[Closed] Looks like connected but no internet surfing on client

evgeniyl

Hi,
I want to create a VPN to hide my real IP. I installed OpenVPN 2.5.3 on Oracle Cloud, turned on forwarding:

echo "iptable_nat" > /etc/modules
echo "net.ipv4.ip_forward=1" > /etc/sysctl.conf

updated iptables (ens3 is the name of interface of the VM):

iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o ens3 -j MASQUERADE
iptables -A INPUT 5 -p udp --dport 1194 -j ACCEPT
iptables -A INPUT 5 -i tun+ -j ACCEPT
iptables -A FORWARD 1 -i tun+ -j ACCEPT

created ca.crt, crl.pem, server.key, server.crt, dh.pem, ta.key, updated Oracle firewall:

and with provided below openVPN config successfull started the server:

proto udp
port 1194
tls-server
tls-timeout 10
key /etc/openvpn/vpnserver.key # This file should be kept secret
cert /etc/openvpn/vpn-server.crt
ca /etc/openvpn/ca.crt
dh /etc/openvpn/pki/dh.pem
cipher AES-256-GCM
remote-cert-eku "TLS Web Client Authentication"
tls-crypt /etc/openvpn/ta.key
crl-verify /etc/openvpn/crl.pem
dev tun0
topology subnet
server 10.0.0.0 255.255.0.0
max-clients 10
cd /etc/openvpn
persist-key
persist-tun
client-config-dir /etc/openvpn/ccd
keepalive 10 120
status /var/log/openvpn/openvpn-status.log 3
status-version 3
log-append /var/log/openvpn/openvpn-server.log
verb 3
mute 20
explicit-exit-notify 1
ifconfig-pool-persist /etc/openvpn/ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"

IPs of the VM:

With the same easy-rsa 3.0.8 I created key + cert for the android client and in format ovpn imported into installed official OpenVPN Connect
client
proto udp
nobind
remote 152.70.52.234 1194 udp
tls-client
cipher AES-256-GCM
remote-cert-eku "TLS Web Server Authentication"
dev tun
topology subnet
pull
redirect-gateway def1
persist-key
persist-tun
remote-cert-tls server
verb 5
float
<key>
...
</key>
<cert>
...
</cert>
<ca>
...
</ca>
<dh>
...
</dh>
<tls-crypt>
...
</tls-crypt>

Due to the client, I'm connected I can surf:

But it's not.

What to check? Where can be the issue? If any additional data is needed, please request it.

TinCanTech

evgeniyl wrote But it's not

Not what ?

evgeniyl

TinCanTech wrote
evgeniyl wrote But it's not
Not what ?

I'm not able to surf on Android (client) via VPN

Adding server and client logs. IP 192.168.0.103 is Android IP in my internal network

