jul 10 16:52:31 2020 us=798973   key_method = 2
Fri Jul 10 16:52:31 2020 us=798973   ca_file = '[[INLINE]]'
Fri Jul 10 16:52:31 2020 us=798973   ca_path = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   dh_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   cert_file = '[[INLINE]]'
Fri Jul 10 16:52:31 2020 us=798973   extra_certs_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   priv_key_file = '[[INLINE]]'
Fri Jul 10 16:52:31 2020 us=798973   pkcs12_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   cryptoapi_cert = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   cipher_list = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   cipher_list_tls13 = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   tls_cert_profile = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   tls_verify = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   tls_export_cert = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   verify_x509_type = 0
Fri Jul 10 16:52:31 2020 us=798973   verify_x509_name = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   crl_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   ns_cert_type = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_ku[i] = 0
Fri Jul 10 16:52:31 2020 us=798973   remote_cert_eku = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=798973   ssl_flags = 0
Fri Jul 10 16:52:31 2020 us=798973   tls_timeout = 2
Fri Jul 10 16:52:31 2020 us=799973   renegotiate_bytes = -1
Fri Jul 10 16:52:31 2020 us=799973   renegotiate_packets = 0
Fri Jul 10 16:52:31 2020 us=799973   renegotiate_seconds = 3600
Fri Jul 10 16:52:31 2020 us=799973   handshake_window = 60
Fri Jul 10 16:52:31 2020 us=799973   transition_window = 3600
Fri Jul 10 16:52:31 2020 us=799973   single_session = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   push_peer_info = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   tls_exit = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   tls_auth_file = '[[INLINE]]'
Fri Jul 10 16:52:31 2020 us=799973   tls_crypt_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_protected_authentication = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_private_mode = 00000000
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=799973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_cert_private = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_pin_cache_period = -1
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_id = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   pkcs11_id_management = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   server_network = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   server_netmask = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   server_network_ipv6 = ::
Fri Jul 10 16:52:31 2020 us=800973   server_netbits_ipv6 = 0
Fri Jul 10 16:52:31 2020 us=800973   server_bridge_ip = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   server_bridge_netmask = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   server_bridge_pool_start = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   server_bridge_pool_end = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_start = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_end = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_netmask = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_pool_persist_refresh_freq = 600
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_ipv6_pool_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_ipv6_pool_base = ::
Fri Jul 10 16:52:31 2020 us=800973   ifconfig_ipv6_pool_netbits = 0
Fri Jul 10 16:52:31 2020 us=800973   n_bcast_buf = 256
Fri Jul 10 16:52:31 2020 us=800973   tcp_queue_limit = 64
Fri Jul 10 16:52:31 2020 us=800973   real_hash_size = 256
Fri Jul 10 16:52:31 2020 us=800973   virtual_hash_size = 256
Fri Jul 10 16:52:31 2020 us=800973   client_connect_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   learn_address_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   client_disconnect_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   client_config_dir = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   ccd_exclusive = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   tmp_dir = 'C:\Users\yacudzer\AppData\Local\Temp\'
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_local = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_ipv6_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_ipv6_local = ::/0
Fri Jul 10 16:52:31 2020 us=800973   push_ifconfig_ipv6_remote = ::
Fri Jul 10 16:52:31 2020 us=800973   enable_c2c = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   duplicate_cn = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   cf_max = 0
Fri Jul 10 16:52:31 2020 us=800973   cf_per = 0
Fri Jul 10 16:52:31 2020 us=800973   max_clients = 1024
