Issue in openvpn client in windows 7

lentin.sun

Hi OpenVPN geeks....

I am relatively new to openvpn. I have implemented openvpn successfully in ubuntu server 8.04. I am able to connect from anywhere using openvpn client in windows xp.
But the strange thing is i am not able to connect from windows 7 . I have tried new versions of openvpn client, still not successfull. Tried disabling firewall and antivirus.

The error which i can see in client log is
"TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
TCP/UDP: Closing socket"

Later after some googling i found out something i.e. i am able to telnet to vpnserver UDP port 8000 from windows xp but not able to telnet from windows 7. I am able to telnet to other servers from windows 7 machine but not to the vpn server port 8000. I can even telnet to openvpn public IP without port 8000.

Finally both these xp and windows 7 machines are in the same network.

So can anybody please help me to resolve this issue..

Thanks in advance,
Lentin

Mimiko

Hi.

Did you really disabled Wn 7 firewall? In Win 7 firewall is more complex and harder to complettly disable.

maikcat

hi there,

>i am able to telnet to vpnserver UDP port 8000 from windows xp but not able to telnet from windows 7

telnet to udp port..?how did you do that? :shock:

can you post configs/logs?

Michael.

lentin.sun

Hi Mimiko,

I dont know how to upload images in this forum. So i have uploaded it in picasa and following is the direct link.

https://picasaweb.google.com/lh/photo/rjXq3IBt46sk-DGeMWQ72g?feat=directlink

I believe windows firewall is off. Can you please confirm it by looking at the above image.
Hi maikcat,

Theoratically telnet to udp port should not work..
but when i am trying to telnet to this server public ip with port i am getting blank screen as in the following link.

https://picasaweb.google.com/lh/photo/F5RuSjAxmbkT5r5wC2i_rQ?feat=directlink

That means the port is open, i guess.

below is the contents of my server.conf file:

mode server
tls-server

local 192.168.2.2 ## ip/hostname of server
port 8000 ## default openvpn port
proto udp

#bridging directive
dev tap0 ## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"

persist-key
persist-tun

#certificates and encryption
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
tls-auth ta.key 0 # This file is secret

cipher BF-CBC # Blowfish (default)
comp-lzo

#DHCP Information
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.2 255.255.255.0 192.168.2.100 192.168.2.150
push "dhcp-option DNS 192.168.2.2"
push "dhcp-option DOMAIN xxxxxxxxxxxx"
max-clients 100 ## set this to the max number of clients that should be connected at a time

#log and security
user nobody
group nogroup
keepalive 10 120
status openvpn-status.log
verb 3

This is my client config:

### Client configuration file for OpenVPN

# Specify that this is a client
client

# Bridge device setting
dev tap0

# Host name and port for the server (default port is 1194)
# note: replace with the correct values your server set up
remote x.x.x.x 8000

# Client does not need to bind to a specific local port
nobind

# Keep trying to resolve the host name of OpenVPN server.
## The windows GUI seems to dislike the following rule.
##You may need to comment it out.
resolv-retry infinite

# Preserve state across restarts
persist-key
persist-tun

# SSL/TLS parameters - files created previously
ca ca.crt
cert client1.crt
key client1.key

# Since we specified the tls-auth for server, we need it for the client
# note: 0 = server, 1 = client
tls-auth ta.key 1

# Specify same cipher as server
cipher BF-CBC

# Use compression
comp-lzo

# Log verbosity (to help if there are problems)
verb 3

maikcat

hi lentin.sun

are you a zimbra user? (great collaboration server,dont you think?) 😉

enough said,

AFAIK you *cant* check udp with telnet,

you must post server logs as well...
the error you get (TLS Error: TLS key negotiation failed to occur within 60 seconds)
usually means that someone is blocking (or droping) traffic
for testing purposes you can use tcp as openvpn protocol,
is the router on openvpn server side correctly configured? (both firewall and nat)
is iptables disabled on ubuntu?

please also post the output of ifconfig on server side..

cheers,

Michael.

Mimiko

Well, this systems XP and 7 lies on same LAN? Or have different public IP? From XP your telnet to 8000 (TCP) just hungs that's why it's a blank screen.

