client->server: ping ok, server->client: ping fails +Plesk

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

client->server: ping ok, server->client: ping fails +Plesk

Post by Kulturmensch » Tue Feb 16, 2016 8:39 am

Hi,
I´m trying to setup an VPN using the HowTo´s of this site. It is not really working up to now and I notice some strange effects as follows:

Environment:
Windows 10(64bit) PC <-> Router (Speedport/VDSL25) <-> Rootserver (Ubuntu 14.04.3 LTS‬)

Status:
VPN is working, Connection works (green sign)

Ping:
Ping from PC to the virtual Server IP (10.8.0.1) works.
Ping from PC to the virtual PC IP (10.8.0.2) works
Ping from Server to te virtual PC IP fails
Ping from Server to the virtual Server IP works

Internet:
Internetaccess from PC is only possible to some sites i.e. to https://de.wikipedia.org/wiki/, https://www.linkedin.com/ and my own domains.
Internet is not possible to http://www.duden.de, geocaching.com etc.

IP:
If OpenVpn is in operation I cannot get access to sites checking my IP (i.e. http://www.cogipas.com/whats-my-ip/)
but using the service by http://www.meineip.de/ the following happens:
Without VPN this site shows my IP4 address, with VPN it shows a IP6 address.

As I suppose it will be an iptables/routing issue of my root server here is what comes up using route - v on my server:

Kernel-IP-Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
default 85.214.64.1 0.0.0.0 UG 0 0 0 eth0
10.8.0.0 * 255.255.255.0 U 0 0 0 tun0
85.214.64.1 * 255.255.255.255 UH 0 0 0 eth0

Any idea/help?
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Tue Feb 16, 2016 10:46 am

Kulturmensch wrote:Ping from Server to te virtual PC IP fails
Check the windows firewall to allow incoming VPN packets on 10.8.0.0/24
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 7:29 am

Thanks for your reply. I tried it without firewall but the problem remains. Any further idea?
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Wed Feb 17, 2016 9:48 am

Please see the Forum rules (top of page)
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 10:29 am

Client config
client
tun-mtu 1440
fragment 1400
mssfix 1400
dev tun
proto udp
port 1194
remote 85.214.80.189
resolv-retry infinite
nobind
persist-key
persist-tun
redirect-gateway def1
ca c:/Programme/OpenVPN/config/keys/ca.crt
cert c:/Programme/OpenVPN/config/keys/tenckhoff.crt
key c:/Programme/OpenVPN/config/keys/tenckhoff.key
comp-lzo
verb 4