Fri Jul 10 16:52:31 2020 us=800973   max_routes_per_client = 256
Fri Jul 10 16:52:31 2020 us=800973   auth_user_pass_verify_script = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=800973   auth_user_pass_verify_script_via_file = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   auth_token_generate = DISABLED
Fri Jul 10 16:52:31 2020 us=800973   auth_token_lifetime = 0
Fri Jul 10 16:52:31 2020 us=800973   client = ENABLED
Fri Jul 10 16:52:31 2020 us=800973   pull = ENABLED
Fri Jul 10 16:52:31 2020 us=800973   auth_user_pass_file = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=801973   show_net_up = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   route_method = 0
Fri Jul 10 16:52:31 2020 us=801973   block_outside_dns = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   ip_win32_defined = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   ip_win32_type = 3
Fri Jul 10 16:52:31 2020 us=801973   dhcp_masq_offset = 0
Fri Jul 10 16:52:31 2020 us=801973   dhcp_lease_time = 31536000
Fri Jul 10 16:52:31 2020 us=801973   tap_sleep = 0
Fri Jul 10 16:52:31 2020 us=801973   dhcp_options = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   dhcp_renew = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   dhcp_pre_release = DISABLED
Fri Jul 10 16:52:31 2020 us=801973   domain = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=801973   netbios_scope = '[UNDEF]'
Fri Jul 10 16:52:31 2020 us=801973   netbios_node_type = 0
Fri Jul 10 16:52:31 2020 us=801973   disable_nbt = DISABLED
Fri Jul 10 16:52:31 2020 us=801973 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Fri Jul 10 16:52:31 2020 us=801973 Windows version 6.1 (Windows 7) 64bit
Fri Jul 10 16:52:31 2020 us=801973 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Enter Management Password:
Fri Jul 10 16:52:31 2020 us=802974 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Fri Jul 10 16:52:31 2020 us=802974 Need hold release from management interface, waiting...
Fri Jul 10 16:52:32 2020 us=226998 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Fri Jul 10 16:52:32 2020 us=328004 MANAGEMENT: CMD 'state on'
Fri Jul 10 16:52:32 2020 us=328004 MANAGEMENT: CMD 'log all on'
Fri Jul 10 16:52:32 2020 us=506014 MANAGEMENT: CMD 'echo all on'
Fri Jul 10 16:52:32 2020 us=512014 MANAGEMENT: CMD 'bytecount 5'
Fri Jul 10 16:52:32 2020 us=514014 MANAGEMENT: CMD 'hold off'
Fri Jul 10 16:52:32 2020 us=516014 MANAGEMENT: CMD 'hold release'
Fri Jul 10 16:52:32 2020 us=516014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Jul 10 16:52:32 2020 us=526015 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jul 10 16:52:32 2020 us=526015 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jul 10 16:52:32 2020 us=526015 Control Channel MTU parms [ L:1621 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Fri Jul 10 16:52:32 2020 us=527015 MANAGEMENT: >STATE:1594389152,RESOLVE,,,,,,
Fri Jul 10 16:52:32 2020 us=532015 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Fri Jul 10 16:52:32 2020 us=532015 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jul 10 16:52:32 2020 us=532015 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jul 10 16:52:32 2020 us=532015 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:444
Fri Jul 10 16:52:32 2020 us=532015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jul 10 16:52:32 2020 us=532015 UDP link local (bound): [AF_INET][undef]:1194
Fri Jul 10 16:52:32 2020 us=532015 UDP link remote: [AF_INET]xx.xx.xx.xx:444
Fri Jul 10 16:52:32 2020 us=532015 MANAGEMENT: >STATE:1594389152,WAIT,,,,,,
Fri Jul 10 16:52:32 2020 us=536015 MANAGEMENT: >STATE:1594389152,AUTH,,,,,,
Fri Jul 10 16:52:32 2020 us=536015 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:444, sid=acf29135 280ca334
Fri Jul 10 16:52:32 2020 us=555017 VERIFY OK: depth=1, CN=vpn.monopoly.su
Fri Jul 10 16:52:32 2020 us=555017 VERIFY OK: depth=0, CN=prd-ovpn-02
Fri Jul 10 16:52:32 2020 us=566017 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Fri Jul 10 16:52:32 2020 us=566017 [prd-ovpn-02] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:444
Fri Jul 10 16:52:33 2020 us=641079 MANAGEMENT: >STATE:1594389153,GET_CONFIG,,,,,,
Fri Jul 10 16:52:33 2020 us=641079 SENT CONTROL [prd-ovpn-02]: 'PUSH_REQUEST' (status=1)
Fri Jul 10 16:52:33 2020 us=645079 PUSH: Received control message: 'PUSH_REPLY,route 10.xx.xx.0 255.252.0.0,dhcp-option DNS 10.xx.xx.10,dhcp-option DNS 10.xx.xx.10,dhcp-option DOMAIN monopoly.su,route-gateway 10.xx.xx.1,topology subnet,ping 10,ping-restart 120,route 10.xx.xx.0 255.255.255.0,route 172.17.aa.aa 255.255.255.0,route 192.168.aa.aa 255.255.128.0,ifconfig 10.xx.xx.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Fri Jul 10 16:52:33 2020 us=645079 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jul 10 16:52:33 2020 us=645079 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jul 10 16:52:33 2020 us=645079 OPTIONS IMPORT: route options modified
