pfSense errors, errors and more errors.

Next-generation cloud-hosted OpenVPN business solution.
Post Reply
deanfourie
OpenVpn Newbie
Posts: 9
Joined: Sat Oct 02, 2021 9:28 pm

pfSense errors, errors and more errors.

Post by deanfourie » Mon Feb 21, 2022 10:13 am

So, I just get a pile of errors in pfSense. MTU, auth used inconsistently, and when using UDP i get

TLS Error: incoming packet authentication failed from [AF_INET]xxx.xxx.xxx.xxx:1194

Seems to disappear if I use TCP.

Is there a way to solve this, also how do I know my tunnel is secure?

Thanks

Code: Select all

Feb 19 23:13:03	openvpn	36832	OpenVPN 2.5.4 amd64-portbld-freebsd12.3 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jan 12 2022
Feb 19 23:13:03	openvpn	36832	library versions: OpenSSL 1.1.1l-freebsd 24 Aug 2021, LZO 2.10
Feb 19 23:13:03	openvpn	36845	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 19 23:13:03	openvpn	36845	Initializing OpenSSL support for engine 'rdrand'
Feb 19 23:13:03	openvpn	36845	WARNING: experimental option --capath /var/etc/openvpn/client1/ca
Feb 19 23:13:03	openvpn	36845	TCP/UDP: Preserving recently used remote address: [AF_INET]66.203.112.175:443
Feb 19 23:13:03	openvpn	36845	Attempting to establish TCP connection with [AF_INET]66.203.112.175:443 [nonblock]
Feb 19 23:13:03	openvpn	36845	TCP connection established with [AF_INET]66.203.112.175:443
Feb 19 23:13:03	openvpn	36845	TCPv4_CLIENT link local (bound): [AF_INET]192.168.1.2:0
Feb 19 23:13:03	openvpn	36845	TCPv4_CLIENT link remote: [AF_INET]66.203.112.175:443
Feb 19 23:13:04	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 19 23:13:04	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 19 23:13:04	openvpn	36845	[au-syd-dc1-b1.cloud.openvpn.net] Peer Connection Initiated with [AF_INET]66.203.112.175:443
Feb 19 23:13:05	openvpn	36845	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: client-ip (2.5.4)
Feb 19 23:13:05	openvpn	36845	Options error: option 'reneg-sec' cannot be used in this context ([PUSH-OPTIONS])
Feb 19 23:13:05	openvpn	36845	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:14: remote-cache-lifetime (2.5.4)
Feb 19 23:13:05	openvpn	36845	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:15: block-outside-dns (2.5.4)
Feb 19 23:13:05	openvpn	36845	WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Feb 19 23:13:05	openvpn	36845	GDG6: problem writing to routing socket: No such process (errno=3)
Feb 19 23:13:05	openvpn	36845	TUN/TAP device ovpnc1 exists previously, keep at program end
Feb 19 23:13:05	openvpn	36845	TUN/TAP device /dev/tun1 opened
Feb 19 23:13:05	openvpn	36845	/sbin/ifconfig ovpnc1 172.16.100.18 172.16.100.17 mtu 1500 netmask 255.255.255.240 up
Feb 19 23:13:05	openvpn	36845	/sbin/ifconfig ovpnc1 inet6 fd:0:0:4001::2/64 mtu 1500 up
Feb 19 23:13:06	openvpn	36845	/sbin/ifconfig ovpnc1 inet6 -ifdisabled
Feb 19 23:13:06	openvpn	36845	/usr/local/sbin/ovpn-linkup ovpnc1 1500 1626 172.16.100.18 255.255.255.240 init
Feb 19 23:13:06	openvpn	36845	add_route_ipv6(fd:0:0:4000::/50 -> fd:0:0:4001::1 metric -1) dev ovpnc1
Feb 19 23:13:06	openvpn	36845	add_route_ipv6(fd:0:0:4000::/50 -> fd:0:0:4001::1 metric -1) dev ovpnc1
Feb 19 23:13:06	openvpn	36845	ERROR: *BSD route add -inet6 command failed: external program exited with error status: 1
Feb 19 23:13:06	openvpn	36845	Initialization Sequence Completed
Feb 20 00:13:04	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 00:13:04	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 01:13:05	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 01:13:05	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 02:13:05	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 02:13:05	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 03:13:05	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 03:13:05	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 04:13:06	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 04:13:06	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 05:13:06	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 05:13:06	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 06:13:06	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 06:13:06	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 07:13:07	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 07:13:07	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 08:13:07	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 08:13:07	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 09:13:08	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 09:13:08	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 10:13:08	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 10:13:08	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 11:13:08	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 11:13:08	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 12:13:08	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 12:13:08	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 13:13:08	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 13:13:08	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 14:13:09	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 14:13:09	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 15:13:09	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 15:13:09	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 16:13:09	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 16:13:09	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 17:13:10	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 17:13:10	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 18:13:10	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 18:13:10	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 19:13:10	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 19:13:10	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 20:13:11	openvpn	36845	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 20:13:11	openvpn	36845	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 20:20:16	openvpn	28790	OpenVPN 2.5.4 amd64-portbld-freebsd12.3 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jan 12 2022
