Error: connection reset by peer (WSAECONNRESET)

glaucos

Hi,

i'm new to openvpn and I recently set up a vpn server on Archlinux (192.168.1.12)
I installed openvn GUI on another computer running Windows.(192.168.1.10)
It works fine when i try to connect with my local address 192.168.1.12 but when i try to connect from outside then log shows this message:

Connection reset by peer (WSAECONNRESET) (code=10054)

I am redirecting udp connections on 1595 (port used for the vpn server) to 192.168.0.1 (ip choosed for tun0).
no firewall is blocking 1595...

Here is my client.conf

#fichier de configuration client windows

client

dev tun

proto udp

port 1595
remote 90.16.30.165 1595

resolv-retry infinite
nobind

persist-key

persist-tun

mute-replay-warnings

ca ca.crt
cert client.crt
key client.key

cipher AES-128-CBC

comp-lzo

verb 5

and my client.log

WRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWed Feb 15 14:00:15 2012 us=521617 Current Parameter Settings:
Wed Feb 15 14:00:15 2012 us=521657 config = 'client.ovpn'
Wed Feb 15 14:00:15 2012 us=521666 mode = 0
Wed Feb 15 14:00:15 2012 us=521676 show_ciphers = DISABLED
Wed Feb 15 14:00:15 2012 us=521685 show_digests = DISABLED
Wed Feb 15 14:00:15 2012 us=521695 show_engines = DISABLED
Wed Feb 15 14:00:15 2012 us=521704 genkey = DISABLED
Wed Feb 15 14:00:15 2012 us=521713 key_pass_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521722 show_tls_ciphers = DISABLED
Wed Feb 15 14:00:15 2012 us=521730 proto = 0
Wed Feb 15 14:00:15 2012 us=521739 local = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521750 remote_list[0] = {'proxyownage.no-ip.info', 1595}
Wed Feb 15 14:00:15 2012 us=521762 remote_random = DISABLED
Wed Feb 15 14:00:15 2012 us=521772 local_port = 1595
Wed Feb 15 14:00:15 2012 us=521781 remote_port = 1595
Wed Feb 15 14:00:15 2012 us=521790 remote_float = DISABLED
Wed Feb 15 14:00:15 2012 us=521799 ipchange = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521808 bind_local = DISABLED
Wed Feb 15 14:00:15 2012 us=521817 dev = 'tun'
Wed Feb 15 14:00:15 2012 us=521825 dev_type = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521834 dev_node = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521843 tun_ipv6 = DISABLED
Wed Feb 15 14:00:15 2012 us=521852 ifconfig_local = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521862 ifconfig_remote_netmask = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=521871 ifconfig_noexec = DISABLED
Wed Feb 15 14:00:15 2012 us=521880 ifconfig_nowarn = DISABLED
Wed Feb 15 14:00:15 2012 us=521889 shaper = 0
Wed Feb 15 14:00:15 2012 us=521898 tun_mtu = 1500
Wed Feb 15 14:00:15 2012 us=521907 tun_mtu_defined = ENABLED
Wed Feb 15 14:00:15 2012 us=521917 link_mtu = 1500
Wed Feb 15 14:00:15 2012 us=521925 link_mtu_defined = DISABLED
Wed Feb 15 14:00:15 2012 us=521934 tun_mtu_extra = 0
Wed Feb 15 14:00:15 2012 us=521943 tun_mtu_extra_defined = DISABLED
Wed Feb 15 14:00:15 2012 us=521952 fragment = 0
Wed Feb 15 14:00:15 2012 us=521961 mtu_discover_type = -1
Wed Feb 15 14:00:15 2012 us=521970 mtu_test = 0
Wed Feb 15 14:00:15 2012 us=521979 mlock = DISABLED
Wed Feb 15 14:00:15 2012 us=521988 keepalive_ping = 0
Wed Feb 15 14:00:15 2012 us=521997 keepalive_timeout = 0
Wed Feb 15 14:00:15 2012 us=522006 inactivity_timeout = 0
Wed Feb 15 14:00:15 2012 us=522015 ping_send_timeout = 0
Wed Feb 15 14:00:15 2012 us=522025 ping_rec_timeout = 120
Wed Feb 15 14:00:15 2012 us=522034 ping_rec_timeout_action = 2
Wed Feb 15 14:00:15 2012 us=522043 ping_timer_remote = DISABLED
Wed Feb 15 14:00:15 2012 us=522052 remap_sigusr1 = 0
Wed Feb 15 14:00:15 2012 us=522061 explicit_exit_notification = 0