Fri Jul 10 16:52:33 2020 us=646079 OPTIONS IMPORT: route-related options modified
Fri Jul 10 16:52:33 2020 us=646079 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Jul 10 16:52:33 2020 us=646079 OPTIONS IMPORT: peer-id set
Fri Jul 10 16:52:33 2020 us=646079 OPTIONS IMPORT: adjusting link_mtu to 1624
Fri Jul 10 16:52:33 2020 us=646079 OPTIONS IMPORT: data channel crypto options modified
Fri Jul 10 16:52:33 2020 us=646079 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jul 10 16:52:33 2020 us=646079 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Fri Jul 10 16:52:33 2020 us=647079 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 10 16:52:33 2020 us=647079 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 10 16:52:33 2020 us=647079 interactive service msg_channel=0
Fri Jul 10 16:52:33 2020 us=655079 ROUTE_GATEWAY 192.168.aa.aa/255.255.255.224 I=11 HWADDR=2c:44:fd:b4:00:d2
Fri Jul 10 16:52:33 2020 us=656080 open_tun
Fri Jul 10 16:52:33 2020 us=659080 TAP-WIN32 device [Подключение по локальной сети 3] opened: \\.\Global\{78645D91-8791-447A-BAA4-6E09E34A623A}.tap
Fri Jul 10 16:52:33 2020 us=660080 TAP-Windows Driver Version 9.24 
Fri Jul 10 16:52:33 2020 us=660080 TAP-Windows MTU=1500
Fri Jul 10 16:52:33 2020 us=665080 Set TAP-Windows TUN subnet mode network/local/netmask = 10.xx.xx.0/10.xx.xx.2/255.255.255.0 [SUCCEEDED]
Fri Jul 10 16:52:33 2020 us=665080 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.xx.xx.2/255.255.255.0 on interface {78645D91-8791-447A-BAA4-6E09E34A623A} [DHCP-serv: 10.xx.xx.254, lease-time: 31536000]
Fri Jul 10 16:52:33 2020 us=665080 DHCP option string: 0f0b6d6f 6e6f706f 6c792e73 7506080a 16000a0a 14000a
Fri Jul 10 16:52:33 2020 us=665080 Successful ARP Flush on interface [24] {78645D91-8791-447A-BAA4-6E09E34A623A}
Fri Jul 10 16:52:33 2020 us=692082 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Jul 10 16:52:33 2020 us=692082 MANAGEMENT: >STATE:1594389153,ASSIGN_IP,,10.xx.xx.2,,,,
Fri Jul 10 16:52:38 2020 us=771372 TEST ROUTES: 4/4 succeeded len=4 ret=1 a=0 u/d=up
Fri Jul 10 16:52:38 2020 us=772372 MANAGEMENT: >STATE:1594389158,ADD_ROUTES,,,,,,
Fri Jul 10 16:52:38 2020 us=772372 C:\Windows\system32\route.exe ADD 10.xx.xx.0 MASK 255.252.0.0 10.xx.xx.1
Fri Jul 10 16:52:38 2020 us=776372 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Jul 10 16:52:38 2020 us=776372 Route addition via IPAPI succeeded [adaptive]
Fri Jul 10 16:52:38 2020 us=776372 C:\Windows\system32\route.exe ADD 10.xx.xx.0 MASK 255.255.255.0 10.xx.xx.1
Fri Jul 10 16:52:38 2020 us=780373 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Jul 10 16:52:38 2020 us=780373 Route addition via IPAPI succeeded [adaptive]
Fri Jul 10 16:52:38 2020 us=780373 C:\Windows\system32\route.exe ADD 172.17.aa.aa MASK 255.255.255.0 10.xx.xx.1
Fri Jul 10 16:52:38 2020 us=786373 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Jul 10 16:52:38 2020 us=786373 Route addition via IPAPI succeeded [adaptive]
Fri Jul 10 16:52:38 2020 us=786373 C:\Windows\system32\route.exe ADD 192.168.aa.aa MASK 255.255.128.0 10.xx.xx.1
Fri Jul 10 16:52:38 2020 us=790373 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Fri Jul 10 16:52:38 2020 us=790373 Route addition via IPAPI succeeded [adaptive]
Fri Jul 10 16:52:38 2020 us=790373 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jul 10 16:52:38 2020 us=790373 Initialization Sequence Completed
Fri Jul 10 16:52:38 2020 us=790373 MANAGEMENT: >STATE:1594389158,CONNECTED,SUCCESS,10.xx.xx.2,xx.xx.xx.xx,444,,
Fri Jul 10 16:53:27 2020 us=528161 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_2345>>>EEE] 0:12 0:11 t=1594389207[0] r=[0,64,15,1,1] sl=[52,12,64,528]
Fri Jul 10 16:56:07 2020 us=820329 TCP/UDP: Closing socket
Fri Jul 10 16:56:07 2020 us=820329 C:\Windows\system32\route.exe DELETE 10.xx.xx.0 MASK 255.252.0.0 10.xx.xx.1
Fri Jul 10 16:56:07 2020 us=826329 Route deletion via IPAPI succeeded [adaptive]
Fri Jul 10 16:56:07 2020 us=826329 C:\Windows\system32\route.exe DELETE 10.xx.xx.0 MASK 255.255.255.0 10.xx.xx.1
Fri Jul 10 16:56:07 2020 us=835330 Route deletion via IPAPI succeeded [adaptive]
Fri Jul 10 16:56:07 2020 us=835330 C:\Windows\system32\route.exe DELETE 172.17.aa.aa MASK 255.255.255.0 10.xx.xx.1
Fri Jul 10 16:56:07 2020 us=843330 Route deletion via IPAPI succeeded [adaptive]
Fri Jul 10 16:56:07 2020 us=843330 C:\Windows\system32\route.exe DELETE 192.168.aa.aa MASK 255.255.128.0 10.xx.xx.1
Fri Jul 10 16:56:07 2020 us=850331 Route deletion via IPAPI succeeded [adaptive]
Fri Jul 10 16:56:07 2020 us=851331 Closing TUN/TAP interface
Fri Jul 10 16:56:07 2020 us=892333 TAP: DHCP address released
Fri Jul 10 16:56:07 2020 us=893333 SIGTERM[hard,] received, process exiting
Fri Jul 10 16:56:07 2020 us=893333 MANAGEMENT: >STATE:1594389367,EXITING,SIGTERM,,,,,