If your systems are on different public IP, may be OpenVPN server's firewall is blocking access to IP of Win 7.

If they are on the same LAN, then the LAN's router blocks trafic for UDP 8000 to the OpenVPN server for Win 7.

lentin.sun

Hi maichel,

We have just migrated from exchange 2003 to zimbra as because bad feedback on exhchange 2010 ....If you are good in zimbra i have doubts in that as well.. 😃

I tried tcp, then i was not even able to connect vpn from xp also.

For that i did following
1) changed udp to tcp in server.conf(restarted open vpn service)
2) changed NAT in router.

No luck.........

router and nat are perfectly fine....
Iptables are enabled. Incase iptables are creating problem server should not even accept connection from Xp machine also rite?

Here is my ifconfig output:

br0 Link encap:Ethernet HWaddr 00:19:b9:0f:42:68
inet addr:192.168.2.2 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::219:b9ff:fe0f:4268/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4955 errors:0 dropped:0 overruns:0 frame:0
TX packets:974 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:438921 (428.6 KB) TX bytes:421896 (412.0 KB)

eth0 Link encap:Ethernet HWaddr 00:19:b9:0f:42:68
inet6 addr: fe80::219:b9ff:fe0f:4268/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:5609 errors:0 dropped:0 overruns:0 frame:0
TX packets:979 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:573327 (559.8 KB) TX bytes:427554 (417.5 KB)
Interrupt:16

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:33 errors:0 dropped:0 overruns:0 frame:0
TX packets:33 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3232 (3.1 KB) TX bytes:3232 (3.1 KB)

tap0 Link encap:Ethernet HWaddr 00:ff:b4:c5:09:2d
inet6 addr: fe80::2ff:b4ff:fec5:92d/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:875 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:61743 (60.2 KB)

and the log i dont know whether i am searching in the right place..i can see only one log file in open vpn server folder which does not have anything in it i.e. openvpn status log. I cant see any log file in /var/logs also....

Hi Mimiko,

both these systems are in same LAN .

i have only one rule which allows connection from entire LAN to udp 8000.

and i have even tried the ip of xp machine in win 7 machine without any luck.

Regards,
Lentin

Mimiko

Please show result on Win7 of "ipconfig /all" and "tracert a.b.c.d" to the remote ubuntu public IP address.

lentin.sun

Hi Mimiko,

i am able to traceroute to the public ip of ubuntu server as well as ping to ubuntu server. Ip configuration is just same as windows xp machine. Still if u want result of ipconfig /all i can post it.

I can even do ssh to ubuntu server via default port 22 from windows 7 . Problem occurs only for 8000(udp).

I dont know whether windows 7 has got any issues with UDP :roll:

Thanks guys for your valuable replies....
Lentin

Mimiko

Yes, please post results of "ipconfig /all", "tracert a.b.c.d" (remote ubuntu public IP) and "tracert 192.168.2.2". All from Winows 7.

It's strange for Windows 7 block UDP 8000.

maikcat

if you used tcp as your based protocol
you can use telnet command to check if openvpn service answers...

>If you are good in zimbra i have doubts in that as well.. 😃

because my english are not very good and maybe i misunderstood the above
can you explain it to me?

also i have to remind you for openvpn to work both eth and tap
interfaces *must* be in promisc mode , looking your ifconfig output they are not (eth0)..

use the log directive to create a seperate log file for openvpn.

Michael.

Mimiko

maikcat,

>If you are good in zimbra i have doubts in that as well.. 😃

because my english are not very good and maybe i misunderstood the above
can you explain it to me?

I think lentin.sun meant that they have problems with zimbra as well. ))

As for Windows bridging, the adapters that are combined in bridge are set in promisc mode automatically. But the Win XP works. I think it's not the problem in this. Still waiting for the response from lentin.sun that I asked.

maikcat

@mimiko

is this configuration file seems to you taken from windows version?

below is the contents of my server.conf file:
mode server
tls-server
local 192.168.2.2 ## ip/hostname of server
port 8000 ## default openvpn port
proto udp
#bridging directive
dev tap0 ## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"

??

i think that his SERVER is linux based..

please lentin.sun clarify this out for us..

