OpenVPN geht nicht mit udp

Hanno_Gera · 27 Apr 2006

Ich habe eine FRITZ!Box Fon WLAN (08.04.01) und OpenVPN installiert.
Wie ich gelesen habe, sollte man nur dann TCP nehmen, wenn es Probleme mit einer (Firmen-)Firewall gibt.
Leider bekomme ich nur eine Verbindung über TCP hin, mit UDP gelingt es nicht.

server.ovpn
=========
dev tun0
dev-node /dev/misc/net/tun
ifconfig 192.168.200.1 192.168.200.2
secret /var/tmp/static.key
;proto tcp-server
proto udp
port 1194
tun-mtu 1500
mssfix 1350
float
keepalive 10 60
verb 4

client.ovpn
========
remote myserver.dyndns.org 1194
dev tun
ifconfig 192.168.200.2 192.168.200.1
secret static.key
dev tun
;proto tcp-client
proto udp
keepalive 120 250
ping-timer-rem
persist-tun
persist-key
tun-mtu 1500
mssfix 1350
route-gateway 192.168.200.1
verb 6
resolv-retry infinite
route 192.168.178.0 255.255.255.0

Die entsprechende Freischaltung in der Firewall (FritzBox) habe ich gemacht. Sonst ist keine Firewall beteiligt.
Irgendwelche Ideen, was ich in den Konfig-Dateien falsch gemacht habe?

buckyballplayer · 27 Apr 2006

kann das sein das beim Client noch ein
"Port 1194" fehlt?

Hanno_Gera · 28 Apr 2006

Das denke ich nicht.
1. Der Port steht hinter "remote".
2. Port 1194 ist der Default-Port.

buckyballplayer · 28 Apr 2006

Mal ne dumme Frage
Wieso nicht TCP? wenn das funktioniert oder werden da beide Protokolle benötigt?
Udp meldet keine erfolgreich empfangenen Pakete zurück tcp schon.
Leider kenn ich mich mir dem openVPN nicht aus ich nutze meisten die windowseigene VPN bzw Radmin und da läuft alles über einen einzgen geöffneten tcp-port

Hanno_Gera · 28 Apr 2006

Danke für Dein Interesse an meinem Problem.
1. Ich habe gelesen (http://sites.inka.de/sites/bigred/devel/tcp-tcp.html), dass man UPD bevorzugen sollte.
2. Es gelingt mir nicht, Windowsfreigaben zu mounten, also freigegebene Ordner (auf einem Windowsrechner hinter der FritzBox) kann ich nicht auf meinem Client ansprechen.
-> evtl. hat dieses Problem nichts mit diesem Thread zu tun.

dsteinkopf · 28 Apr 2006

Hanno_Gera schrieb:
... mit UDP gelingt es nicht.

Was heißt das genau - wie lauten denn die letzen Log-Meldungen?

Dirk

Hanno_Gera · 28 Apr 2006

In den log-Meldungen finde ich keinerlei Fehler. Fragst Du nach etwas Bestimmten?
Aber was anderes: Wenn ich auf der FritzBox mit "netstat -an" mal nachschaue, bekomme ich

udp 0 0 0.0.0.0:1194 0.0.0.0:*

aber bei "State" finde ich kein "LISTEN".

dsteinkopf · 28 Apr 2006

Hanno_Gera schrieb:
In den log-Meldungen finde ich keinerlei Fehler. Fragst Du nach etwas Bestimmten?

Nein. Das ist nur eine bewährte Methode, den Fehlern auf den Grund zu gehen

Heißt das, dass bei Dir als letztes "Initialization Sequence Completed" erscheint? Wenn ja, dann hast Du ein Routing-Problem - wenn nein, müsstest Du nochmal genauer nach den Logs schauen und Beschreiben, wie sich das Problem äußert.

Hanno_Gera schrieb:
Aber was anderes: Wenn ich auf der FritzBox mit "netstat -an" mal nachschaue, bekomme ich

udp 0 0 0.0.0.0:1194 0.0.0.0:*

aber bei "State" finde ich kein "LISTEN".

Das ist bei UDP normal.

TCP funktioniert wirklich bei Dir einwandfrei? Du ersetzt in Client+Server nur proto udp durch proto tcp?

NB. Zum "Lernen" hat es sich sehr bewährt, das HOWTO http://openvpn.net/howto.html akribisch der Reihe nach durchzuarbeiten.

Dirk

Hanno_Gera · 28 Apr 2006

Also, "Initialization Sequence Completed" erhalte ich nicht auf dem Client, sondern sowas wie

Fri Apr 28 22:15:28 us=491803 UDPv4 WRITE [60] to 84.192.x.x:1194: DATE len=60

Wie gesagt, bei TCP kann ich nicht auf Ordnerfreigaben zugreifen.
(Evtl. gibt es ja noch andere Probleme, die ich bis jetzt noch nicht festgestellt habe.)

dsteinkopf · 28 Apr 2006

Gibt es denn Hinweise darauf, dass die UDP-Pakete vom Client überhaupt beim Server ankommen?

Und bei TCP: Geht denn der Ping durch den Tunnel vom SMB-Client zum SMB-Server?

Dirk

Hanno_Gera · 28 Apr 2006

> Gibt es denn Hinweise darauf, dass die UDP-Pakete vom Client überhaupt beim Server ankommen?
Ich bin die ganze Zeit auf der FritzBox mit telnet drauf, also müßte ich jede "Regung" sehen - tue ich aber nicht.
Oder welche Hinweise meinst Du?

> Und bei TCP: Geht denn der Ping durch den Tunnel vom SMB-Client zum SMB-Server?
Ja, Ping ging durch.
Ich konnte auch schon mit einem Remoteprogramm eine Verbindung aufbauen.

dsteinkopf · 29 Apr 2006

Hanno_Gera schrieb:
> Gibt es denn Hinweise darauf, dass die UDP-Pakete vom Client überhaupt beim Server ankommen?
Ich bin die ganze Zeit auf der FritzBox mit telnet drauf, also müßte ich jede "Regung" sehen - tue ich aber nicht.
Oder welche Hinweise meinst Du?

Ich meine das Log des Verbindungsaufbaus. Schick das doch mal ganz.

