*Tunnelblick: macOS 10.15.1 (19B88); Tunnelblick 3.8.2beta02 (build 5420); prior version 3.7.9 (build 5320); Admin user
git commit 4444ad5f3ddac101b0ede56a35b9e07e933caa4e
Configuration Condo
"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/Condo.tblk:
client
dev tap
proto udp
remote xxxxx.mynetgear.com 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5
================================================================================
Files in Condo.tblk:
Contents/Resources/cli….crt
Contents/Resources/ca.crt
Contents/Resources/config.ovpn
Contents/Resources/cli….key
================================================================================
Configuration preferences:
-skipWarningThatNotUsingSpecifiedOpenVPN = 1
-routeAllTrafficThroughVpn = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-allowChangesToManuallySetNetworkSettings = 1
-lastConnectionSucceeded = 1
================================================================================
Wildcard preferences:
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
================================================================================
Program preferences:
skipWarningThatIPAddressDidNotChangeAfterConnection = 1
skipWarningAboutDnsProblems = 1
launchAtNextLogin = 1
tunnelblickVersionHistory = (
"3.8.2beta02 (build 5420)",
"3.8.1 (build 5400)",
"3.7.9 (build 5320)",
"3.8.0 (build 5370)",
"3.7.9a (build 5321)",
"3.7.8 (build 5180)",
"3.7.7 (build 5150)"
)
lastLaunchTime = 594330783.859799
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = Condo
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 445 455 389 187 0 0 1280 777
NSWindow Frame SUUpdateAlert = 330 301 620 392 0 0 1280 777
detailsWindowFrameVersion = 5420
detailsWindowFrame = {{148, 145}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {167, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = Condo
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2019-11-01 19:53:04 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times
================================================================================
Tunnelblick Log:
2019-11-02 06:16:13.691381 *Tunnelblick: macOS 10.15.1 (19B88); Tunnelblick 3.8.2beta02 (build 5420); prior version 3.7.9 (build 5320)
2019-11-02 06:16:13.839003 *Tunnelblick: Attempting connection with Condo; Set nameserver = 769; monitoring connection
2019-11-02 06:16:13.839640 *Tunnelblick: openvpnstart start Condo.tblk 53579 769 0 3 0 1164146 -ptADGNWradsgnw 2.4.8-openssl-1.0.2t
2019-11-02 06:16:13.856532 *Tunnelblick: openvpnstart starting OpenVPN
2019-11-02 06:16:14.996970 OpenVPN 2.4.8 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Oct 31 2019
2019-11-02 06:16:14.997024 library versions: OpenSSL 1.0.2t 10 Sep 2019, LZO 2.10
2019-11-02 06:16:14.997793 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:53579
2019-11-02 06:16:14.997817 Need hold release from management interface, waiting...
2019-11-02 06:16:16.385138 *Tunnelblick: openvpnstart log:
Loading tap-notarized.kext
OpenVPN started successfully.
Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.8-openssl-1.0.2t/openvpn
--daemon
--log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SCondo.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1164146.53579.openvpn.log
--cd /Library/Application Support/Tunnelblick/Shared/Condo.tblk/Contents/Resources
--machine-readable-output
--setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5420 3.8.2beta02 (build 5420)"
--verb 3
--config /Library/Application Support/Tunnelblick/Shared/Condo.tblk/Contents/Resources/config.ovpn
--setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/Condo.tblk/Contents/Resources
--verb 3
--cd /Library/Application Support/Tunnelblick/Shared/Condo.tblk/Contents/Resources
--management 127.0.0.1 53579 /Library/Application Support/Tunnelblick/okkfjhihgnfppleddcoilnkkogjlkkjdaaainioj.mip
--management-query-passwords
--management-hold
--redirect-gateway def1
--script-security 2
--route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -o -w -ptADGNWradsgnw
--down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -o -w -ptADGNWradsgnw
--route-pre-down /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -o -w -ptADGNWradsgnw
2019-11-02 06:16:16.398122 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:53579
2019-11-02 06:16:16.414779 MANAGEMENT: CMD 'pid'
2019-11-02 06:16:16.414829 MANAGEMENT: CMD 'auth-retry interact'
2019-11-02 06:16:16.414851 MANAGEMENT: CMD 'state on'
2019-11-02 06:16:16.414905 MANAGEMENT: CMD 'state'
2019-11-02 06:16:16.414953 MANAGEMENT: CMD 'bytecount 1'
2019-11-02 06:16:16.415646 *Tunnelblick: Established communication with OpenVPN
2019-11-02 06:16:16.418719 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2019-11-02 06:16:16.421012 MANAGEMENT: CMD 'hold release'
2019-11-02 06:16:16.421194 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2019-11-02 06:16:16.421207 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2019-11-02 06:16:16.422064 MANAGEMENT: >STATE:1572696976,RESOLVE,,,,,,
2019-11-02 06:16:16.467999 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.177:12974
2019-11-02 06:16:16.468083 Socket Buffers: R=[786896->786896] S=[9216->9216]
2019-11-02 06:16:16.468103 UDP link local: (not bound)
2019-11-02 06:16:16.468119 UDP link remote: [AF_INET]xxx.xxxx.177:12974
2019-11-02 06:16:16.468153 MANAGEMENT: >STATE:1572696976,WAIT,,,,,,
2019-11-02 06:16:16.501664 MANAGEMENT: >STATE:1572696976,AUTH,,,,,,
2019-11-02 06:16:16.501761 TLS: Initial packet from [AF_INET]7xxx.xxx.xxx:12974, sid=dbb1879d e3f95606
2019-11-02 06:16:16.678944 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
2019-11-02 06:16:16.679284 VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
2019-11-02 06:16:16.806284 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2019-11-02 06:16:16.806391 [netgear] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:12974
2019-11-02 06:16:17.893406 MANAGEMENT: >STATE:1572696977,GET_CONFIG,,,,,,
2019-11-02 06:16:17.893557 SENT CONTROL [netgear]: 'PUSH_REQUEST' (status=1)
2019-11-02 06:16:17.935026 PUSH: Received control message: 'PUSH_REPLY,route 192.168.10.0 255.255.255.0,route-delay 5,redirect-gateway def1,route-gateway dhcp,ping 10,ping-restart 120'
2019-11-02 06:16:17.935215 OPTIONS IMPORT: timers and/or timeouts modified
2019-11-02 06:16:17.935246 OPTIONS IMPORT: route options modified
2019-11-02 06:16:17.935266 OPTIONS IMPORT: route-related options modified
2019-11-02 06:16:17.935436 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2019-11-02 06:16:17.935467 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-11-02 06:16:17.935492 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2019-11-02 06:16:17.935516 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-11-02 06:16:17.935946 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
2019-11-02 06:16:17.935986 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.10.0
2019-11-02 06:16:17.936224 TUN/TAP device /dev/tap0 opened
2019-11-02 06:16:23.059223 NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing
06:16:23 *Tunnelblick: **********************************************
06:16:23 *Tunnelblick: Start of output from client.up.tunnelblick.sh
WARNING: $route_vpn_gateway is empty
06:16:25 *Tunnelblick: Uing DHCP because route_vpn_gateway = '' and there tap0 has no IP configuration
06:16:25 *Tunnelblick: Did 'ipconfig set "tap0" DHCP'
06:16:25 *Tunnelblick: Configuring tap DNS via DHCP asynchronously
06:16:25 *Tunnelblick: End of output from client.up.tunnelblick.sh
06:16:25 *Tunnelblick: **********************************************
2019-11-02 06:16:25.193906 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2019-11-02 06:16:25.194014 Initialization Sequence Completed
2019-11-02 06:16:25.194078 MANAGEMENT: >STATE:1572696985,CONNECTED,SUCCESS,,xxx.xxx.xxx.177,12974,,
06:16:25 *Tunnelblick: Sleeping for 1 seconds to wait for DHCP to finish setup.
06:16:26 *Tunnelblick: Sleeping for 1 seconds to wait for DHCP to finish setup.
