cannot connect to server

brain_trust

hye my frens .. anyone can help me? i can't connect to vpn using openvpn, here the logs, actually i can connect to one server only, others cannot ... even, i can't connect to "hxxp://overplay.net" using my original ip, thank in advance

OpenVPN Management Interface Version 1 -- type 'help' for more info
Mon Aug 15 06:21:01 2011 MANAGEMENT: CMD 'hold release'
Mon Aug 15 06:21:01 2011 MANAGEMENT: CMD 'username "Auth" "snowy518"'
Mon Aug 15 06:21:01 2011 MANAGEMENT: CMD 'password [...]'
Mon Aug 15 06:21:01 2011 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Aug 15 06:21:01 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Aug 15 06:21:01 2011 LZO compression initialized
Mon Aug 15 06:21:01 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Aug 15 06:21:01 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Aug 15 06:21:01 2011 Local Options hash (VER=V4): '41690919'
Mon Aug 15 06:21:01 2011 Expected Remote Options hash (VER=V4): '530fdded'
Mon Aug 15 06:21:01 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 15 06:21:01 2011 UDPv4 link local: [undef]
Mon Aug 15 06:21:01 2011 UDPv4 link remote: 95.141.36.14:1443
Mon Aug 15 06:21:18 2011 TLS: Initial packet from 95.141.36.14:1443, sid=01e1b72d 97aa5480
Mon Aug 15 06:21:18 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Aug 15 06:22:01 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 15 06:22:01 2011 TLS Error: TLS handshake failed
Mon Aug 15 06:22:01 2011 TCP/UDP: Closing socket
Mon Aug 15 06:22:01 2011 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 15 06:22:01 2011 MANAGEMENT: CMD 'pid'
Mon Aug 15 06:22:01 2011 MANAGEMENT: CMD 'state on'
Mon Aug 15 06:22:01 2011 MANAGEMENT: CMD 'log on'
Mon Aug 15 06:22:01 2011 MANAGEMENT: CMD 'hold release'
Mon Aug 15 06:22:01 2011 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Aug 15 06:22:01 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

janjust

without server logs and config files it is impossible to tell what is going on exactly. However, the client log message

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

suggests a firewalling issue: either the server is not allowing connections on UDP port 1443 or the client is dropping return traffic; try switching to 'mode tcp'

brain_trust

here another logs

Mon Aug 15 16:45:33 2011 Unrecognized option or missing parameter(s) in Overplay - Czech.ovpn:22: register-dns (2.1.1)
Mon Aug 15 16:45:33 2011 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Feb 17 2010
Mon Aug 15 16:45:41 2011 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Aug 15 16:45:41 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Aug 15 16:45:41 2011 LZO compression initialized
Mon Aug 15 16:45:41 2011 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Aug 15 16:45:41 2011 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 15 16:45:41 2011 Local Options hash (VER=V4): 'd3a7571a'
Mon Aug 15 16:45:41 2011 Expected Remote Options hash (VER=V4): '5b1533a2'
Mon Aug 15 16:45:41 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 15 16:45:41 2011 UDPv4 link local: [undef]
Mon Aug 15 16:45:41 2011 UDPv4 link remote: 94.23.202.197:1444
Mon Aug 15 16:46:41 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 15 16:46:41 2011 TLS Error: TLS handshake failed
Mon Aug 15 16:46:41 2011 TCP/UDP: Closing socket
Mon Aug 15 16:46:41 2011 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 15 16:46:41 2011 Restart pause, 2 second(s)
Mon Aug 15 16:46:43 2011 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Aug 15 16:46:43 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Aug 15 16:46:43 2011 Re-using SSL/TLS context
Mon Aug 15 16:46:43 2011 LZO compression initialized
Mon Aug 15 16:46:43 2011 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Aug 15 16:46:43 2011 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 15 16:46:43 2011 Local Options hash (VER=V4): 'd3a7571a'
Mon Aug 15 16:46:43 2011 Expected Remote Options hash (VER=V4): '5b1533a2'
Mon Aug 15 16:46:43 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 15 16:46:43 2011 UDPv4 link local: [undef]
Mon Aug 15 16:46:43 2011 UDPv4 link remote: 94.23.202.197:1444

here my config

client
dev tun
proto udp
remote-random
remote 94.23.202.197 1444
auth-user-pass
resolv-retry infinite
nobind
persist-key
persist-tun
ca OverplayCert.crt
verb 3
route-method exe 
route-delay 2

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
comp-lzo
win-sys env
setenv FORWARD_COMPATIBLE 1
register-dns

Thanks janjust for fast reply,

p/s: by the way, how to switch to 'mode tcp' .. sorry i'm a newbie to openvpn

janjust

the server log shows that it is not receiving any incoming traffic - most likely a firewall is blocking inbound UDP traffic.

To switch to TCP mode, change both client and server config files to read

proto tcp

instead of 'proto udp'; restart server, then the client, to see if it makes any difference.

brain_trust

here the logs after i change to

proto tcp

Tue Aug 16 11:23:31 2011 Unrecognized option or missing parameter(s) in Overplay - Austria.ovpn:23: register-dns (2.1.1)
Tue Aug 16 11:23:31 2011 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Feb 17 2010
Tue Aug 16 11:23:37 2011 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 16 11:23:37 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Aug 16 11:23:37 2011 LZO compression initialized
Tue Aug 16 11:23:37 2011 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Aug 16 11:23:37 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Aug 16 11:23:37 2011 Local Options hash (VER=V4): '2547efd2'
Tue Aug 16 11:23:37 2011 Expected Remote Options hash (VER=V4): '77cf0943'
Tue Aug 16 11:23:37 2011 Attempting to establish TCP connection with 85.125.233.183:1443
Tue Aug 16 11:23:58 2011 TCP: connect to 85.125.233.183:1443 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)

actually, i can connect only to this sever, what i can see, the config almost the same with config i posted before and the others config

client
dev tun
proto udp
remote-random
remote 188.165.198.228 1443
auth-user-pass
resolv-retry infinite
nobind
persist-key
persist-tun
ca OverplayCert.crt
verb 3
route-method exe 
route-delay 2

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
comp-lzo
win-sys env
setenv FORWARD_COMPATIBLE 1
register-dns

p/s: actually, when first time i visit to website "overplay.net", i used ssh tunnel "shellmix.com", and i connect to vpn server for the first time also using ssh tunnel, em .. but i not sure whether it related to my problem or not ... maybe because of CA or what ... i already tried to reset all my network to default like tcp/ip, winsock, win firewall config but seems still no luck

janjust

this looks most definitely like a firewall issue - check the firewalls on both client and server to see if udp/tcp port 1443 is blocked.