Wed Feb 15 14:00:15 2012 us=522071 persist_tun = ENABLED
Wed Feb 15 14:00:15 2012 us=522080 persist_local_ip = DISABLED
Wed Feb 15 14:00:15 2012 us=522089 persist_remote_ip = DISABLED
Wed Feb 15 14:00:15 2012 us=522098 persist_key = ENABLED
Wed Feb 15 14:00:15 2012 us=522107 mssfix = 1450
Wed Feb 15 14:00:15 2012 us=522116 resolve_retry_seconds = 1000000000
Wed Feb 15 14:00:15 2012 us=522126 connect_retry_seconds = 5
Wed Feb 15 14:00:15 2012 us=522135 username = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522145 groupname = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522154 chroot_dir = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522163 cd_dir = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522171 writepid = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522180 up_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522189 down_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=522198 down_pre = DISABLED
Wed Feb 15 14:00:15 2012 us=522207 up_restart = DISABLED
Wed Feb 15 14:00:15 2012 us=522216 up_delay = DISABLED
Wed Feb 15 14:00:15 2012 us=522225 daemon = DISABLED
Wed Feb 15 14:00:15 2012 us=522233 inetd = 0
Wed Feb 15 14:00:15 2012 us=522242 log = DISABLED
Wed Feb 15 14:00:15 2012 us=522251 suppress_timestamps = DISABLED
Wed Feb 15 14:00:15 2012 us=522260 nice = 0
Wed Feb 15 14:00:15 2012 us=522268 verbosity = 5
Wed Feb 15 14:00:15 2012 us=681721 mute = 0
Wed Feb 15 14:00:15 2012 us=681746 gremlin = 0
Wed Feb 15 14:00:15 2012 us=681755 status_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=681764 status_file_version = 1
Wed Feb 15 14:00:15 2012 us=681773 status_file_update_freq = 60
Wed Feb 15 14:00:15 2012 us=681781 occ = ENABLED
Wed Feb 15 14:00:15 2012 us=681789 rcvbuf = 0
Wed Feb 15 14:00:15 2012 us=681798 sndbuf = 0
Wed Feb 15 14:00:15 2012 us=681807 socks_proxy_server = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=681816 socks_proxy_port = 0
Wed Feb 15 14:00:15 2012 us=681824 socks_proxy_retry = DISABLED
Wed Feb 15 14:00:15 2012 us=681833 fast_io = DISABLED
Wed Feb 15 14:00:15 2012 us=681841 comp_lzo = ENABLED
Wed Feb 15 14:00:15 2012 us=681850 comp_lzo_adaptive = ENABLED
Wed Feb 15 14:00:15 2012 us=681858 route_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=681874 route_default_gateway = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=685850 route_noexec = DISABLED
Wed Feb 15 14:00:15 2012 us=685863 route_delay = 0
Wed Feb 15 14:00:15 2012 us=685872 route_delay_window = 30
Wed Feb 15 14:00:15 2012 us=685881 route_delay_defined = ENABLED
Wed Feb 15 14:00:15 2012 us=685890 management_addr = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=685898 management_port = 0
Wed Feb 15 14:00:15 2012 us=685907 management_user_pass = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=685916 management_log_history_cache = 250
Wed Feb 15 14:00:15 2012 us=685925 management_echo_buffer_size = 100
Wed Feb 15 14:00:15 2012 us=685935 management_query_passwords = DISABLED
Wed Feb 15 14:00:15 2012 us=685944 management_hold = DISABLED
Wed Feb 15 14:00:15 2012 us=685953 shared_secret_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=685962 key_direction = 0
Wed Feb 15 14:00:15 2012 us=685970 ciphername_defined = ENABLED
Wed Feb 15 14:00:15 2012 us=685979 ciphername = 'AES-128-CBC'
Wed Feb 15 14:00:15 2012 us=685988 authname_defined = ENABLED
Wed Feb 15 14:00:15 2012 us=692526 authname = 'SHA1'
Wed Feb 15 14:00:15 2012 us=692539 keysize = 0
Wed Feb 15 14:00:15 2012 us=692548 engine = DISABLED
Wed Feb 15 14:00:15 2012 us=692556 replay = ENABLED
Wed Feb 15 14:00:15 2012 us=692565 mute_replay_warnings = ENABLED
Wed Feb 15 14:00:15 2012 us=692574 replay_window = 64