P.S. "olog" tags does not work

TinCanTech

Yacudzer wrote when I trying to ping with size greater than mtu-28 or udp packet with size greater than MTU - tunnel is going down for 10-15 seconds... I need to fragment packets with large MTU... How I can to solve this issue?

Sounds like your network is setup incorrectly.

Here is a ping over a VPN I use:

tct@home:~$ ping 10.126.66.226 -s 3000
PING 10.126.66.226 (10.126.66.226) 3000(3028) bytes of data.
3008 bytes from 10.126.66.226: icmp_seq=1 ttl=64 time=4.86 ms
3008 bytes from 10.126.66.226: icmp_seq=2 ttl=64 time=5.98 ms
3008 bytes from 10.126.66.226: icmp_seq=3 ttl=64 time=5.90 ms
3008 bytes from 10.126.66.226: icmp_seq=4 ttl=64 time=5.29 ms
^C
--- 10.126.66.226 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 4.869/5.515/5.984/0.461 ms

3000 byte ping with no issue.

Yacudzer

Its clean debian 10 installation. No another software...intermediate nodes ok - I checked ping size to 16000 - to OpenVPN server - ok. to client - only less than 1472...

TinCanTech

Yacudzer wrote Its clean debian 10 installation. No another software

Except Windows on the other end ..

Yacudzer wrote intermediate nodes ok

I'll take your word ..