Client LOGfile
Wed Feb 17 11:23:29 2016 us=466574 Current Parameter Settings:
Wed Feb 17 11:23:29 2016 us=467576 config = 'standard.ovpn'
Wed Feb 17 11:23:29 2016 us=467576 mode = 0
Wed Feb 17 11:23:29 2016 us=467576 show_ciphers = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 show_digests = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 show_engines = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 genkey = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 key_pass_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 show_tls_ciphers = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 Connection profiles [default]:
Wed Feb 17 11:23:29 2016 us=467576 proto = udp
Wed Feb 17 11:23:29 2016 us=467576 local = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 local_port = 0
Wed Feb 17 11:23:29 2016 us=467576 remote = '85.214.80.189'
Wed Feb 17 11:23:29 2016 us=467576 remote_port = 1194
Wed Feb 17 11:23:29 2016 us=467576 remote_float = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 bind_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 bind_local = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 connect_retry_seconds = 5
Wed Feb 17 11:23:29 2016 us=467576 connect_timeout = 10
Wed Feb 17 11:23:29 2016 us=467576 connect_retry_max = 0
Wed Feb 17 11:23:29 2016 us=467576 socks_proxy_server = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 socks_proxy_port = 0
Wed Feb 17 11:23:29 2016 us=467576 socks_proxy_retry = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tun_mtu = 1440
Wed Feb 17 11:23:29 2016 us=467576 tun_mtu_defined = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 link_mtu = 1500
Wed Feb 17 11:23:29 2016 us=467576 link_mtu_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tun_mtu_extra = 0
Wed Feb 17 11:23:29 2016 us=467576 tun_mtu_extra_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 mtu_discover_type = -1
Wed Feb 17 11:23:29 2016 us=467576 fragment = 1400
Wed Feb 17 11:23:29 2016 us=467576 mssfix = 1400
Wed Feb 17 11:23:29 2016 us=467576 explicit_exit_notification = 0
Wed Feb 17 11:23:29 2016 us=467576 Connection profiles END
Wed Feb 17 11:23:29 2016 us=467576 remote_random = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 ipchange = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 dev = 'tun'
Wed Feb 17 11:23:29 2016 us=467576 dev_type = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 dev_node = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 lladdr = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 topology = 1
Wed Feb 17 11:23:29 2016 us=467576 tun_ipv6 = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_local = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_remote_netmask = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_noexec = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_nowarn = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_ipv6_local = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_ipv6_netbits = 0
Wed Feb 17 11:23:29 2016 us=467576 ifconfig_ipv6_remote = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 shaper = 0
Wed Feb 17 11:23:29 2016 us=467576 mtu_test = 0
Wed Feb 17 11:23:29 2016 us=467576 mlock = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 keepalive_ping = 0
Wed Feb 17 11:23:29 2016 us=467576 keepalive_timeout = 0
Wed Feb 17 11:23:29 2016 us=467576 inactivity_timeout = 0
Wed Feb 17 11:23:29 2016 us=467576 ping_send_timeout = 0
Wed Feb 17 11:23:29 2016 us=467576 ping_rec_timeout = 0
Wed Feb 17 11:23:29 2016 us=467576 ping_rec_timeout_action = 0
Wed Feb 17 11:23:29 2016 us=467576 ping_timer_remote = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 remap_sigusr1 = 0
Wed Feb 17 11:23:29 2016 us=467576 persist_tun = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 persist_local_ip = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 persist_remote_ip = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 persist_key = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 passtos = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 resolve_retry_seconds = 1000000000
Wed Feb 17 11:23:29 2016 us=467576 username = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 groupname = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 chroot_dir = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 cd_dir = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 writepid = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 up_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 down_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 down_pre = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 up_restart = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 up_delay = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 daemon = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 inetd = 0
Wed Feb 17 11:23:29 2016 us=467576 log = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 suppress_timestamps = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 nice = 0
Wed Feb 17 11:23:29 2016 us=467576 verbosity = 4
Wed Feb 17 11:23:29 2016 us=467576 mute = 0
Wed Feb 17 11:23:29 2016 us=467576 gremlin = 0
Wed Feb 17 11:23:29 2016 us=467576 status_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 status_file_version = 1
Wed Feb 17 11:23:29 2016 us=467576 status_file_update_freq = 60
Wed Feb 17 11:23:29 2016 us=467576 occ = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 rcvbuf = 0
Wed Feb 17 11:23:29 2016 us=467576 sndbuf = 0
Wed Feb 17 11:23:29 2016 us=467576 sockflags = 0
Wed Feb 17 11:23:29 2016 us=467576 fast_io = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 lzo = 7
Wed Feb 17 11:23:29 2016 us=467576 route_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 route_default_gateway = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 route_default_metric = 0
Wed Feb 17 11:23:29 2016 us=467576 route_noexec = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 route_delay = 5
Wed Feb 17 11:23:29 2016 us=467576 route_delay_window = 30
Wed Feb 17 11:23:29 2016 us=467576 route_delay_defined = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 route_nopull = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 route_gateway_via_dhcp = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 max_routes = 100
Wed Feb 17 11:23:29 2016 us=467576 allow_pull_fqdn = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 [redirect_default_gateway local=0]
Wed Feb 17 11:23:29 2016 us=467576 management_addr = '127.0.0.1'
Wed Feb 17 11:23:29 2016 us=467576 management_port = 25340
Wed Feb 17 11:23:29 2016 us=467576 management_user_pass = 'stdin'
Wed Feb 17 11:23:29 2016 us=467576 management_log_history_cache = 250
Wed Feb 17 11:23:29 2016 us=467576 management_echo_buffer_size = 100
Wed Feb 17 11:23:29 2016 us=467576 management_write_peer_info_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 management_client_user = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 management_client_group = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 management_flags = 6
Wed Feb 17 11:23:29 2016 us=467576 shared_secret_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 key_direction = 0
Wed Feb 17 11:23:29 2016 us=467576 ciphername_defined = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 ciphername = 'BF-CBC'
Wed Feb 17 11:23:29 2016 us=467576 authname_defined = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 authname = 'SHA1'
Wed Feb 17 11:23:29 2016 us=467576 prng_hash = 'SHA1'
Wed Feb 17 11:23:29 2016 us=467576 prng_nonce_secret_len = 16
Wed Feb 17 11:23:29 2016 us=467576 keysize = 0
Wed Feb 17 11:23:29 2016 us=467576 engine = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 replay = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 mute_replay_warnings = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 replay_window = 64
Wed Feb 17 11:23:29 2016 us=467576 replay_time = 15
Wed Feb 17 11:23:29 2016 us=467576 packet_id_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 use_iv = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 test_crypto = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tls_server = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tls_client = ENABLED
Wed Feb 17 11:23:29 2016 us=467576 key_method = 2
Wed Feb 17 11:23:29 2016 us=467576 ca_file = 'c:/Programme/OpenVPN/config/keys/ca.crt'
Wed Feb 17 11:23:29 2016 us=467576 ca_path = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 dh_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 cert_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.crt'
Wed Feb 17 11:23:29 2016 us=467576 extra_certs_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 priv_key_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.key'
Wed Feb 17 11:23:29 2016 us=467576 pkcs12_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 cryptoapi_cert = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 cipher_list = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 tls_verify = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 tls_export_cert = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 verify_x509_type = 0
Wed Feb 17 11:23:29 2016 us=467576 verify_x509_name = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 crl_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 ns_cert_type = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_ku[i] = 0
Wed Feb 17 11:23:29 2016 us=467576 remote_cert_eku = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 ssl_flags = 0
Wed Feb 17 11:23:29 2016 us=467576 tls_timeout = 2
Wed Feb 17 11:23:29 2016 us=467576 renegotiate_bytes = 0
Wed Feb 17 11:23:29 2016 us=467576 renegotiate_packets = 0
Wed Feb 17 11:23:29 2016 us=467576 renegotiate_seconds = 3600
Wed Feb 17 11:23:29 2016 us=467576 handshake_window = 60
Wed Feb 17 11:23:29 2016 us=467576 transition_window = 3600
Wed Feb 17 11:23:29 2016 us=467576 single_session = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 push_peer_info = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tls_exit = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 tls_auth_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_protected_authentication = DISABLED
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=467576 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_private_mode = 00000000
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_cert_private = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_pin_cache_period = -1
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_id = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 pkcs11_id_management = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 server_network = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 server_netmask = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 server_network_ipv6 = ::
Wed Feb 17 11:23:29 2016 us=468579 server_netbits_ipv6 = 0
Wed Feb 17 11:23:29 2016 us=468579 server_bridge_ip = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 server_bridge_netmask = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 server_bridge_pool_start = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 server_bridge_pool_end = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_start = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_end = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_netmask = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_pool_persist_refresh_freq = 600
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_ipv6_pool_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_ipv6_pool_base = ::
Wed Feb 17 11:23:29 2016 us=468579 ifconfig_ipv6_pool_netbits = 0
Wed Feb 17 11:23:29 2016 us=468579 n_bcast_buf = 256
Wed Feb 17 11:23:29 2016 us=468579 tcp_queue_limit = 64
Wed Feb 17 11:23:29 2016 us=468579 real_hash_size = 256
Wed Feb 17 11:23:29 2016 us=468579 virtual_hash_size = 256
Wed Feb 17 11:23:29 2016 us=468579 client_connect_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 learn_address_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 client_disconnect_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 client_config_dir = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 ccd_exclusive = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 tmp_dir = 'C:\Users\Tenck\AppData\Local\Temp\'
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_local = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_remote_netmask = 0.0.0.0
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_ipv6_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_ipv6_local = ::/0
Wed Feb 17 11:23:29 2016 us=468579 push_ifconfig_ipv6_remote = ::
Wed Feb 17 11:23:29 2016 us=468579 enable_c2c = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 duplicate_cn = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 cf_max = 0
Wed Feb 17 11:23:29 2016 us=468579 cf_per = 0
Wed Feb 17 11:23:29 2016 us=468579 max_clients = 1024
Wed Feb 17 11:23:29 2016 us=468579 max_routes_per_client = 256
Wed Feb 17 11:23:29 2016 us=468579 auth_user_pass_verify_script = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 auth_user_pass_verify_script_via_file = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 client = ENABLED
Wed Feb 17 11:23:29 2016 us=468579 pull = ENABLED
Wed Feb 17 11:23:29 2016 us=468579 auth_user_pass_file = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 show_net_up = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 route_method = 0
Wed Feb 17 11:23:29 2016 us=468579 block_outside_dns = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 ip_win32_defined = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 ip_win32_type = 3
Wed Feb 17 11:23:29 2016 us=468579 dhcp_masq_offset = 0
Wed Feb 17 11:23:29 2016 us=468579 dhcp_lease_time = 31536000
Wed Feb 17 11:23:29 2016 us=468579 tap_sleep = 0
Wed Feb 17 11:23:29 2016 us=468579 dhcp_options = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 dhcp_renew = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 dhcp_pre_release = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 dhcp_release = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 domain = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 netbios_scope = '[UNDEF]'
Wed Feb 17 11:23:29 2016 us=468579 netbios_node_type = 0
Wed Feb 17 11:23:29 2016 us=468579 disable_nbt = DISABLED
Wed Feb 17 11:23:29 2016 us=468579 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan 4 2016
Wed Feb 17 11:23:29 2016 us=468579 Windows version 6.2 (Windows 8 or greater)
Wed Feb 17 11:23:29 2016 us=468579 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Wed Feb 17 11:23:29 2016 us=468579 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Feb 17 11:23:29 2016 us=468579 Need hold release from management interface, waiting...
Wed Feb 17 11:23:29 2016 us=961041 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Feb 17 11:23:30 2016 us=62404 MANAGEMENT: CMD 'state on'
Wed Feb 17 11:23:30 2016 us=62404 MANAGEMENT: CMD 'log all on'
Wed Feb 17 11:23:30 2016 us=119187 MANAGEMENT: CMD 'hold off'
Wed Feb 17 11:23:30 2016 us=120189 MANAGEMENT: CMD 'hold release'
Wed Feb 17 11:23:30 2016 us=120189 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 17 11:23:30 2016 us=177381 LZO compression initialized
Wed Feb 17 11:23:30 2016 us=177381 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1440)
Wed Feb 17 11:23:30 2016 us=177381 Control Channel MTU parms [ L:1486 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Wed Feb 17 11:23:30 2016 us=177381 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Feb 17 11:23:30 2016 us=177381 Data Channel MTU parms [ L:1486 D:1400 EF:46 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Feb 17 11:23:30 2016 us=177381 Fragmentation MTU parms [ L:1486 D:1400 EF:45 EB:143 ET:1 EL:3 AF:3/1 ]
Wed Feb 17 11:23:30 2016 us=177381 Local Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 11:23:30 2016 us=177381 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 11:23:30 2016 us=177381 Local Options hash (VER=V4): 'f844a4b1'
Wed Feb 17 11:23:30 2016 us=177381 Expected Remote Options hash (VER=V4): 'f20b6933'
Wed Feb 17 11:23:30 2016 us=177381 UDPv4 link local: [undef]
Wed Feb 17 11:23:30 2016 us=177381 UDPv4 link remote: [AF_INET]85.214.80.189:1194
Wed Feb 17 11:23:30 2016 us=177381 MANAGEMENT: >STATE:1455704610,WAIT,,,
Wed Feb 17 11:23:30 2016 us=213552 MANAGEMENT: >STATE:1455704610,AUTH,,,
Wed Feb 17 11:23:30 2016 us=213552 TLS: Initial packet from [AF_INET]85.214.80.189:1194, sid=98c6a20b 5b8d1594
Wed Feb 17 11:23:30 2016 us=482812 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 11:23:30 2016 us=482812 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 11:23:30 2016 us=676661 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 11:23:30 2016 us=676661 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 11:23:30 2016 us=676661 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 11:23:30 2016 us=676661 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 11:23:30 2016 us=676661 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 11:23:30 2016 us=676661 [h2384168.stratoserver.net] Peer Connection Initiated with [AF_INET]85.214.80.189:1194
Wed Feb 17 11:23:31 2016 us=927465 MANAGEMENT: >STATE:1455704611,GET_CONFIG,,,
Wed Feb 17 11:23:33 2016 us=177996 SENT CONTROL [h2384168.stratoserver.net]: 'PUSH_REQUEST' (status=1)
Wed Feb 17 11:23:33 2016 us=214118 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Wed Feb 17 11:23:33 2016 us=214118 OPTIONS IMPORT: timers and/or timeouts modified
Wed Feb 17 11:23:33 2016 us=214118 OPTIONS IMPORT: --ifconfig/up options modified
Wed Feb 17 11:23:33 2016 us=214118 OPTIONS IMPORT: route-related options modified
Wed Feb 17 11:23:33 2016 us=215122 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=2 HWADDR=2c:56:dc:48:38:08
Wed Feb 17 11:23:33 2016 us=219102 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 17 11:23:33 2016 us=219102 MANAGEMENT: >STATE:1455704613,ASSIGN_IP,,10.8.0.2,
Wed Feb 17 11:23:33 2016 us=219102 open_tun, tt->ipv6=0
Wed Feb 17 11:23:33 2016 us=219102 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{E48B17FB-E758-4B55-959F-15BBC82C69D1}.tap
Wed Feb 17 11:23:33 2016 us=219102 TAP-Windows Driver Version 9.9
Wed Feb 17 11:23:33 2016 us=219102 TAP-Windows MTU=1500
Wed Feb 17 11:23:33 2016 us=220105 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed Feb 17 11:23:33 2016 us=220105 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {E48B17FB-E758-4B55-959F-15BBC82C69D1} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Feb 17 11:23:33 2016 us=220105 Successful ARP Flush on interface [21] {E48B17FB-E758-4B55-959F-15BBC82C69D1}
Wed Feb 17 11:23:38 2016 us=615483 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Feb 17 11:23:38 2016 us=615483 C:\Windows\system32\route.exe ADD 85.214.80.189 MASK 255.255.255.255 192.168.2.1
Wed Feb 17 11:23:38 2016 us=615985 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Wed Feb 17 11:23:38 2016 us=615985 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 11:23:38 2016 us=615985 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 11:23:38 2016 us=616959 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 11:23:38 2016 us=616959 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 11:23:38 2016 us=616959 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 11:23:38 2016 us=617990 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 11:23:38 2016 us=617990 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 11:23:38 2016 us=617990 Initialization Sequence Completed
Wed Feb 17 11:23:38 2016 us=617990 MANAGEMENT: >STATE:1455704618,CONNECTED,SUCCESS,10.8.0.2,85.214.80.189


