Setup
OpenVPN server: commercial VPN host, I have no access to logs or config.
OpenVPN client: OpenVPN 2.4.7 Community Edition on Raspberry Pi Model 3B+ (Raspbian Buster lite, headless, predictable naming of interfaces) - full access to logs & config.
There's an abundance of guides online to walk you through setting up an access-point on a Pi (with dnsmasq & hostapd et al) and sending all traffic through an OpenVPN tunnel.
They roughly boil down to:
- Install and configure OpenVPN, hostapd, dnsmasq
- set net.ipv4.ip_forward=1 in /etc/sysctl.conf
- set up forwarding/masquerade
Code: Select all
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE iptables -A FORWARD -i tun0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i wlan0 -o tun0 -j ACCEPT - start openvpn
- start hostapd
- connect to new access-point and test
- Device connected to the Pi's access-point is issued IP 192.168.10.35
- Device connected to the Pi's access-point successfully runs the following with no loss of packets
Code: Select all
ping -C 3 192.168.10.1 ping -C 3 8.8.8.8 ping -C 3 www.yahoo.com
andreturns the expected destination of the VPN tunnel.Code: Select all
curl ipinfo.io
As I understand it, this is achieved by adding
Code: Select all
pull-filter ignore redirect-gateway
- Device connected to the Pi's access-point successfully runs
with no loss of packets however the following both fail.
Code: Select all
ping -C 3 192.168.10.1Code: Select all
ping -C 3 8.8.8.8 ping -C 3 www.yahoo.com
I've googled this for a day and not found anything that relates exactly to this situation and tried a number of experimental settings which have all failed.
I understand that I can use OpenVPN's route options to divert traffic to a destination via the tunnel, but I need to filter traffic from an interface (wlan0).
My questions are:
- Can this split-tunneling from one interface be done?
- Can it be done within the OpenVPN config?
- Failing that, can it be done outside the OpenVPN config?
- Which is more efficient?
I've seen several suggestions of setting up a bridge between wlan0 and tun0 but I'd like to avoid using a bridge unless this absolutely can't be achieved with iptables/routing/OpenVPN.
Thanks for getting this far, all help appreciated.
Further details:
OpenVPN-server conf: no access
OpenVPN-server log: no access
OpenVPN-client conf:
- RUN 1
client
client
dev tun
proto udp
remote ZZZ.ZZZ.ZZZ.ZZZ ZZZZZ
resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0
comp-lzo no
remote-cert-tls server
auth-user-pass /etc/openvpn/client/auth
verb 4
pull
fast-io
cipher AES-256-CBC
auth SHA512
log /home/pi/openvpn.log
RUN 2 unchanged from RUN 1 except the addition of:
client
pull-filter ignore redirect-gateway
- RUN 1
RUN 2:
Code: Select all
Fri Nov 6 11:10:23 2020 us=269310 Current Parameter Settings: Fri Nov 6 11:10:23 2020 us=269566 config = 'ovpn.conf' Fri Nov 6 11:10:23 2020 us=269621 mode = 0 Fri Nov 6 11:10:23 2020 us=269670 persist_config = DISABLED Fri Nov 6 11:10:23 2020 us=269719 persist_mode = 1 Fri Nov 6 11:10:23 2020 us=269767 show_ciphers = DISABLED Fri Nov 6 11:10:23 2020 us=269815 show_digests = DISABLED Fri Nov 6 11:10:23 2020 us=269863 show_engines = DISABLED Fri Nov 6 11:10:23 2020 us=269911 genkey = DISABLED Fri Nov 6 11:10:23 2020 us=269958 key_pass_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=270006 show_tls_ciphers = DISABLED Fri Nov 6 11:10:23 2020 us=270054 connect_retry_max = 0 Fri Nov 6 11:10:23 2020 us=270102 Connection profiles [0]: Fri Nov 6 11:10:23 2020 us=270151 proto = udp Fri Nov 6 11:10:23 2020 us=270199 local = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=270247 local_port = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=270294 remote = 'ZZZ.ZZZ.ZZZ.ZZZ' Fri Nov 6 11:10:23 2020 us=270342 remote_port = 'ZZZZZ' Fri Nov 6 11:10:23 2020 us=270389 remote_float = DISABLED Fri Nov 6 11:10:23 2020 us=270436 bind_defined = DISABLED Fri Nov 6 11:10:23 2020 us=270484 bind_local = DISABLED Fri Nov 6 11:10:23 2020 us=270531 bind_ipv6_only = DISABLED Fri Nov 6 11:10:23 2020 us=270579 connect_retry_seconds = 5 Fri Nov 6 11:10:23 2020 us=270627 connect_timeout = 120 Fri Nov 6 11:10:23 2020 us=270674 socks_proxy_server = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=270721 socks_proxy_port = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=270769 tun_mtu = 1500 Fri Nov 6 11:10:23 2020 us=270817 tun_mtu_defined = ENABLED Fri Nov 6 11:10:23 2020 us=270864 link_mtu = 1500 Fri Nov 6 11:10:23 2020 us=270911 link_mtu_defined = DISABLED Fri Nov 6 11:10:23 2020 us=270960 tun_mtu_extra = 32 Fri Nov 6 11:10:23 2020 us=271008 tun_mtu_extra_defined = ENABLED Fri Nov 6 11:10:23 2020 us=271055 mtu_discover_type = -1 Fri Nov 6 11:10:23 2020 us=271103 fragment = 0 Fri Nov 6 11:10:23 2020 us=271151 mssfix = 1450 Fri Nov 6 11:10:23 2020 us=271198 explicit_exit_notification = 0 Fri Nov 6 11:10:23 2020 us=271246 Connection profiles END Fri Nov 6 11:10:23 2020 us=271293 remote_random = ENABLED Fri Nov 6 11:10:23 2020 us=271340 ipchange = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271387 dev = 'tun' Fri Nov 6 11:10:23 2020 us=271435 dev_type = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271482 dev_node = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271529 lladdr = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271577 topology = 1 Fri Nov 6 11:10:23 2020 us=271624 ifconfig_local = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271672 ifconfig_remote_netmask = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271719 ifconfig_noexec = DISABLED Fri Nov 6 11:10:23 2020 us=271766 ifconfig_nowarn = DISABLED Fri Nov 6 11:10:23 2020 us=271815 ifconfig_ipv6_local = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271863 ifconfig_ipv6_netbits = 0 Fri Nov 6 11:10:23 2020 us=271910 ifconfig_ipv6_remote = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=271958 shaper = 0 Fri Nov 6 11:10:23 2020 us=272005 mtu_test = 0 Fri Nov 6 11:10:23 2020 us=272052 mlock = DISABLED Fri Nov 6 11:10:23 2020 us=272100 keepalive_ping = 0 Fri Nov 6 11:10:23 2020 us=272147 keepalive_timeout = 0 Fri Nov 6 11:10:23 2020 us=272195 inactivity_timeout = 0 Fri Nov 6 11:10:23 2020 us=272242 ping_send_timeout = 15 Fri Nov 6 11:10:23 2020 us=272290 ping_rec_timeout = 0 Fri Nov 6 11:10:23 2020 us=272337 ping_rec_timeout_action = 2 Fri Nov 6 11:10:23 2020 us=272384 ping_timer_remote = ENABLED Fri Nov 6 11:10:23 2020 us=272432 remap_sigusr1 = 0 Fri Nov 6 11:10:23 2020 us=272479 persist_tun = ENABLED Fri Nov 6 11:10:23 2020 us=272526 persist_local_ip = DISABLED Fri Nov 6 11:10:23 2020 us=272573 persist_remote_ip = DISABLED Fri Nov 6 11:10:23 2020 us=272620 persist_key = ENABLED Fri Nov 6 11:10:23 2020 us=272666 passtos = DISABLED Fri Nov 6 11:10:23 2020 us=272714 resolve_retry_seconds = 1000000000 Fri Nov 6 11:10:23 2020 us=272761 resolve_in_advance = DISABLED Fri Nov 6 11:10:23 2020 us=272834 username = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=272882 groupname = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=272930 chroot_dir = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=272977 cd_dir = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=273024 writepid = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=273072 up_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=273119 down_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=273165 down_pre = DISABLED Fri Nov 6 11:10:23 2020 us=273212 up_restart = DISABLED Fri Nov 6 11:10:23 2020 us=273259 up_delay = DISABLED Fri Nov 6 11:10:23 2020 us=273306 daemon = DISABLED Fri Nov 6 11:10:23 2020 us=273353 inetd = 0 Fri Nov 6 11:10:23 2020 us=273400 log = ENABLED Fri Nov 6 11:10:23 2020 us=273448 suppress_timestamps = DISABLED Fri Nov 6 11:10:23 2020 us=273495 machine_readable_output = DISABLED Fri Nov 6 11:10:23 2020 us=273542 nice = 0 Fri Nov 6 11:10:23 2020 us=273589 verbosity = 4 Fri Nov 6 11:10:23 2020 us=273637 mute = 0 Fri Nov 6 11:10:23 2020 us=273684 gremlin = 0 Fri Nov 6 11:10:23 2020 us=273731 status_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=273779 status_file_version = 1 Fri Nov 6 11:10:23 2020 us=273826 status_file_update_freq = 60 Fri Nov 6 11:10:23 2020 us=273873 occ = ENABLED Fri Nov 6 11:10:23 2020 us=273920 rcvbuf = 0 Fri Nov 6 11:10:23 2020 us=273968 sndbuf = 0 Fri Nov 6 11:10:23 2020 us=274015 mark = 0 Fri Nov 6 11:10:23 2020 us=274062 sockflags = 0 Fri Nov 6 11:10:23 2020 us=274109 fast_io = ENABLED Fri Nov 6 11:10:23 2020 us=274156 comp.alg = 1 Fri Nov 6 11:10:23 2020 us=274203 comp.flags = 0 Fri Nov 6 11:10:23 2020 us=274257 route_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=274306 route_default_gateway = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=274355 route_default_metric = 0 Fri Nov 6 11:10:23 2020 us=274403 route_noexec = DISABLED Fri Nov 6 11:10:23 2020 us=274451 route_delay = 0 Fri Nov 6 11:10:23 2020 us=274499 route_delay_window = 30 Fri Nov 6 11:10:23 2020 us=274547 route_delay_defined = DISABLED Fri Nov 6 11:10:23 2020 us=274595 route_nopull = DISABLED Fri Nov 6 11:10:23 2020 us=274642 route_gateway_via_dhcp = DISABLED Fri Nov 6 11:10:23 2020 us=274690 allow_pull_fqdn = DISABLED Fri Nov 6 11:10:23 2020 us=274738 management_addr = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=274786 management_port = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=274834 management_user_pass = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=274883 management_log_history_cache = 250 Fri Nov 6 11:10:23 2020 us=274931 management_echo_buffer_size = 100 Fri Nov 6 11:10:23 2020 us=274980 management_write_peer_info_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=275028 management_client_user = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=275076 management_client_group = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=275124 management_flags = 0 Fri Nov 6 11:10:23 2020 us=275173 shared_secret_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=275222 key_direction = 1 Fri Nov 6 11:10:23 2020 us=275270 ciphername = 'AES-256-CBC' Fri Nov 6 11:10:23 2020 us=275318 ncp_enabled = ENABLED Fri Nov 6 11:10:23 2020 us=275367 ncp_ciphers = 'AES-256-GCM:AES-128-GCM' Fri Nov 6 11:10:23 2020 us=275415 authname = 'SHA512' Fri Nov 6 11:10:23 2020 us=275462 prng_hash = 'SHA1' Fri Nov 6 11:10:23 2020 us=275511 prng_nonce_secret_len = 16 Fri Nov 6 11:10:23 2020 us=275560 keysize = 0 Fri Nov 6 11:10:23 2020 us=275607 engine = DISABLED Fri Nov 6 11:10:23 2020 us=275655 replay = ENABLED Fri Nov 6 11:10:23 2020 us=275704 mute_replay_warnings = DISABLED Fri Nov 6 11:10:23 2020 us=275751 replay_window = 64 Fri Nov 6 11:10:23 2020 us=275799 replay_time = 15 Fri Nov 6 11:10:23 2020 us=275847 packet_id_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=275895 use_iv = ENABLED Fri Nov 6 11:10:23 2020 us=275943 test_crypto = DISABLED Fri Nov 6 11:10:23 2020 us=275991 tls_server = DISABLED Fri Nov 6 11:10:23 2020 us=276039 tls_client = ENABLED Fri Nov 6 11:10:23 2020 us=276087 key_method = 2 Fri Nov 6 11:10:23 2020 us=276158 ca_file = '[[INLINE]]' Fri Nov 6 11:10:23 2020 us=276207 ca_path = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276255 dh_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276303 cert_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276351 extra_certs_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276399 priv_key_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276448 pkcs12_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276496 cipher_list = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276543 cipher_list_tls13 = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276591 tls_cert_profile = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276639 tls_verify = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276687 tls_export_cert = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276736 verify_x509_type = 0 Fri Nov 6 11:10:23 2020 us=276784 verify_x509_name = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276833 crl_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=276881 ns_cert_type = 0 Fri Nov 6 11:10:23 2020 us=276929 remote_cert_ku[i] = 65535 Fri Nov 6 11:10:23 2020 us=276977 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277025 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277073 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277120 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277168 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277216 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277265 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277313 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277361 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277451 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277509 