Connected but not connected :?

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
Radzi
OpenVpn Newbie
Posts: 2
Joined: Mon Nov 19, 2012 2:37 pm

Connected but not connected :?

Post by Radzi » Mon Nov 19, 2012 2:45 pm

I'm a complete newbie about vps and vpn.
I tried to install OpenVpn on my Ubuntu 11.04 VPS using this guide
http://geeksandtweaks.com/wp/how-to-cre ... ntu-12-04/
(Yeah it says 12-04 but i tried it and it worked)

So after the guide, i tried to connect on it, its successful.

Code: Select all

Mon Nov 19 22:43:28 2012 OpenVPN 2.3_rc1 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Nov  6 2012
Mon Nov 19 22:43:28 2012 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Nov 19 22:43:28 2012 Need hold release from management interface, waiting...
Mon Nov 19 22:43:29 2012 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Nov 19 22:43:29 2012 MANAGEMENT: CMD 'state on'
Mon Nov 19 22:43:29 2012 MANAGEMENT: CMD 'log all on'
Mon Nov 19 22:43:29 2012 MANAGEMENT: CMD 'hold off'
Mon Nov 19 22:43:29 2012 MANAGEMENT: CMD 'hold release'
Mon Nov 19 22:43:29 2012 MANAGEMENT: CMD 'proxy NONE  '
Mon Nov 19 22:43:30 2012 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Nov 19 22:43:30 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Nov 19 22:43:30 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Nov 19 22:43:30 2012 UDPv4 link local: [undef]
Mon Nov 19 22:43:30 2012 UDPv4 link remote: [AF_INET]37.xxx.xxx.xxx:1194
Mon Nov 19 22:43:30 2012 MANAGEMENT: >STATE:1353336210,WAIT,,,
Mon Nov 19 22:43:30 2012 MANAGEMENT: >STATE:1353336210,AUTH,,,
Mon Nov 19 22:43:30 2012 TLS: Initial packet from [AF_INET]37.xxx.xxx.xxx:1194, sid=f23bb636 e68f8d45
Mon Nov 19 22:43:32 2012 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, CN=OpenVPN, emailAddress=me@myhost.mydomain
Mon Nov 19 22:43:32 2012 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, CN=server, emailAddress=me@myhost.mydomain
Mon Nov 19 22:43:46 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 19 22:43:46 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 19 22:43:46 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 19 22:43:46 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 19 22:43:46 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Nov 19 22:43:46 2012 [server] Peer Connection Initiated with [AF_INET]37.xxx.xxx.xxx:1194
Mon Nov 19 22:43:47 2012 MANAGEMENT: >STATE:1353336227,GET_CONFIG,,,
Mon Nov 19 22:43:48 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Nov 19 22:43:49 2012 PUSH: Received control message: 'PUSH_REPLY,.redirect-gateway def1.,.dhcp-option DNS 8.8.8.8.,.dhcp-option DNS 8.8.4.4.,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.6 10.8.0.5'
Mon Nov 19 22:43:49 2012 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:1: .redirect-gateway (2.3_rc1)
Mon Nov 19 22:43:49 2012 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:2: .dhcp-option (2.3_rc1)
Mon Nov 19 22:43:49 2012 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: .dhcp-option (2.3_rc1)
Mon Nov 19 22:43:49 2012 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 19 22:43:49 2012 OPTIONS IMPORT: route options modified
Mon Nov 19 22:43:49 2012 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 19 22:43:49 2012 MANAGEMENT: >STATE:1353336229,ASSIGN_IP,,10.8.0.6,
Mon Nov 19 22:43:49 2012 open_tun, tt->ipv6=0
Mon Nov 19 22:43:49 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{3B5F730E-E6DB-4506-8380-E8F3DA5EF264}.tap
Mon Nov 19 22:43:49 2012 TAP-Windows Driver Version 9.9 
Mon Nov 19 22:43:49 2012 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {3B5F730E-E6DB-4506-8380-E8F3DA5EF264} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Nov 19 22:43:49 2012 Successful ARP Flush on interface [25] {3B5F730E-E6DB-4506-8380-E8F3DA5EF264}
Mon Nov 19 22:43:55 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Mon Nov 19 22:43:55 2012 MANAGEMENT: >STATE:1353336235,ADD_ROUTES,,,
Mon Nov 19 22:43:55 2012 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Mon Nov 19 22:43:55 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Nov 19 22:43:55 2012 Route addition via IPAPI succeeded [adaptive]
Mon Nov 19 22:43:55 2012 Initialization Sequence Completed
Mon Nov 19 22:43:55 2012 MANAGEMENT: >STATE:1353336235,CONNECTED,SUCCESS,10.8.0.6,37.xxx.xxx.xxx
But my ip didn't change :?

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Connected but not connected :?

Post by maikcat » Sun Nov 25, 2012 11:47 am

please post your configs client/server
and try to use openvpn version 2.2 on windows for testing...

Michael.
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

Radzi
OpenVpn Newbie
Posts: 2
Joined: Mon Nov 19, 2012 2:37 pm

Re: Connected but not connected :?

Post by Radzi » Sun Nov 25, 2012 1:02 pm

Code: Select all

dev tun
client
proto udp
remote YOUR.VPS.IP 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3

Code: Select all

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
push “redirect-gateway def1″
#set the dns servers
push “dhcp-option DNS 8.8.8.8″
push “dhcp-option DNS 8.8.4.4″
log-append /var/log/openvpn
comp-lzo
You probably mean this right ? im a total newbie.

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Connected but not connected :?

Post by maikcat » Mon Nov 26, 2012 6:40 pm

your configs look ok,

is ip forwarding on your linux server enabled?

can you post the output of

iptables -L -v -t nat

from your linux server?

also are you running openvpn with admin rights on win 7?

Michael.
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

mybeshoo
OpenVpn Newbie
Posts: 11
Joined: Fri Oct 12, 2012 12:57 pm

Re: Connected but not connected :?

Post by mybeshoo » Wed Dec 26, 2012 3:22 am

I have same problem
and same settings and this is the out put :

root@server [/etc/openvpn]# iptables -L -v -t nat
Chain PREROUTING (policy ACCEPT 87326 packets, 5264K bytes)
pkts bytes target prot opt in out source destination

Chain POSTROUTING (policy ACCEPT 48759 packets, 3107K bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- any eth1 anywhere anywhere
0 0 MASQUERADE all -- any eth1 anywhere anywhere

Chain OUTPUT (policy ACCEPT 35644 packets, 2276K bytes)
pkts bytes target prot opt in out source destination
root@server [/etc/openvpn]#


Please advice

Post Reply