Server config
tun-mtu 1440
fragment 1400
mssfix 1400
port 1194
proto udp
dev tun0
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key # This file should be kept secret
dh ./easy-rsa2/keys/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
duplicate-cn
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
#Google DNS
#push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option DNS 8.8.4.4"
verb 4

Server Logfile
Wed Feb 17 11:25:50 2016 us=799971 MULTI: multi_create_instance called
Wed Feb 17 11:25:50 2016 us=800085 217.248.26.35:57568 Re-using SSL/TLS context
Wed Feb 17 11:25:50 2016 us=800125 217.248.26.35:57568 LZO compression initialized
Wed Feb 17 11:25:50 2016 us=800141 217.248.26.35:57568 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1440)
Wed Feb 17 11:25:50 2016 us=800269 217.248.26.35:57568 Control Channel MTU parms [ L:1486 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 17 11:25:50 2016 us=800353 217.248.26.35:57568 Data Channel MTU parms [ L:1486 D:1400 EF:46 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 17 11:25:50 2016 us=800369 217.248.26.35:57568 Fragmentation MTU parms [ L:1486 D:1400 EF:45 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Feb 17 11:25:50 2016 us=800411 217.248.26.35:57568 Local Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 11:25:50 2016 us=800423 217.248.26.35:57568 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 11:25:50 2016 us=800448 217.248.26.35:57568 Local Options hash (VER=V4): 'f20b6933'
Wed Feb 17 11:25:50 2016 us=800469 217.248.26.35:57568 Expected Remote Options hash (VER=V4): 'f844a4b1'
Wed Feb 17 11:25:50 2016 us=800507 217.248.26.35:57568 TLS: Initial packet from [AF_INET]217.248.26.35:57568, sid=a84108bd 054c90ee
Wed Feb 17 11:25:51 2016 us=206252 217.248.26.35:57568 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 11:25:51 2016 us=206500 217.248.26.35:57568 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=tenckhoff, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 11:25:51 2016 us=250970 217.248.26.35:57568 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 11:25:51 2016 us=251031 217.248.26.35:57568 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 11:25:51 2016 us=251089 217.248.26.35:57568 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 11:25:51 2016 us=251103 217.248.26.35:57568 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 11:25:51 2016 us=285688 217.248.26.35:57568 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 11:25:51 2016 us=285722 217.248.26.35:57568 [tenckhoff] Peer Connection Initiated with [AF_INET]217.248.26.35:57568
Wed Feb 17 11:25:51 2016 us=285749 tenckhoff/217.248.26.35:57568 MULTI_sva: pool returned IPv4=10.8.0.3, IPv6=(Not enabled)
Wed Feb 17 11:25:51 2016 us=285794 tenckhoff/217.248.26.35:57568 MULTI: Learn: 10.8.0.3 -> tenckhoff/217.248.26.35:57568
Wed Feb 17 11:25:51 2016 us=285810 tenckhoff/217.248.26.35:57568 MULTI: primary virtual IP for tenckhoff/217.248.26.35:57568: 10.8.0.3
Wed Feb 17 11:25:53 2016 us=317851 tenckhoff/217.248.26.35:57568 PUSH: Received control message: 'PUSH_REQUEST'
Wed Feb 17 11:25:53 2016 us=317939 tenckhoff/217.248.26.35:57568 send_push_reply(): safe_cap=940
Wed Feb 17 11:25:53 2016 us=318023 tenckhoff/217.248.26.35:57568 SENT CONTROL [tenckhoff]: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0' (status=1)
Wed Feb 17 11:25:53 2016 us=371650 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=372613 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=377617 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=382611 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=406626 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=406718 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=406783 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=407599 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [::], packet dropped
Wed Feb 17 11:25:53 2016 us=407664 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=408591 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=430593 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=431590 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=431667 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=432590 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=432655 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=433590 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=433654 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=434588 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=434652 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=435576 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=466681 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=490596 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=557555 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=601524 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=689479 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=740460 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=766421 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=783408 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=791409 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=816395 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=817396 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=817461 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=842394 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=842465 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=843383 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=843451 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=844379 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=844443 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=845377 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=845441 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=846386 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=846450 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=846512 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=868367 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=876377 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:53 2016 us=907346 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=197295 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=197422 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=197500 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=382195 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=408093 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=408167 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=409182 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=409350 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=607120 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:54 2016 us=908961 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=18877 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=19010 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=19764 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=395690 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=395855 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=397567 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=398568 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=406593 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=407565 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=427567 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=606531 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=806393 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=806460 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=807356 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:55 2016 us=807412 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=232221 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=232304 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=233142 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=233200 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=234135 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=234191 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=384092 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=385058 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=385115 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=410066 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=429052 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=642991 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=643059 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=643926 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=643982 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=644925 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=644981 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=793885 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=793951 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=892833 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=908800 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=929794 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=943791 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:56 2016 us=983775 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=9760 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=34757 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=59732 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=85718 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=408614 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=408712 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:25:57 2016 us=430541 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 11:26:03 2016 us=490525 tenckhoff/217.248.26.35:57568 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Wed Feb 17, 2016 11:37 am

Kulturmensch wrote:Ping:
Ping from PC to the virtual Server IP (10.8.0.1) works.
Ping from PC to the virtual PC IP (10.8.0.2) works
Ping from Server to te virtual PC IP fails
Ping from Server to the virtual Server IP works
Make sure you use the right virtual IP to ping your client ..
Kulturmensch wrote:Client:
Wed Feb 17 11:23:33 2016 us=214118 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Kulturmensch wrote:Server:
Wed Feb 17 11:25:53 2016 us=318023 tenckhoff/217.248.26.35:57568 SENT CONTROL [tenckhoff]: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0' (status=1)
Maybe you posted the wrong log .. or your logs are incomplete.
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 3:48 pm

Made a reset of the server and got the new IP address 10.8.0.3 for my desktop client. To make sure, that all posted data are consistant, here comes again fresh config and logfiles from either the client and the server.

Current status
Ping client -> 10.8.0.1 and 10.8.0.3 work
Ping Server -> 10.8.0.1 works
Ping Server -> 10.8.0.3 does not work

Internetbrowsing works only for some pages as mentioned earlier.


Config Server:

tun-mtu 1440
fragment 1400
mssfix 1400
port 1194
proto udp
dev tun0
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key # This file should be kept secret
dh ./easy-rsa2/keys/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
duplicate-cn
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
#Google DNS
#push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option DNS 8.8.4.4"
verb 4

Logfile server:
Wed Feb 17 16:36:04 2016 us=254123 MULTI: multi_create_instance called
Wed Feb 17 16:36:04 2016 us=254335 217.248.26.35:60258 Re-using SSL/TLS context
Wed Feb 17 16:36:04 2016 us=254414 217.248.26.35:60258 LZO compression initialized
Wed Feb 17 16:36:04 2016 us=254444 217.248.26.35:60258 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1440)
Wed Feb 17 16:36:04 2016 us=254693 217.248.26.35:60258 Control Channel MTU parms [ L:1486 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 17 16:36:04 2016 us=254841 217.248.26.35:60258 Data Channel MTU parms [ L:1486 D:1400 EF:46 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 17 16:36:04 2016 us=254875 217.248.26.35:60258 Fragmentation MTU parms [ L:1486 D:1400 EF:45 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Feb 17 16:36:04 2016 us=254973 217.248.26.35:60258 Local Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 16:36:04 2016 us=255000 217.248.26.35:60258 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 16:36:04 2016 us=255085 217.248.26.35:60258 Local Options hash (VER=V4): 'f20b6933'
Wed Feb 17 16:36:04 2016 us=255133 217.248.26.35:60258 Expected Remote Options hash (VER=V4): 'f844a4b1'
Wed Feb 17 16:36:04 2016 us=255213 217.248.26.35:60258 TLS: Initial packet from [AF_INET]217.248.26.35:60258, sid=ab7c1df3 2e90b49d
Wed Feb 17 16:36:04 2016 us=669883 217.248.26.35:60258 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 16:36:04 2016 us=670417 217.248.26.35:60258 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=tenckhoff, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 16:36:04 2016 us=723160 217.248.26.35:60258 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 16:36:04 2016 us=723214 217.248.26.35:60258 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 16:36:04 2016 us=723335 217.248.26.35:60258 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 16:36:04 2016 us=723364 217.248.26.35:60258 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 16:36:04 2016 us=758733 217.248.26.35:60258 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 16:36:04 2016 us=758797 217.248.26.35:60258 [tenckhoff] Peer Connection Initiated with [AF_INET]217.248.26.35:60258
Wed Feb 17 16:36:04 2016 us=758852 tenckhoff/217.248.26.35:60258 MULTI_sva: pool returned IPv4=10.8.0.3, IPv6=(Not enabled)
Wed Feb 17 16:36:04 2016 us=758950 tenckhoff/217.248.26.35:60258 MULTI: Learn: 10.8.0.3 -> tenckhoff/217.248.26.35:60258
Wed Feb 17 16:36:04 2016 us=758983 tenckhoff/217.248.26.35:60258 MULTI: primary virtual IP for tenckhoff/217.248.26.35:60258: 10.8.0.3
Wed Feb 17 16:36:06 2016 us=886800 tenckhoff/217.248.26.35:60258 PUSH: Received control message: 'PUSH_REQUEST'
Wed Feb 17 16:36:06 2016 us=886850 tenckhoff/217.248.26.35:60258 send_push_reply(): safe_cap=940
Wed Feb 17 16:36:06 2016 us=886931 tenckhoff/217.248.26.35:60258 SENT CONTROL [tenckhoff]: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0' (status=1)
Wed Feb 17 16:36:06 2016 us=941638 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=950620 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=953613 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=972611 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=973609 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=973674 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=988626 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=988695 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=988756 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=988817 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=989604 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=989669 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=990599 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=990664 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=991601 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:06 2016 us=991670 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=22586 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=44600 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=136594 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=185513 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=196513 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=209490 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [::], packet dropped
Wed Feb 17 16:36:07 2016 us=209564 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=210487 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=211486 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=236477 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=261471 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=288449 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=387437 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=388389 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=404381 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=405386 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=405492 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=406404 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=406470 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=406533 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=406594 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=407392 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=407460 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=408376 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=435374 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=720346 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=767220 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=767297 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:07 2016 us=950205 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=221047 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=221148 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=221206 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=221961 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=605908 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=606768 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=721719 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=967692 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=967792 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=969662 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=969768 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:08 2016 us=975611 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=71552 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=392511 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=392631 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=392732 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=392787 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=808308 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=808444 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=809172 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=809231 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=809287 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=809341 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=956118 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=974083 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:09 2016 us=974149 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=223098 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=223945 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=224006 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=224940 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=224998 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=225931 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=353928 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=390866 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=391859 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=391922 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:10 2016 us=422844 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:17 2016 us=45523 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:17 2016 us=230473 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:50 2016 us=492425 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:36:50 2016 us=493292 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:09 2016 us=937 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:09 2016 us=20805 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:09 2016 us=500667 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:09 2016 us=520682 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:10 2016 us=1441 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:37:10 2016 us=21385 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:38:05 2016 us=445214 tenckhoff/217.248.26.35:58929 [tenckhoff] Inactivity timeout (--ping-restart), restarting
Wed Feb 17 16:38:05 2016 us=445319 tenckhoff/217.248.26.35:58929 SIGUSR1[soft,ping-restart] received, client-instance restarting
Wed Feb 17 16:39:20 2016 us=495469 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 16:41:50 2016 us=512652 tenckhoff/217.248.26.35:60258 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped

Config client:
client
tun-mtu 1440
fragment 1400
mssfix 1400
dev tun
proto udp
port 1194
remote my.server
resolv-retry infinite
nobind
persist-key
persist-tun
redirect-gateway def1
ca c:/Programme/OpenVPN/config/keys/ca.crt
cert c:/Programme/OpenVPN/config/keys/tenckhoff.crt
key c:/Programme/OpenVPN/config/keys/tenckhoff.key
comp-lzo
verb 4

Log-file client:
Wed Feb 17 16:35:58 2016 us=136796 Current Parameter Settings:
Wed Feb 17 16:35:58 2016 us=136796 config = 'standard.ovpn'
Wed Feb 17 16:35:58 2016 us=136796 mode = 0
Wed Feb 17 16:35:58 2016 us=136796 show_ciphers = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 show_digests = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 show_engines = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 genkey = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 key_pass_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 show_tls_ciphers = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 Connection profiles [default]:
Wed Feb 17 16:35:58 2016 us=136796 proto = udp
Wed Feb 17 16:35:58 2016 us=136796 local = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 local_port = 0
Wed Feb 17 16:35:58 2016 us=136796 remote = '85.214.80.189'
Wed Feb 17 16:35:58 2016 us=136796 remote_port = 1194
Wed Feb 17 16:35:58 2016 us=136796 remote_float = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 bind_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 bind_local = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 connect_retry_seconds = 5
Wed Feb 17 16:35:58 2016 us=136796 connect_timeout = 10
Wed Feb 17 16:35:58 2016 us=136796 connect_retry_max = 0
Wed Feb 17 16:35:58 2016 us=136796 socks_proxy_server = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 socks_proxy_port = 0
Wed Feb 17 16:35:58 2016 us=136796 socks_proxy_retry = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tun_mtu = 1440
Wed Feb 17 16:35:58 2016 us=136796 tun_mtu_defined = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 link_mtu = 1500
Wed Feb 17 16:35:58 2016 us=136796 link_mtu_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tun_mtu_extra = 0
Wed Feb 17 16:35:58 2016 us=136796 tun_mtu_extra_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 mtu_discover_type = -1
Wed Feb 17 16:35:58 2016 us=136796 fragment = 1400
Wed Feb 17 16:35:58 2016 us=136796 mssfix = 1400
Wed Feb 17 16:35:58 2016 us=136796 explicit_exit_notification = 0
Wed Feb 17 16:35:58 2016 us=136796 Connection profiles END
Wed Feb 17 16:35:58 2016 us=136796 remote_random = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ipchange = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 dev = 'tun'
Wed Feb 17 16:35:58 2016 us=136796 dev_type = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 dev_node = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 lladdr = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 topology = 1
Wed Feb 17 16:35:58 2016 us=136796 tun_ipv6 = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_local = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_remote_netmask = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_noexec = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_nowarn = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_local = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_netbits = 0
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_remote = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 shaper = 0
Wed Feb 17 16:35:58 2016 us=136796 mtu_test = 0
Wed Feb 17 16:35:58 2016 us=136796 mlock = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 keepalive_ping = 0
Wed Feb 17 16:35:58 2016 us=136796 keepalive_timeout = 0
Wed Feb 17 16:35:58 2016 us=136796 inactivity_timeout = 0
Wed Feb 17 16:35:58 2016 us=136796 ping_send_timeout = 0
Wed Feb 17 16:35:58 2016 us=136796 ping_rec_timeout = 0
Wed Feb 17 16:35:58 2016 us=136796 ping_rec_timeout_action = 0
Wed Feb 17 16:35:58 2016 us=136796 ping_timer_remote = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 remap_sigusr1 = 0
Wed Feb 17 16:35:58 2016 us=136796 persist_tun = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 persist_local_ip = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 persist_remote_ip = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 persist_key = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 passtos = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 resolve_retry_seconds = 1000000000
Wed Feb 17 16:35:58 2016 us=136796 username = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 groupname = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 chroot_dir = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 cd_dir = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 writepid = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 up_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 down_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 down_pre = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 up_restart = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 up_delay = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 daemon = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 inetd = 0
Wed Feb 17 16:35:58 2016 us=136796 log = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 suppress_timestamps = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 nice = 0
Wed Feb 17 16:35:58 2016 us=136796 verbosity = 4
Wed Feb 17 16:35:58 2016 us=136796 mute = 0
Wed Feb 17 16:35:58 2016 us=136796 gremlin = 0
Wed Feb 17 16:35:58 2016 us=136796 status_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 status_file_version = 1
Wed Feb 17 16:35:58 2016 us=136796 status_file_update_freq = 60
Wed Feb 17 16:35:58 2016 us=136796 occ = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 rcvbuf = 0
Wed Feb 17 16:35:58 2016 us=136796 sndbuf = 0
Wed Feb 17 16:35:58 2016 us=136796 sockflags = 0
Wed Feb 17 16:35:58 2016 us=136796 fast_io = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 lzo = 7
Wed Feb 17 16:35:58 2016 us=136796 route_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 route_default_gateway = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 route_default_metric = 0
Wed Feb 17 16:35:58 2016 us=136796 route_noexec = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 route_delay = 5
Wed Feb 17 16:35:58 2016 us=136796 route_delay_window = 30
Wed Feb 17 16:35:58 2016 us=136796 route_delay_defined = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 route_nopull = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 route_gateway_via_dhcp = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 max_routes = 100
Wed Feb 17 16:35:58 2016 us=136796 allow_pull_fqdn = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 [redirect_default_gateway local=0]
Wed Feb 17 16:35:58 2016 us=136796 management_addr = '127.0.0.1'
Wed Feb 17 16:35:58 2016 us=136796 management_port = 25340
Wed Feb 17 16:35:58 2016 us=136796 management_user_pass = 'stdin'
Wed Feb 17 16:35:58 2016 us=136796 management_log_history_cache = 250
Wed Feb 17 16:35:58 2016 us=136796 management_echo_buffer_size = 100
Wed Feb 17 16:35:58 2016 us=136796 management_write_peer_info_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 management_client_user = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 management_client_group = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 management_flags = 6
Wed Feb 17 16:35:58 2016 us=136796 shared_secret_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 key_direction = 0
Wed Feb 17 16:35:58 2016 us=136796 ciphername_defined = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 ciphername = 'BF-CBC'
Wed Feb 17 16:35:58 2016 us=136796 authname_defined = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 authname = 'SHA1'
Wed Feb 17 16:35:58 2016 us=136796 prng_hash = 'SHA1'
Wed Feb 17 16:35:58 2016 us=136796 prng_nonce_secret_len = 16
Wed Feb 17 16:35:58 2016 us=136796 keysize = 0
Wed Feb 17 16:35:58 2016 us=136796 engine = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 replay = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 mute_replay_warnings = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 replay_window = 64
Wed Feb 17 16:35:58 2016 us=136796 replay_time = 15
Wed Feb 17 16:35:58 2016 us=136796 packet_id_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 use_iv = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 test_crypto = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tls_server = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tls_client = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 key_method = 2
Wed Feb 17 16:35:58 2016 us=136796 ca_file = 'c:/Programme/OpenVPN/config/keys/ca.crt'
Wed Feb 17 16:35:58 2016 us=136796 ca_path = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 dh_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 cert_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.crt'
Wed Feb 17 16:35:58 2016 us=136796 extra_certs_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 priv_key_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.key'
Wed Feb 17 16:35:58 2016 us=136796 pkcs12_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 cryptoapi_cert = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 cipher_list = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 tls_verify = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 tls_export_cert = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 verify_x509_type = 0
Wed Feb 17 16:35:58 2016 us=136796 verify_x509_name = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 crl_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ns_cert_type = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_ku[i] = 0
Wed Feb 17 16:35:58 2016 us=136796 remote_cert_eku = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ssl_flags = 0
Wed Feb 17 16:35:58 2016 us=136796 tls_timeout = 2
Wed Feb 17 16:35:58 2016 us=136796 renegotiate_bytes = 0
Wed Feb 17 16:35:58 2016 us=136796 renegotiate_packets = 0
Wed Feb 17 16:35:58 2016 us=136796 renegotiate_seconds = 3600
Wed Feb 17 16:35:58 2016 us=136796 handshake_window = 60
Wed Feb 17 16:35:58 2016 us=136796 transition_window = 3600