Hanno_Gera schrieb:
> Und bei TCP: Geht denn der Ping durch den Tunnel vom SMB-Client zum SMB-Server?
Ja, Ping ging durch.
Ich konnte auch schon mit einem Remoteprogramm eine Verbindung aufbauen.

Wenn kleine Pakete durchkommen, aber große nicht, dann liegt es meist an der MTU/Paketgröße. Damit hatte ich mit OpenVPN V1 mal Probleme.
Warum stehen in Deiner Konfig tun-mtu und mss-fix? Bei mir geht alles auch ohne.

Dirk

buckyballplayer · 29 Apr 2006

wie sehen denn die IP Bereiche aus die du benutzt

zB:
1.Lokales-Netz 192.168.178.0
2.Vpn-Netz 10.10.10.0
3. Entferntes Netz 192.168.222.0

Das lokale Netz und dein entfentes netz müssen verschiedene
IP Bereiche benutzen sonst wird der Tunnel nicht benutzt

also nicht:
1.Lokales-Netz 192.168.178.0
2.Vpn-Netz 10.10.10.0
3. Entferntes Netz 192.168.178.0 das geht nicht!!

TOM · 29 Apr 2006

Hi,
es wäre hilfreich, wenn Du die Startmeldungen des Server mal posten könntest. Evtl. könnte es ein Problem mit der MTU - Einstellung sein.
Die Windowsfreigabe dürfte eher kein Problem bzgl. TCP oder UDP sein.

Hanno_Gera · 29 Apr 2006

> Log des Verbindungsaufbaus

Code:

Sat Apr 29 12:42:44 2006 us=2102 Current Parameter Settings:
Sat Apr 29 12:42:44 2006 us=2184   config = 'server.ovpn'
Sat Apr 29 12:42:44 2006 us=2199   mode = 0
Sat Apr 29 12:42:44 2006 us=2212   show_ciphers = DISABLED
Sat Apr 29 12:42:44 2006 us=2224   show_digests = DISABLED
Sat Apr 29 12:42:44 2006 us=2236   show_engines = DISABLED
Sat Apr 29 12:42:44 2006 us=2247   genkey = DISABLED
Sat Apr 29 12:42:44 2006 us=2260   key_pass_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2272   show_tls_ciphers = DISABLED
Sat Apr 29 12:42:44 2006 us=2284   proto = 0
Sat Apr 29 12:42:44 2006 us=2296   local = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2311   remote_list[0] = {'myserver.dyndns.org', 1194}
Sat Apr 29 12:42:44 2006 us=2325   remote_random = DISABLED
Sat Apr 29 12:42:44 2006 us=2339   local_port = 1194
Sat Apr 29 12:42:44 2006 us=2353   remote_port = 1194
Sat Apr 29 12:42:44 2006 us=2365   remote_float = DISABLED
Sat Apr 29 12:42:44 2006 us=2378   ipchange = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2390   bind_local = ENABLED
Sat Apr 29 12:42:44 2006 us=2402   dev = 'tun'
Sat Apr 29 12:42:44 2006 us=2414   dev_type = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2427   dev_node = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2439   tun_ipv6 = DISABLED
Sat Apr 29 12:42:44 2006 us=2452   ifconfig_local = '192.168.200.2'
Sat Apr 29 12:42:44 2006 us=2466   ifconfig_remote_netmask = '192.168.200.1'
Sat Apr 29 12:42:44 2006 us=2478   ifconfig_noexec = DISABLED
Sat Apr 29 12:42:44 2006 us=2491   ifconfig_nowarn = DISABLED
Sat Apr 29 12:42:44 2006 us=2503   shaper = 0
Sat Apr 29 12:42:44 2006 us=2515   tun_mtu = 1500
Sat Apr 29 12:42:44 2006 us=2527   tun_mtu_defined = ENABLED
Sat Apr 29 12:42:44 2006 us=2539   link_mtu = 1500
Sat Apr 29 12:42:44 2006 us=2553   link_mtu_defined = DISABLED
Sat Apr 29 12:42:44 2006 us=2564   tun_mtu_extra = 0
Sat Apr 29 12:42:44 2006 us=2577   tun_mtu_extra_defined = DISABLED
Sat Apr 29 12:42:44 2006 us=2589   fragment = 1400
Sat Apr 29 12:42:44 2006 us=2601   mtu_discover_type = -1
Sat Apr 29 12:42:44 2006 us=2613   mtu_test = 0
Sat Apr 29 12:42:44 2006 us=2625   mlock = DISABLED
Sat Apr 29 12:42:44 2006 us=2637   keepalive_ping = 120
Sat Apr 29 12:42:44 2006 us=2649   keepalive_timeout = 250
Sat Apr 29 12:42:44 2006 us=2661   inactivity_timeout = 0
Sat Apr 29 12:42:44 2006 us=2674   ping_send_timeout = 120
Sat Apr 29 12:42:44 2006 us=2686   ping_rec_timeout = 250
Sat Apr 29 12:42:44 2006 us=2699   ping_rec_timeout_action = 2
Sat Apr 29 12:42:44 2006 us=2711   ping_timer_remote = ENABLED
Sat Apr 29 12:42:44 2006 us=2723   remap_sigusr1 = 0
Sat Apr 29 12:42:44 2006 us=2736   explicit_exit_notification = 0
Sat Apr 29 12:42:44 2006 us=2748   persist_tun = ENABLED
Sat Apr 29 12:42:44 2006 us=2761   persist_local_ip = DISABLED
Sat Apr 29 12:42:44 2006 us=2774   persist_remote_ip = DISABLED
Sat Apr 29 12:42:44 2006 us=2787   persist_key = ENABLED
Sat Apr 29 12:42:44 2006 us=2800   mssfix = 1450
Sat Apr 29 12:42:44 2006 us=2813   resolve_retry_seconds = 1000000000
Sat Apr 29 12:42:44 2006 us=2826   connect_retry_seconds = 5
Sat Apr 29 12:42:44 2006 us=2838   username = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2850   groupname = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2862   chroot_dir = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2875   cd_dir = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2887   writepid = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2899   up_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2911   down_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=2923   down_pre = DISABLED
Sat Apr 29 12:42:44 2006 us=2935   up_restart = DISABLED
Sat Apr 29 12:42:44 2006 us=2947   up_delay = DISABLED
Sat Apr 29 12:42:44 2006 us=2958   daemon = DISABLED
Sat Apr 29 12:42:44 2006 us=2970   inetd = 0
Sat Apr 29 12:42:44 2006 us=2981   log = DISABLED
Sat Apr 29 12:42:44 2006 us=3001   suppress_timestamps = DISABLED
Sat Apr 29 12:42:44 2006 us=3014   nice = 0
Sat Apr 29 12:42:44 2006 us=3026   verbosity = 6
Sat Apr 29 12:42:44 2006 us=3038   mute = 0
Sat Apr 29 12:42:44 2006 us=3049   gremlin = 0
Sat Apr 29 12:42:44 2006 us=3061   status_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=3770   status_file_version = 1
Sat Apr 29 12:42:44 2006 us=3789   status_file_update_freq = 60
Sat Apr 29 12:42:44 2006 us=3801   occ = ENABLED
Sat Apr 29 12:42:44 2006 us=3811   rcvbuf = 0
Sat Apr 29 12:42:44 2006 us=3821   sndbuf = 0
Sat Apr 29 12:42:44 2006 us=3833   socks_proxy_server = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=3844   socks_proxy_port = 0
Sat Apr 29 12:42:44 2006 us=3855   socks_proxy_retry = DISABLED
Sat Apr 29 12:42:44 2006 us=3866   fast_io = DISABLED
Sat Apr 29 12:42:44 2006 us=3877   comp_lzo = ENABLED
Sat Apr 29 12:42:44 2006 us=3887   comp_lzo_adaptive = ENABLED
Sat Apr 29 12:42:44 2006 us=3910   route_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=3923   route_default_gateway = '192.168.200.1'
Sat Apr 29 12:42:44 2006 us=3936   route_noexec = DISABLED
Sat Apr 29 12:42:44 2006 us=3947   route_delay = 0
Sat Apr 29 12:42:44 2006 us=3960   route_delay_window = 30
Sat Apr 29 12:42:44 2006 us=3972   route_delay_defined = ENABLED
Sat Apr 29 12:42:44 2006 us=3992   route 192.168.178.0/255.255.255.0/nil/nil
Sat Apr 29 12:42:44 2006 us=16471   management_addr = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=16498   management_port = 0
Sat Apr 29 12:42:44 2006 us=16510   management_user_pass = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=16522   management_log_history_cache = 250
Sat Apr 29 12:42:44 2006 us=16534   management_echo_buffer_size = 100
Sat Apr 29 12:42:44 2006 us=16547   management_query_passwords = DISABLED
Sat Apr 29 12:42:44 2006 us=16560   management_hold = DISABLED
Sat Apr 29 12:42:44 2006 us=16573   shared_secret_file = 'static.key'
Sat Apr 29 12:42:44 2006 us=16584   key_direction = 0
Sat Apr 29 12:42:44 2006 us=16596   ciphername_defined = ENABLED
Sat Apr 29 12:42:44 2006 us=16608   ciphername = 'BF-CBC'
Sat Apr 29 12:42:44 2006 us=16620   authname_defined = ENABLED
Sat Apr 29 12:42:44 2006 us=16631   authname = 'SHA1'
Sat Apr 29 12:42:44 2006 us=16642   keysize = 0
Sat Apr 29 12:42:44 2006 us=16654   engine = DISABLED
Sat Apr 29 12:42:44 2006 us=45066   replay = ENABLED
Sat Apr 29 12:42:44 2006 us=45091   mute_replay_warnings = DISABLED
Sat Apr 29 12:42:44 2006 us=45103   replay_window = 64
Sat Apr 29 12:42:44 2006 us=45115   replay_time = 15
Sat Apr 29 12:42:44 2006 us=45126   packet_id_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45137   use_iv = ENABLED
Sat Apr 29 12:42:44 2006 us=45148   test_crypto = DISABLED
Sat Apr 29 12:42:44 2006 us=45160   tls_server = DISABLED
Sat Apr 29 12:42:44 2006 us=45171   tls_client = DISABLED
Sat Apr 29 12:42:44 2006 us=45183   key_method = 2
Sat Apr 29 12:42:44 2006 us=45194   ca_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45204   dh_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45216   cert_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45228   priv_key_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45240   pkcs12_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45252   cryptoapi_cert = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=45263   cipher_list = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=73202   tls_verify = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=73228   tls_remote = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=73239   crl_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=73250   ns_cert_type = 0