2019-11-02 06:16:25.410284 *Tunnelblick: Warning: DNS server address 192.168.1.1 is not a public IP address and is not being routed through the VPN.
2019-11-02 06:16:26.910352 Extracted DHCP router address: 192.168.10.1
06:16:27 *Tunnelblick: Sleeping for 1 seconds to wait for DHCP to finish setup.
06:16:28 *Tunnelblick: Sleeping for 1 seconds to wait for DHCP to finish setup.
06:16:29 *Tunnelblick: Retrieved from DHCP/BOOTP packet: name server(s) [ 192.168.10.1 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
06:16:29 *Tunnelblick: Not aggregating ServerAddresses because running on macOS 10.6 or higher
06:16:29 *Tunnelblick: Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
06:16:30 *Tunnelblick: Saved the DNS and SMB configurations so they can be restored
06:16:30 *Tunnelblick: Changed DNS ServerAddresses setting from '192.168.1.1' to '192.168.10.1'
06:16:30 *Tunnelblick: Changed DNS SearchDomains setting from '' to 'openvpn'
06:16:30 *Tunnelblick: Changed DNS DomainName setting from '' to 'openvpn'
06:16:30 *Tunnelblick: Did not change SMB NetBIOSName setting of ''
06:16:30 *Tunnelblick: Did not change SMB Workgroup setting of ''
06:16:30 *Tunnelblick: Did not change SMB WINSAddresses setting of ''
06:16:30 *Tunnelblick: DNS servers '192.168.10.1' will be used for DNS queries when the VPN is active
06:16:30 *Tunnelblick: NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
06:16:30 *Tunnelblick: Flushed the DNS cache via dscacheutil
06:16:30 *Tunnelblick: /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
06:16:31 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
06:16:31 *Tunnelblick: Notified mDNSResponderHelper that the DNS cache was flushed
06:16:31 *Tunnelblick: Setting up to monitor system configuration with process-network-changes
2019-11-02 06:16:31.738789 *Tunnelblick: This computer's apparent public IP address (xxx.xxx.xxx.214) was unchanged after the connection was made
2019-11-02 06:16:35.548986 *Tunnelblick: process-network-changes: A system configuration change was ignored
2019-11-02 06:17:27.770991 *Tunnelblick: process-network-changes: A system configuration change was ignored
2019-11-02 06:22:03.773088 *Tunnelblick: process-network-changes: A system configuration change was ignored
2019-11-02 06:22:37.725948 *Tunnelblick: process-network-changes: A system configuration change was ignored
================================================================================
Down log:
07:06:52 *Tunnelblick: **********************************************
07:06:52 *Tunnelblick: Start of output from client.down.tunnelblick.sh
07:06:52 *Tunnelblick: Cancelled monitoring system configuration changes
07:06:52 *Tunnelblick: Restored State:DNS
07:06:52 *Tunnelblick: Removed Setup:DNS
07:06:52 *Tunnelblick: Removed State:SMB
07:06:52 *Tunnelblick: Restored DNS and SMB settings
07:06:52 *Tunnelblick: Flushed the DNS cache with dscacheutil -flushcache
07:06:52 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
07:06:52 *Tunnelblick: End of output from client.down.tunnelblick.sh
07:06:52 *Tunnelblick: **********************************************
================================================================================
Previous down log:
06:15:52 *Tunnelblick: **********************************************
06:15:52 *Tunnelblick: Start of output from client.down.tunnelblick.sh
06:15:52 *Tunnelblick: Cancelled monitoring system configuration changes
06:15:52 *Tunnelblick: Restored State:DNS
06:15:52 *Tunnelblick: Removed Setup:DNS
06:15:52 *Tunnelblick: Removed State:SMB
06:15:52 *Tunnelblick: Restored DNS and SMB settings
06:15:52 *Tunnelblick: Flushed the DNS cache with dscacheutil -flushcache
06:15:53 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
06:15:53 *Tunnelblick: End of output from client.down.tunnelblick.sh
06:15:53 *Tunnelblick: **********************************************
================================================================================
Network services:
An asterisk (*) denotes that a network service is disabled.