Feb 20 20:20:16	openvpn	28790	library versions: OpenSSL 1.1.1l-freebsd 24 Aug 2021, LZO 2.10
Feb 20 20:20:16	openvpn	29100	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 20 20:20:16	openvpn	29100	Initializing OpenSSL support for engine 'rdrand'
Feb 20 20:20:16	openvpn	29100	WARNING: experimental option --capath /var/etc/openvpn/client1/ca
Feb 20 20:20:22	openvpn	29100	TCP/UDP: Preserving recently used remote address: [AF_INET]173.234.106.108:443
Feb 20 20:20:22	openvpn	29100	Attempting to establish TCP connection with [AF_INET]173.234.106.108:443 [nonblock]
Feb 20 20:20:22	openvpn	29100	TCP connection established with [AF_INET]173.234.106.108:443
Feb 20 20:20:22	openvpn	29100	TCPv4_CLIENT link local (bound): [AF_INET]192.168.1.2:0
Feb 20 20:20:22	openvpn	29100	TCPv4_CLIENT link remote: [AF_INET]173.234.106.108:443
Feb 20 20:20:23	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 20:20:23	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 20:20:23	openvpn	29100	[au-syd-dc2-b1.cloud.openvpn.net] Peer Connection Initiated with [AF_INET]173.234.106.108:443
Feb 20 20:20:24	openvpn	29100	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: client-ip (2.5.4)
Feb 20 20:20:24	openvpn	29100	Options error: option 'reneg-sec' cannot be used in this context ([PUSH-OPTIONS])
Feb 20 20:20:24	openvpn	29100	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:14: remote-cache-lifetime (2.5.4)
Feb 20 20:20:24	openvpn	29100	Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:15: block-outside-dns (2.5.4)
Feb 20 20:20:24	openvpn	29100	WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Feb 20 20:20:24	openvpn	29100	GDG6: problem writing to routing socket: No such process (errno=3)
Feb 20 20:20:24	openvpn	29100	TUN/TAP device ovpnc1 exists previously, keep at program end
Feb 20 20:20:24	openvpn	29100	TUN/TAP device /dev/tun1 opened
Feb 20 20:20:24	openvpn	29100	ioctl(TUNSIFMODE): Device busy (errno=16)
Feb 20 20:20:24	openvpn	29100	/sbin/ifconfig ovpnc1 172.16.100.18 172.16.100.17 mtu 1500 netmask 255.255.255.240 up
Feb 20 20:20:24	openvpn	29100	/sbin/ifconfig ovpnc1 inet6 fd:0:0:4001::2/64 mtu 1500 up
Feb 20 20:20:24	openvpn	29100	/sbin/ifconfig ovpnc1 inet6 -ifdisabled
Feb 20 20:20:24	openvpn	29100	/usr/local/sbin/ovpn-linkup ovpnc1 1500 1626 172.16.100.18 255.255.255.240 init
Feb 20 20:20:24	openvpn	29100	add_route_ipv6(fd:0:0:4000::/50 -> fd:0:0:4001::1 metric -1) dev ovpnc1
Feb 20 20:20:24	openvpn	29100	add_route_ipv6(fd:0:0:4000::/50 -> fd:0:0:4001::1 metric -1) dev ovpnc1
Feb 20 20:20:24	openvpn	29100	ERROR: *BSD route add -inet6 command failed: external program exited with error status: 1
Feb 20 20:20:24	openvpn	29100	Initialization Sequence Completed
Feb 20 21:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 21:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 22:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 22:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 20 23:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 20 23:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 00:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 00:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 01:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 01:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 02:20:24	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 02:20:24	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 03:20:25	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 03:20:25	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 04:20:25	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 04:20:25	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 05:20:25	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 05:20:25	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 06:20:26	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 06:20:26	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 07:20:26	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 07:20:26	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 08:20:27	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 08:20:27	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 09:20:27	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 09:20:27	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 10:20:27	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 10:20:27	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 11:20:28	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 11:20:28	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 12:20:28	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 12:20:28	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 13:20:28	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 13:20:28	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 14:20:29	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 14:20:29	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 15:20:29	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 15:20:29	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 16:20:29	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 16:20:29	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 17:20:30	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 17:20:30	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 18:20:30	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 18:20:30	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 19:20:31	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 19:20:31	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 20:20:32	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 20:20:32	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 21:20:32	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 21:20:32	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Feb 21 22:20:32	openvpn	29100	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1571'
Feb 21 22:20:32	openvpn	29100	WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'

Post Reply