my traffic doesnt pass through open vpn

Mehrdadx

Hi guys

i live in iran and here we need to use vpn to reach free internet, so i bought a mikrotik server in france and configured it for Open VPN.
but i have a problem: i can connect to server (windows and android) but i cant open censored websites, in fact my ip wont change to vpn server's IP and seems my traffic is not going through vpn tunnel.

i config my mikrotik server with this video https://www.youtube.com/watch?v=WzApPczmA_c&ab_channel=techieLAB

my client config file:

client
dev tun
proto udp-client
remote x.x.230.10
port 1993
persist-key
persist-tun
nobind
tls-client
remote-cert-tls server
ca ca.crt
cert client.crt
key client.key
redirect-gateway def1
verb 4
mute 10
cipher AES-128-CBC
auth SHA1
auth-user-pass secret
auth-nocache

what i must do ?

TinCanTech

Check your logs for errors.

Please start here: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

Mehrdadx

TinCanTech wrote Check your logs for errors.

Please start here: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

its client log files

⏎[Mar 16, 2022, 17:52:16] Connected via TUN_WIN
⏎[Mar 16, 2022, 17:52:16] EVENT: CONNECTED mehrdadvpn@x.x.x.x:1993 (x.x.x.x) via /TCPv4 on TUN_WIN/71.12.26.20/ gw=[x.x.x.x/]⏎[Mar 16, 2022, 17:52:43] SetupClient: signaling tun destroy event
⏎[Mar 16, 2022, 17:52:43] EVENT: DISCONNECTED ⏎[Mar 16, 2022, 21:36:53] OpenVPN core 3.git::d3f8b18b win x86_64 64-bit built on Feb 16 2022 16:25:17
⏎[Mar 16, 2022, 21:36:53] Frame=512/2048/512 mssfix-ctrl=1250
⏎[Mar 16, 2022, 21:36:53] UNUSED OPTIONS
5 [nobind]
6 [persist-key]
7 [persist-tun]
8 [tls-client]
14 [verb] [4]
15 [mute] [10]
19 [auth-nocache]
⏎[Mar 16, 2022, 21:36:53] EVENT: RESOLVE ⏎[Mar 16, 2022, 21:36:53] EVENT: WAIT ⏎[Mar 16, 2022, 21:36:53] WinCommandAgent: transmitting bypass route to x.x.x.x
{
"host" : "x.x.x.x",
"ipv6" : false
}

⏎[Mar 16, 2022, 21:36:53] Connecting to [x.x.x.x]:1993 (x.x.x.x) via TCPv4
⏎[Mar 16, 2022, 21:36:53] EVENT: CONNECTING ⏎[Mar 16, 2022, 21:36:53] Tunnel Options:V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
⏎[Mar 16, 2022, 21:36:53] Creds: Username/Password
⏎[Mar 16, 2022, 21:36:53] Peer Info:
IV_VER=3.git::d3f8b18b
IV_PLAT=win
IV_NCP=2
IV_TCPNL=1
IV_PROTO=30
IV_CIPHERS=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-128-CBC
IV_AUTO_SESS=1
IV_GUI_VER=OCWindows_3.3.5-2717
IV_SSO=webauth,openurl,crtext

⏎[Mar 16, 2022, 21:36:54] SSL Handshake: peer certificate: CN=server, 2048 bit RSA, cipher: ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD

⏎[Mar 16, 2022, 21:36:54] Session is ACTIVE
⏎[Mar 16, 2022, 21:36:54] EVENT: GET_CONFIG ⏎[Mar 16, 2022, 21:36:54] Sending PUSH_REQUEST to server...
⏎[Mar 16, 2022, 21:36:55] Sending PUSH_REQUEST to server...
⏎[Mar 16, 2022, 21:36:57] Sending PUSH_REQUEST to server...
⏎[Mar 16, 2022, 21:36:57] OPTIONS:
0 [redirect-gateway] [def1]
1 [ping] [20]
2 [ping-restart] [60]
3 [topology] [subnet]
4 [route-gateway] [x.x.x.x]
5 [ifconfig] [71.12.26.1] [255.255.255.0]