Yacudzer wrote I checked ping size to 16000 - to OpenVPN server - ok

From ?

Yacudzer wrote to client - only less than 1472...

Client network has an issue then, most likely ..

TinCanTech wrote Try --mtu-test

:geek:

Yacudzer

TinCanTech wrote
Yacudzer wrote Its clean debian 10 installation. No another software
Except Windows on the other end ..

Yacudzer wrote intermediate nodes ok
I'll take your word ..

Yacudzer wrote I checked ping size to 16000 - to OpenVPN server - ok
From ?

Scheme is below... I Pinging from my working PC to my home notebook...

https://prnt.sc/tfiqba

TinCanTech wrote
Yacudzer wrote to client - only less than 1472...
Client network has an issue then, most likely ..

TinCanTech wrote Try --mtu-test
:geek:

I did tun-mtu=1200... Result is the same:

C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1172 -t

Pinging 10.aa.bb.cc with 1172 bytes of data:
Reply from 10.aa.bb.cc: bytes=1172 time=4ms TTL=122
Reply from 10.aa.bb.cc: bytes=1172 time=3ms TTL=122
Reply from 10.aa.bb.cc: bytes=1172 time=3ms TTL=122
Reply from 10.aa.bb.cc: bytes=1172 time=4ms TTL=122

Ping statistics for 10.aa.bb.cc:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 3ms, Maximum = 4ms, Average = 3ms
Control-C
^C
C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1173 -t

Pinging 10.aa.bb.cc with 1173 bytes of data:
Request timed out.

Ping statistics for 10.aa.bb.cc:
    Packets: Sent = 1, Received = 0, Lost = 1 (100% loss),
Control-C
^C
C:\Users\evgenii.iakubov>ping 10.aa.bb.cc -l 1172 -t

Pinging 10.aa.bb.cc with 1172 bytes of data:
Request timed out.
Request timed out.

Ping statistics for 10.aa.bb.cc:
    Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),

TinCanTech

Yacudzer wrote I did tun-mtu=1200... Result is the same:

Because this is not a tunnel MTU issue and I doubt it is a genuine MTU issue at all ..

OpenVPN has lots of knobs you can play with, which makes it very easy to align a gun with your own foot.

This is my last word:

TinCanTech wrote Try --mtu-test

:roll: 8-)

Yacudzer

TinCanTech wrote Try --mtu-test

I did it... More ideas?

TinCanTech

Yacudzer wrote
TinCanTech wrote Try --mtu-test
I did it...

One is expecting to see the results ..

Yacudzer wroteMore ideas?

Reinstall Windows ..

Yacudzer

TinCanTech wrote
Yacudzer wrote
TinCanTech wrote Try --mtu-test
I did it...
One is expecting to see the results ..

