WARNING: 'tun-mtu' is used inconsistently

[NewBiee]

My log:

Tue May 31 11:55:01 2011 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 12 2009
Tue May 31 11:55:01 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue May 31 11:55:01 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue May 31 11:55:01 2011 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Tue May 31 11:55:01 2011 LZO compression initialized
Tue May 31 11:55:01 2011 UDPv4 link local (bound): [undef]:53
Tue May 31 11:55:01 2011 UDPv4 link remote: 64.xxx.xxx.xxx:9200
Tue May 31 11:55:03 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 11:55:08 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 11:55:08 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 11:55:08 2011 [server] Peer Connection Initiated with 64.31.36.42:9200
Tue May 31 11:55:10 2011 TAP-WIN32 device [Local Area Connection 14] opened: \\.\Global\{8A116ACB-5D5C-4E49-895D-9F07C49B491F}.tap
Tue May 31 11:55:10 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.9.0.6/255.255.255.252 on interface {8A116ACB-5D5C-4E49-895D-9F07C49B491F} [DHCP-serv: 10.9.0.5, lease-time: 31536000]
Tue May 31 11:55:10 2011 Successful ARP Flush on interface [3] {8A116ACB-5D5C-4E49-895D-9F07C49B491F}
Tue May 31 11:55:16 2011 Initialization Sequence Completed
Tue May 31 12:17:00 2011 [server] Inactivity timeout (--ping-restart), restarting
Tue May 31 12:17:00 2011 SIGUSR1[soft,ping-restart] received, process restarting
Tue May 31 12:17:02 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue May 31 12:17:02 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue May 31 12:17:02 2011 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Tue May 31 12:17:02 2011 Re-using SSL/TLS context
Tue May 31 12:17:02 2011 LZO compression initialized
Tue May 31 12:17:02 2011 UDPv4 link local (bound): [undef]:53
Tue May 31 12:17:02 2011 UDPv4 link remote: 64.31.36.42:9200
Tue May 31 12:17:03 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 12:17:08 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 12:17:08 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 12:17:08 2011 [server] Peer Connection Initiated with 64.31.36.42:9200
Tue May 31 12:17:10 2011 Preserving previous TUN/TAP instance: Local Area Connection 14
Tue May 31 12:17:10 2011 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
Tue May 31 12:17:12 2011 TAP-WIN32 device [Local Area Connection 14] opened: \\.\Global\{8A116ACB-5D5C-4E49-895D-9F07C49B491F}.tap
Tue May 31 12:17:12 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.9.0.14/255.255.255.252 on interface {8A116ACB-5D5C-4E49-895D-9F07C49B491F} [DHCP-serv: 10.9.0.13, lease-time: 31536000]
Tue May 31 12:17:12 2011 Successful ARP Flush on interface [3] {8A116ACB-5D5C-4E49-895D-9F07C49B491F}
Tue May 31 12:17:14 2011 Initialization Sequence Completed
Tue May 31 13:17:09 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 13:17:18 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 13:17:18 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 14:17:19 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 14:17:23 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 14:17:23 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 15:17:23 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 15:17:27 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 15:17:27 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 16:17:29 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 16:17:33 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 16:17:33 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 17:17:34 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 17:17:39 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 17:17:39 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 18:17:39 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 18:17:48 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 18:17:48 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 19:17:53 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 19:17:58 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 19:17:58 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Tue May 31 20:18:01 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 31 20:18:20 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Tue May 31 20:18:20 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'


My udp.conf

local xxx.xxx.xxx
port 9200
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 4.2.2.1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3

[janjust]

this warning is there for a reason: remove

Code: Select all

tun-mtu-extra 32

from your client config and reconnect.

[NewBiee]

Thanks for your reply