2021-08-24 12:54:23 us=365738 Current Parameter Settings:
2021-08-24 12:54:23 us=365777 config = '/etc/openvpn/server.conf'
2021-08-24 12:54:23 us=365784 mode = 1
2021-08-24 12:54:23 us=365791 persist_config = DISABLED
2021-08-24 12:54:23 us=365796 persist_mode = 1
2021-08-24 12:54:23 us=365802 show_ciphers = DISABLED
2021-08-24 12:54:23 us=365807 show_digests = DISABLED
2021-08-24 12:54:23 us=365812 show_engines = DISABLED
2021-08-24 12:54:23 us=365817 genkey = DISABLED
2021-08-24 12:54:23 us=365822 genkey_filename = '[UNDEF]'
2021-08-24 12:54:23 us=365827 key_pass_file = '[UNDEF]'
2021-08-24 12:54:23 us=365832 show_tls_ciphers = DISABLED
2021-08-24 12:54:23 us=365837 connect_retry_max = 0
2021-08-24 12:54:23 us=365842 Connection profiles [0]:
2021-08-24 12:54:23 us=365848 proto = udp
2021-08-24 12:54:23 us=365853 local = '[UNDEF]'
2021-08-24 12:54:23 us=365858 local_port = '1194'
2021-08-24 12:54:23 us=365863 remote = '[UNDEF]'
2021-08-24 12:54:23 us=365868 remote_port = '1194'
2021-08-24 12:54:23 us=365872 remote_float = DISABLED
2021-08-24 12:54:23 us=365877 NOTE: --mute triggered...
2021-08-24 12:54:23 us=365888 275 variation(s) on previous 20 message(s) suppressed by --mute
2021-08-24 12:54:23 us=365894 OpenVPN 2.5.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 17 2021
2021-08-24 12:54:23 us=365903 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
2021-08-24 12:54:23 us=366976 Diffie-Hellman initialized with 2048 bit key
2021-08-24 12:54:23 us=367285 CRL: loaded 1 CRLs from file /etc/openvpn/crl.pem
2021-08-24 12:54:23 us=367358 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-08-24 12:54:23 us=367368 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-08-24 12:54:23 us=367374 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-08-24 12:54:23 us=367382 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-08-24 12:54:23 us=367390 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1379)
2021-08-24 12:54:23 us=367398 TLS-Auth MTU parms [ L:1500 D:1156 EF:94 EB:0 ET:0 EL:3 ]
2021-08-24 12:54:23 us=368370 TUN/TAP device tun0 opened
2021-08-24 12:54:23 us=368388 do_ifconfig, ipv4=1, ipv6=0
2021-08-24 12:54:23 us=368398 /sbin/ip link set dev tun0 up mtu 1379
2021-08-24 12:54:23 us=370812 /sbin/ip link set dev tun0 up
2021-08-24 12:54:23 us=452831 /sbin/ip addr add dev tun0 10.0.0.1/16
2021-08-24 12:54:23 us=453978 Data Channel MTU parms [ L:1500 D:1450 EF:121 EB:386 ET:0 EL:3 ]
2021-08-24 12:54:23 us=454002 Could not determine IPv4/IPv6 protocol. Using AF_INET
2021-08-24 12:54:23 us=454034 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-08-24 12:54:23 us=454048 UDPv4 link local (bound): [AF_INET][undef]:1194
2021-08-24 12:54:23 us=454054 UDPv4 link remote: [AF_UNSPEC]
2021-08-24 12:54:23 us=454064 MULTI: multi_init called, r=256 v=256
2021-08-24 12:54:23 us=454084 IFCONFIG POOL IPv4: base=10.0.0.2 size=65532
2021-08-24 12:54:23 us=454809 ifconfig_pool_read(), in='jelum,10.0.0.2,'
2021-08-24 12:54:23 us=454824 succeeded -> ifconfig_pool_set(hand=0)
2021-08-24 12:54:23 us=454831 IFCONFIG POOL LIST
2021-08-24 12:54:23 us=454837 jelum,10.0.0.2,
2021-08-24 12:54:23 us=455077 Initialization Sequence Completed
2021-08-24 12:58:45 us=763384 MULTI: multi_create_instance called
2021-08-24 12:58:45 us=763417 <MY REAL IP>:47090 Re-using SSL/TLS context
2021-08-24 12:58:45 us=763494 <MY REAL IP>:47090 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-08-24 12:58:45 us=763508 <MY REAL IP>:47090 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-08-24 12:58:45 us=763516 <MY REAL IP>:47090 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-08-24 12:58:45 us=763524 <MY REAL IP>:47090 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-08-24 12:58:45 us=763555 <MY REAL IP>:47090 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1379)
2021-08-24 12:58:45 us=763623 <MY REAL IP>:47090 Control Channel MTU parms [ L:1500 D:1156 EF:94 EB:0 ET:0 EL:3 ]
2021-08-24 12:58:45 us=763633 <MY REAL IP>:47090 Data Channel MTU parms [ L:1500 D:1450 EF:121 EB:386 ET:0 EL:3 ]
2021-08-24 12:58:45 us=763669 <MY REAL IP>:47090 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1500,tun-mtu 1379,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
2021-08-24 12:58:45 us=763675 <MY REAL IP>:47090 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1500,tun-mtu 1379,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
2021-08-24 12:58:45 us=763693 <MY REAL IP>:47090 TLS: Initial packet from [AF_INET]<MY REAL IP>:47090, sid=9156e727 12da109d
2021-08-24 12:58:45 us=939511 <MY REAL IP>:47090 VERIFY OK: depth=1, CN=qwerty
2021-08-24 12:58:45 us=939632 <MY REAL IP>:47090 Validating certificate extended key usage
2021-08-24 12:58:45 us=939655 <MY REAL IP>:47090 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-08-24 12:58:45 us=939661 <MY REAL IP>:47090 VERIFY EKU OK
2021-08-24 12:58:45 us=939666 <MY REAL IP>:47090 VERIFY OK: depth=0, CN=jelum
2021-08-24 12:58:45 us=941014 <MY REAL IP>:47090 peer info: IV_VER=3.git::662eae9a:Release
2021-08-24 12:58:45 us=941030 <MY REAL IP>:47090 peer info: IV_PLAT=android
2021-08-24 12:58:45 us=941036 <MY REAL IP>:47090 peer info: IV_NCP=2
2021-08-24 12:58:45 us=941041 <MY REAL IP>:47090 peer info: IV_TCPNL=1
2021-08-24 12:58:45 us=941046 <MY REAL IP>:47090 peer info: IV_PROTO=2
2021-08-24 12:58:45 us=941051 <MY REAL IP>:47090 peer info: IV_AUTO_SESS=1
2021-08-24 12:58:45 us=941057 <MY REAL IP>:47090 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-08-24 12:58:45 us=941062 <MY REAL IP>:47090 peer info: IV_SSO=openurl
2021-08-24 12:58:45 us=941076 <MY REAL IP>:47090 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1500', remote='link-mtu 1521'
2021-08-24 12:58:45 us=941083 <MY REAL IP>:47090 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1379', remote='tun-mtu 1500'
2021-08-24 12:58:46 us=13016 <MY REAL IP>:47090 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-08-24 12:58:46 us=13065 <MY REAL IP>:47090 [jelum] Peer Connection Initiated with [AF_INET]<MY REAL IP>:47090
2021-08-24 12:58:46 us=13232 jelum/<MY REAL IP>:47090 MULTI_sva: pool returned IPv4=10.0.0.2, IPv6=(Not enabled)
2021-08-24 12:58:46 us=13274 jelum/<MY REAL IP>:47090 MULTI: Learn: 10.0.0.2 -> jelum/<MY REAL IP>:47090
2021-08-24 12:58:46 us=13282 jelum/<MY REAL IP>:47090 MULTI: primary virtual IP for jelum/<MY REAL IP>:47090: 10.0.0.2
2021-08-24 12:58:46 us=13364 jelum/<MY REAL IP>:47090 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-08-24 12:58:46 us=13375 jelum/<MY REAL IP>:47090 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-08-24 12:58:46 us=13405 jelum/<MY REAL IP>:47090 PUSH: Received control message: 'PUSH_REQUEST'
2021-08-24 12:58:46 us=13429 jelum/<MY REAL IP>:47090 SENT CONTROL [jelum]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 10.0.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.0.0.2 255.255.0.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-08-24 12:58:46 us=433067 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:46 us=735217 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:47 us=17243 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:47 us=273168 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:47 us=593326 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:48 us=303196 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:48 us=719098 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:49 us=329275 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:50 us=355224 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:50 us=959260 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:51 us=371247 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:53 us=385310 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:58:55 us=561230 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:04 us=531313 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:34 us=57236 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:39 us=247262 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:39 us=247308 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:39 us=389090 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:39 us=677113 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:40 us=223185 jelum/<MY REAL IP>:47090 MULTI: bad source address from client [192.168.0.103], packet dropped
2021-08-24 12:59:41 us=307198 jelum/<MY REAL IP>:47090 NOTE: --mute triggered...
2021-08-24 13:05:12 us=149492 7 variation(s) on previous 20 message(s) suppressed by --mute
2021-08-24 13:05:12 us=149534 event_wait : Interrupted system call (code=4)
2021-08-24 13:05:12 us=149564 SENT CONTROL [jelum]: 'RESTART' (status=1)
2021-08-24 13:05:14 us=152372 TCP/UDP: Closing socket
2021-08-24 13:05:14 us=152415 Closing TUN/TAP interface
2021-08-24 13:05:14 us=152427 /sbin/ip addr del dev tun0 10.0.0.1/16
2021-08-24 13:05:14 us=179097 SIGTERM[hard,] received, process exiting