Wed Feb 17 16:35:58 2016 us=136796 single_session = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 push_peer_info = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tls_exit = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tls_auth_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_protected_authentication = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_private_mode = 00000000
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_cert_private = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_pin_cache_period = -1
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_id = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 pkcs11_id_management = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 server_network = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 server_netmask = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 server_network_ipv6 = ::
Wed Feb 17 16:35:58 2016 us=136796 server_netbits_ipv6 = 0
Wed Feb 17 16:35:58 2016 us=136796 server_bridge_ip = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 server_bridge_netmask = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 server_bridge_pool_start = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 server_bridge_pool_end = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_start = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_end = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_netmask = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_pool_persist_refresh_freq = 600
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_pool_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_pool_base = ::
Wed Feb 17 16:35:58 2016 us=136796 ifconfig_ipv6_pool_netbits = 0
Wed Feb 17 16:35:58 2016 us=136796 n_bcast_buf = 256
Wed Feb 17 16:35:58 2016 us=136796 tcp_queue_limit = 64
Wed Feb 17 16:35:58 2016 us=136796 real_hash_size = 256
Wed Feb 17 16:35:58 2016 us=136796 virtual_hash_size = 256
Wed Feb 17 16:35:58 2016 us=136796 client_connect_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 learn_address_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 client_disconnect_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 client_config_dir = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 ccd_exclusive = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 tmp_dir = 'C:\Users\Tenck\AppData\Local\Temp\'
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_local = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_remote_netmask = 0.0.0.0
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_ipv6_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_ipv6_local = ::/0
Wed Feb 17 16:35:58 2016 us=136796 push_ifconfig_ipv6_remote = ::
Wed Feb 17 16:35:58 2016 us=136796 enable_c2c = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 duplicate_cn = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 cf_max = 0
Wed Feb 17 16:35:58 2016 us=136796 cf_per = 0
Wed Feb 17 16:35:58 2016 us=136796 max_clients = 1024
Wed Feb 17 16:35:58 2016 us=136796 max_routes_per_client = 256
Wed Feb 17 16:35:58 2016 us=136796 auth_user_pass_verify_script = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 auth_user_pass_verify_script_via_file = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 client = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 pull = ENABLED
Wed Feb 17 16:35:58 2016 us=136796 auth_user_pass_file = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 show_net_up = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 route_method = 0
Wed Feb 17 16:35:58 2016 us=136796 block_outside_dns = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ip_win32_defined = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 ip_win32_type = 3
Wed Feb 17 16:35:58 2016 us=136796 dhcp_masq_offset = 0
Wed Feb 17 16:35:58 2016 us=136796 dhcp_lease_time = 31536000
Wed Feb 17 16:35:58 2016 us=136796 tap_sleep = 0
Wed Feb 17 16:35:58 2016 us=136796 dhcp_options = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 dhcp_renew = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 dhcp_pre_release = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 dhcp_release = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 domain = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 netbios_scope = '[UNDEF]'
Wed Feb 17 16:35:58 2016 us=136796 netbios_node_type = 0
Wed Feb 17 16:35:58 2016 us=136796 disable_nbt = DISABLED
Wed Feb 17 16:35:58 2016 us=136796 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan 4 2016
Wed Feb 17 16:35:58 2016 us=136796 Windows version 6.2 (Windows 8 or greater)
Wed Feb 17 16:35:58 2016 us=136796 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Wed Feb 17 16:35:58 2016 us=136796 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Feb 17 16:35:58 2016 us=136796 Need hold release from management interface, waiting...
Wed Feb 17 16:35:58 2016 us=652610 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Feb 17 16:35:58 2016 us=768106 MANAGEMENT: CMD 'state on'
Wed Feb 17 16:35:58 2016 us=768106 MANAGEMENT: CMD 'log all on'
Wed Feb 17 16:35:58 2016 us=805879 MANAGEMENT: CMD 'hold off'
Wed Feb 17 16:35:58 2016 us=805879 MANAGEMENT: CMD 'hold release'
Wed Feb 17 16:35:58 2016 us=805879 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 17 16:35:58 2016 us=868386 LZO compression initialized
Wed Feb 17 16:35:58 2016 us=868386 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1440)
Wed Feb 17 16:35:58 2016 us=868386 Control Channel MTU parms [ L:1486 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Wed Feb 17 16:35:58 2016 us=868386 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Feb 17 16:35:58 2016 us=868386 Data Channel MTU parms [ L:1486 D:1400 EF:46 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Feb 17 16:35:58 2016 us=868386 Fragmentation MTU parms [ L:1486 D:1400 EF:45 EB:143 ET:1 EL:3 AF:3/1 ]
Wed Feb 17 16:35:58 2016 us=868386 Local Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 16:35:58 2016 us=868386 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1486,tun-mtu 1440,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 16:35:58 2016 us=868386 Local Options hash (VER=V4): 'f844a4b1'
Wed Feb 17 16:35:58 2016 us=868386 Expected Remote Options hash (VER=V4): 'f20b6933'
Wed Feb 17 16:35:58 2016 us=868386 UDPv4 link local: [undef]
Wed Feb 17 16:35:58 2016 us=868386 UDPv4 link remote: [AF_INET]85.214.80.189:1194
Wed Feb 17 16:35:58 2016 us=868386 MANAGEMENT: >STATE:1455723358,WAIT,,,
Wed Feb 17 16:35:58 2016 us=905772 MANAGEMENT: >STATE:1455723358,AUTH,,,
Wed Feb 17 16:35:58 2016 us=905772 TLS: Initial packet from [AF_INET]85.214.80.189:1194, sid=b83841f5 9b1c3267
Wed Feb 17 16:35:59 2016 us=168216 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 16:35:59 2016 us=168216 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 16:35:59 2016 us=368196 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 16:35:59 2016 us=368196 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 16:35:59 2016 us=368196 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 16:35:59 2016 us=368196 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 16:35:59 2016 us=368196 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 16:35:59 2016 us=368196 [h2384168.stratoserver.net] Peer Connection Initiated with [AF_INET]85.214.80.189:1194
Wed Feb 17 16:36:00 2016 us=437469 MANAGEMENT: >STATE:1455723360,GET_CONFIG,,,
Wed Feb 17 16:36:01 2016 us=506469 SENT CONTROL [h2384168.stratoserver.net]: 'PUSH_REQUEST' (status=1)
Wed Feb 17 16:36:01 2016 us=537721 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0'
Wed Feb 17 16:36:01 2016 us=537721 OPTIONS IMPORT: timers and/or timeouts modified
Wed Feb 17 16:36:01 2016 us=537721 OPTIONS IMPORT: --ifconfig/up options modified
Wed Feb 17 16:36:01 2016 us=537721 OPTIONS IMPORT: route-related options modified
Wed Feb 17 16:36:01 2016 us=537721 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=2 HWADDR=2c:56:dc:48:38:08
Wed Feb 17 16:36:01 2016 us=537721 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 17 16:36:01 2016 us=537721 MANAGEMENT: >STATE:1455723361,ASSIGN_IP,,10.8.0.3,
Wed Feb 17 16:36:01 2016 us=537721 open_tun, tt->ipv6=0
Wed Feb 17 16:36:01 2016 us=537721 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{E48B17FB-E758-4B55-959F-15BBC82C69D1}.tap
Wed Feb 17 16:36:01 2016 us=537721 TAP-Windows Driver Version 9.9
Wed Feb 17 16:36:01 2016 us=537721 TAP-Windows MTU=1500
Wed Feb 17 16:36:01 2016 us=537721 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.3/255.255.255.0 [SUCCEEDED]
Wed Feb 17 16:36:01 2016 us=537721 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.3/255.255.255.0 on interface {E48B17FB-E758-4B55-959F-15BBC82C69D1} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Feb 17 16:36:01 2016 us=537721 Successful ARP Flush on interface [21] {E48B17FB-E758-4B55-959F-15BBC82C69D1}
Wed Feb 17 16:36:06 2016 us=98897 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Feb 17 16:36:06 2016 us=98897 C:\Windows\system32\route.exe ADD 85.214.80.189 MASK 255.255.255.255 192.168.2.1
Wed Feb 17 16:36:06 2016 us=99398 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Wed Feb 17 16:36:06 2016 us=99398 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 16:36:06 2016 us=99398 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 16:36:06 2016 us=99900 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 16:36:06 2016 us=99900 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 16:36:06 2016 us=99900 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 16:36:06 2016 us=100401 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 16:36:06 2016 us=100401 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 16:36:06 2016 us=100401 Initialization Sequence Completed
Wed Feb 17 16:36:06 2016 us=100401 MANAGEMENT: >STATE:1455723366,CONNECTED,SUCCESS,10.8.0.3,85.214.80.189
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Wed Feb 17, 2016 4:19 pm

Kulturmensch wrote:Current status
Ping client -> 10.8.0.1 and 10.8.0.3 work
Ping Server -> 10.8.0.1 works
Ping Server -> 10.8.0.3 does not work
I presume you mean "Server 10.8.0.1 tries to ping client 10.8.0.3 and fails" .. which is 99.99% certain the client firewall ..

