Can't connect to the Internet through VPN

LukusAurelius · Post by **LukusAurelius** » Thu Nov 06, 2014 1:04 am

I am running an OpenVPN server for personal use. The problem is, I can't use it for privacy/unblocking websites because I can't connect to the internet when routing all traffic through the VPN. When I wasn't routing all traffic through the server, my IP wouldn't change and websites weren't unblocked. I added "push redirect-gateway def1" to the server, connected, and tried to load a webpage. I got a DNS lookup error. I tried adding "push dhcp-option DNS 8.8.8.8" to the server and "dhcp-option DNS 8.8.8.8" to the server, but still got the same DNS error. What can I do to fix this?

The client is an iPad 3 running iOS 8.1 and the latest update of the OpenVPN app. The server is a Windows 7 x64 PC; in the firewall UDP 1194, TCP 443, and TCP 943 are opened. Those ports are forwarded to the server by the router.

Configs:

Server:

Code: Select all

local 192.168.1.123

port 1194

proto udp

dev tun

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"

dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"

server 31.14.15.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 3

cipher AES-256-CBC
keysize 256
auth SHA256

Client:

Code: Select all

client

redirect-gateway

dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4

dev tun

proto udp

remote xx.xxx.xx.xxx 1194

resolv-retry infinite

nobind

persist-key
persist-tun

<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
</key>

ns-cert-type server

comp-lzo

verb 3

cipher AES-256-CBC
keysize 256
auth SHA256

If you need any more information, please ask!

-Lukus

Traffic · Post by **Traffic** » Thu Nov 06, 2014 11:42 am

LukusAurelius wrote:If you need any more information, please ask!

Please post your server and client logs.

In advance .. have you enabled IP_Forwarding on the server ?

LukusAurelius · Post by **LukusAurelius** » Thu Nov 06, 2014 4:48 pm

Client log:

Code: Select all

2014-11-06 08:05:51 LZO-ASYM init swap=0 asym=0
2014-11-06 08:05:51 EVENT: RESOLVE
2014-11-06 08:05:51 Contacting xx.xxx.xx.xxx:1194 via UDP
2014-11-06 08:05:51 EVENT: WAIT
2014-11-06 08:05:51 SetTunnelSocket returned 1
2014-11-06 08:05:51 Connecting to xx.xxx.xx.xxx (xx.xxx.xx.xxx) via UDPv4
2014-11-06 08:05:51 EVENT: CONNECTING
2014-11-06 08:05:51 Tunnel Options:V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client
2014-11-06 08:05:51 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-06 08:05:51 VERIFY OK: depth=1
cert. version    : 3
serial number    : BB:81:49:96:7F:E5:03:C1
issuer name      : C=US, ST=**, L=**, O=**, OU=**, CN=server, ??=**, emailAddress=**
subject name      : C=US, ST=**, L=**, O=**, OU=**, CN=server, ??=**, emailAddress=**
issued  on        : 2014-10-31 17:17:42
expires on        : 2024-10-28 17:17:42
signed using      : RSA with SHA1
RSA key size      : 1024 bits
basic constraints : CA=true

2014-11-06 08:05:51 VERIFY OK: depth=0
cert. version    : 3
serial number    : 01
issuer name      : C=US, ST=**, L=**, O=**, OU=**, CN=server, ??=**, emailAddress=**
subject name      : C=US, ST=**, L=**, O=**, OU=**, CN=server, ??=****, emailAddress=****
issued  on        : 2014-10-31 17:19:35
expires on        : 2024-10-28 17:19:35
signed using      : RSA with MD5
RSA key size      : 1024 bits
basic constraints : CA=false
cert. type        : SSL Server
key usage        : Digital Signature, Key Encipherment
ext key usage    : TLS Web Server Authentication