15:58:46.568 -- ----- OpenVPN Start -----
15:58:46.569 -- EVENT: CORE_THREAD_ACTIVE
15:58:46.577 -- OpenVPN core 3.git::662eae9a:Release android arm64 64-bit PT_PROXY
15:58:46.581 -- Frame=512/2048/512 mssfix-ctrl=1250
15:58:46.593 -- UNUSED OPTIONS
2 [nobind]
4 [tls-client]
8 [topology] [subnet]
9 [pull]
11 [persist-key]
12 [persist-tun]
14 [verb] [5]
15 [link-mtu] [1500]
20 [dh] [-----BEGIN DH PARAMETERS----- MIIBCAKCAQEA3xBpS6S4Jdjk72GCmPNhk9...]
15:58:46.595 -- EVENT: RESOLVE
15:58:46.597 -- Contacting 152.70.52.234:1194 via UDP
15:58:46.597 -- EVENT: WAIT
15:58:46.600 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
15:58:46.701 -- EVENT: CONNECTING
15:58:46.706 -- Tunnel Options:V4,dev-type tun,link-mtu 1521,tun-mtu 1500,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
15:58:46.707 -- Creds: UsernameEmpty/PasswordEmpty
15:58:46.708 -- Peer Info:
IV_VER=3.git::662eae9a:Release
IV_PLAT=android
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
IV_SSO=openurl
15:58:46.788 -- VERIFY OK: depth=1, /CN=qwerty
15:58:46.789 -- VERIFY OK: depth=0, /CN=vpnserver
15:58:46.878 -- SSL Handshake: CN=vpnserver, TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
15:58:46.880 -- Session is ACTIVE
15:58:46.881 -- EVENT: GET_CONFIG
15:58:46.885 -- Sending PUSH_REQUEST to server...
15:58:46.952 -- OPTIONS:
0 [redirect-gateway] [def1]
1 [redirect-gateway] [def1]
2 [dhcp-option] [DNS] [208.67.222.222]
3 [dhcp-option] [DNS] [208.67.220.220]
4 [route-gateway] [10.0.0.1]
5 [topology] [subnet]
6 [ping] [10]
7 [ping-restart] [120]
8 [ifconfig] [10.0.0.2] [255.255.0.0]
9 [peer-id] [0]
10 [cipher] [AES-256-GCM]