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277557 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277605 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277653 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277701 remote_cert_ku[i] = 0 Fri Nov 6 11:10:23 2020 us=277750 remote_cert_eku = 'TLS Web Server Authentication' Fri Nov 6 11:10:23 2020 us=277799 ssl_flags = 0 Fri Nov 6 11:10:23 2020 us=277848 tls_timeout = 2 Fri Nov 6 11:10:23 2020 us=277896 renegotiate_bytes = -1 Fri Nov 6 11:10:23 2020 us=277944 renegotiate_packets = 0 Fri Nov 6 11:10:23 2020 us=277992 renegotiate_seconds = 0 Fri Nov 6 11:10:23 2020 us=278039 handshake_window = 60 Fri Nov 6 11:10:23 2020 us=278087 transition_window = 3600 Fri Nov 6 11:10:23 2020 us=278135 single_session = DISABLED Fri Nov 6 11:10:23 2020 us=278182 push_peer_info = DISABLED Fri Nov 6 11:10:23 2020 us=278230 tls_exit = DISABLED Fri Nov 6 11:10:23 2020 us=278278 tls_auth_file = '[[INLINE]]' Fri Nov 6 11:10:23 2020 us=278326 tls_crypt_file = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=278374 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278422 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278469 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278517 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278565 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278613 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278661 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278710 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278758 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278806 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278854 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278902 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278950 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=278998 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=279046 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=279094 pkcs11_protected_authentication = DISABLED Fri Nov 6 11:10:23 2020 us=279144 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279217 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279266 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279315 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279365 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279414 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279462 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279511 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279560 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279608 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279656 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279704 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279752 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279801 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279850 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279899 pkcs11_private_mode = 00000000 Fri Nov 6 11:10:23 2020 us=279946 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=279994 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280042 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280090 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280138 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280185 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280234 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280281 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280329 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280377 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280425 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280473 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280521 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280569 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280617 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280664 pkcs11_cert_private = DISABLED Fri Nov 6 11:10:23 2020 us=280713 pkcs11_pin_cache_period = -1 Fri Nov 6 11:10:23 2020 us=280760 pkcs11_id = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=280808 pkcs11_id_management = DISABLED Fri Nov 6 11:10:23 2020 us=280862 server_network = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=280914 server_netmask = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281000 server_network_ipv6 = :: Fri Nov 6 11:10:23 2020 us=281051 server_netbits_ipv6 = 0 Fri Nov 6 11:10:23 2020 us=281103 server_bridge_ip = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281155 server_bridge_netmask = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281208 server_bridge_pool_start = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281260 server_bridge_pool_end = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281308 ifconfig_pool_defined = DISABLED Fri Nov 6 11:10:23 2020 us=281361 ifconfig_pool_start = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281413 ifconfig_pool_end = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281465 ifconfig_pool_netmask = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=281513 ifconfig_pool_persist_filename = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=281562 ifconfig_pool_persist_refresh_freq = 600 Fri Nov 6 11:10:23 2020 us=281611 ifconfig_ipv6_pool_defined = DISABLED Fri Nov 6 11:10:23 2020 us=281661 ifconfig_ipv6_pool_base = :: Fri Nov 6 11:10:23 2020 us=281710 ifconfig_ipv6_pool_netbits = 0 Fri Nov 6 11:10:23 2020 us=281758 n_bcast_buf = 256 Fri Nov 6 11:10:23 2020 us=281807 tcp_queue_limit = 64 Fri Nov 6 11:10:23 2020 us=281855 real_hash_size = 256 Fri Nov 6 11:10:23 2020 us=281903 virtual_hash_size = 256 Fri Nov 6 11:10:23 2020 us=281950 client_connect_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=281998 learn_address_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=282046 client_disconnect_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=282095 client_config_dir = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=282143 ccd_exclusive = DISABLED Fri Nov 6 11:10:23 2020 us=282190 tmp_dir = '/tmp' Fri Nov 6 11:10:23 2020 us=282262 push_ifconfig_defined = DISABLED Fri Nov 6 11:10:23 2020 us=282315 push_ifconfig_local = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=282368 push_ifconfig_remote_netmask = 0.0.0.0 Fri Nov 6 11:10:23 2020 us=282416 push_ifconfig_ipv6_defined = DISABLED Fri