Problem ( Cant's access !!! )

[shamali]

Hi,

I have been using openVPN for the last two years and it was very smooth and perfect.

Recently, ( two days ago ) i was NOT able to access du to some problems !!

Could any one fix my problem ???

Pls. see below the message i get when i try to connect

Mon Jan 21 15:39:07 2013 us=951000 Current Parameter Settings:
Mon Jan 21 15:39:07 2013 us=951000 config = 'ovpn046.ovpn'
Mon Jan 21 15:39:07 2013 us=951000 mode = 0
Mon Jan 21 15:39:07 2013 us=951000 show_ciphers = DISABLED
Mon Jan 21 15:39:07 2013 us=951000 show_digests = DISABLED
Mon Jan 21 15:39:07 2013 us=951000 NOTE: --mute triggered...
Mon Jan 21 15:39:07 2013 us=951000 267 variation(s) on previous 5 message(s) suppressed by --mute
Mon Jan 21 15:39:07 2013 us=951000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 8 2010
Mon Jan 21 15:39:07 2013 us=951000 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 21 15:39:07 2013 us=951000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 21 15:39:15 2013 us=65000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Jan 21 15:39:15 2013 us=65000 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon Jan 21 15:39:15 2013 us=65000 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 21 15:39:15 2013 us=65000 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 21 15:39:15 2013 us=80000 Control Channel MTU parms [ L:1543 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jan 21 15:39:15 2013 us=80000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 21 15:39:15 2013 us=80000 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Mon Jan 21 15:39:15 2013 us=80000 Local Options String: 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Jan 21 15:39:15 2013 us=80000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_SERVER,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Jan 21 15:39:15 2013 us=80000 Local Options hash (VER=V4): 'd8421bb0'
Mon Jan 21 15:39:15 2013 us=80000 Expected Remote Options hash (VER=V4): 'c413e92e'
Mon Jan 21 15:39:15 2013 us=80000 Attempting to establish TCP connection with 213.179.210.49:443
Mon Jan 21 15:39:16 2013 us=453000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Jan 21 15:39:22 2013 us=880000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Jan 21 15:39:29 2013 us=261000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Jan 21 15:39:35 2013 us=704000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Jan 21 15:39:42 2013 us=162000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Jan 21 15:39:48 2013 us=621000 NOTE: --mute triggered...

[maikcat]

hi there,

Mon Jan 21 15:39:22 2013 us=880000 TCP: connect to 213.179.210.49:443 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)

this tells it all...

the remote site drops your request,possible reasons?

remote firewall blocks you,
remote server blocks you,

are you using proxy server?

post also your configs..

Michael.

[shamali]

Thank you maikcat for you prompt responce

I guess that i do not use a proxy server !

Regarding my Config.... do u mean to send you the files ? pls. bear with me as i have no idea and VPN was installed by one of my friend, i do apologize for that

[maikcat]

do u mean to send you the files ?

whatever i ask you ,you should post it here...


so others can read it as well....


ps: i am not the only mod here...

Michael.

[shamali]

ooooops !

I have the following files in my Config folder :

ca
ovpn046

both are security certificates


ovpno46
ta

these are KEY Files

do you mean the above files or others ???

[maikcat]

these files have an extention...

if they are .crt .key then no i dont want them

i am looking for a file with ext .ovpn or .conf...

Michael.

[shamali]

this is the info in my OpenVPN Config. file

remote 213.179.210.49 443
proto tcp
ca ca.crt
cert ovpn046.crt
key ovpn046.key
tls-auth ta.key 1
cipher BF-CBC
client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
verb 4
mute 5
tun-mtu 1500
route-method exe
route-delay 2

[maikcat]

hi there,

ok no proxy used...

if you try a

telnet 213.179.210.49 443

you should get an answer (from command line)

if not then something blocks you or the remote is down...

Michael.