Michael.

lentin.sun

I am sorry for my delay in response. It was holiday today..

Hi Mimiko,

result for ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : xxxxxxx
Primary Dns Suffix . . . . . . . : xxxxxxxxxx.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : xxxxxxxxxxx.COM

Ethernet adapter Local Area Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Win32 Adapter OAS
Physical Address. . . . . . . . . : 00-FF-B9-96-B3-C5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
Physical Address. . . . . . . . . : 00-09-6B-D5-3A-15
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::4dcc:6336:6ff4:fedf%11(Preferred
IPv4 Address. . . . . . . . . . . : 192.168.1.51(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 234883435
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-06-76-0C-00-09-6B-D5-3A

DNS Servers . . . . . . . . . . . : 192.168.1.5
192.168.1.6
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{EAD0A8EC-1DE2-4F00-9752-066E72A7C269}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{B996B3C5-B686-4278-A3DD-8F4EB9A2B5E0}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Result for tracert to ubuntu server public ip in the following link.

https://picasaweb.google.com/lh/photo/T4-ZWcmTYJ32D1FkoyWngA?feat=directlink

the another one is 192.168.2.2 is the local ip of ubuntu server .

Hi Mikchael,

i mean if you have knowledge in zimbra mail server i have some issues in that.
If you could help me in that i would be really greatful as i am not getting a result from Googling.

Actually i dont know what is promisc mode and log directive . As i am putting myself to sleep mode today, tommorow i will google it and do it.

and guys , as i have mentioned in my first post i am using ubuntu linux server 8.04

Once again i am thanking you guys for spending time for me...
Lentin

Mimiko

Definetly is a problem with Win7 host. Try using port 1194, try using TCP, and see if it connects.

maikcat

is this configuration file seems to you taken from windows version?

I'm writing only about Win7. :lol:

lentin.sun

Hi Mimiko can you please tell me what all things should i do when i am changing openvpn udp port to tcp..

normally what i used to do is change udp to tcp in server.conf in server side.
change static nat to tcp port in router.....do i have to do anything else ??

thanks,
LentinV

Mimiko

Yes you have to change in your OpenVPN server's config:

port 1194
proto tcp

And make configuration to router port forwarding.
Also, define in your client's config:

remote a.b.c.d 1194
proto tcp

maikcat

@lentin.sun

yes i am using zimbra for at least 1,5 year now and i am VERY pleased..

the problem is that if you want to do something that GUI doesnt allow you to do
you may be able to do it if you edit :? some config files in it... 😉

AFAIK you MUST setup NAT on your router both on UDP and TCP protocols as well...
to clarify the above ,
you dont only need to change from tcp to udp the openvpn server config,
BUT you need ALSO to port forward the SAME protocol aswell....

for testing switch to tcp though...

Michael.

lentin.sun

Hi guys,

I think changing udp to tcp is showing some good signs. I am still not able to connect to vpn server but in log i can see connection established..

