Hi all!
I created OpenVPN connection in configuration "point-to-point". It seems that connection works, in logs I can`t see any errors, but ip test always shows my old ip.
Openvpn server on Ubuntu, client OpenvpnGUI on Windows XP.
Server config
dev tun
ifconfig 192.168.240.1 192.168.240.2
tls-server
comp-lzo
log-append /var/log/openvpn.log
daemon
dh keys/dh2048.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
tls-auth /etc/openvpn/keys/ta.key
port 1194
user nobody
group nogroup
persist-key
persist-tun
verb 3
Client config
dev tun
port 1194
remote xx.xx.xx.xx
ifconfig 192.168.240.2 192.168.240.1
tls-client
ns-cert-type server
tls-auth Amazon/ssl/ta.key
cert Amazon/ssl/refine.crt
key Amazon/ssl/refine.key
ca Amazon/ssl/ca.crt
user nobody
group nobody
comp-lzo
verb 3
Log after deamon restart
Tue Dec 27 10:33:36 2011 event_wait : Interrupted system call (code=4)
Tue Dec 27 10:33:36 2011 TCP/UDP: Closing socket
Tue Dec 27 10:33:36 2011 Closing TUN/TAP interface
Tue Dec 27 10:33:36 2011 /sbin/ifconfig tun0 0.0.0.0
SIOCSIFADDR: Permission denied
SIOCSIFFLAGS: Permission denied
Tue Dec 27 10:33:36 2011 Linux ip addr del failed: external program exited with error status: 255
Tue Dec 27 10:33:36 2011 SIGTERM[hard,] received, process exiting
Tue Dec 27 10:33:37 2011 OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010
Tue Dec 27 10:33:37 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Dec 27 10:33:37 2011 Diffie-Hellman initialized with 2048 bit key
Tue Dec 27 10:33:37 2011 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Tue Dec 27 10:33:37 2011 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Tue Dec 27 10:33:37 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 27 10:33:37 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 27 10:33:37 2011 LZO compression initialized
Tue Dec 27 10:33:37 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Dec 27 10:33:37 2011 TUN/TAP device tun0 opened
Tue Dec 27 10:33:37 2011 TUN/TAP TX queue length set to 100
Tue Dec 27 10:33:37 2011 /sbin/ifconfig tun0 192.168.240.1 pointopoint .168.240.2 mtu 1500
Tue Dec 27 10:33:37 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 27 10:33:37 2011 Local Options hash (VER=V4): 'a604b1cc'
Tue Dec 27 10:33:37 2011 Expected Remote Options hash (VER=V4): 'f7179d47'
Tue Dec 27 10:33:37 2011 GID set to nogroup
Tue Dec 27 10:33:37 2011 UID set to nobody
Tue Dec 27 10:33:37 2011 Socket Buffers: R=[111616->131072] S=[111616->131072]
Tue Dec 27 10:33:37 2011 UDPv4 link local (bound): [undef]
Tue Dec 27 10:33:37 2011 UDPv4 link remote: [undef]
Connection log
Tue Dec 27 10:38:53 2011 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=c31b2bbc 891e3099
Tue Dec 27 10:38:56 2011 VERIFY OK: depth=1, /C=UA/ST=UA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=
refine@bigmir.net
Tue Dec 27 10:38:56 2011 VERIFY OK: depth=0, /C=UA/ST=UA/L=SanFrancisco/O=Fort-Funston/CN=refine/emailAddress=
refine@bigmir.net
Tue Dec 27 10:38:56 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 27 10:38:56 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 27 10:38:56 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 27 10:38:56 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 27 10:38:57 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Dec 27 10:38:57 2011 [refine] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Tue Dec 27 10:38:58 2011 Initialization Sequence Completed