⏎[Mar 16, 2022, 21:36:57] PROTOCOL OPTIONS:
cipher: AES-128-CBC
digest: SHA1
key-derivation: OpenVPN PRF
compress: NONE
peer ID: -1
⏎[Mar 16, 2022, 21:36:57] EVENT: ASSIGN_IP ⏎[Mar 16, 2022, 21:36:57] CAPTURED OPTIONS:
Session Name: x.x.x.x
Layer: OSI_LAYER_3
Remote Address: x.x.x.x
Tunnel Addresses:
71.12.26.1/24 -> x.x.x.x
Reroute Gateway: IPv4=1 IPv6=0 flags=[ ENABLE REROUTE_GW DEF1 IPv4 ]
Block IPv6: no
Add Routes:
Exclude Routes:
DNS Servers:
Search Domains:

⏎[Mar 16, 2022, 21:36:58] SetupClient: transmitting tun setup list to \\.\pipe\agent_ovpnconnect
{
"allow_local_dns_resolvers" : false,
"confirm_event" : "b007000000000000",
"destroy_event" : "a80b000000000000",
"tun" :
{
"adapter_domain_suffix" : "",
"block_ipv6" : false,
"layer" : 3,
"mtu" : 0,
"remote_address" :
{
"address" : "x.x.x.x",
"ipv6" : false
},
"reroute_gw" :
{
"flags" : 275,
"ipv4" : true,
"ipv6" : false
},
"route_metric_default" : -1,
"session_name" : "x.x.x.x",
"tunnel_address_index_ipv4" : 0,
"tunnel_address_index_ipv6" : -1,
"tunnel_addresses" :
[
{
"address" : "71.12.26.1",
"gateway" : "x.x.x.x",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 24
}
]
},
"wintun" : false
}
POST np://[\\.\pipe\agent_ovpnconnect]/tun-setup : 200 OK
TAP ADAPTERS:
guid='{08E8DA0B-818D-4911-9E67-C1A5EC39181F}' index=4 name='Local Area Connection 4'
Open TAP device "Local Area Connection 4" PATH="\\.\Global\{08E8DA0B-818D-4911-9E67-C1A5EC39181F}.tap" SUCCEEDED
TAP-Windows Driver Version 9.24
ActionDeleteAllRoutesOnInterface iface_index=4
netsh interface ip set interface 4 metric=1
Ok.
netsh interface ip set address 4 static 71.12.26.1 255.255.255.0 gateway=x.x.x.x store=active
netsh interface ip add route x.x.x.x/32 23 192.168.1.1 store=active
The object already exists.
netsh interface ip add route 0.0.0.0/1 4 x.x.x.x store=active
Ok.
netsh interface ip add route 128.0.0.0/1 4 x.x.x.x store=active
Ok.
ipconfig /flushdns
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
TAP: ARP flush succeeded
TAP handle: 540c000000000000
⏎[Mar 16, 2022, 21:36:58] Connected via TUN_WIN
⏎[Mar 16, 2022, 21:36:58] EVENT: CONNECTED mehrdadvpn@x.x.x.x:1993 (x.x.x.x) via /TCPv4 on TUN_WIN/71.12.26.1/ gw=[x.x.x.x/]⏎

thx

TinCanTech

Your client is connected correctly.

Time to read your router manual.

Mehrdadx

TinCanTech wrote Your client is connected correctly.

Time to read your router manual.

hmmm... there is nothing special in the router configuration.

Mehrdadx

TinCanTech wrote Your client is connected correctly.

Time to read your router manual.

i have a question, there is must be a command like this "Push redirect-gateway def1" in the server config file, right ?

TinCanTech

The client must use redirect-gateway def1, it can be pushed by the server or added to the client file.

I recommend you read the howto..

openvpn_inc

Also TCP is not recommended. Did you check the howto?

regards, rob0