Nov 6 11:10:23 2020 us=282468 push_ifconfig_ipv6_local = ::/0 Fri Nov 6 11:10:23 2020 us=282519 push_ifconfig_ipv6_remote = :: Fri Nov 6 11:10:23 2020 us=282568 enable_c2c = DISABLED Fri Nov 6 11:10:23 2020 us=282615 duplicate_cn = DISABLED Fri Nov 6 11:10:23 2020 us=282663 cf_max = 0 Fri Nov 6 11:10:23 2020 us=282712 cf_per = 0 Fri Nov 6 11:10:23 2020 us=282760 max_clients = 1024 Fri Nov 6 11:10:23 2020 us=282808 max_routes_per_client = 256 Fri Nov 6 11:10:23 2020 us=282857 auth_user_pass_verify_script = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=282905 auth_user_pass_verify_script_via_file = DISABLED Fri Nov 6 11:10:23 2020 us=282954 auth_token_generate = DISABLED Fri Nov 6 11:10:23 2020 us=283001 auth_token_lifetime = 0 Fri Nov 6 11:10:23 2020 us=283049 port_share_host = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=283098 port_share_port = '[UNDEF]' Fri Nov 6 11:10:23 2020 us=283145 client = ENABLED Fri Nov 6 11:10:23 2020 us=283193 pull = ENABLED Fri Nov 6 11:10:23 2020 us=283242 auth_user_pass_file = '/etc/openvpn/client/auth' Fri Nov 6 11:10:23 2020 us=283295 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019 Fri Nov 6 11:10:23 2020 us=283377 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10 Fri Nov 6 11:10:23 2020 us=285330 WARNING: --ping should normally be used with --ping-restart or --ping-exit Fri Nov 6 11:10:23 2020 us=296425 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Fri Nov 6 11:10:23 2020 us=296557 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Fri Nov 6 11:10:23 2020 us=298687 Control Channel MTU parms [ L:1654 D:1140 EF:110 EB:0 ET:0 EL:3 ] Fri Nov 6 11:10:23 2020 us=298867 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ] Fri Nov 6 11:10:23 2020 us=299008 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client' Fri Nov 6 11:10:23 2020 us=299059 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server' Fri Nov 6 11:10:23 2020 us=299123 TCP/UDP: Preserving recently used remote address: [AF_INET]178.239.172.91:1194 Fri Nov 6 11:10:23 2020 us=299218 Socket Buffers: R=[180224->180224] S=[180224->180224] Fri Nov 6 11:10:23 2020 us=299268 UDP link local: (not bound) Fri Nov 6 11:10:23 2020 us=299320 UDP link remote: [AF_INET]178.239.172.91:1194 Fri Nov 6 11:10:23 2020 us=331499 TLS: Initial packet from [AF_INET]178.239.172.91:1194, sid=2772c026 95e9c6e7 Fri Nov 6 11:10:23 2020 us=331935 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Fri Nov 6 11:10:23 2020 us=409187 VERIFY OK: depth=2, C=PA, O=ZZZZZZZZ, CN=ZZZZZZZZ Root CA Fri Nov 6 11:10:23 2020 us=412022 VERIFY OK: depth=1, C=PA, O=ZZZZZZZZ, CN=ZZZZZZZZ CA5 Fri Nov 6 11:10:23 2020 us=414782 VERIFY KU OK Fri Nov 6 11:10:23 2020 us=414854 Validating certificate extended key usage Fri Nov 6 11:10:23 2020 us=414912 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Fri Nov 6 11:10:23 2020 us=414965 VERIFY EKU OK Fri Nov 6 11:10:23 2020 us=415016 VERIFY OK: depth=0, CN=ZZZ Fri Nov 6 11:10:23 2020 us=506378 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Fri Nov 6 11:10:23 2020 us=506618 [uk2155.nordvpn.com] Peer Connection Initiated with [AF_INET]ZZZ.ZZZ.ZZZ.ZZZ:ZZZZZ Fri Nov 6 11:10:24 2020 us=530846 SENT CONTROL [ZZZ]: 'PUSH_REQUEST' (status=1) Fri Nov 6 11:10:24 2020 us=562774 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS ZZZ.ZZZ.ZZZ.ZZZ,dhcp-option DNS 103.86.99.100,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.3.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.3.6 255.255.255.0,peer-id 5,cipher AES-256-GCM' Fri Nov 6 11:10:24 2020 us=563278 OPTIONS IMPORT: timers and/or timeouts modified Fri Nov 6 11:10:24 2020 us=563361 OPTIONS IMPORT: explicit notify parm(s) modified Fri Nov 6 11:10:24 2020 us=563432 OPTIONS IMPORT: compression parms modified Fri Nov 6 11:10:24 2020 us=563502 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Fri Nov 6 11:10:24 2020 us=563600 Socket Buffers: R=[180224->360448] S=[180224->360448] Fri Nov 6 11:10:24 2020 us=563668 OPTIONS IMPORT: --ifconfig/up options modified Fri Nov 6 11:10:24 2020 us=563734 OPTIONS IMPORT: route options modified Fri Nov 6 11:10:24 2020 us=563802 OPTIONS IMPORT: route-related options modified Fri Nov 6 11:10:24 2020 us=563868 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Fri Nov 6 11:10:24 2020 us=563933 OPTIONS IMPORT: peer-id set Fri Nov 6 11:10:24 2020 us=564001 OPTIONS IMPORT: adjusting link_mtu to 1657 Fri Nov 6 11:10:24 2020 us=564066 OPTIONS IMPORT: data channel crypto options modified Fri Nov 6 11:10:24 2020 us=564142 Data Channel: using negotiated cipher 'AES-256-GCM' Fri Nov 6 11:10:24 2020 us=564256 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ] Fri Nov 6 11:10:24 2020 us=564961 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Fri Nov 6 11:10:24 2020 us=565059 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Fri Nov 6 11:10:24 2020 us=565683 ROUTE_GATEWAY 10.0.0.1/255.255.255.0 IFACE=enxb827ebba588a HWADDR=b8:27:eb:ba:58:8a Fri Nov 6 11:10:24 2020 us=594707 TUN/TAP device tun0 opened Fri Nov 6 11:10:24 2020 us=595332 TUN/TAP TX queue length set to 100 Fri Nov 6 11:10:24 2020 us=595582 do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Fri Nov 6 11:10:24 2020 us=595743 /sbin/ip link set dev tun0 up mtu 1500 Fri Nov 6 11:10:24 2020 us=608900 /sbin/ip addr add dev tun0 10.8.3.6/24 broadcast 10.8.3.255 Fri Nov 6 11:10:24 2020 us=621031 /sbin/ip route add 178.239.172.91/32 via 10.0.0.1 Fri Nov 6 11:10:24 2020 us=631721 /sbin/ip route add 0.0.0.0/1 via 10.8.3.1 Fri Nov 6 11:10:24 2020 us=638902 /sbin/ip route add 128.0.0.0/1 via 10.8.3.1 Fri Nov 6 11:10:24 2020 us=645804 Initialization Sequence CompletedCode: Select all
