My ISP blocked OpenVPN

Milad

Hello

I've been using openVPN for a long time, it was OK, until few days ago, when I started to see this error:

Tue Jun 21 21:41:42 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jun 21 21:41:42 2011 TLS Error: TLS handshake failed

I can connect to it from other ISPs but not from mine.
I tried to change the port from my server and my config file then restarted the daemon, but it didn't help.

Please advise.
Thanks in advance

Milad

Here is my client config

client
dev tap
proto udp
port 2082

script-security 2
redirect-gateway

tls-auth ta.key 1

remote x.x.x.x 1194
resolv-retry infinite
persist-key
persist-tun
ca "ca.crt"
cert "client.crt"
key "client.key"
ns-cert-type server
cipher BF-CBC
comp-lzo
verb 1

janjust

if your ISP is blocking OpenVPN then there's very little you can do about it - openvpn traffic is easily detected using packet inspection; if you have SSH access to the server then you can also run openvpn via SOCKS over SSH.

Milad

Thank you,

Yes I have SSH access, but if I can run SOCKS over SSH there is no need for openvpn, right?

Regards

janjust

depends on the type of traffic you wish to forward; if all your application are SOCKS capable then no (and I'd advise to NOT use a VPN); for forwarding other types of traffic (e.g. UDP) you'd better stick with OpenVPN.

Milad

If I change the way OpenVPN authenticate the client, can it be the solution?
If I switch from routing to bridging, is it another solution?

Regards