2014-11-06 08:05:51 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-06 08:05:51 Session is ACTIVE
2014-11-06 08:05:51 EVENT: GET_CONFIG
2014-11-06 08:05:51 Sending PUSH_REQUEST to server...
2014-11-06 08:05:51 OPTIONS:
0 [redirect-gateway] 
1 [dhcp-option] [DNS] [8.8.8.8] 
2 [dhcp-option] [DNS] [8.8.4.4] 
3 [redirect-gateway] [def1] 
4 [dhcp-option] [DNS] [8.8.8.8] 
5 [dhcp-option] [DNS] [8.8.4.4] 
6 [route] [31.14.15.1] 
7 [topology] [net30] 
8 [ping] [10] 
9 [ping-restart] [120] 
10 [ifconfig] [31.14.15.6] [31.14.15.5] 

2014-11-06 08:05:51 LZO-ASYM init swap=0 asym=0
2014-11-06 08:05:51 EVENT: ASSIGN_IP
2014-11-06 08:05:51 Connected via tun
2014-11-06 08:05:51 EVENT: CONNECTED @xx.xxx.xx.xxx:1194 (xx.xxx.xx.xxx) via /UDPv4 on tun/31.14.15.6/
2014-11-06 08:05:52 NET Internet:ReachableViaWiFi/-R t----l-
2014-11-06 08:05:52 SetStatus Connected

Server log:

Code: Select all

Thu Nov 06 09:56:17 2014 us=754904   allow_pull_fqdn = DISABLED
Thu Nov 06 09:56:17 2014 us=754904   route 31.14.15.0/255.255.255.0/nil/nil
Thu Nov 06 09:56:17 2014 us=754904   management_addr = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=754904   management_port = 0
Thu Nov 06 09:56:17 2014 us=754904   management_user_pass = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=754904   management_log_history_cache = 250
Thu Nov 06 09:56:17 2014 us=759904   management_echo_buffer_size = 100
Thu Nov 06 09:56:17 2014 us=759904   management_write_peer_info_file = '[UNDEF]'