Fri Nov 6 10:46:43 2020 us=677833 Current Parameter Settings: Fri Nov 6 10:46:43 2020 us=678069 config = 'ovpn.conf' Fri Nov 6 10:46:43 2020 us=678119 mode = 0 Fri Nov 6 10:46:43 2020 us=678164 persist_config = DISABLED Fri Nov 6 10:46:43 2020 us=678207 persist_mode = 1 Fri Nov 6 10:46:43 2020 us=678251 show_ciphers = DISABLED Fri Nov 6 10:46:43 2020 us=678295 show_digests = DISABLED Fri Nov 6 10:46:43 2020 us=678338 show_engines = DISABLED Fri Nov 6 10:46:43 2020 us=678380 genkey = DISABLED Fri Nov 6 10:46:43 2020 us=678423 key_pass_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=678466 show_tls_ciphers = DISABLED Fri Nov 6 10:46:43 2020 us=678508 connect_retry_max = 0 Fri Nov 6 10:46:43 2020 us=678552 Connection profiles [0]: Fri Nov 6 10:46:43 2020 us=678598 proto = udp Fri Nov 6 10:46:43 2020 us=678641 local = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=678684 local_port = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=678727 remote = 'ZZZ.ZZZ.ZZZ.ZZZ' Fri Nov 6 10:46:43 2020 us=678770 remote_port = 'ZZZZZ' Fri Nov 6 10:46:43 2020 us=678812 remote_float = DISABLED Fri Nov 6 10:46:43 2020 us=678855 bind_defined = DISABLED Fri Nov 6 10:46:43 2020 us=678897 bind_local = DISABLED Fri Nov 6 10:46:43 2020 us=678940 bind_ipv6_only = DISABLED Fri Nov 6 10:46:43 2020 us=678984 connect_retry_seconds = 5 Fri Nov 6 10:46:43 2020 us=679026 connect_timeout = 120 Fri Nov 6 10:46:43 2020 us=679069 socks_proxy_server = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679111 socks_proxy_port = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679154 tun_mtu = 1500 Fri Nov 6 10:46:43 2020 us=679198 tun_mtu_defined = ENABLED Fri Nov 6 10:46:43 2020 us=679241 link_mtu = 1500 Fri Nov 6 10:46:43 2020 us=679284 link_mtu_defined = DISABLED Fri Nov 6 10:46:43 2020 us=679327 tun_mtu_extra = 32 Fri Nov 6 10:46:43 2020 us=679370 tun_mtu_extra_defined = ENABLED Fri Nov 6 10:46:43 2020 us=679413 mtu_discover_type = -1 Fri Nov 6 10:46:43 2020 us=679455 fragment = 0 Fri Nov 6 10:46:43 2020 us=679498 mssfix = 1450 Fri Nov 6 10:46:43 2020 us=679541 explicit_exit_notification = 0 Fri Nov 6 10:46:43 2020 us=679584 Connection profiles END Fri Nov 6 10:46:43 2020 us=679626 remote_random = ENABLED Fri Nov 6 10:46:43 2020 us=679668 ipchange = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679709 dev = 'tun' Fri Nov 6 10:46:43 2020 us=679752 dev_type = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679794 dev_node = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679836 lladdr = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679878 topology = 1 Fri Nov 6 10:46:43 2020 us=679920 ifconfig_local = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=679963 ifconfig_remote_netmask = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=680005 ifconfig_noexec = DISABLED Fri Nov 6 10:46:43 2020 us=680047 ifconfig_nowarn = DISABLED Fri Nov 6 10:46:43 2020 us=680090 ifconfig_ipv6_local = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=680132 ifconfig_ipv6_netbits = 0 Fri Nov 6 10:46:43 2020 us=680175 ifconfig_ipv6_remote = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=680217 shaper = 0 Fri Nov 6 10:46:43 2020 us=680259 mtu_test = 0 Fri Nov 6 10:46:43 2020 us=680301 mlock = DISABLED Fri Nov 6 10:46:43 2020 us=680344 keepalive_ping = 0 Fri Nov 6 10:46:43 2020 us=680387 keepalive_timeout = 0 Fri Nov 6 10:46:43 2020 us=680429 inactivity_timeout = 0 Fri Nov 6 10:46:43 2020 us=680472 ping_send_timeout = 15 Fri Nov 6 10:46:43 2020 us=680514 ping_rec_timeout = 0 Fri Nov 6 10:46:43 2020 us=680557 ping_rec_timeout_action = 2 Fri Nov 6 10:46:43 2020 us=680599 ping_timer_remote = ENABLED Fri Nov 6 10:46:43 2020 us=680642 remap_sigusr1 = 0 Fri Nov 6 10:46:43 2020 us=680685 persist_tun = ENABLED Fri Nov 6 10:46:43 2020 us=680727 persist_local_ip = DISABLED Fri Nov 6 10:46:43 2020 us=680770 persist_remote_ip = DISABLED Fri Nov 6 10:46:43 2020 us=680812 persist_key = ENABLED Fri Nov 6 10:46:43 2020 us=680854 passtos = DISABLED Fri Nov 6 10:46:43 2020 us=680897 resolve_retry_seconds = 1000000000 Fri Nov 6 10:46:43 2020 us=680939 resolve_in_advance = DISABLED Fri Nov 6 10:46:43 2020 us=681018 username = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681062 groupname = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681105 chroot_dir = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681147 cd_dir = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681189 writepid = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681231 up_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681274 down_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681316 down_pre = DISABLED Fri Nov 6 10:46:43 2020 us=681358 up_restart = DISABLED Fri Nov 6 10:46:43 2020 us=681400 up_delay = DISABLED Fri Nov 6 10:46:43 2020 us=681443 daemon = DISABLED Fri Nov 6 10:46:43 2020 us=681485 inetd = 0 Fri Nov 6 10:46:43 2020 us=681528 log = ENABLED Fri Nov 6 10:46:43 2020 us=681570 suppress_timestamps = DISABLED Fri Nov 6 10:46:43 2020 us=681613 machine_readable_output = DISABLED Fri Nov 6 10:46:43 2020 us=681655 nice = 0 Fri Nov 6 10:46:43 2020 us=681698 verbosity = 4 Fri Nov 6 10:46:43 2020 us=681740 mute = 0 Fri Nov 6 10:46:43 2020 us=681782 gremlin = 0 Fri Nov 6 10:46:43 2020 us=681825 status_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=681868 status_file_version = 1 Fri Nov 6 10:46:43 2020 us=681910 status_file_update_freq = 60 Fri Nov 6 10:46:43 2020 us=681952 occ = ENABLED Fri Nov 6 10:46:43 2020 us=681995 rcvbuf = 0 Fri Nov 6 10:46:43 2020 us=682037 sndbuf = 0 Fri Nov 6 10:46:43 2020 us=682080 mark = 0 Fri Nov 6 10:46:43 2020 us=682129 sockflags = 0 Fri Nov 6 10:46:43 2020 us=682172 fast_io = ENABLED Fri Nov 6 10:46:43 2020 us=682215 comp.alg = 1 Fri Nov 6 10:46:43 2020 us=682258 comp.flags = 0 Fri Nov 6 10:46:43 2020 us=682300 route_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=682343 route_default_gateway = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=682386 route_default_metric = 0 Fri Nov 6 10:46:43 2020 us=682430 route_noexec = DISABLED Fri Nov 6 10:46:43 2020 us=682472 route_delay = 0 Fri Nov 6 10:46:43 2020 us=682516 route_delay_window = 30 Fri Nov 6 10:46:43 2020 us=682559 route_delay_defined = DISABLED Fri Nov 6 10:46:43 2020 us=682602 route_nopull = DISABLED Fri Nov 6 10:46:43 2020 us=682645 route_gateway_via_dhcp = DISABLED Fri Nov 6 10:46:43 2020 us=682688 allow_pull_fqdn = DISABLED Fri Nov 6 10:46:43 2020 us=682731 Pull filters: Fri Nov 6 10:46:43 2020 us=682775 ignore "redirect-gateway" Fri Nov 6 10:46:43 2020 us=682819 management_addr = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=682862 management_port = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=682906 management_user_pass = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=682949 management_log_history_cache = 250 Fri Nov 6 10:46:43 2020 us=682992 management_echo_buffer_size = 100 Fri Nov 6 10:46:43 2020 us=683036 management_write_peer_info_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=683080 management_client_user = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=683123 