Wed Feb 15 14:00:15 2012 us=692582 replay_time = 15
Wed Feb 15 14:00:15 2012 us=692591 packet_id_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=692599 use_iv = ENABLED
Wed Feb 15 14:00:15 2012 us=692607 test_crypto = DISABLED
Wed Feb 15 14:00:15 2012 us=692615 tls_server = DISABLED
Wed Feb 15 14:00:15 2012 us=692624 tls_client = ENABLED
Wed Feb 15 14:00:15 2012 us=692632 key_method = 2
Wed Feb 15 14:00:15 2012 us=692641 ca_file = 'ca.crt'
Wed Feb 15 14:00:15 2012 us=692649 dh_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=692658 cert_file = 'client.crt'
Wed Feb 15 14:00:15 2012 us=699207 priv_key_file = 'client.key'
Wed Feb 15 14:00:15 2012 us=699220 pkcs12_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699229 cryptoapi_cert = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699238 cipher_list = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699246 tls_verify = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699255 tls_remote = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699263 crl_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=699272 ns_cert_type = 0
Wed Feb 15 14:00:15 2012 us=699279 tls_timeout = 2
Wed Feb 15 14:00:15 2012 us=699288 renegotiate_bytes = 0
Wed Feb 15 14:00:15 2012 us=699296 renegotiate_packets = 0
Wed Feb 15 14:00:15 2012 us=699305 renegotiate_seconds = 3600
Wed Feb 15 14:00:15 2012 us=699322 handshake_window = 60
Wed Feb 15 14:00:15 2012 us=699331 transition_window = 3600
Wed Feb 15 14:00:15 2012 us=699340 single_session = DISABLED
Wed Feb 15 14:00:15 2012 us=699348 tls_exit = DISABLED
Wed Feb 15 14:00:15 2012 us=706277 tls_auth_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=706304 server_network = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706314 server_netmask = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706324 server_bridge_ip = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706333 server_bridge_netmask = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706342 server_bridge_pool_start = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706352 server_bridge_pool_end = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706361 ifconfig_pool_defined = DISABLED
Wed Feb 15 14:00:15 2012 us=706371 ifconfig_pool_start = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706380 ifconfig_pool_end = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706390 ifconfig_pool_netmask = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=706400 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=706409 ifconfig_pool_persist_refresh_freq = 600
Wed Feb 15 14:00:15 2012 us=706419 ifconfig_pool_linear = DISABLED
Wed Feb 15 14:00:15 2012 us=706428 n_bcast_buf = 256
Wed Feb 15 14:00:15 2012 us=713292 tcp_queue_limit = 64
Wed Feb 15 14:00:15 2012 us=713304 real_hash_size = 256
Wed Feb 15 14:00:15 2012 us=713312 virtual_hash_size = 256
Wed Feb 15 14:00:15 2012 us=713321 client_connect_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=713330 learn_address_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=713339 client_disconnect_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=713347 client_config_dir = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=713356 ccd_exclusive = DISABLED
Wed Feb 15 14:00:15 2012 us=713364 tmp_dir = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=713373 push_ifconfig_defined = DISABLED
Wed Feb 15 14:00:15 2012 us=713383 push_ifconfig_local = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=713393 push_ifconfig_remote_netmask = 0.0.0.0
Wed Feb 15 14:00:15 2012 us=713402 enable_c2c = DISABLED
Wed Feb 15 14:00:15 2012 us=713410 duplicate_cn = DISABLED