15:58:46.954 -- PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

15:58:46.959 -- EVENT: ASSIGN_IP
15:58:47.015 -- Connected via tun
15:58:47.017 -- EVENT: CONNECTED info='152.70.52.234:1194 (152.70.52.234) via /UDPv4 on tun/10.0.0.2/ gw=[10.0.0.1/]' trans=TO_CONNECTED
16:05:12.387 -- Client halt/restart: RESTART psid=0 reason=''
16:05:12.391 -- EVENT: CLIENT_RESTART
16:05:12.399 -- Client terminated, restarting in 2000 ms...
16:05:14.393 -- EVENT: RECONNECTING
16:05:14.417 -- EVENT: RESOLVE
16:05:14.435 -- Contacting 152.70.52.234:1194 via UDP
16:05:14.440 -- EVENT: WAIT
16:05:14.445 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:05:29.425 -- Server poll timeout, trying next remote entry...
16:05:29.427 -- EVENT: RECONNECTING
16:05:29.468 -- EVENT: RESOLVE
16:05:29.496 -- Contacting 152.70.52.234:1194 via UDP
16:05:29.498 -- EVENT: WAIT
16:05:29.531 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:05:59.423 -- Server poll timeout, trying next remote entry...
16:05:59.426 -- EVENT: RECONNECTING
16:05:59.457 -- EVENT: RESOLVE
16:05:59.482 -- Contacting 152.70.52.234:1194 via UDP
16:05:59.483 -- EVENT: WAIT
16:05:59.499 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:11.427 -- Server poll timeout, trying next remote entry...
16:06:11.435 -- EVENT: RECONNECTING
16:06:11.446 -- EVENT: RESOLVE
16:06:11.457 -- Contacting 152.70.52.234:1194 via UDP
16:06:11.459 -- EVENT: WAIT
16:06:11.465 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:14.400 -- EVENT: PAUSE
16:06:47.135 -- EVENT: RESUME
16:06:47.218 -- EVENT: RECONNECTING
16:06:47.230 -- EVENT: RESOLVE
16:06:47.312 -- Contacting 152.70.52.234:1194 via UDP
16:06:47.313 -- EVENT: WAIT
16:06:47.326 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:49.924 -- EVENT: DISCONNECTED
16:06:49.925 -- Tunnel bytes per CPU second: 0
16:06:49.926 -- ----- OpenVPN Stop -----

TinCanTech

My guess would be that your client network is somewhat strange ..