Sat Apr 29 12:42:44 2006 us=73261   tls_timeout = 2
Sat Apr 29 12:42:44 2006 us=73272   renegotiate_bytes = 0
Sat Apr 29 12:42:44 2006 us=73283   renegotiate_packets = 0
Sat Apr 29 12:42:44 2006 us=73295   renegotiate_seconds = 3600
Sat Apr 29 12:42:44 2006 us=73306   handshake_window = 60
Sat Apr 29 12:42:44 2006 us=73317   transition_window = 3600
Sat Apr 29 12:42:44 2006 us=73328   single_session = DISABLED
Sat Apr 29 12:42:44 2006 us=73341   tls_exit = DISABLED
Sat Apr 29 12:42:44 2006 us=73352   tls_auth_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=73371   server_network = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=73386   server_netmask = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=73400   server_bridge_ip = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=73413   server_bridge_netmask = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=99977   server_bridge_pool_start = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=100006   server_bridge_pool_end = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=100021   ifconfig_pool_defined = DISABLED
Sat Apr 29 12:42:44 2006 us=100036   ifconfig_pool_start = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=100048   ifconfig_pool_end = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=100061   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=100074   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=100087   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 29 12:42:44 2006 us=100100   ifconfig_pool_linear = DISABLED
Sat Apr 29 12:42:44 2006 us=100112   n_bcast_buf = 256
Sat Apr 29 12:42:44 2006 us=100123   tcp_queue_limit = 64
Sat Apr 29 12:42:44 2006 us=100135   real_hash_size = 256
Sat Apr 29 12:42:44 2006 us=100146   virtual_hash_size = 256
Sat Apr 29 12:42:44 2006 us=100158   client_connect_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=125543   learn_address_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=125570   client_disconnect_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=125583   client_config_dir = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=125594   ccd_exclusive = DISABLED
Sat Apr 29 12:42:44 2006 us=125606   tmp_dir = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=125617   push_ifconfig_defined = DISABLED
Sat Apr 29 12:42:44 2006 us=125633   push_ifconfig_local = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=125647   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 29 12:42:44 2006 us=125659   enable_c2c = DISABLED
Sat Apr 29 12:42:44 2006 us=125671   duplicate_cn = DISABLED
Sat Apr 29 12:42:44 2006 us=125682   cf_max = 0
Sat Apr 29 12:42:44 2006 us=125693   cf_per = 0
Sat Apr 29 12:42:44 2006 us=125704   max_clients = 1024
Sat Apr 29 12:42:44 2006 us=125717   max_routes_per_client = 256
Sat Apr 29 12:42:44 2006 us=125729   client_cert_not_required = DISABLED
Sat Apr 29 12:42:44 2006 us=125741   username_as_common_name = DISABLED
Sat Apr 29 12:42:44 2006 us=148687   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=148714   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 29 12:42:44 2006 us=148727   client = DISABLED
Sat Apr 29 12:42:44 2006 us=148738   pull = DISABLED
Sat Apr 29 12:42:44 2006 us=148749   auth_user_pass_file = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=148765   show_net_up = DISABLED
Sat Apr 29 12:42:44 2006 us=148777   route_method = 0
Sat Apr 29 12:42:44 2006 us=148789   ip_win32_defined = DISABLED
Sat Apr 29 12:42:44 2006 us=148800   ip_win32_type = 3
Sat Apr 29 12:42:44 2006 us=148811   dhcp_masq_offset = 0
Sat Apr 29 12:42:44 2006 us=148823   dhcp_lease_time = 31536000
Sat Apr 29 12:42:44 2006 us=148835   tap_sleep = 0
Sat Apr 29 12:42:44 2006 us=148845   dhcp_options = DISABLED
Sat Apr 29 12:42:44 2006 us=148859   dhcp_renew = DISABLED
Sat Apr 29 12:42:44 2006 us=148871   dhcp_pre_release = DISABLED
Sat Apr 29 12:42:44 2006 us=171136   dhcp_release = DISABLED
Sat Apr 29 12:42:44 2006 us=171161   domain = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=171172   netbios_scope = '[UNDEF]'
Sat Apr 29 12:42:44 2006 us=171184   netbios_node_type = 0
Sat Apr 29 12:42:44 2006 us=171195   disable_nbt = DISABLED
Sat Apr 29 12:42:44 2006 us=174273 OpenVPN 2.0.5 Win32-MinGW [SSL] [LZO] built on Nov  2 2005
Sat Apr 29 12:42:44 2006 us=185162 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sat Apr 29 12:42:44 2006 us=273771 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 12:42:44 2006 us=273835 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 29 12:42:44 2006 us=273909 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 12:42:44 2006 us=273929 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 29 12:42:44 2006 us=273963 LZO compression initialized
Sat Apr 29 12:42:44 2006 us=460066 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{56B0DAE9-60AF-442C-ACAA-A6E607093D44}.tap
Sat Apr 29 12:42:44 2006 us=461965 TAP-Win32 Driver Version 8.1 
Sat Apr 29 12:42:44 2006 us=463644 TAP-Win32 MTU=1500
Sat Apr 29 12:42:44 2006 us=465344 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.200.2/255.255.255.252 on interface {56B0DAE9-60AF-442C-ACAA-A6E607093D44} [DHCP-serv: 192.168.200.1, lease-time: 31536000]
Sat Apr 29 12:42:44 2006 us=468752 Successful ARP Flush on interface [2] {56B0DAE9-60AF-442C-ACAA-A6E607093D44}
Sat Apr 29 12:42:44 2006 us=476080 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 29 12:42:44 2006 us=476124 Fragmentation MTU parms [ L:1549 D:1400 EF:48 EB:135 ET:1 EL:0 AF:3/1 ]
Sat Apr 29 12:42:44 2006 us=476172 Local Options String: 'V4,dev-type tun,link-mtu 1549,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.1 192.168.200.2,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 12:42:44 2006 us=476189 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1549,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.2 192.168.200.1,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 12:42:44 2006 us=482925 Local Options hash (VER=V4): '9e414f12'
Sat Apr 29 12:42:44 2006 us=482971 Expected Remote Options hash (VER=V4): 'ca15164c'
Sat Apr 29 12:42:44 2006 us=483037 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Apr 29 12:42:44 2006 us=487864 UDPv4 link local (bound): [undef]:1194
Sat Apr 29 12:42:44 2006 us=487903 UDPv4 link remote: 84.182.x.x:1194
Sat Apr 29 12:42:44 2006 us=491495 UDPv4 WRITE [60] to 84.182.52.205:1194:  DATA len=60
Sat Apr 29 12:42:55 2006 us=252492 UDPv4 WRITE [60] to 84.182.52.205:1194:  DATA len=60
Sat Apr 29 12:43:05 2006 us=364912 UDPv4 WRITE [60] to 84.182.52.205:1194:  DATA len=60
Sat Apr 29 12:43:15 2006 us=67584 UDPv4 WRITE [60] to 84.182.52.205:1194:  DATA len=60
Sat Apr 29 12:43:24 2006 us=489150 UDPv4 WRITE [60] to 84.182.52.205:1194:  DATA len=60
Sat Apr 29 12:43:30 2006 us=310985 TCP/UDP: Closing socket
Sat Apr 29 12:43:30 2006 us=313175 Closing TUN/TAP interface
Sat Apr 29 12:43:30 2006 us=316994 SIGTERM[hard,] received, process exiting