You could try:

Code: Select all

$ ping -I 10.8.0.1 10.8.0.3
from ubuntu server, just to be sure ..
Kulturmensch wrote:Internetbrowsing works only for some pages as mentioned earlier
I presume you understand how this all works:
Kulturmensch wrote:tun-mtu 1440
fragment 1400
mssfix 1400
and why you need it .. if not remove these options and let OpenVPN configure itself correctly.
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 5:40 pm

Thank you v.m. indeed. It was the wrong forwarding directive by the Router what I checked due to your firewall comment. Now ping works in all directions.

However, the Internet-access-problem still remains. Only a few pages can be accessed via chrome browser in the presence of an active VPN. Situation is the same as mentioned above.

Status
I deleted the mtu/msfixx/fragment parts in both config files (client and server) restartet both, got IP 10.8.0.2 for the Desktop-PC, tested ping (works:D) and got the following logfiles:


Server:
Wed Feb 17 18:19:20 2016 us=463758 MULTI: multi_create_instance called
Wed Feb 17 18:19:20 2016 us=463965 217.248.26.35:55801 Re-using SSL/TLS context
Wed Feb 17 18:19:20 2016 us=464071 217.248.26.35:55801 LZO compression initialized
Wed Feb 17 18:19:20 2016 us=464537 217.248.26.35:55801 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 17 18:19:20 2016 us=464577 217.248.26.35:55801 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 17 18:19:20 2016 us=464704 217.248.26.35:55801 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 18:19:20 2016 us=464730 217.248.26.35:55801 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 18:19:20 2016 us=464792 217.248.26.35:55801 Local Options hash (VER=V4): '530fdded'
Wed Feb 17 18:19:20 2016 us=464837 217.248.26.35:55801 Expected Remote Options hash (VER=V4): '41690919'
Wed Feb 17 18:19:20 2016 us=464945 217.248.26.35:55801 TLS: Initial packet from [AF_INET]217.248.26.35:55801, sid=46e27ebf 94052fc7
Wed Feb 17 18:19:20 2016 us=883645 217.248.26.35:55801 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 18:19:20 2016 us=884202 217.248.26.35:55801 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=tenckhoff, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 18:19:20 2016 us=938819 217.248.26.35:55801 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 18:19:20 2016 us=938885 217.248.26.35:55801 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 18:19:20 2016 us=939009 217.248.26.35:55801 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 18:19:20 2016 us=939063 217.248.26.35:55801 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 18:19:20 2016 us=974368 217.248.26.35:55801 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 18:19:20 2016 us=974440 217.248.26.35:55801 [tenckhoff] Peer Connection Initiated with [AF_INET]217.248.26.35:55801
Wed Feb 17 18:19:20 2016 us=974502 tenckhoff/217.248.26.35:55801 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Wed Feb 17 18:19:20 2016 us=974601 tenckhoff/217.248.26.35:55801 MULTI: Learn: 10.8.0.2 -> tenckhoff/217.248.26.35:55801
Wed Feb 17 18:19:20 2016 us=974633 tenckhoff/217.248.26.35:55801 MULTI: primary virtual IP for tenckhoff/217.248.26.35:55801: 10.8.0.2
Wed Feb 17 18:19:23 2016 us=112429 tenckhoff/217.248.26.35:55801 PUSH: Received control message: 'PUSH_REQUEST'
Wed Feb 17 18:19:23 2016 us=112535 tenckhoff/217.248.26.35:55801 send_push_reply(): safe_cap=940
Wed Feb 17 18:19:23 2016 us=112630 tenckhoff/217.248.26.35:55801 SENT CONTROL [tenckhoff]: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Wed Feb 17 18:19:23 2016 us=168251 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=175231 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=180213 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=181207 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=182217 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=182282 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=183219 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=183327 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=185206 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=222212 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=222285 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=222346 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=223197 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=223266 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=224186 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=225200 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=225265 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=225326 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=226187 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=247180 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=269198 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=329159 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=377148 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=420099 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=452082 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=483141 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=508058 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=539106 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=587043 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=587124 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=588008 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=626034 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=626133 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=626994 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=627152 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=627990 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=628054 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=629006 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=629071 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=629134 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=629194 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=640974 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [::], packet dropped
Wed Feb 17 18:19:23 2016 us=641975 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=642975 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:23 2016 us=655967 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=142836 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=175714 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=328646 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=628595 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=629478 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=629546 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=630466 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=631481 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:24 2016 us=631551 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=52366 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=130228 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=177208 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=177274 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=178194 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=178252 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=212192 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=308150 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=595050 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=595142 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=595952 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:25 2016 us=595987 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=10887 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=11777 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=11845 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=12767 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=12826 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=13756 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=163706 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=164679 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=177680 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=433580 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=434588 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=434649 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=434706 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=434760 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=435542 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=579601 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=579723 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=610466 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=639453 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=640433 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=670424 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=671426 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=702427 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:26 2016 us=733398 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=139274 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=171174 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=631095 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=631227 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=631942 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=632004 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=632938 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=632998 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=633941 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=633999 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=634054 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=635926 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=636922 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=637921 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=638920 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=640930 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=640991 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=641919 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=645967 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=646043 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=659943 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=660910 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=664911 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=673934 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=674903 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=761898 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=777886 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:27 2016 us=793875 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=41805 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=42731 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=42792 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=43755 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=43817 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=43873 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=43927 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=43982 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=44712 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=128690 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=128755 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=129668 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=137709 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:28 2016 us=190672 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:33 2016 us=271157 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped
Wed Feb 17 18:19:33 2016 us=373018 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped

Client
Wed Feb 17 18:19:14 2016 us=424740 Current Parameter Settings:
Wed Feb 17 18:19:14 2016 us=424740 config = 'standard.ovpn'
Wed Feb 17 18:19:14 2016 us=424740 mode = 0
Wed Feb 17 18:19:14 2016 us=424740 show_ciphers = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 show_digests = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 show_engines = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 genkey = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 key_pass_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 show_tls_ciphers = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 Connection profiles [default]:
Wed Feb 17 18:19:14 2016 us=424740 proto = udp
Wed Feb 17 18:19:14 2016 us=424740 local = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 local_port = 0
Wed Feb 17 18:19:14 2016 us=424740 remote = '85.214.80.189'
Wed Feb 17 18:19:14 2016 us=424740 remote_port = 1194
Wed Feb 17 18:19:14 2016 us=424740 remote_float = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 bind_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 bind_local = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 connect_retry_seconds = 5
Wed Feb 17 18:19:14 2016 us=424740 connect_timeout = 10
Wed Feb 17 18:19:14 2016 us=424740 connect_retry_max = 0
Wed Feb 17 18:19:14 2016 us=424740 socks_proxy_server = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 socks_proxy_port = 0
Wed Feb 17 18:19:14 2016 us=424740 socks_proxy_retry = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tun_mtu = 1500
Wed Feb 17 18:19:14 2016 us=424740 tun_mtu_defined = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 link_mtu = 1500
Wed Feb 17 18:19:14 2016 us=424740 link_mtu_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tun_mtu_extra = 0
Wed Feb 17 18:19:14 2016 us=424740 tun_mtu_extra_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 mtu_discover_type = -1
Wed Feb 17 18:19:14 2016 us=424740 fragment = 0
Wed Feb 17 18:19:14 2016 us=424740 mssfix = 1450
Wed Feb 17 18:19:14 2016 us=424740 explicit_exit_notification = 0
Wed Feb 17 18:19:14 2016 us=424740 Connection profiles END
Wed Feb 17 18:19:14 2016 us=424740 remote_random = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ipchange = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 dev = 'tun'
Wed Feb 17 18:19:14 2016 us=424740 dev_type = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 dev_node = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 lladdr = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 topology = 1
Wed Feb 17 18:19:14 2016 us=424740 tun_ipv6 = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_local = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_remote_netmask = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_noexec = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_nowarn = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_local = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_netbits = 0
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_remote = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 shaper = 0
Wed Feb 17 18:19:14 2016 us=424740 mtu_test = 0
Wed Feb 17 18:19:14 2016 us=424740 mlock = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 keepalive_ping = 0
Wed Feb 17 18:19:14 2016 us=424740 keepalive_timeout = 0
Wed Feb 17 18:19:14 2016 us=424740 inactivity_timeout = 0
Wed Feb 17 18:19:14 2016 us=424740 ping_send_timeout = 0
Wed Feb 17 18:19:14 2016 us=424740 ping_rec_timeout = 0
Wed Feb 17 18:19:14 2016 us=424740 ping_rec_timeout_action = 0
Wed Feb 17 18:19:14 2016 us=424740 ping_timer_remote = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 remap_sigusr1 = 0
Wed Feb 17 18:19:14 2016 us=424740 persist_tun = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 persist_local_ip = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 persist_remote_ip = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 persist_key = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 passtos = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 resolve_retry_seconds = 1000000000
Wed Feb 17 18:19:14 2016 us=424740 username = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 groupname = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 chroot_dir = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 cd_dir = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 writepid = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 up_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 down_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 down_pre = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 up_restart = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 up_delay = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 daemon = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 inetd = 0
Wed Feb 17 18:19:14 2016 us=424740 log = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 suppress_timestamps = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 nice = 0
Wed Feb 17 18:19:14 2016 us=424740 verbosity = 4
Wed Feb 17 18:19:14 2016 us=424740 mute = 0
Wed Feb 17 18:19:14 2016 us=424740 gremlin = 0
Wed Feb 17 18:19:14 2016 us=424740 status_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 status_file_version = 1
Wed Feb 17 18:19:14 2016 us=424740 status_file_update_freq = 60
Wed Feb 17 18:19:14 2016 us=424740 occ = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 rcvbuf = 0
Wed Feb 17 18:19:14 2016 us=424740 sndbuf = 0
Wed Feb 17 18:19:14 2016 us=424740 sockflags = 0
Wed Feb 17 18:19:14 2016 us=424740 fast_io = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 lzo = 7
Wed Feb 17 18:19:14 2016 us=424740 route_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 route_default_gateway = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 route_default_metric = 0
Wed Feb 17 18:19:14 2016 us=424740 route_noexec = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 route_delay = 5
Wed Feb 17 18:19:14 2016 us=424740 route_delay_window = 30
Wed Feb 17 18:19:14 2016 us=424740 route_delay_defined = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 route_nopull = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 route_gateway_via_dhcp = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 max_routes = 100
Wed Feb 17 18:19:14 2016 us=424740 allow_pull_fqdn = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 [redirect_default_gateway local=0]
Wed Feb 17 18:19:14 2016 us=424740 management_addr = '127.0.0.1'
Wed Feb 17 18:19:14 2016 us=424740 management_port = 25340
Wed Feb 17 18:19:14 2016 us=424740 management_user_pass = 'stdin'
Wed Feb 17 18:19:14 2016 us=424740 management_log_history_cache = 250
Wed Feb 17 18:19:14 2016 us=424740 management_echo_buffer_size = 100
Wed Feb 17 18:19:14 2016 us=424740 management_write_peer_info_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 management_client_user = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 management_client_group = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 management_flags = 6
Wed Feb 17 18:19:14 2016 us=424740 shared_secret_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 key_direction = 0
Wed Feb 17 18:19:14 2016 us=424740 ciphername_defined = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 ciphername = 'BF-CBC'
Wed Feb 17 18:19:14 2016 us=424740 authname_defined = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 authname = 'SHA1'
Wed Feb 17 18:19:14 2016 us=424740 prng_hash = 'SHA1'
Wed Feb 17 18:19:14 2016 us=424740 prng_nonce_secret_len = 16
Wed Feb 17 18:19:14 2016 us=424740 keysize = 0
Wed Feb 17 18:19:14 2016 us=424740 engine = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 replay = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 mute_replay_warnings = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 replay_window = 64
Wed Feb 17 18:19:14 2016 us=424740 replay_time = 15
Wed Feb 17 18:19:14 2016 us=424740 packet_id_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 use_iv = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 test_crypto = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tls_server = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tls_client = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 key_method = 2
Wed Feb 17 18:19:14 2016 us=424740 ca_file = 'c:/Programme/OpenVPN/config/keys/ca.crt'
Wed Feb 17 18:19:14 2016 us=424740 ca_path = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 dh_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 cert_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.crt'
Wed Feb 17 18:19:14 2016 us=424740 extra_certs_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 priv_key_file = 'c:/Programme/OpenVPN/config/keys/tenckhoff.key'
Wed Feb 17 18:19:14 2016 us=424740 pkcs12_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 cryptoapi_cert = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 cipher_list = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 tls_verify = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 tls_export_cert = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 verify_x509_type = 0
Wed Feb 17 18:19:14 2016 us=424740 verify_x509_name = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 crl_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ns_cert_type = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_ku[i] = 0
Wed Feb 17 18:19:14 2016 us=424740 remote_cert_eku = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ssl_flags = 0
Wed Feb 17 18:19:14 2016 us=424740 tls_timeout = 2
Wed Feb 17 18:19:14 2016 us=424740 renegotiate_bytes = 0
Wed Feb 17 18:19:14 2016 us=424740 renegotiate_packets = 0
Wed Feb 17 18:19:14 2016 us=424740 renegotiate_seconds = 3600
Wed Feb 17 18:19:14 2016 us=424740 handshake_window = 60
Wed Feb 17 18:19:14 2016 us=424740 transition_window = 3600
Wed Feb 17 18:19:14 2016 us=424740 single_session = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 push_peer_info = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tls_exit = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tls_auth_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_protected_authentication = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_private_mode = 00000000
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_cert_private = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_pin_cache_period = -1
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_id = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 pkcs11_id_management = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 server_network = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 server_netmask = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 server_network_ipv6 = ::
Wed Feb 17 18:19:14 2016 us=424740 server_netbits_ipv6 = 0
Wed Feb 17 18:19:14 2016 us=424740 server_bridge_ip = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 server_bridge_netmask = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 server_bridge_pool_start = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 server_bridge_pool_end = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_start = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_end = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_netmask = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_pool_persist_refresh_freq = 600
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_pool_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_pool_base = ::
Wed Feb 17 18:19:14 2016 us=424740 ifconfig_ipv6_pool_netbits = 0
Wed Feb 17 18:19:14 2016 us=424740 n_bcast_buf = 256
Wed Feb 17 18:19:14 2016 us=424740 tcp_queue_limit = 64
Wed Feb 17 18:19:14 2016 us=424740 real_hash_size = 256
Wed Feb 17 18:19:14 2016 us=424740 virtual_hash_size = 256
Wed Feb 17 18:19:14 2016 us=424740 client_connect_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 learn_address_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 client_disconnect_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 client_config_dir = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 ccd_exclusive = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 tmp_dir = 'C:\Users\Tenck\AppData\Local\Temp\'
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_local = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_remote_netmask = 0.0.0.0
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_ipv6_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_ipv6_local = ::/0
Wed Feb 17 18:19:14 2016 us=424740 push_ifconfig_ipv6_remote = ::
Wed Feb 17 18:19:14 2016 us=424740 enable_c2c = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 duplicate_cn = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 cf_max = 0
Wed Feb 17 18:19:14 2016 us=424740 cf_per = 0
Wed Feb 17 18:19:14 2016 us=424740 max_clients = 1024
Wed Feb 17 18:19:14 2016 us=424740 max_routes_per_client = 256
Wed Feb 17 18:19:14 2016 us=424740 auth_user_pass_verify_script = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 auth_user_pass_verify_script_via_file = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 client = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 pull = ENABLED
Wed Feb 17 18:19:14 2016 us=424740 auth_user_pass_file = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 show_net_up = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 route_method = 0
Wed Feb 17 18:19:14 2016 us=424740 block_outside_dns = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ip_win32_defined = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 ip_win32_type = 3
Wed Feb 17 18:19:14 2016 us=424740 dhcp_masq_offset = 0
Wed Feb 17 18:19:14 2016 us=424740 dhcp_lease_time = 31536000
Wed Feb 17 18:19:14 2016 us=424740 tap_sleep = 0
Wed Feb 17 18:19:14 2016 us=424740 dhcp_options = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 dhcp_renew = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 dhcp_pre_release = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 dhcp_release = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 domain = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 netbios_scope = '[UNDEF]'
Wed Feb 17 18:19:14 2016 us=424740 netbios_node_type = 0
Wed Feb 17 18:19:14 2016 us=424740 disable_nbt = DISABLED
Wed Feb 17 18:19:14 2016 us=424740 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan 4 2016
Wed Feb 17 18:19:14 2016 us=424740 Windows version 6.2 (Windows 8 or greater)
Wed Feb 17 18:19:14 2016 us=424740 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Wed Feb 17 18:19:14 2016 us=424740 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Feb 17 18:19:14 2016 us=424740 Need hold release from management interface, waiting...
Wed Feb 17 18:19:14 2016 us=944208 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Feb 17 18:19:15 2016 us=59799 MANAGEMENT: CMD 'state on'
Wed Feb 17 18:19:15 2016 us=59799 MANAGEMENT: CMD 'log all on'
Wed Feb 17 18:19:15 2016 us=97786 MANAGEMENT: CMD 'hold off'
Wed Feb 17 18:19:15 2016 us=97786 MANAGEMENT: CMD 'hold release'
Wed Feb 17 18:19:15 2016 us=97786 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 17 18:19:15 2016 us=160320 LZO compression initialized
Wed Feb 17 18:19:15 2016 us=160320 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Wed Feb 17 18:19:15 2016 us=160320 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Feb 17 18:19:15 2016 us=160320 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Feb 17 18:19:15 2016 us=160320 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 17 18:19:15 2016 us=160320 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 17 18:19:15 2016 us=160320 Local Options hash (VER=V4): '41690919'
Wed Feb 17 18:19:15 2016 us=160320 Expected Remote Options hash (VER=V4): '530fdded'
Wed Feb 17 18:19:15 2016 us=160320 UDPv4 link local: [undef]
Wed Feb 17 18:19:15 2016 us=160320 UDPv4 link remote: [AF_INET]85.214.80.189:1194
Wed Feb 17 18:19:15 2016 us=160320 MANAGEMENT: >STATE:1455729555,WAIT,,,
Wed Feb 17 18:19:15 2016 us=197574 MANAGEMENT: >STATE:1455729555,AUTH,,,
Wed Feb 17 18:19:15 2016 us=197574 TLS: Initial packet from [AF_INET]85.214.80.189:1194, sid=f484ee67 f7347bd0
Wed Feb 17 18:19:15 2016 us=468765 VERIFY OK: depth=1, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 18:19:15 2016 us=468765 VERIFY OK: depth=0, C=DE, ST=NRW, L=Hennef, O=Dr. Tenckhoff GmbH, OU=DTGITt, CN=h2384168.stratoserver.net, name=EasyRSA, emailAddress=dtg@tenckhoff.eu
Wed Feb 17 18:19:15 2016 us=674208 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 18:19:15 2016 us=674208 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 18:19:15 2016 us=674208 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 17 18:19:15 2016 us=674208 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 17 18:19:15 2016 us=674208 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 17 18:19:15 2016 us=674208 [h2384168.stratoserver.net] Peer Connection Initiated with [AF_INET]85.214.80.189:1194
Wed Feb 17 18:19:16 2016 us=743299 MANAGEMENT: >STATE:1455729556,GET_CONFIG,,,
Wed Feb 17 18:19:17 2016 us=813033 SENT CONTROL [h2384168.stratoserver.net]: 'PUSH_REQUEST' (status=1)
Wed Feb 17 18:19:17 2016 us=844287 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Wed Feb 17 18:19:17 2016 us=844287 OPTIONS IMPORT: timers and/or timeouts modified
Wed Feb 17 18:19:17 2016 us=844287 OPTIONS IMPORT: --ifconfig/up options modified
Wed Feb 17 18:19:17 2016 us=844287 OPTIONS IMPORT: route-related options modified
Wed Feb 17 18:19:17 2016 us=844287 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=2 HWADDR=2c:56:dc:48:38:08
Wed Feb 17 18:19:17 2016 us=844287 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 17 18:19:17 2016 us=844287 MANAGEMENT: >STATE:1455729557,ASSIGN_IP,,10.8.0.2,
Wed Feb 17 18:19:17 2016 us=844287 open_tun, tt->ipv6=0
Wed Feb 17 18:19:17 2016 us=844287 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{E48B17FB-E758-4B55-959F-15BBC82C69D1}.tap
Wed Feb 17 18:19:17 2016 us=844287 TAP-Windows Driver Version 9.9
Wed Feb 17 18:19:17 2016 us=844287 TAP-Windows MTU=1500
Wed Feb 17 18:19:17 2016 us=844287 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed Feb 17 18:19:17 2016 us=844287 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {E48B17FB-E758-4B55-959F-15BBC82C69D1} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Feb 17 18:19:17 2016 us=844287 Successful ARP Flush on interface [21] {E48B17FB-E758-4B55-959F-15BBC82C69D1}
Wed Feb 17 18:19:22 2016 us=329336 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Feb 17 18:19:22 2016 us=329336 C:\Windows\system32\route.exe ADD 85.214.80.189 MASK 255.255.255.255 192.168.2.1
Wed Feb 17 18:19:22 2016 us=329336 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Wed Feb 17 18:19:22 2016 us=329336 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 18:19:22 2016 us=329336 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 18:19:22 2016 us=329336 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 18:19:22 2016 us=329336 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 18:19:22 2016 us=329336 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Feb 17 18:19:22 2016 us=329336 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Feb 17 18:19:22 2016 us=329336 Route addition via IPAPI succeeded [adaptive]
Wed Feb 17 18:19:22 2016 us=329336 Initialization Sequence Completed
Wed Feb 17 18:19:22 2016 us=329336 MANAGEMENT: >STATE:1455729562,CONNECTED,SUCCESS,10.8.0.2,85.214.80.189