Thu Nov 06 09:56:17 2014 us=759904   management_client_user = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=759904   management_client_group = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=759904   management_flags = 0
Thu Nov 06 09:56:17 2014 us=759904   shared_secret_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=759904   key_direction = 0
Thu Nov 06 09:56:17 2014 us=759904   ciphername_defined = ENABLED
Thu Nov 06 09:56:17 2014 us=759904   ciphername = 'AES-256-CBC'
Thu Nov 06 09:56:17 2014 us=764904   authname_defined = ENABLED
Thu Nov 06 09:56:17 2014 us=764904   authname = 'SHA256'
Thu Nov 06 09:56:17 2014 us=764904   prng_hash = 'SHA1'
Thu Nov 06 09:56:17 2014 us=764904   prng_nonce_secret_len = 16
Thu Nov 06 09:56:17 2014 us=764904   keysize = 32
Thu Nov 06 09:56:17 2014 us=764904   engine = DISABLED
Thu Nov 06 09:56:17 2014 us=764904   replay = ENABLED
Thu Nov 06 09:56:17 2014 us=764904   mute_replay_warnings = DISABLED
Thu Nov 06 09:56:17 2014 us=764904   replay_window = 64
Thu Nov 06 09:56:17 2014 us=764904   replay_time = 15
Thu Nov 06 09:56:17 2014 us=764904   packet_id_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=764904   use_iv = ENABLED
Thu Nov 06 09:56:17 2014 us=769904   test_crypto = DISABLED
Thu Nov 06 09:56:17 2014 us=769904   tls_server = ENABLED
Thu Nov 06 09:56:17 2014 us=769904   tls_client = DISABLED
Thu Nov 06 09:56:17 2014 us=769904   key_method = 2
Thu Nov 06 09:56:17 2014 us=769904   ca_file = 'C:\Program Files\OpenVPN\config\
ca.crt'
Thu Nov 06 09:56:17 2014 us=769904   ca_path = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=769904   dh_file = 'C:\Program Files\OpenVPN\config\
dh1024.pem'
Thu Nov 06 09:56:17 2014 us=769904   cert_file = 'C:\Program Files\OpenVPN\confi
g\server.crt'
Thu Nov 06 09:56:17 2014 us=769904   priv_key_file = 'C:\Program Files\OpenVPN\c
onfig\server.key'
Thu Nov 06 09:56:17 2014 us=774904   pkcs12_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   cryptoapi_cert = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   cipher_list = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   tls_verify = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   tls_export_cert = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   verify_x509_type = 0
Thu Nov 06 09:56:17 2014 us=774904   verify_x509_name = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   crl_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=774904   ns_cert_type = 0
Thu Nov 06 09:56:17 2014 us=774904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=774904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=779904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=784904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=784904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=784904   remote_cert_ku[i] = 0
Thu Nov 06 09:56:17 2014 us=784904   remote_cert_eku = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=784904   ssl_flags = 0
Thu Nov 06 09:56:17 2014 us=784904   tls_timeout = 2
Thu Nov 06 09:56:17 2014 us=784904   renegotiate_bytes = 0
Thu Nov 06 09:56:17 2014 us=784904   renegotiate_packets = 0
Thu Nov 06 09:56:17 2014 us=784904   renegotiate_seconds = 3600
Thu Nov 06 09:56:17 2014 us=784904   handshake_window = 60
Thu Nov 06 09:56:17 2014 us=784904   transition_window = 3600
Thu Nov 06 09:56:17 2014 us=784904   single_session = DISABLED
Thu Nov 06 09:56:17 2014 us=784904   push_peer_info = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   tls_exit = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   tls_auth_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=789904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_protected_authentication = DISABLED
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=794904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_private_mode = 00000000
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=799904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_cert_private = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_pin_cache_period = -1
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_id = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=804904   pkcs11_id_management = DISABLED
Thu Nov 06 09:56:17 2014 us=804904   server_network = 31.14.15.0
Thu Nov 06 09:56:17 2014 us=804904   server_netmask = 255.255.255.0
Thu Nov 06 09:56:17 2014 us=809904   server_network_ipv6 = ::
Thu Nov 06 09:56:17 2014 us=809904   server_netbits_ipv6 = 0
Thu Nov 06 09:56:17 2014 us=809904   server_bridge_ip = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=809904   server_bridge_netmask = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=809904   server_bridge_pool_start = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=809904   server_bridge_pool_end = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=809904   push_entry = 'redirect-gateway def1'