> Warum stehen in Deiner Konfig tun-mtu und mss-fix? Bei mir geht alles auch ohne.
Obiges Client.log ist OHNE diese Parameter.

> wie sehen denn die IP Bereiche aus die du benutzt
zu Hause (hinter der FritzBox): 192.168.178.0
auf Arbeit (Client): 10.0.x.x

Obiges Log habe ich allerdings von einem Rechner zu Hause erstellt (bin erst wieder am Dienstag auf Arbeit).
-> Mit TCP kann ich einen Tunnel von diesem Rechner aus aufbauen.

Hanno_Gera · 29 Apr 2006

Startmeldung des Servers:

# ./openvpn --config server.ovpn --daemon
Apr 29 13:14:19 multid[361]: interface tun0 new.
Apr 29 13:14:19 multid[361]: bridge lan has 2 interfaces only_this=tun0
Apr 29 13:14:19 multid[361]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Apr 29 13:14:19 multid[361]: interface tun0 up.
Apr 29 13:14:19 multid[361]: static routes: 0 deleted (0 failed), 0 added (0 failed)
#

Meintest Du das?

Hanno_Gera · 29 Apr 2006

Meldungen des Servers:

Code:

# ./openvpn --config server.ovpn
Sat Apr 29 13:15:54 2006 us=298000 Current Parameter Settings:
Sat Apr 29 13:15:54 2006 us=298000   config = 'server.ovpn'
Sat Apr 29 13:15:54 2006 us=298000   mode = 0
Sat Apr 29 13:15:54 2006 us=298000   persist_config = DISABLED
Sat Apr 29 13:15:54 2006 us=298000   persist_mode = 1
Sat Apr 29 13:15:54 2006 us=298000   show_ciphers = DISABLED
Sat Apr 29 13:15:54 2006 us=298000   show_digests = DISABLED
Sat Apr 29 13:15:54 2006 us=298000   show_engines = DISABLED
Sat Apr 29 13:15:54 2006 us=298000   genkey = DISABLED
Sat Apr 29 13:15:54 2006 us=308000   key_pass_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=308000   show_tls_ciphers = DISABLED
Sat Apr 29 13:15:54 2006 us=308000   proto = 0
Sat Apr 29 13:15:54 2006 us=308000   local = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=308000   remote_list = NULL
Sat Apr 29 13:15:54 2006 us=308000   remote_random = DISABLED
Sat Apr 29 13:15:54 2006 us=308000   local_port = 1194
Sat Apr 29 13:15:54 2006 us=308000   remote_port = 1194
Sat Apr 29 13:15:54 2006 us=308000   remote_float = ENABLED
Sat Apr 29 13:15:54 2006 us=308000   ipchange = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=308000   bind_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=318000   bind_local = ENABLED
Sat Apr 29 13:15:54 2006 us=318000   dev = 'tun0'
Sat Apr 29 13:15:54 2006 us=318000   dev_type = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=318000   dev_node = '/dev/misc/net/tun'
Sat Apr 29 13:15:54 2006 us=318000   topology = 1
Sat Apr 29 13:15:54 2006 us=318000   tun_ipv6 = DISABLED
Sat Apr 29 13:15:54 2006 us=318000   ifconfig_local = '192.168.200.1'
Sat Apr 29 13:15:54 2006 us=318000   ifconfig_remote_netmask = '192.168.200.2'
Sat Apr 29 13:15:54 2006 us=318000   ifconfig_noexec = DISABLED
Sat Apr 29 13:15:54 2006 us=318000   ifconfig_nowarn = DISABLED
Sat Apr 29 13:15:54 2006 us=328000   shaper = 0
Sat Apr 29 13:15:54 2006 us=328000   tun_mtu = 1500
Sat Apr 29 13:15:54 2006 us=328000   tun_mtu_defined = ENABLED
Sat Apr 29 13:15:54 2006 us=328000   link_mtu = 1500
Sat Apr 29 13:15:54 2006 us=328000   link_mtu_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=328000   tun_mtu_extra = 0
Sat Apr 29 13:15:54 2006 us=328000   tun_mtu_extra_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=328000   fragment = 1400
Sat Apr 29 13:15:54 2006 us=328000   mtu_discover_type = -1
Sat Apr 29 13:15:54 2006 us=328000   mtu_test = 0
Sat Apr 29 13:15:54 2006 us=328000   mlock = DISABLED
Sat Apr 29 13:15:54 2006 us=338000   keepalive_ping = 10
Sat Apr 29 13:15:54 2006 us=338000   keepalive_timeout = 60
Sat Apr 29 13:15:54 2006 us=338000   inactivity_timeout = 0
Sat Apr 29 13:15:54 2006 us=338000   ping_send_timeout = 10
Sat Apr 29 13:15:54 2006 us=338000   ping_rec_timeout = 60
Sat Apr 29 13:15:54 2006 us=338000   ping_rec_timeout_action = 2
Sat Apr 29 13:15:54 2006 us=338000   ping_timer_remote = DISABLED
Sat Apr 29 13:15:54 2006 us=338000   remap_sigusr1 = 0
Sat Apr 29 13:15:54 2006 us=338000   explicit_exit_notification = 0
Sat Apr 29 13:15:54 2006 us=338000   persist_tun = ENABLED
Sat Apr 29 13:15:54 2006 us=348000   persist_local_ip = DISABLED
Sat Apr 29 13:15:54 2006 us=348000   persist_remote_ip = DISABLED
Sat Apr 29 13:15:54 2006 us=348000   persist_key = ENABLED
Sat Apr 29 13:15:54 2006 us=348000   mssfix = 1450
Sat Apr 29 13:15:54 2006 us=348000   passtos = DISABLED
Sat Apr 29 13:15:54 2006 us=348000   resolve_retry_seconds = 1000000000
Sat Apr 29 13:15:54 2006 us=348000   connect_retry_seconds = 5
Sat Apr 29 13:15:54 2006 us=348000   connect_timeout = 10
Sat Apr 29 13:15:54 2006 us=348000   connect_retry_max = 0
Sat Apr 29 13:15:54 2006 us=348000   username = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   groupname = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   chroot_dir = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   cd_dir = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   writepid = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   up_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   down_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=358000   down_pre = DISABLED
Sat Apr 29 13:15:54 2006 us=358000   up_restart = DISABLED
Sat Apr 29 13:15:54 2006 us=358000   up_delay = DISABLED
Sat Apr 29 13:15:54 2006 us=358000   daemon = DISABLED
Sat Apr 29 13:15:54 2006 us=358000   inetd = 0
Sat Apr 29 13:15:54 2006 us=368000   log = DISABLED
Sat Apr 29 13:15:54 2006 us=368000   suppress_timestamps = DISABLED
Sat Apr 29 13:15:54 2006 us=368000   nice = 0
Sat Apr 29 13:15:54 2006 us=368000   verbosity = 4
Sat Apr 29 13:15:54 2006 us=368000   mute = 0
Sat Apr 29 13:15:54 2006 us=368000   gremlin = 0
Sat Apr 29 13:15:54 2006 us=368000   status_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=368000   status_file_version = 1
Sat Apr 29 13:15:54 2006 us=368000   status_file_update_freq = 60
Sat Apr 29 13:15:54 2006 us=368000   occ = ENABLED
Sat Apr 29 13:15:54 2006 us=378000   rcvbuf = 65536
Sat Apr 29 13:15:54 2006 us=378000   sndbuf = 65536
Sat Apr 29 13:15:54 2006 us=378000   sockflags = 0
Sat Apr 29 13:15:54 2006 us=378000   socks_proxy_server = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=378000   socks_proxy_port = 0
Sat Apr 29 13:15:54 2006 us=378000   socks_proxy_retry = DISABLED
Sat Apr 29 13:15:54 2006 us=378000   fast_io = DISABLED
Sat Apr 29 13:15:54 2006 us=378000   lzo = 7
Sat Apr 29 13:15:54 2006 us=378000   route_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=378000   route_default_gateway = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=378000   route_noexec = DISABLED
Sat Apr 29 13:15:54 2006 us=388000   route_delay = 0
Sat Apr 29 13:15:54 2006 us=388000   route_delay_window = 30
Sat Apr 29 13:15:54 2006 us=388000   route_delay_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=388000   route_nopull = DISABLED
Sat Apr 29 13:15:54 2006 us=388000   management_addr = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=388000   management_port = 0
Sat Apr 29 13:15:54 2006 us=388000   management_user_pass = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=388000   management_log_history_cache = 250
Sat Apr 29 13:15:54 2006 us=388000   management_echo_buffer_size = 100
Sat Apr 29 13:15:54 2006 us=398000   management_query_passwords = DISABLED
Sat Apr 29 13:15:54 2006 us=398000   management_hold = DISABLED
Sat Apr 29 13:15:54 2006 us=398000   shared_secret_file = '/var/tmp/static.key'
Sat Apr 29 13:15:54 2006 us=398000   key_direction = 0
Sat Apr 29 13:15:54 2006 us=398000   ciphername_defined = ENABLED
Sat Apr 29 13:15:54 2006 us=398000   ciphername = 'BF-CBC'
Sat Apr 29 13:15:54 2006 us=398000   authname_defined = ENABLED
Sat Apr 29 13:15:54 2006 us=398000   authname = 'SHA1'
Sat Apr 29 13:15:54 2006 us=398000   keysize = 0
Sat Apr 29 13:15:54 2006 us=398000   engine = DISABLED
Sat Apr 29 13:15:54 2006 us=398000   replay = ENABLED