management_client_group = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=683167 management_flags = 0 Fri Nov 6 10:46:43 2020 us=683210 shared_secret_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=683254 key_direction = 1 Fri Nov 6 10:46:43 2020 us=683297 ciphername = 'AES-256-CBC' Fri Nov 6 10:46:43 2020 us=683340 ncp_enabled = ENABLED Fri Nov 6 10:46:43 2020 us=683384 ncp_ciphers = 'AES-256-GCM:AES-128-GCM' Fri Nov 6 10:46:43 2020 us=683428 authname = 'SHA512' Fri Nov 6 10:46:43 2020 us=683471 prng_hash = 'SHA1' Fri Nov 6 10:46:43 2020 us=683514 prng_nonce_secret_len = 16 Fri Nov 6 10:46:43 2020 us=683557 keysize = 0 Fri Nov 6 10:46:43 2020 us=683600 engine = DISABLED Fri Nov 6 10:46:43 2020 us=683643 replay = ENABLED Fri Nov 6 10:46:43 2020 us=683686 mute_replay_warnings = DISABLED Fri Nov 6 10:46:43 2020 us=683729 replay_window = 64 Fri Nov 6 10:46:43 2020 us=683772 replay_time = 15 Fri Nov 6 10:46:43 2020 us=683816 packet_id_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=683859 use_iv = ENABLED Fri Nov 6 10:46:43 2020 us=683902 test_crypto = DISABLED Fri Nov 6 10:46:43 2020 us=683944 tls_server = DISABLED Fri Nov 6 10:46:43 2020 us=684007 tls_client = ENABLED Fri Nov 6 10:46:43 2020 us=684051 key_method = 2 Fri Nov 6 10:46:43 2020 us=684095 ca_file = '[[INLINE]]' Fri Nov 6 10:46:43 2020 us=684181 ca_path = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684226 dh_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684269 cert_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684313 extra_certs_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684356 priv_key_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684399 pkcs12_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684442 cipher_list = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684485 cipher_list_tls13 = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684528 tls_cert_profile = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684571 tls_verify = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684614 tls_export_cert = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684657 verify_x509_type = 0 Fri Nov 6 10:46:43 2020 us=684701 verify_x509_name = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684744 crl_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=684786 ns_cert_type = 0 Fri Nov 6 10:46:43 2020 us=684830 remote_cert_ku[i] = 65535 Fri Nov 6 10:46:43 2020 us=684873 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=684916 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=684959 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685001 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685044 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685087 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685130 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685174 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685217 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685260 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685303 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685345 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685389 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685431 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685474 remote_cert_ku[i] = 0 Fri Nov 6 10:46:43 2020 us=685518 remote_cert_eku = 'TLS Web Server Authentication' Fri Nov 6 10:46:43 2020 us=685561 ssl_flags = 0 Fri Nov 6 10:46:43 2020 us=685605 tls_timeout = 2 Fri Nov 6 10:46:43 2020 us=685648 renegotiate_bytes = -1 Fri Nov 6 10:46:43 2020 us=685691 renegotiate_packets = 0 Fri Nov 6 10:46:43 2020 us=685734 renegotiate_seconds = 0 Fri Nov 6 10:46:43 2020 us=685776 handshake_window = 60 Fri Nov 6 10:46:43 2020 us=685819 transition_window = 3600 Fri Nov 6 10:46:43 2020 us=685862 single_session = DISABLED Fri Nov 6 10:46:43 2020 us=685906 push_peer_info = DISABLED Fri Nov 6 10:46:43 2020 us=685949 tls_exit = DISABLED Fri Nov 6 10:46:43 2020 us=685993 tls_auth_file = '[[INLINE]]' Fri Nov 6 10:46:43 2020 us=686036 tls_crypt_file = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=686079 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686123 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686166 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686209 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686252 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686296 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686339 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686383 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686426 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686470 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686513 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686557 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686600 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686644 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686688 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686731 pkcs11_protected_authentication = DISABLED Fri Nov 6 10:46:43 2020 us=686797 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=686841 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=686885 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=686929 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=686973 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687016 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687060 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687103 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687147 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687190 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687234 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687277 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687320 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687364 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687407 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687451 pkcs11_private_mode = 00000000 Fri Nov 6 10:46:43 2020 us=687494 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687537 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687580 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687623 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687666 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687709 