Here is the client log:
---------------------------------------------------------------------------------
Mon Jul 25 14:03:22 2011 OpenVPNAS 2.1.1oOAS Win32-MSVC++ [SSL] [LZO2] built on Jul 29 2010
Mon Jul 25 14:03:22 2011 MANAGEMENT: Connected to management server at 127.0.0.1:41015
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'log on'
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'state on'
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'echo on'
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'bytecount 5'
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'hold off'
Mon Jul 25 14:03:22 2011 MANAGEMENT: CMD 'hold release'
Mon Jul 25 14:03:22 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:22 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:23 2011 Control Channel Authentication: tls-auth using INLINE static key file
Mon Jul 25 14:03:23 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 25 14:03:23 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 25 14:03:23 2011 LZO compression initialized
Mon Jul 25 14:03:23 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:23 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:23 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:23 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:23 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:23 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:23 2011 MANAGEMENT: >STATE:1311582803,TCP_CONNECT,,,
Mon Jul 25 14:03:23 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:23 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:23 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:23 2011 MANAGEMENT: >STATE:1311582803,WAIT,,,
Mon Jul 25 14:03:23 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:23 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:23 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:23 2011 MANAGEMENT: >STATE:1311582803,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:23 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:28 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:29 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:29 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:29 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:29 2011 LZO compression initialized
Mon Jul 25 14:03:29 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:29 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:29 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:29 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:29 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:29 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:29 2011 MANAGEMENT: >STATE:1311582809,TCP_CONNECT,,,
Mon Jul 25 14:03:29 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:29 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:29 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:29 2011 MANAGEMENT: >STATE:1311582809,WAIT,,,
Mon Jul 25 14:03:29 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:29 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:29 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:29 2011 MANAGEMENT: >STATE:1311582809,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:29 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:34 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:35 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:35 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:35 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:35 2011 LZO compression initialized
Mon Jul 25 14:03:35 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:35 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:35 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:35 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:35 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:35 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:35 2011 MANAGEMENT: >STATE:1311582815,TCP_CONNECT,,,
Mon Jul 25 14:03:35 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:35 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:35 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:35 2011 MANAGEMENT: >STATE:1311582815,WAIT,,,
Mon Jul 25 14:03:35 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:35 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:35 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:35 2011 MANAGEMENT: >STATE:1311582815,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:35 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:40 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:41 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:41 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:41 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:41 2011 LZO compression initialized
Mon Jul 25 14:03:41 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:41 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:41 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:41 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:41 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:41 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:41 2011 MANAGEMENT: >STATE:1311582821,TCP_CONNECT,,,
Mon Jul 25 14:03:41 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:41 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:41 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:41 2011 MANAGEMENT: >STATE:1311582821,WAIT,,,
Mon Jul 25 14:03:41 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:41 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:41 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:41 2011 MANAGEMENT: >STATE:1311582821,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:41 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:46 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:47 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:47 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:47 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:47 2011 LZO compression initialized
Mon Jul 25 14:03:47 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:47 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:47 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:47 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:47 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:47 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:47 2011 MANAGEMENT: >STATE:1311582827,TCP_CONNECT,,,
Mon Jul 25 14:03:47 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:47 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:47 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:47 2011 MANAGEMENT: >STATE:1311582827,WAIT,,,
Mon Jul 25 14:03:47 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:47 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:47 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:47 2011 MANAGEMENT: >STATE:1311582827,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:47 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:52 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:53 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:53 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:53 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:53 2011 LZO compression initialized
Mon Jul 25 14:03:53 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:53 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:53 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:53 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:53 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:53 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:53 2011 MANAGEMENT: >STATE:1311582833,TCP_CONNECT,,,
Mon Jul 25 14:03:53 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:53 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:53 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:53 2011 MANAGEMENT: >STATE:1311582833,WAIT,,,
Mon Jul 25 14:03:53 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:53 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:53 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:53 2011 MANAGEMENT: >STATE:1311582833,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:53 2011 Restart pause, 5 second(s)
Mon Jul 25 14:03:58 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:03:59 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:03:59 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:03:59 2011 Re-using SSL/TLS context
Mon Jul 25 14:03:59 2011 LZO compression initialized
Mon Jul 25 14:03:59 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:03:59 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:03:59 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:03:59 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:03:59 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:03:59 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:59 2011 MANAGEMENT: >STATE:1311582839,TCP_CONNECT,,,