Sat Apr 29 13:15:54 2006 us=408000   mute_replay_warnings = DISABLED
Sat Apr 29 13:15:54 2006 us=408000   replay_window = 64
Sat Apr 29 13:15:54 2006 us=408000   replay_time = 15
Sat Apr 29 13:15:54 2006 us=408000   packet_id_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=408000   use_iv = ENABLED
Sat Apr 29 13:15:54 2006 us=408000   test_crypto = DISABLED
Sat Apr 29 13:15:54 2006 us=408000   tls_server = DISABLED
Sat Apr 29 13:15:54 2006 us=408000   tls_client = DISABLED
Sat Apr 29 13:15:54 2006 us=408000   key_method = 2
Sat Apr 29 13:15:54 2006 us=408000   ca_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   ca_path = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   dh_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   cert_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   priv_key_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   pkcs12_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   cipher_list = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   tls_verify = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   tls_remote = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   crl_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=418000   ns_cert_type = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=428000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_ku[i] = 0
Sat Apr 29 13:15:54 2006 us=438000   remote_cert_eku = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=438000   tls_timeout = 2
Sat Apr 29 13:15:54 2006 us=438000   renegotiate_bytes = 0
Sat Apr 29 13:15:54 2006 us=448000   renegotiate_packets = 0
Sat Apr 29 13:15:54 2006 us=448000   renegotiate_seconds = 3600
Sat Apr 29 13:15:54 2006 us=448000   handshake_window = 60
Sat Apr 29 13:15:54 2006 us=448000   transition_window = 3600
Sat Apr 29 13:15:54 2006 us=448000   single_session = DISABLED
Sat Apr 29 13:15:54 2006 us=448000   tls_exit = DISABLED
Sat Apr 29 13:15:54 2006 us=448000   tls_auth_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=448000   pkcs11_slot_type = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=448000   pkcs11_slot = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=448000   pkcs11_id_type = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=448000   pkcs11_id = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=458000   pkcs11_pin_cache_period = -1
Sat Apr 29 13:15:54 2006 us=458000   pkcs11_protected_authentication = DISABLED
Sat Apr 29 13:15:54 2006 us=458000   pkcs11_cert_private = DISABLED
Sat Apr 29 13:15:54 2006 us=458000   server_network = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=458000   server_netmask = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=458000   server_bridge_ip = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=458000   server_bridge_netmask = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=458000   server_bridge_pool_start = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=468000   server_bridge_pool_end = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=468000   push_list = 'route 192.168.178.0 255.255.255.0'
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_start = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_end = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=468000   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 29 13:15:54 2006 us=468000   n_bcast_buf = 256
Sat Apr 29 13:15:54 2006 us=468000   tcp_queue_limit = 64
Sat Apr 29 13:15:54 2006 us=468000   real_hash_size = 256
Sat Apr 29 13:15:54 2006 us=478000   virtual_hash_size = 256
Sat Apr 29 13:15:54 2006 us=478000   client_connect_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=478000   learn_address_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=478000   client_disconnect_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=478000   client_config_dir = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=478000   ccd_exclusive = DISABLED
Sat Apr 29 13:15:54 2006 us=478000   tmp_dir = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=478000   push_ifconfig_defined = DISABLED
Sat Apr 29 13:15:54 2006 us=478000   push_ifconfig_local = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=478000   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 29 13:15:54 2006 us=488000   enable_c2c = DISABLED
Sat Apr 29 13:15:54 2006 us=488000   duplicate_cn = DISABLED
Sat Apr 29 13:15:54 2006 us=488000   cf_max = 0
Sat Apr 29 13:15:54 2006 us=488000   cf_per = 0
Sat Apr 29 13:15:54 2006 us=488000   max_clients = 1024
Sat Apr 29 13:15:54 2006 us=488000   max_routes_per_client = 256
Sat Apr 29 13:15:54 2006 us=488000   client_cert_not_required = DISABLED
Sat Apr 29 13:15:54 2006 us=488000   username_as_common_name = DISABLED
Sat Apr 29 13:15:54 2006 us=488000   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=488000   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 29 13:15:54 2006 us=498000   client = DISABLED
Sat Apr 29 13:15:54 2006 us=498000   pull = DISABLED
Sat Apr 29 13:15:54 2006 us=498000   auth_user_pass_file = '[UNDEF]'
Sat Apr 29 13:15:54 2006 us=498000 OpenVPN 2.1_beta8 mipsel-linux [SSL] [LZO2] built on Feb 11 2006
Sat Apr 29 13:15:54 2006 us=508000 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 13:15:54 2006 us=508000 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 29 13:15:54 2006 us=508000 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 13:15:54 2006 us=508000 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 29 13:15:54 2006 us=518000 LZO compression initialized
Apr 29 13:15:54 multid[361]: interface tun0 new.
Sat Apr 29 13:15:54 2006 us=538000 TUN/TAP device tun0 opened
Sat Apr 29 13:15:54 2006 us=538000 TUN/TAP TX queue length set to 100
Sat Apr 29 13:15:54 2006 us=538000 /sbin/ifconfig tun0 192.168.200.1 pointopoint 192.168.200.2 mtu 1500
Apr 29 13:15:54 multid[361]: bridge lan has 2 interfaces only_this=tun0
Apr 29 13:15:54 multid[361]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Apr 29 13:15:54 multid[361]: interface tun0 up.
Apr 29 13:15:54 multid[361]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Sat Apr 29 13:15:54 2006 us=648000 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 29 13:15:54 2006 us=648000 Fragmentation MTU parms [ L:1549 D:1400 EF:48 EB:135 ET:1 EL:0 AF:3/1 ]
Sat Apr 29 13:15:54 2006 us=648000 Local Options String: 'V4,dev-type tun,link-mtu 1549,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.2 192.168.200.1,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 13:15:54 2006 us=648000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1549,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.1 192.168.200.2,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 13:15:54 2006 us=658000 Local Options hash (VER=V4): 'ca15164c'
Sat Apr 29 13:15:54 2006 us=658000 Expected Remote Options hash (VER=V4): '9e414f12'
Sat Apr 29 13:15:54 2006 us=658000 Socket Buffers: R=[65535->131070] S=[65535->131070]
Sat Apr 29 13:15:54 2006 us=658000 UDPv4 link local (bound): [undef]:1194
Sat Apr 29 13:15:54 2006 us=658000 UDPv4 link remote: [undef]
Sat Apr 29 13:16:07 2006 us=238000 Peer Connection Initiated with 84.182.52.205:61715
Sat Apr 29 13:16:07 2006 us=238000 Initialization Sequence Completed
Sat Apr 29 13:16:14 2006 us=738000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 13:16:14 2006 us=738000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 13:16:16 2006 us=948000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 13:16:24 2006 us=418000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 13:16:29 2006 us=108000 event_wait : Interrupted system call (code=4)
Sat Apr 29 13:16:29 2006 us=118000 TCP/UDP: Closing socket
Sat Apr 29 13:16:29 2006 us=118000 Closing TUN/TAP interface
Apr 29 13:16:29 multid[361]: interface tun0 down.
Sat Apr 29 13:16:29 2006 us=128000 SIGINT[hard,] received, process exiting
# Apr 29 13:16:29 multid[361]: interface tun0 gone.