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687752 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687795 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687837 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687880 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687923 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=687965 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=688008 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=688052 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=688094 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=688137 pkcs11_cert_private = DISABLED Fri Nov 6 10:46:43 2020 us=688180 pkcs11_pin_cache_period = -1 Fri Nov 6 10:46:43 2020 us=688223 pkcs11_id = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=688266 pkcs11_id_management = DISABLED Fri Nov 6 10:46:43 2020 us=688314 server_network = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688360 server_netmask = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688435 server_network_ipv6 = :: Fri Nov 6 10:46:43 2020 us=688481 server_netbits_ipv6 = 0 Fri Nov 6 10:46:43 2020 us=688528 server_bridge_ip = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688575 server_bridge_netmask = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688622 server_bridge_pool_start = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688669 server_bridge_pool_end = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688712 ifconfig_pool_defined = DISABLED Fri Nov 6 10:46:43 2020 us=688759 ifconfig_pool_start = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688806 ifconfig_pool_end = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688853 ifconfig_pool_netmask = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=688896 ifconfig_pool_persist_filename = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=688940 ifconfig_pool_persist_refresh_freq = 600 Fri Nov 6 10:46:43 2020 us=688984 ifconfig_ipv6_pool_defined = DISABLED Fri Nov 6 10:46:43 2020 us=689029 ifconfig_ipv6_pool_base = :: Fri Nov 6 10:46:43 2020 us=689073 ifconfig_ipv6_pool_netbits = 0 Fri Nov 6 10:46:43 2020 us=689117 n_bcast_buf = 256 Fri Nov 6 10:46:43 2020 us=689160 tcp_queue_limit = 64 Fri Nov 6 10:46:43 2020 us=689204 real_hash_size = 256 Fri Nov 6 10:46:43 2020 us=689248 virtual_hash_size = 256 Fri Nov 6 10:46:43 2020 us=689291 client_connect_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=689335 learn_address_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=689378 client_disconnect_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=689422 client_config_dir = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=689495 ccd_exclusive = DISABLED Fri Nov 6 10:46:43 2020 us=689540 tmp_dir = '/tmp' Fri Nov 6 10:46:43 2020 us=689584 push_ifconfig_defined = DISABLED Fri Nov 6 10:46:43 2020 us=689631 push_ifconfig_local = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=689686 push_ifconfig_remote_netmask = 0.0.0.0 Fri Nov 6 10:46:43 2020 us=689730 push_ifconfig_ipv6_defined = DISABLED Fri Nov 6 10:46:43 2020 us=689777 push_ifconfig_ipv6_local = ::/0 Fri Nov 6 10:46:43 2020 us=689823 push_ifconfig_ipv6_remote = :: Fri Nov 6 10:46:43 2020 us=689867 enable_c2c = DISABLED Fri Nov 6 10:46:43 2020 us=689910 duplicate_cn = DISABLED Fri Nov 6 10:46:43 2020 us=689953 cf_max = 0 Fri Nov 6 10:46:43 2020 us=689997 cf_per = 0 Fri Nov 6 10:46:43 2020 us=690039 max_clients = 1024 Fri Nov 6 10:46:43 2020 us=690083 max_routes_per_client = 256 Fri Nov 6 10:46:43 2020 us=690127 auth_user_pass_verify_script = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=690177 auth_user_pass_verify_script_via_file = DISABLED Fri Nov 6 10:46:43 2020 us=690222 auth_token_generate = DISABLED Fri Nov 6 10:46:43 2020 us=690265 auth_token_lifetime = 0 Fri Nov 6 10:46:43 2020 us=690307 port_share_host = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=690350 port_share_port = '[UNDEF]' Fri Nov 6 10:46:43 2020 us=690393 client = ENABLED Fri Nov 6 10:46:43 2020 us=690436 pull = ENABLED Fri Nov 6 10:46:43 2020 us=690480 auth_user_pass_file = '/etc/openvpn/client/auth' Fri Nov 6 10:46:43 2020 us=690528 OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019 Fri Nov 6 10:46:43 2020 us=690593 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10 Fri Nov 6 10:46:43 2020 us=692310 WARNING: --ping should normally be used with --ping-restart or --ping-exit Fri Nov 6 10:46:43 2020 us=702482 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Fri Nov 6 10:46:43 2020 us=702616 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Fri Nov 6 10:46:43 2020 us=704477 Control Channel MTU parms [ L:1654 D:1140 EF:110 EB:0 ET:0 EL:3 ] Fri Nov 6 10:46:43 2020 us=704614 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ] Fri Nov 6 10:46:43 2020 us=704739 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client' Fri Nov 6 10:46:43 2020 us=704784 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server' Fri Nov 6 10:46:43 2020 us=704844 TCP/UDP: Preserving recently used remote address: [AF_INET]ZZZ.ZZZ.ZZZ.ZZZ:ZZZZZ Fri Nov 6 10:46:43 2020 us=704936 Socket Buffers: R=[180224->180224] S=[180224->180224] Fri Nov 6 10:46:43 2020 us=704981 UDP link local: (not bound) Fri Nov 6 10:46:43 2020 us=705029 UDP link remote: [AF_INET]ZZZ.ZZZ.ZZZ.ZZZ:ZZZZZ Fri Nov 6 10:46:43 2020 us=737235 TLS: Initial packet from [AF_INET]ZZZ.ZZZ.ZZZ.ZZZ:ZZZZZ, sid=350a78a7 0dcfcd9e Fri Nov 6 10:46:43 2020 us=737682 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Fri Nov 6 10:46:43 2020 us=808432 VERIFY OK: depth=2, C=PA, O=ZZZZZZZZ, CN=ZZZZZZZZ Root CA Fri Nov 6 10:46:43 2020 us=810962 VERIFY OK: depth=1, C=PA, O=ZZZZZZZZ, CN=ZZZZZZZZ CA5 Fri Nov 6 10:46:43 2020 us=813418 VERIFY KU OK Fri Nov 6 10:46:43 2020 us=813483 Validating certificate extended key usage Fri Nov 6 10:46:43 2020 us=813534 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Fri Nov 6 10:46:43 2020 us=813581 VERIFY EKU OK Fri Nov 6 10:46:43 2020 us=813626 VERIFY OK: depth=0, CN=ZZZZZ Fri Nov 6 10:46:43 2020 us=903370 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Fri Nov 6 10:46:43 2020 us=903619 [ZZZZZ] Peer Connection Initiated with [AF_INET]ZZZ.ZZZ.ZZZ.ZZZ:ZZZZZ Fri Nov 6 10:46:45 2020 us=13054 SENT CONTROL [ZZZZZ]: 'PUSH_REQUEST' (status=1) Fri Nov 6 10:46:45 2020 us=44770 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS ZZZ.ZZZ.ZZZ.ZZZ,dhcp-option DNS ZZZ.ZZZ.ZZZ.ZZZ,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.3.