# Инициализация OpenVPN в качестве клиента
client

# адрес сервера
remote vpn.mydomain 444

# mtu-test
verb 3

#link-mtu 1500
#tun-mtu 1200
#mssfix 1300
#fragment 1300
mtu-test

cipher aes-256-cbc
auth sha256

# инициализация тунеля TUN
dev tun

# протокол подключения
proto udp

# протокол шифрования VPN сети
tls-client
key-direction 1

# ns-cert-type server

# указываем клиенту слушать команды от сервера
pull

<tls-auth>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>

<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>

Mon Jul 13 19:10:06 2020 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Mon Jul 13 19:10:06 2020 Windows version 6.1 (Windows 7) 64bit
Mon Jul 13 19:10:06 2020 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Enter Management Password:
Mon Jul 13 19:10:06 2020 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Jul 13 19:10:06 2020 Need hold release from management interface, waiting...
Mon Jul 13 19:10:07 2020 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'state on'
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'log all on'
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'echo all on'
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'bytecount 5'
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'hold off'
Mon Jul 13 19:10:07 2020 MANAGEMENT: CMD 'hold release'
Mon Jul 13 19:10:07 2020 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 13 19:10:07 2020 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jul 13 19:10:07 2020 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jul 13 19:10:07 2020 MANAGEMENT: >STATE:1594656607,RESOLVE,,,,,,
Mon Jul 13 19:10:07 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]192.zz.zz.zz:444
Mon Jul 13 19:10:07 2020 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 13 19:10:07 2020 UDP link local (bound): [AF_INET][undef]:1194
Mon Jul 13 19:10:07 2020 UDP link remote: [AF_INET]192.zz.zz.zz:444
Mon Jul 13 19:10:07 2020 MANAGEMENT: >STATE:1594656607,WAIT,,,,,,
Mon Jul 13 19:10:07 2020 MANAGEMENT: >STATE:1594656607,AUTH,,,,,,
Mon Jul 13 19:10:07 2020 TLS: Initial packet from [AF_INET]192.zz.zz.zz:444, sid=8b722d05 b96f7539
Mon Jul 13 19:10:07 2020 VERIFY OK: depth=1, CN=vpn.monopoly.su
Mon Jul 13 19:10:07 2020 VERIFY OK: depth=0, CN=prd-ovpn-02
Mon Jul 13 19:10:07 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1269'
Mon Jul 13 19:10:07 2020 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1200'
Mon Jul 13 19:10:07 2020 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Mon Jul 13 19:10:07 2020 [prd-ovpn-02] Peer Connection Initiated with [AF_INET]192.zz.zz.zz:444
Mon Jul 13 19:10:08 2020 MANAGEMENT: >STATE:1594656608,GET_CONFIG,,,,,,
Mon Jul 13 19:10:08 2020 SENT CONTROL [prd-ovpn-02]: 'PUSH_REQUEST' (status=1)
Mon Jul 13 19:10:08 2020 PUSH: Received control message: 'PUSH_REPLY,route 10.xx.xx.xx 255.252.0.0,dhcp-option DNS 10.xx.xx.xx,dhcp-option DNS 10.xx.xx.xx,dhcp-option DOMAIN monopoly.su,route-gateway 10.xx.xx.xx,topology subnet,ping 10,ping-restart 120,route 10.xx.xx.xx 255.255.255.0,route 10.xx.xx.xx 255.255.255.0,route 10.xx.xx.xx 255.255.128.0,ifconfig 10.xx.xx.xx 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: route options modified
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: route-related options modified
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: peer-id set
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: adjusting link_mtu to 1624
Mon Jul 13 19:10:08 2020 OPTIONS IMPORT: data channel crypto options modified
Mon Jul 13 19:10:08 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Jul 13 19:10:08 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Jul 13 19:10:08 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Jul 13 19:10:08 2020 interactive service msg_channel=0
Mon Jul 13 19:10:08 2020 ROUTE_GATEWAY 10.xx.xx.xx/255.255.255.224 I=11 HWADDR=2c:44:fd:b4:00:d2
Mon Jul 13 19:10:08 2020 open_tun
Mon Jul 13 19:10:08 2020 TAP-WIN32 device [Подключение по локальной сети 3] opened: \\.\Global\{78645D91-8791-447A-BAA4-6E09E34A623A}.tap
Mon Jul 13 19:10:08 2020 TAP-Windows Driver Version 9.24 
Mon Jul 13 19:10:08 2020 Set TAP-Windows TUN subnet mode network/local/netmask = 10.xx.xx.xx/10.xx.xx.xx/255.255.255.0 [SUCCEEDED]
Mon Jul 13 19:10:08 2020 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.xx.xx.xx/255.255.255.0 on interface {78645D91-8791-447A-BAA4-6E09E34A623A} [DHCP-serv: 10.xx.xx.xx, lease-time: 31536000]
Mon Jul 13 19:10:08 2020 Successful ARP Flush on interface [24] {78645D91-8791-447A-BAA4-6E09E34A623A}
Mon Jul 13 19:10:08 2020 MANAGEMENT: >STATE:1594656608,ASSIGN_IP,,10.xx.xx.xx,,,,
Mon Jul 13 19:10:10 2020 NOTE: Beginning empirical MTU test -- results should be available in 3 to 4 minutes.
Mon Jul 13 19:10:13 2020 TEST ROUTES: 4/4 succeeded len=4 ret=1 a=0 u/d=up
Mon Jul 13 19:10:13 2020 MANAGEMENT: >STATE:1594656613,ADD_ROUTES,,,,,,
Mon Jul 13 19:10:13 2020 C:\Windows\system32\route.exe ADD 10.xx.xx.xx MASK 255.252.0.0 10.xx.xx.xx
Mon Jul 13 19:10:13 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Jul 13 19:10:13 2020 Route addition via IPAPI succeeded [adaptive]
Mon Jul 13 19:10:13 2020 C:\Windows\system32\route.exe ADD 10.xx.xx.xx MASK 255.255.255.0 10.xx.xx.xx
Mon Jul 13 19:10:13 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Jul 13 19:10:13 2020 Route addition via IPAPI succeeded [adaptive]
Mon Jul 13 19:10:13 2020 C:\Windows\system32\route.exe ADD 10.xx.xx.xx MASK 255.255.255.0 10.xx.xx.xx
Mon Jul 13 19:10:13 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Jul 13 19:10:13 2020 Route addition via IPAPI succeeded [adaptive]
Mon Jul 13 19:10:13 2020 C:\Windows\system32\route.exe ADD 10.xx.xx.xx MASK 255.255.128.0 10.xx.xx.xx
Mon Jul 13 19:10:13 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Jul 13 19:10:13 2020 Route addition via IPAPI succeeded [adaptive]
Mon Jul 13 19:10:13 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Jul 13 19:10:13 2020 Initialization Sequence Completed
Mon Jul 13 19:10:13 2020 MANAGEMENT: >STATE:1594656613,CONNECTED,SUCCESS,10.xx.xx.xx,192.zz.zz.zz,444,,