Mon Jul 25 14:03:59 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:59 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:03:59 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:03:59 2011 MANAGEMENT: >STATE:1311582839,WAIT,,,
Mon Jul 25 14:03:59 2011 Connection reset, restarting [0]
Mon Jul 25 14:03:59 2011 TCP/UDP: Closing socket
Mon Jul 25 14:03:59 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:03:59 2011 MANAGEMENT: >STATE:1311582839,RECONNECTING,connection-reset,,
Mon Jul 25 14:03:59 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:04 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:05 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:05 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:05 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:05 2011 LZO compression initialized
Mon Jul 25 14:04:05 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:05 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:05 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:05 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:05 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:05 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:05 2011 MANAGEMENT: >STATE:1311582845,TCP_CONNECT,,,
Mon Jul 25 14:04:05 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:05 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:05 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:05 2011 MANAGEMENT: >STATE:1311582845,WAIT,,,
Mon Jul 25 14:04:05 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:05 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:05 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:05 2011 MANAGEMENT: >STATE:1311582845,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:05 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:10 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:11 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:11 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:11 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:11 2011 LZO compression initialized
Mon Jul 25 14:04:11 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:11 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:11 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:11 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:11 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:11 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:11 2011 MANAGEMENT: >STATE:1311582851,TCP_CONNECT,,,
Mon Jul 25 14:04:11 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:11 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:11 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:11 2011 MANAGEMENT: >STATE:1311582851,WAIT,,,
Mon Jul 25 14:04:11 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:11 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:11 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:11 2011 MANAGEMENT: >STATE:1311582851,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:11 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:16 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:17 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:17 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:17 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:17 2011 LZO compression initialized
Mon Jul 25 14:04:17 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:17 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:17 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:17 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:17 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:17 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:17 2011 MANAGEMENT: >STATE:1311582857,TCP_CONNECT,,,
Mon Jul 25 14:04:17 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:17 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:17 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:17 2011 MANAGEMENT: >STATE:1311582857,WAIT,,,
Mon Jul 25 14:04:17 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:17 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:17 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:17 2011 MANAGEMENT: >STATE:1311582857,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:17 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:22 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:23 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:23 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:23 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:23 2011 LZO compression initialized
Mon Jul 25 14:04:23 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:23 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:23 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:23 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:23 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:23 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:23 2011 MANAGEMENT: >STATE:1311582863,TCP_CONNECT,,,
Mon Jul 25 14:04:23 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:23 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:23 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:23 2011 MANAGEMENT: >STATE:1311582863,WAIT,,,
Mon Jul 25 14:04:23 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:23 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:23 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:23 2011 MANAGEMENT: >STATE:1311582863,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:23 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:28 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:29 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:29 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:29 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:29 2011 LZO compression initialized
Mon Jul 25 14:04:29 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:29 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:29 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:29 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:29 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:29 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:29 2011 MANAGEMENT: >STATE:1311582869,TCP_CONNECT,,,
Mon Jul 25 14:04:29 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:29 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:29 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:29 2011 MANAGEMENT: >STATE:1311582869,WAIT,,,
Mon Jul 25 14:04:29 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:29 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:29 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:29 2011 MANAGEMENT: >STATE:1311582869,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:29 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:34 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Mon Jul 25 14:04:35 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 25 14:04:35 2011 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 25 14:04:35 2011 Re-using SSL/TLS context
Mon Jul 25 14:04:35 2011 LZO compression initialized
Mon Jul 25 14:04:35 2011 Control Channel MTU parms [ L:1576 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jul 25 14:04:35 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 25 14:04:35 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 25 14:04:35 2011 Local Options hash (VER=V4): '2259a6dc'
Mon Jul 25 14:04:35 2011 Expected Remote Options hash (VER=V4): '692eb0f5'
Mon Jul 25 14:04:35 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:35 2011 MANAGEMENT: >STATE:1311582875,TCP_CONNECT,,,
Mon Jul 25 14:04:35 2011 TCP connection established with xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:35 2011 TCPv4_CLIENT link local: [undef]
Mon Jul 25 14:04:35 2011 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:8000
Mon Jul 25 14:04:35 2011 MANAGEMENT: >STATE:1311582875,WAIT,,,
Mon Jul 25 14:04:35 2011 Connection reset, restarting [0]
Mon Jul 25 14:04:35 2011 TCP/UDP: Closing socket
Mon Jul 25 14:04:35 2011 SIGUSR1[soft,connection-reset] received, process restarting
Mon Jul 25 14:04:35 2011 MANAGEMENT: >STATE:1311582875,RECONNECTING,connection-reset,,
Mon Jul 25 14:04:35 2011 Restart pause, 5 second(s)
Mon Jul 25 14:04:40 2011 MANAGEMENT: CMD 'http-proxy-fallback-disable'

------------------------------------------

Can you guys please check whether there is any hope in this log file???

Thanks,
Lentin

lentin.sun

Hi Michel ,

If you dont mind can you please help me in zimbra server also....

I have some issues in Zimbra server , If you can give me your mail ID , I will mail you those issues as i cant post it in openvpn forum.

Thanks,
Lentin