iPad USB
iPhone USB
Wi-Fi
Bluetooth PAN
Thunderbolt Bridge
Wi-Fi Power (en0): On
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en5: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether ac
48:00:11:22 inet6 fe80::aede:48ff:fe00:1122%en5 prefixlen 64 scopeid 0x4
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (100baseTX <full-duplex>)
status: active
ap1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether f2:18:98:41:90:59
media: autoselect
status: inactive
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether f0:18:98:41:90:59
inet6 fe80::182c:e755:9cb6:3977%en0 prefixlen 64 secured scopeid 0x6
inet 192.168.1.5 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
options=400<CHANNEL_IO>
ether 02:18:98:41:90:59
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
options=400<CHANNEL_IO>
ether ce:b4:c4
8c:0c inet6 fe80::ccb4:c4ff:fede:8c0c%awdl0 prefixlen 64 scopeid 0x8
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
llw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether ce:b4:c4
8c:0c inet6 fe80::ccb4:c4ff:fede:8c0c%llw0 prefixlen 64 scopeid 0x9
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:9e:31:c6:84:01
media: autoselect <full-duplex>
status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:9e:31:c6:84:00
media: autoselect <full-duplex>
status: inactive
en3: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:9e:31:c6:84:05
media: autoselect <full-duplex>
status: inactive
en4: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:9e:31:c6:84:04
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 82:9e:31:c6:84:01
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en1 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 10 priority 0 path cost 0
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 11 priority 0 path cost 0
member: en3 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 12 priority 0 path cost 0
member: en4 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 13 priority 0 path cost 0
nd6 options=201<PERFORMNUD,DAD>
media: <unknown type>
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::6fca:f5d1:eab5:d33e%utun0 prefixlen 64 scopeid 0xf
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::29fe:c809:5520:6897%utun1 prefixlen 64 scopeid 0x10
nd6 options=201<PERFORMNUD,DAD>
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
================================================================================
Quit Log:
2019-11-01 13:52:50.947786 applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes)
2019-11-01 13:52:50.980237 shutDownTunnelblick: started.
2019-11-01 13:52:50.980564 shutDownTunnelblick: Starting cleanup.
2019-11-01 13:52:50.980818 cleanup: Entering cleanup
2019-11-01 13:52:50.981066 cleanup aborted because Tunnelblick did not finish launching
2019-11-01 13:52:50.981258 shutDownTunnelblick: Cleanup finished.
2019-11-01 13:52:50.981475 Finished shutting down Tunnelblick; allowing termination
================================================================================
Console Log:
2019-11-02 06:02:28.312211 Tunnelblick[8329] Preference 'Condo-skipWarningThatNotUsingSpecifiedOpenVPN' is TRUE, so not displaying the warning dialog.
2019-11-02 06:02:45.107980 Tunnelblick[8329] Preference 'skipWarningAboutDnsProblems' is TRUE, so not displaying the warning dialog.
2019-11-02 06:02:51.444157 Tunnelblick[8329] Preference 'skipWarningThatIPAddressDidNotChangeAfterConnection' is TRUE, so not displaying the warning dialog.
2019-11-02 06:15:53.111282 Tunnelblick[8329] Preference 'Condo-skipWarningThatNotUsingSpecifiedOpenVPN' is TRUE, so not displaying the warning dialog.
2019-11-02 06:16:25.412678 Tunnelblick[8329] Preference 'skipWarningAboutDnsProblems' is TRUE, so not displaying the warning dialog.
2019-11-02 06:16:31.739699 Tunnelblick[8329] Preference 'skipWarningThatIPAddressDidNotChangeAfterConnection' is TRUE, so not displaying the warning dialog.
2019-11-02 07:06:52.366720 Tunnelblick[8329] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-SCondo-Dtblk-SContents-SResources'
2019-11-02 07:06:52.378343 Tunnelblick[8329] Preference 'Condo-skipWarningThatNotUsingSpecifiedOpenVPN' is TRUE, so not displaying the warning dialog.