The server is seeing packets from 192.168.0.103 and I don't know what that is.

evgeniyl

I connected to the Internet with a home router (external IP - "<MY REAL IP>" in logs). My phone is connected to this router via WiFi and has internal IP of 192.168.0.103.

Do you want me to try to use the VPN with the cellular network?

TinCanTech

evgeniyl wrote I connected to the Internet with a home router (external IP - "<MY REAL IP>" in logs). My phone is connected to this router via WiFi and has internal IP of 192.168.0.103.

Ok, that should work.

evgeniyl wrote Do you want me to try to use the VPN with the cellular network?

Give it a shot ..

It should work either way.

This looks strange:

15:58:46.959 -- EVENT: ASSIGN_IP
15:58:47.015 -- Connected via tun
15:58:47.017 -- EVENT: CONNECTED info='152.70.52.234:1194 (152.70.52.234) via /UDPv4 on tun/10.0.0.2/ gw=[10.0.0.1/]' trans=TO_CONNECTED

** Connection is good **

16:05:12.387 -- Client halt/restart: RESTART psid=0 reason=''
16:05:12.391 -- EVENT: CLIENT_RESTART

** What happened ? **

16:05:12.399 -- Client terminated, restarting in 2000 ms...
16:05:14.393 -- EVENT: RECONNECTING
16:05:14.417 -- EVENT: RESOLVE
16:05:14.435 -- Contacting 152.70.52.234:1194 via UDP
16:05:14.440 -- EVENT: WAIT
16:05:14.445 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:05:29.425 -- Server poll timeout, trying next remote entry...
16:05:29.427 -- EVENT: RECONNECTING
16:05:29.468 -- EVENT: RESOLVE
16:05:29.496 -- Contacting 152.70.52.234:1194 via UDP
16:05:29.498 -- EVENT: WAIT
16:05:29.531 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:05:59.423 -- Server poll timeout, trying next remote entry...
16:05:59.426 -- EVENT: RECONNECTING
16:05:59.457 -- EVENT: RESOLVE
16:05:59.482 -- Contacting 152.70.52.234:1194 via UDP
16:05:59.483 -- EVENT: WAIT
16:05:59.499 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:11.427 -- Server poll timeout, trying next remote entry...
16:06:11.435 -- EVENT: RECONNECTING
16:06:11.446 -- EVENT: RESOLVE
16:06:11.457 -- Contacting 152.70.52.234:1194 via UDP
16:06:11.459 -- EVENT: WAIT
16:06:11.465 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:14.400 -- EVENT: PAUSE
16:06:47.135 -- EVENT: RESUME
16:06:47.218 -- EVENT: RECONNECTING
16:06:47.230 -- EVENT: RESOLVE
16:06:47.312 -- Contacting 152.70.52.234:1194 via UDP
16:06:47.313 -- EVENT: WAIT
16:06:47.326 -- Connecting to [152.70.52.234]:1194 (152.70.52.234) via UDPv4
16:06:49.924 -- EVENT: DISCONNECTED
16:06:49.925 -- Tunnel bytes per CPU second: 0
16:06:49.926 -- ----- OpenVPN Stop -----

and then it cannot connect .. ?

evgeniyl

TinCanTech, sorry for the long reply, and thanks for the help. I was not able to understand why I'm not able to surf. Additional steps I did - installed OpenVPN AS stack, checked that I'm able to surf, compared and "played" with the iptables rules, server config (e.g., in the original config I missed with the server IP address), but still the VPN didn't "fly" :cry: So I decided to use OpenVPN AS stack out of the box on Oracle Cloud, since I need this for myself, 2 connections are enough for me.

The thread could be closed or deleted (since doesn't have anything useful)