Thu Nov 06 09:56:17 2014 us=809904   push_entry = 'dhcp-option DNS 8.8.8.8'
Thu Nov 06 09:56:17 2014 us=809904   push_entry = 'dhcp-option DNS 8.8.4.4'
Thu Nov 06 09:56:17 2014 us=814904   push_entry = 'route 31.14.15.1'
Thu Nov 06 09:56:17 2014 us=814904   push_entry = 'topology net30'
Thu Nov 06 09:56:17 2014 us=814904   push_entry = 'ping 10'
Thu Nov 06 09:56:17 2014 us=814904   push_entry = 'ping-restart 120'
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_defined = ENABLED
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_start = 31.14.15.4
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_end = 31.14.15.251
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_netmask = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_persist_filename = 'ipp.txt'
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_pool_persist_refresh_freq = 600
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_ipv6_pool_defined = DISABLED
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_ipv6_pool_base = ::
Thu Nov 06 09:56:17 2014 us=814904   ifconfig_ipv6_pool_netbits = 0
Thu Nov 06 09:56:17 2014 us=819904   n_bcast_buf = 256
Thu Nov 06 09:56:17 2014 us=819904   tcp_queue_limit = 64
Thu Nov 06 09:56:17 2014 us=819904   real_hash_size = 256
Thu Nov 06 09:56:17 2014 us=819904   virtual_hash_size = 256
Thu Nov 06 09:56:17 2014 us=819904   client_connect_script = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=819904   learn_address_script = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=819904   client_disconnect_script = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=819904   client_config_dir = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=819904   ccd_exclusive = DISABLED
Thu Nov 06 09:56:17 2014 us=819904   tmp_dir = 'C:\Users\Luke\AppData\Local\Temp
\'
Thu Nov 06 09:56:17 2014 us=819904   push_ifconfig_defined = DISABLED
Thu Nov 06 09:56:17 2014 us=819904   push_ifconfig_local = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=819904   push_ifconfig_remote_netmask = 0.0.0.0
Thu Nov 06 09:56:17 2014 us=824904   push_ifconfig_ipv6_defined = DISABLED
Thu Nov 06 09:56:17 2014 us=824904   push_ifconfig_ipv6_local = ::/0
Thu Nov 06 09:56:17 2014 us=824904   push_ifconfig_ipv6_remote = ::
Thu Nov 06 09:56:17 2014 us=824904   enable_c2c = DISABLED
Thu Nov 06 09:56:17 2014 us=824904   duplicate_cn = DISABLED
Thu Nov 06 09:56:17 2014 us=824904   cf_max = 0
Thu Nov 06 09:56:17 2014 us=824904   cf_per = 0
Thu Nov 06 09:56:17 2014 us=824904   max_clients = 1024
Thu Nov 06 09:56:17 2014 us=824904   max_routes_per_client = 256
Thu Nov 06 09:56:17 2014 us=824904   auth_user_pass_verify_script = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=824904   auth_user_pass_verify_script_via_file = DIS
ABLED
Thu Nov 06 09:56:17 2014 us=824904   client = DISABLED
Thu Nov 06 09:56:17 2014 us=824904   pull = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   auth_user_pass_file = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=829904   show_net_up = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   route_method = 0
Thu Nov 06 09:56:17 2014 us=829904   ip_win32_defined = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   ip_win32_type = 3
Thu Nov 06 09:56:17 2014 us=829904   dhcp_masq_offset = 0
Thu Nov 06 09:56:17 2014 us=829904   dhcp_lease_time = 31536000
Thu Nov 06 09:56:17 2014 us=829904   tap_sleep = 10
Thu Nov 06 09:56:17 2014 us=829904   dhcp_options = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   dhcp_renew = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   dhcp_pre_release = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   dhcp_release = DISABLED
Thu Nov 06 09:56:17 2014 us=829904   domain = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=834904   netbios_scope = '[UNDEF]'
Thu Nov 06 09:56:17 2014 us=834904   netbios_node_type = 0
Thu Nov 06 09:56:17 2014 us=834904   disable_nbt = DISABLED
Thu Nov 06 09:56:17 2014 us=834904 OpenVPN 2.3.5 x86_64-w64-mingw32 [SSL (OpenSS
L)] [LZO] [PKCS11] [IPv6] built on Oct 28 2014
Thu Nov 06 09:56:17 2014 us=834904 library versions: OpenSSL 1.0.1j 15 Oct 2014,
 LZO 2.05
Thu Nov 06 09:56:17 2014 us=839904 NOTE: your local LAN uses the extremely commo
n subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create ro
uting conflicts if you connect to the VPN server from public locations such as i
nternet cafes that use the same subnet.
Thu Nov 06 09:56:17 2014 us=984904 Diffie-Hellman initialized with 1024 bit key
Thu Nov 06 09:56:17 2014 us=984904 TLS-Auth MTU parms [ L:1570 D:138 EF:38 EB:0
ET:0 EL:0 ]
Thu Nov 06 09:56:17 2014 us=984904 Socket Buffers: R=[8192->8192] S=[8192->8192]