#

Die Meldung "No route to host" kam erst, als ich versuchte, von einem Rechner einen Tunnel aufzubauen.

--
EDIT DM41:
Bei so langen Ausgaben bitte an Code-Tags denken. Das erhöht die Lesbarkeit ungemein. ;-)

dsteinkopf · 29 Apr 2006

Das sieht mir alles so aus, als würden sich Client und Server gegenseitig keine UDP-Pakete schicken können. Prüf mal, ob da keine Firewall oder so dazwischen ist.

Dirk

TOM · 29 Apr 2006

Hi,
anbei ein link zur openvpn homepage.
http://openvpn.net/examples.html
insbesondere das Simple Examples (Mini-HOWTO) ist interessant.

Deine Server conf würd ich mal auf ein minimum zurückschrauben, siehe obiges howto.
Insbesondere folgende mit # gekennzeichneten Einstellungen würd ich mal disablen.

server.ovpn
=========
dev tun0
#dev-node /dev/misc/net/tun
ifconfig 192.168.200.1 192.168.200.2
secret /var/tmp/static.key
;proto tcp-server
proto udp
port 1194
#tun-mtu 1500
#mssfix 1350
#float
keepalive 10 60
verb 4

Ansonsten sollte natürlich port 1194 auf beiden Seiten offen sein.

good luck!