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.3.6 255.255.255.0,peer-id 1,cipher AES-256-GCM' Fri Nov 6 10:46:45 2020 us=44926 Pushed option removed by filter: 'redirect-gateway def1' Fri Nov 6 10:46:45 2020 us=45344 OPTIONS IMPORT: timers and/or timeouts modified Fri Nov 6 10:46:45 2020 us=45423 OPTIONS IMPORT: explicit notify parm(s) modified Fri Nov 6 10:46:45 2020 us=45492 OPTIONS IMPORT: compression parms modified Fri Nov 6 10:46:45 2020 us=45561 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Fri Nov 6 10:46:45 2020 us=45659 Socket Buffers: R=[180224->360448] S=[180224->360448] Fri Nov 6 10:46:45 2020 us=45727 OPTIONS IMPORT: --ifconfig/up options modified Fri Nov 6 10:46:45 2020 us=45794 OPTIONS IMPORT: route-related options modified Fri Nov 6 10:46:45 2020 us=45860 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Fri Nov 6 10:46:45 2020 us=45928 OPTIONS IMPORT: peer-id set Fri Nov 6 10:46:45 2020 us=45995 OPTIONS IMPORT: adjusting link_mtu to 1657 Fri Nov 6 10:46:45 2020 us=46061 OPTIONS IMPORT: data channel crypto options modified Fri Nov 6 10:46:45 2020 us=46134 Data Channel: using negotiated cipher 'AES-256-GCM' Fri Nov 6 10:46:45 2020 us=46248 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ] Fri Nov 6 10:46:45 2020 us=46960 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Fri Nov 6 10:46:45 2020 us=47055 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Fri Nov 6 10:46:45 2020 us=79646 TUN/TAP device tun0 opened Fri Nov 6 10:46:45 2020 us=80086 TUN/TAP TX queue length set to 100 Fri Nov 6 10:46:45 2020 us=80247 do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Fri Nov 6 10:46:45 2020 us=80382 /sbin/ip link set dev tun0 up mtu 1500 Fri Nov 6 10:46:45 2020 us=92955 /sbin/ip addr add dev tun0 10.8.3.6/24 broadcast 10.8.3.255 Fri Nov 6 10:46:45 2020 us=105180 Initialization Sequence Completed
- RUN 1:
RUN 2 unchanged from RUN 1
Code: Select all
interface=wlan0 dhcp-range=192.168.10.10,192.168.10.50,255.255.255.0,24h
- RUN 1
RUN 2
Code: Select all
enxb827ebba588a: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.0.30 netmask 255.255.255.0 broadcast 10.0.0.255 inet6 fe80::f64e:59d5:5521:3542 prefixlen 64 scopeid 0x20<link> ether b8:27:eb:ba:58:8a txqueuelen 1000 (Ethernet) RX packets 1118 bytes 247946 (242.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 908 bytes 152871 (149.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1000 (Local Loopback) RX packets 4 bytes 444 (444.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 4 bytes 444 (444.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500 inet 10.8.3.6 netmask 255.255.255.0 destination 10.8.3.6 inet6 fe80::2244:785b:480d:8063 prefixlen 64 scopeid 0x20<link> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 440 bytes 134842 (131.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 510 bytes 76465 (74.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.10.1 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::cc4b:220:9306:7b4c prefixlen 64 scopeid 0x20<link> ether b8:27:eb:ef:0d:df txqueuelen 1000 (Ethernet) RX packets 562 bytes 90935 (88.8 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 480 bytes 156890 (153.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0Code: Select all
enxb827ebba588a: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.0.30 netmask 255.255.255.0 broadcast 10.0.0.255 inet6 fe80::f64e:59d5:5521:3542 prefixlen 64 scopeid 0x20<link> ether b8:27:eb:ba:58:8a txqueuelen 1000 (Ethernet) RX packets 975 bytes 120652 (117.8 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 747 bytes 65145 (63.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1000 (Local Loopback) RX packets 4 bytes 444 (444.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 4 bytes 444 (444.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500 inet 10.8.3.6 netmask 255.255.255.0 destination 10.8.3.6 inet6 fe80::c54a:2de9:5684:d6b3 prefixlen 64 scopeid 0x20<link> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 5 bytes 240 (240.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.10.1 netmask 255.255.255.0 broadcast 192.168.10.255 inet6 fe80::cc4b:220:9306:7b4c prefixlen 64 scopeid 0x20<link> ether b8:27:eb:ef:0d:df txqueuelen 1000 (Ethernet) RX packets 326 bytes 33640 (32.8 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 62 bytes 7410 (7.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
- RUN 1
RUN 2
Code: Select all
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 10.0.0.1 0.0.0.0 UG 202 0 0 enxb827ebba588a 0.0.0.0 192.168.10.1 0.0.0.0 UG 303 0 0 wlan0 10.0.0.0 0.0.0.0 255.255.255.0 U 202 0 0 enxb827ebba588a 10.8.3.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 128.0.0.0 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 178.239.172.91 10.0.0.1 255.255.255.255 UGH 0 0 0 enxb827ebba588a 192.168.10.0 0.0.0.0 255.255.255.0 U 303 0 0 wlan0Code: Select all
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.0.0.1 0.0.0.0 UG 202 0 0 enxb827ebba588a 0.0.0.0 192.168.10.1 0.0.0.0 UG 303 0 0 wlan0 10.0.0.0 0.0.0.0 255.255.255.0 U 202 0 0 enxb827ebba588a 10.8.3.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 192.168.10.0 0.0.0.0 255.255.255.0 U 303 0 0 wlan0
- RUN 1
RUN 2
Code: Select all
0.0.0.0/1 via 10.8.3.1 dev tun0 default via 10.0.0.1 dev enxb827ebba588a proto dhcp src 10.0.0.30 metric 202 default via 192.168.10.1 dev wlan0 src 192.168.10.1 metric 303 10.0.0.0/24 dev enxb827ebba588a proto dhcp scope link src 10.0.0.30 metric 202 10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.6 128.0.0.0/1 via 10.8.3.1 dev tun0 178.239.172.91 via 10.0.0.1 dev enxb827ebba588a 192.168.10.0/24 dev wlan0 proto dhcp scope link src 192.168.10.1 metric 303Code: Select all
default via 10.0.0.1 dev enxb827ebba588a proto dhcp src 10.0.0.30 metric 202 default via 192.168.10.1 dev wlan0 src 192.168.10.1 metric 303 10.0.0.0/24 dev enxb827ebba588a proto dhcp scope link src 10.0.0.30 metric 202 10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.6 192.168.10.0/24 dev wlan0 proto dhcp scope link src 192.168.10.1 metric 303
- RUN 1
RUN 2: unchanged from RUN 1
Code: Select all
Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt source destination
- RUN 1:
RUN 2: unchanged from RUN 1
Code: Select all
Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt source destination