Thu Nov 06 09:56:17 2014 us=989904 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv
6_setup=0
Thu Nov 06 09:56:17 2014 us=989904 open_tun, tt->ipv6=0
Thu Nov 06 09:56:17 2014 us=989904 TAP-WIN32 device [OpenVPN] opened: \\.\Global
\{C7594811-7E01-4170-B7DF-29D592C0EBD5}.tap
Thu Nov 06 09:56:17 2014 us=994904 TAP-Windows Driver Version 9.9
Thu Nov 06 09:56:17 2014 us=994904 TAP-Windows MTU=1500
Thu Nov 06 09:56:17 2014 us=994904 Notified TAP-Windows driver to set a DHCP IP/
netmask of 31.14.15.1/255.255.255.252 on interface {C7594811-7E01-4170-B7DF-29D5
92C0EBD5} [DHCP-serv: 31.14.15.2, lease-time: 31536000]
Thu Nov 06 09:56:17 2014 us=994904 Sleeping for 10 seconds...
Thu Nov 06 09:56:27 2014 us=995918 Successful ARP Flush on interface [22] {C7594
811-7E01-4170-B7DF-29D592C0EBD5}
Thu Nov 06 09:56:27 2014 us=995918 C:\Windows\system32\route.exe ADD 31.14.15.0
MASK 255.255.255.0 31.14.15.2
Thu Nov 06 09:56:28 2014 us=918 ROUTE: route addition failed using CreateIpForwa
rdEntry: The object already exists.   [status=5010 if_index=22]
Thu Nov 06 09:56:28 2014 us=918 Route addition via IPAPI failed [adaptive]
Thu Nov 06 09:56:28 2014 us=918 Route addition fallback to route.exe
Thu Nov 06 09:56:28 2014 us=918 env_block: add PATH=C:\Windows\System32;C:\WINDO
WS;C:\WINDOWS\System32\Wbem
Thu Nov 06 09:56:28 2014 us=30918 Data Channel MTU parms [ L:1570 D:1450 EF:70 E
B:135 ET:0 EL:0 AF:3/1 ]
Thu Nov 06 09:56:28 2014 us=30918 UDPv4 link local (bound): [AF_INET]192.168.1.1
23:1194
Thu Nov 06 09:56:28 2014 us=30918 UDPv4 link remote: [undef]
Thu Nov 06 09:56:28 2014 us=30918 MULTI: multi_init called, r=256 v=256
Thu Nov 06 09:56:28 2014 us=30918 IFCONFIG POOL: base=31.14.15.4 size=62, ipv6=0