Wed Feb 15 14:00:15 2012 us=713418 cf_max = 0
Wed Feb 15 14:00:15 2012 us=719410 cf_per = 0
Wed Feb 15 14:00:15 2012 us=719421 max_clients = 1024
Wed Feb 15 14:00:15 2012 us=719429 max_routes_per_client = 256
Wed Feb 15 14:00:15 2012 us=719438 client_cert_not_required = DISABLED
Wed Feb 15 14:00:15 2012 us=719448 username_as_common_name = DISABLED
Wed Feb 15 14:00:15 2012 us=719457 auth_user_pass_verify_script = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=719466 auth_user_pass_verify_script_via_file = DISABLED
Wed Feb 15 14:00:15 2012 us=719475 client = ENABLED
Wed Feb 15 14:00:15 2012 us=719483 pull = ENABLED
Wed Feb 15 14:00:15 2012 us=719492 auth_user_pass_file = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=719502 show_net_up = DISABLED
Wed Feb 15 14:00:15 2012 us=719511 route_method = 0
Wed Feb 15 14:00:15 2012 us=719519 ip_win32_defined = DISABLED
Wed Feb 15 14:00:15 2012 us=719528 ip_win32_type = 3
Wed Feb 15 14:00:15 2012 us=719536 dhcp_masq_offset = 0
Wed Feb 15 14:00:15 2012 us=726178 dhcp_lease_time = 31536000
Wed Feb 15 14:00:15 2012 us=726190 tap_sleep = 0
Wed Feb 15 14:00:15 2012 us=726198 dhcp_options = DISABLED
Wed Feb 15 14:00:15 2012 us=726206 dhcp_renew = DISABLED
Wed Feb 15 14:00:15 2012 us=726215 dhcp_pre_release = DISABLED
Wed Feb 15 14:00:15 2012 us=726223 dhcp_release = DISABLED
Wed Feb 15 14:00:15 2012 us=726231 domain = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=726240 netbios_scope = '[UNDEF]'
Wed Feb 15 14:00:15 2012 us=726248 netbios_node_type = 0
Wed Feb 15 14:00:15 2012 us=726256 disable_nbt = DISABLED
Wed Feb 15 14:00:15 2012 us=726271 OpenVPN 2.0.1 Win32-MinGW [SSL] [LZO] built on Aug 16 2005
Wed Feb 15 14:00:15 2012 us=726360 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 15 14:00:15 2012 us=730994 LZO compression initialized
Wed Feb 15 14:00:15 2012 us=731078 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 15 14:00:15 2012 us=830746 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 15 14:00:15 2012 us=830793 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 15 14:00:15 2012 us=830804 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 15 14:00:15 2012 us=830828 Local Options hash (VER=V4): '66096c33'
Wed Feb 15 14:00:15 2012 us=830845 Expected Remote Options hash (VER=V4): '691e95c7'
Wed Feb 15 14:00:15 2012 us=830874 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Feb 15 14:00:15 2012 us=831574 UDPv4 link local: [undef]
Wed Feb 15 14:00:15 2012 us=831586 UDPv4 link remote: 90.16.30.165:1595
Wed Feb 15 14:00:15 2012 us=845278 TLS: Initial packet from 90.16.30.165:1595, sid=8d5d2af8 684f4cbc
Wed Feb 15 14:00:18 2012 us=7123 TCP/UDP: Incoming packet rejected from 192.168.1.12:1595[2], expected peer address: 90.16.30.165:1595 (allow this incoming source address/port by removing --remote or adding --float)
Wed Feb 15 14:00:22 2012 us=403400 TCP/UDP: Incoming packet rejected from 192.168.1.12:1595[2], expected peer address: 90.16.30.165:1595 (allow this incoming source address/port by removing --remote or adding --float)
Wed Feb 15 14:00:26 2012 us=281758 TCP/UDP: Closing socket
Wed Feb 15 14:00:26 2012 us=282400 SIGTERM[hard,] received, process exiting

Can someone help me ?
Thanks in advance.

maikcat

i'm new to openvpn and I recently set up a vpn server on Archlinux (192.168.1.12)

your openvpn server lan ip is 192.168.1.12,right?

I am redirecting udp connections on 1595 (port used for the vpn server) to 192.168.0.1 (ip choosed for tun0).

and you are redirecting traffic to 192.168.0.1 ?!?!?!?!?! :?:

port forward the 1595 from your router to your openvpn server lan (probably 192.168.1.12)

cheers,

Michael.