[Resolved] Error: --pull-filter cannot be used with --mode server

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
febox
OpenVpn Newbie
Posts: 5
Joined: Sun Mar 03, 2019 9:24 am

[Resolved] Error: --pull-filter cannot be used with --mode server

Post by febox » Sun Mar 03, 2019 9:31 am

Hi,

I'm trying to create an OpenVPN server on a Windows 10 laptop but I'm getting this error:

Options error: --pull-filter cannot be used with --mode server
Use --help for more information.

Why is that? There's no "pull" or "filter" inside my ovpn file:

port 3324
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1

Can someone help me please?

Thanks!

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by TinCanTech » Sun Mar 03, 2019 1:06 pm

febox wrote:
Sun Mar 03, 2019 9:31 am
There's no "pull" or "filter" inside my ovpn file:
Then that is not the file causing the error.

febox
OpenVpn Newbie
Posts: 5
Joined: Sun Mar 03, 2019 9:24 am

Re: Error: --pull-filter cannot be used with --mode server

Post by febox » Sun Mar 03, 2019 5:14 pm

How can this be possible?

If I right-click OpenVPN's tray icon, then the profile's name, then "Edit config", I get this file. If I click CONNECT, I get this error.

Also, the log file as the same name as this ovpn file.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by TinCanTech » Sun Mar 03, 2019 7:07 pm

The config file you have posted does not have --pull-filter in it so this file can not trigger this error.

febox
OpenVpn Newbie
Posts: 5
Joined: Sun Mar 03, 2019 9:24 am

Re: Error: --pull-filter cannot be used with --mode server

Post by febox » Mon Mar 04, 2019 6:14 pm

That's the reason for my post - I was even looking through the code responsible for this error. It makes no sense at all.

There's any way to debug this? As I've said before there's only 1 profile, 1 ovpn file, 1 log - all with the same name. This OVPN file IS triggering this error. For example, if I rename the OVPN file in my first post the tray icon profile name is also updated and if I click CONNECT I get the same error. Maybe there's some universal configuration that is being considered?

Already uninstalled OpenVPN (with Revo Uninstaller) and re-installed with the same results. I've also recreated all keys and certificates and the OVPN file, same thing.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by TinCanTech » Mon Mar 04, 2019 7:31 pm

If you are using the OpenVPN-GUI then make sure you are looking in the correct folder.

Either under Program Files or under your User folder.
https://community.openvpn.net/openvpn/w ... PN-GUI-New

febox
OpenVpn Newbie
Posts: 5
Joined: Sun Mar 03, 2019 9:24 am

Re: Error: --pull-filter cannot be used with --mode server

Post by febox » Mon Mar 04, 2019 8:10 pm

This is my current setup:

Folder: C:\Program Files\OpenVPN\config
Files: ca.crt, dh1024.pem, server.crt, server.key, ta.key

Folder: C:\Users\user\OpenVPN\config
Files: server.opn
Content:

Code: Select all

port 3324
proto udp
dev tun
dev-node TAP
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 9
explicit-exit-notify 1
Tray icon: Right click, CONNECT, error.

Folder: C:\Users\user\OpenVPN\log
Files: server.log
Content:

Code: Select all

Options error: --pull-filter cannot be used with --mode server
Use --help for more information.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by TinCanTech » Mon Mar 04, 2019 9:42 pm

It appears you are correct and I am wrong (again..) sorry about that :oops:

In fact, --pull-filter is added to the openvpn config by the GUI itself to counter some other issues.

For now, please try starting your server config from the command line and I'll confirm the problem and update you.

Update: https://community.openvpn.net/openvpn/t ... 164#ticket

febox
OpenVpn Newbie
Posts: 5
Joined: Sun Mar 03, 2019 9:24 am

Re: Error: --pull-filter cannot be used with --mode server

Post by febox » Fri Mar 08, 2019 5:58 pm

Thank you, it worked.

carlox97
OpenVpn Newbie
Posts: 1
Joined: Fri Mar 08, 2019 6:45 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by carlox97 » Fri Mar 08, 2019 6:47 pm

I had the same problem with a correctly configfurated server, turned out starting OpenVPN GUI with admin rights prevented this error from happening.

bigzdog
OpenVpn Newbie
Posts: 2
Joined: Thu Dec 24, 2015 3:58 am

Re: Error: --pull-filter cannot be used with --mode server

Post by bigzdog » Sun Apr 07, 2019 6:59 pm

Thanks for this. Same error here after updating to latest version

ezforumuser
OpenVpn Newbie
Posts: 1
Joined: Wed Aug 28, 2019 5:58 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by ezforumuser » Wed Aug 28, 2019 6:04 pm

TinCanTech wrote:
Mon Mar 04, 2019 9:42 pm
For now, please try starting your server config from the command line and I'll confirm the problem and update you.
Is it possible to get from you (or others?) specific instructions on how to do this (assuming it's the best way to work around the problem with --mode server)?

We have a couple of new Windows Server 2016 instances that we want to connect to our VPN (which is the commercial OpenVPN-AS)... not being Windows Server experts, we aren't sure how to do that with the OpenVPN-GUI installer for Windows Server (and commercial OpenVPN support is no help).

What we've tried thus far is installing the OpenVPN GUI download for Windows Server, putting the autologin profile in "Program Files/OpenVPN/config", starting the "OpenVPNService" Service, and setting its startup type to Automatic. That client account connects, but when the Admin account on the server signs out (of the RDP session), the connection to the VPN is dropped. Being a server, we want it connected 24/7.

We connected the VPN with command line $> openvpn --config profilename.ovpn and it will connect... but again, when the admin user disconnects it closes that Command Window and stops the connection.

Thanks for any help.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Error: --pull-filter cannot be used with --mode server

Post by TinCanTech » Wed Aug 28, 2019 7:14 pm

ezforumuser wrote:
Wed Aug 28, 2019 6:04 pm
We have a couple of new Windows Server 2016 instances that we want to connect to our VPN (which is the commercial OpenVPN-AS
OpenVPN Access Server is not Openvpn Community edition.
ezforumuser wrote:
Wed Aug 28, 2019 6:04 pm
not being Windows Server experts
That's a shame ......
ezforumuser wrote:
Wed Aug 28, 2019 6:04 pm
and commercial OpenVPN support is no help
If you are not satisfied you can contact me here: tincanteksup <at> gmail

For further help Please see:
viewtopic.php?f=30&t=22603

Post Reply