Thu Nov 06 09:56:28 2014 us=30918 ifconfig_pool_read(), in='Luke-iPad,31.14.15.4
', TODO: IPv6
Thu Nov 06 09:56:28 2014 us=30918 succeeded -> ifconfig_pool_set()
Thu Nov 06 09:56:28 2014 us=30918 IFCONFIG POOL LIST
Thu Nov 06 09:56:28 2014 us=30918 Luke-iPad,31.14.15.4
Thu Nov 06 09:56:28 2014 us=30918 Initialization Sequence Completed
Thu Nov 06 09:57:07 2014 us=103972 MULTI: multi_create_instance called
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Re-using SSL/TLS context
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 LZO compression initialize
d
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Control Channel MTU parms
[ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Data Channel MTU parms [ L
:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Local Options String: 'V4,
dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,
auth SHA256,keysize 256,key-method 2,tls-server'
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Expected Remote Options St
ring: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AE
S-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Local Options hash (VER=V4
): '79a26cd9'
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 Expected Remote Options ha
sh (VER=V4): 'fc8ba345'
Thu Nov 06 09:57:07 2014 us=103972 xx.xxx.xx.xxx:11398 TLS: Initial packet from [
AF_INET]xx.xxx.xx.xxx:11398, sid=c7b68958 5bd1eb58
Thu Nov 06 09:57:07 2014 us=653973 xx.xxx.xx.xxx:11398 VERIFY OK: depth=1, C=US,
ST=**, L=**, O=Ridgefield, OU=Ridgefield, CN=server, name=**, emai
lAddress=**
Thu Nov 06 09:57:07 2014 us=653973 xx.xxx.xx.xxx:11398 VERIFY OK: depth=0, C=US,
ST=**, L=**, O=Ridgefield, OU=**, CN=Luke-iPad, name=**, ema
ilAddress=**
Thu Nov 06 09:57:07 2014 us=703973 xx.xxx.xx.xxx:11398 Data Channel Encrypt: Ciph
er 'AES-256-CBC' initialized with 256 bit key
Thu Nov 06 09:57:07 2014 us=703973 xx.xxx.xx.xxx:11398 Data Channel Encrypt: Usin
g 256 bit message hash 'SHA256' for HMAC authentication
Thu Nov 06 09:57:07 2014 us=703973 xx.xxx.xx.xxx:11398 Data Channel Decrypt: Ciph
er 'AES-256-CBC' initialized with 256 bit key
Thu Nov 06 09:57:07 2014 us=703973 xx.xxx.xx.xxx:11398 Data Channel Decrypt: Usin
g 256 bit message hash 'SHA256' for HMAC authentication
Thu Nov 06 09:57:07 2014 us=758973 xx.xxx.xx.xxx:11398 Control Channel: TLSv1, ci
pher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Nov 06 09:57:07 2014 us=758973 xx.xxx.xx.xxx:11398 [Luke-iPad] Peer Connectio
n Initiated with [AF_INET]xx.xxx.xx.xxx:11398
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xx.xxx.xx.xxx:11398 MULTI_sva: pool
returned IPv4=31.14.15.6, IPv6=(Not enabled)
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xx.xxx.xx.xxx:11398 MULTI: Learn: 31
.14.15.6 -> Luke-iPad/xx.xxx.xx.xxx:11398
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xx.xxx.xx.xxx:11398 MULTI: primary v
irtual IP for Luke-iPad/xx.xxx.xx.xxx:11398: 31.14.15.6
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xx.xxx.xx.xxx:11398 PUSH: Received c
ontrol message: 'PUSH_REQUEST'
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xxx.xx.xxx.xx:11398 send_push_reply(
): safe_cap=940
Thu Nov 06 09:57:07 2014 us=758973 Luke-iPad/xxx.xx.xxx.xx:11398 SENT CONTROL [Lu
ke-iPad]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option
DNS 8.8.4.4,route 31.14.15.1,topology net30,ping 10,ping-restart 120,ifconfig 31
.14.15.6 31.14.15.5' (status=1)
Thu Nov 06 09:57:13 2014 us=109980 Luke-iPad/xx.xxx.xx.xxx:11398 SIGTERM[soft,rem
ote-exit] received, client-instance exiting

I think IP Forwarding is on, but I am not sure.
Tell me if you need more info!

-Lukus

Traffic · Post by **Traffic** » Fri Nov 07, 2014 12:15 am

LukusAurelius wrote:I think IP Forwarding is on, but I am not sure.
Tell me if you need more info!

Is IP_Forwarding enabled or not

LukusAurelius · Post by **LukusAurelius** » Fri Nov 07, 2014 12:29 am

What do I look at to see if IP_Forwarding is on? I didn't ever turn it on to my knowledge. I suspect that I am not seeing what I am looking right at.

Traffic · Post by **Traffic** » Fri Nov 07, 2014 1:59 am

LukusAurelius wrote:What do I look at to see if IP_Forwarding is on?

Google ...

Try this https://lmddgtfy.net/?q=site%3Aopenvpn. ... forwarding

LukusAurelius · Post by **LukusAurelius** » Fri Nov 07, 2014 2:23 am

Ok, it is on now. Still not able to load anything internet related on the client device while using my VPN.

OpenVPN Support Forum

Can't connect to the Internet through VPN

Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN

Re: Can't connect to the Internet through VPN