Pages: https://de.wikipedia.org/ topic21025.html these posts work
Pages: https://http://www.duden.de/ gives ERR_CONNECTION_TIMED_OUT, https://www.ingress.com/intel ERR_CONNECTION_TIMED_OUT and all bank-pages, ebay, amazon etc.

What does this mean in the server´s logfile: "Wed Feb 17 18:19:27 2016 us=761898 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped" ? Could this be a reason for the misfunction? Any further idea?
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Wed Feb 17, 2016 8:18 pm

Kulturmensch wrote:It was the wrong forwarding directive by the Router what I checked due to your firewall comment. Now ping works in all directions.
not sure how your router would effect VPN data but never mind ..
Kulturmensch wrote:What does this mean in the server´s logfile: "Wed Feb 17 18:19:27 2016 us=761898 tenckhoff/217.248.26.35:55801 MULTI: bad source address from client [fe80::240e:ce76:16be:3e61], packet dropped" ?
It is a notice that the server has received a packet from your client that it does not know what to do with and has dropped it. In this case fe80:: is IPv6 which is built in to W10. It is safe to ignore .. you can fix it later.
Kulturmensch wrote:Could this be a reason for the misfunction? Any further idea?
Very unlikely ..
Kulturmensch wrote:Only a few pages can be accessed via chrome browser in the presence of an active VPN
Messing about with the --mtu (and other parameters I mentioned above) can cause problems with webpages .. but you removed all that, right ;)

Is IP forwarding is enabled on your server.

Have you enabled NAT on your server ?

See this HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 9:01 pm

IP Forwarding is enabled, I enabled it in etc/sysctl.conf:

# Uncomment the next line to enable packet forwarding for IPv4
net.ipv4.ip_forward=1

# Uncomment the next line to enable packet forwarding for IPv6
# Enabling this option disables Stateless Address Autoconfiguration
# based on Router Advertisements for this host
net.ipv6.conf.all.forwarding=1

To make sure, that is working I used your command echo 1 > /proc/sys/net/ipv4/ip_forward, too.

I also used iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
and my config server now looks:

port 1194
proto udp
dev tun0
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key # This file should be kept secret
dh ./easy-rsa2/keys/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
duplicate-cn
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
status openvpn-status.log
log-append openvpn.log
#Google DNS
#push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option DNS 8.8.4.4"
verb 4

Unfortunately the Internet access did not yet improve.

I am not sure about your question "NAT enabled?" How can I check this?
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Wed Feb 17, 2016 9:12 pm

Kulturmensch wrote:I am not sure about your question "NAT enabled?" How can I check this?
Kulturmensch wrote:I also used iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
That would be NAT, even your output interface is correct:
Kulturmensch wrote:here is what comes up using route - v on my server:

Kernel-IP-Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
default 85.214.64.1 0.0.0.0 UG 0 0 0 eth0
10.8.0.0 * 255.255.255.0 U 0 0 0 tun0
85.214.64.1 * 255.255.255.255 UH 0 0 0 eth0
However, this looks a bit odd with 85.214.64.1 as your gateway.

Try removing the current NAT rule (above) and replace it with:

Code: Select all

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source server.ip.address
what ever your server's eth0 IP address is.
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Wed Feb 17, 2016 10:00 pm

To remove
"iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE"

Is this the right command:

"iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE"
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Thu Feb 18, 2016 7:57 am

I have removed iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

Then, I used iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 85.214.80.189 instead.

Result:
Internet: same Problem, no improvement
Ping: now Ping from Server to client does not work any longer:

root@h2384168:~# ping -I 10.8.0.1 10.8.0.2
PING 10.8.0.2 (10.8.0.2) from 10.8.0.1 : 56(84) bytes of data.
--- 10.8.0.2 ping statistics ---
12 packets transmitted, 0 received, 100% packet loss, time 11088ms
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails

Post by Kulturmensch » Thu Feb 18, 2016 8:34 am

Removing again
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 85.214.80.189
with
iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 85.214.80.189
leads to working ping in both directions again.
By the way, I have Plesk 12.5 installed to manage my server and I am not entirely sure whether this is of relevance searching for the current openvpn problem.
Top
User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: client->server: ping ok, server->client: ping fails

Post by Traffic » Thu Feb 18, 2016 1:37 pm

This point (1):
Traffic wrote:
Kulturmensch wrote:It was the wrong forwarding directive by the Router what I checked due to your firewall comment. Now ping works in all directions.
not sure how your router would effect VPN data but ..
Your router absolutely should not effect packets of the VPN .. this ping must work.

This point (2):
Kulturmensch wrote:I have removed iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

Then, I used iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 85.214.80.189 instead.

Result:
Internet: same Problem, no improvement
Ping: now Ping from Server to client does not work any longer:
This is a problem because that NAT rule should not effect VPN packets until they egress the VPN to the physical network .. and yours is the first case I have come across where what you claim happens ..

I think point 1 & 2 above would indicate that this:
Kulturmensch wrote:I have Plesk 12.5 installed to manage my server and I am not entirely sure whether this is of relevance
is of some serious relevance .. I strongly advise you to ask your hosting company for some help.
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails +Ple

Post by Kulturmensch » Fri Feb 19, 2016 2:41 pm

I made some further tests.
  • If I disable IP6 protocols in the windows TCP-Configuration this raises no problem to establish the VPN tunnel but ping does not work in both directions.
  • If I enable IP6 again every thing works fine except the Internet access to many pages.
I guess if I could find out, why I can access i.e. this forum via the vpn tunnel but not a simple page like http://www.duden.de this would bring us more close to the generell problem.
What do you mean?
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: client->server: ping ok, server->client: ping fails +Ple

Post by Pippin » Fri Feb 19, 2016 2:50 pm

If you empty your browser cache and do this in cmd

Code: Select all

ipconfig /flushdns
gives same results?
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails +Ple

Post by Kulturmensch » Fri Feb 19, 2016 6:01 pm

Thanks for this hint!
The result is differen, indeedt! I.e. If I use ipconfig /flushdns then the Internetacces stops completely and I cannot any longer browse to any Internetpage. The chromebrowser gives now for all testet pages: DNS_PROBE_FINISHED_NO_INTERNET
Top
User avatar
Kulturmensch
OpenVPN User
Posts: 28
Joined: Tue Feb 16, 2016 8:06 am
Contact:
Contact Kulturmensch

Re: client->server: ping ok, server->client: ping fails +Ple

Post by Kulturmensch » Fri Feb 19, 2016 6:20 pm

Next Test: if I disable #push "dhcp-option DNS 10.8.0.1"
in the server config, then ipconfig /flushdns does not have an impact and I can again browse through some pages (including this one:-))
Top
Post Reply

Return to “Configuration”