pings:

C:\Users\evgenii.iakubov>ping 10.xxx.xxx.2 -l1172
Value must be supplied for option -l1172.

C:\Users\evgenii.iakubov>ping 10.xxx.xxx.2 -l 1172

Pinging 10.xxx.xxx.2 with 1172 bytes of data:
Reply from 10.xxx.xxx.2: bytes=1172 time=4ms TTL=122
Reply from 10.xxx.xxx.2: bytes=1172 time=6ms TTL=122

Ping statistics for 10.xxx.xxx.2:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 4ms, Maximum = 6ms, Average = 5ms
Control-C
^C
C:\Users\evgenii.iakubov>ping 10.xxx.xxx.2 -l 1173

Pinging 10.xxx.xxx.2 with 1173 bytes of data:
Control-C
^C
C:\Users\evgenii.iakubov>ping 10.xxx.xxx.2 -l 1172

Pinging 10.xxx.xxx.2 with 1172 bytes of data:
Request timed out.
Request timed out.

TinCanTech wrote
Yacudzer wroteMore ideas?
Reinstall Windows ..

Whats more? Change PC?

TinCanTech

Yacudzer wrote Mon Jul 13 19:10:06 2020 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Mon Jul 13 19:10:06 2020 Windows version 6.1 (Windows 7) 64bit
Mon Jul 13 19:10:06 2020 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10

This is your Windows client -- Good.

Yacudzer wrote Mon Jul 13 19:10:07 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1269'
Mon Jul 13 19:10:07 2020 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1200'

So the server has the wrong settings.

Yacudzer wrote
TinCanTech wrote Try --mtu-test
I did it... More ideas?

No you did not as both your client config and log prove.

:roll:

You clearly do not have any MTU issue ..
Other than you yourself interfering with settings which you do not understand.

Do not set any MTU settings at both your server and client and everything will work as it is supposed to.

Yacudzer

TinCanTech wrote You clearly do not have any MTU issue ..
Other than you yourself interfering with settings which you do not understand.

Do not set any MTU settings at both your server and client and everything will work as it is supposed to.

So, youre right!
I installed clean win7x64 on vmWare, maked all updates and installed openvpn with the same config.
Packets of any size could go through the tunnel.
Then I installed wireshak (with npcap) - the problem did not appear.
Then I installed antivirus system Kaspersky Internet Security - and the problem appeared immediately - I saw the same symptoms.

Thank you very much for your help and patience... 😉

TinCanTech

Yacudzer wrote Then I installed antivirus system Kaspersky Internet Security - and the problem appeared immediately - I saw the same symptoms

Please describe them clearly but do not change your VPN configuration.

Post your logs at --verb 4 showing the errors.