Hanno_Gera · 29 Apr 2006

für DM41: danke, war mir leider unbekannt
für dsteinkopf: Firewall auf Client ausgeschaltet und in der FB ist Port 1194 für UDP auf FB gemappt
für Tom:
server.ovpn
=========
dev tun0
dev-node /dev/misc/net/tun
ifconfig 192.168.200.1 192.168.200.2
secret /var/tmp/static.key
proto udp
port 1194
verb 6

client.ovpn
========
remote myserver.dyndns.org 1194
dev tun
ifconfig 192.168.200.2 192.168.200.1
secret static.key
proto udp
verb 6

Auf dem Server erhalte ich

Code:

# ./openvpn --config server.ovpn 
Sat Apr 29 21:21:26 2006 us=106000 Current Parameter Settings:
Sat Apr 29 21:21:26 2006 us=106000   config = 'server.ovpn'
Sat Apr 29 21:21:26 2006 us=106000   mode = 0
Sat Apr 29 21:21:26 2006 us=106000   persist_config = DISABLED
Sat Apr 29 21:21:26 2006 us=106000   persist_mode = 1
Sat Apr 29 21:21:26 2006 us=106000   show_ciphers = DISABLED
Sat Apr 29 21:21:26 2006 us=106000   show_digests = DISABLED
Sat Apr 29 21:21:26 2006 us=116000   show_engines = DISABLED
Sat Apr 29 21:21:26 2006 us=116000   genkey = DISABLED
Sat Apr 29 21:21:26 2006 us=116000   key_pass_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=116000   show_tls_ciphers = DISABLED
Sat Apr 29 21:21:26 2006 us=116000   proto = 0
Sat Apr 29 21:21:26 2006 us=116000   local = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=116000   remote_list = NULL
Sat Apr 29 21:21:26 2006 us=116000   remote_random = DISABLED
Sat Apr 29 21:21:26 2006 us=116000   local_port = 1194
Sat Apr 29 21:21:26 2006 us=116000   remote_port = 1194
Sat Apr 29 21:21:26 2006 us=126000   remote_float = DISABLED
Sat Apr 29 21:21:26 2006 us=126000   ipchange = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=126000   bind_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=126000   bind_local = ENABLED
Sat Apr 29 21:21:26 2006 us=126000   dev = 'tun0'
Sat Apr 29 21:21:26 2006 us=126000   dev_type = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=126000   dev_node = '/dev/misc/net/tun'
Sat Apr 29 21:21:26 2006 us=126000   topology = 1
Sat Apr 29 21:21:26 2006 us=126000   tun_ipv6 = DISABLED
Sat Apr 29 21:21:26 2006 us=136000   ifconfig_local = '192.168.200.1'
Sat Apr 29 21:21:26 2006 us=136000   ifconfig_remote_netmask = '192.168.200.2'
Sat Apr 29 21:21:26 2006 us=136000   ifconfig_noexec = DISABLED
Sat Apr 29 21:21:26 2006 us=136000   ifconfig_nowarn = DISABLED
Sat Apr 29 21:21:26 2006 us=136000   shaper = 0
Sat Apr 29 21:21:26 2006 us=136000   tun_mtu = 1500
Sat Apr 29 21:21:26 2006 us=136000   tun_mtu_defined = ENABLED
Sat Apr 29 21:21:26 2006 us=136000   link_mtu = 1500
Sat Apr 29 21:21:26 2006 us=136000   link_mtu_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=136000   tun_mtu_extra = 0
Sat Apr 29 21:21:26 2006 us=146000   tun_mtu_extra_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=146000   fragment = 0
Sat Apr 29 21:21:26 2006 us=146000   mtu_discover_type = -1
Sat Apr 29 21:21:26 2006 us=146000   mtu_test = 0
Sat Apr 29 21:21:26 2006 us=146000   mlock = DISABLED
Sat Apr 29 21:21:26 2006 us=146000   keepalive_ping = 0
Sat Apr 29 21:21:26 2006 us=146000   keepalive_timeout = 0
Sat Apr 29 21:21:26 2006 us=146000   inactivity_timeout = 0
Sat Apr 29 21:21:26 2006 us=146000   ping_send_timeout = 0
Sat Apr 29 21:21:26 2006 us=146000   ping_rec_timeout = 0
Sat Apr 29 21:21:26 2006 us=146000   ping_rec_timeout_action = 0
Sat Apr 29 21:21:26 2006 us=156000   ping_timer_remote = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   remap_sigusr1 = 0
Sat Apr 29 21:21:26 2006 us=156000   explicit_exit_notification = 0
Sat Apr 29 21:21:26 2006 us=156000   persist_tun = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   persist_local_ip = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   persist_remote_ip = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   persist_key = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   mssfix = 1450
Sat Apr 29 21:21:26 2006 us=156000   passtos = DISABLED
Sat Apr 29 21:21:26 2006 us=156000   resolve_retry_seconds = 1000000000
Sat Apr 29 21:21:26 2006 us=166000   connect_retry_seconds = 5
Sat Apr 29 21:21:26 2006 us=166000   connect_timeout = 10
Sat Apr 29 21:21:26 2006 us=166000   connect_retry_max = 0
Sat Apr 29 21:21:26 2006 us=166000   username = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   groupname = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   chroot_dir = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   cd_dir = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   writepid = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   up_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=166000   down_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=176000   down_pre = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   up_restart = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   up_delay = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   daemon = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   inetd = 0
Sat Apr 29 21:21:26 2006 us=176000   log = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   suppress_timestamps = DISABLED
Sat Apr 29 21:21:26 2006 us=176000   nice = 0
Sat Apr 29 21:21:26 2006 us=176000   verbosity = 6
Sat Apr 29 21:21:26 2006 us=176000   mute = 0
Sat Apr 29 21:21:26 2006 us=186000   gremlin = 0
Sat Apr 29 21:21:26 2006 us=186000   status_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=186000   status_file_version = 1
Sat Apr 29 21:21:26 2006 us=186000   status_file_update_freq = 60
Sat Apr 29 21:21:26 2006 us=186000   occ = ENABLED
Sat Apr 29 21:21:26 2006 us=186000   rcvbuf = 65536
Sat Apr 29 21:21:26 2006 us=186000   sndbuf = 65536
Sat Apr 29 21:21:26 2006 us=186000   sockflags = 0
Sat Apr 29 21:21:26 2006 us=186000   socks_proxy_server = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=186000   socks_proxy_port = 0
Sat Apr 29 21:21:26 2006 us=186000   socks_proxy_retry = DISABLED
Sat Apr 29 21:21:26 2006 us=196000   fast_io = DISABLED
Sat Apr 29 21:21:26 2006 us=196000   lzo = 0
Sat Apr 29 21:21:26 2006 us=196000   route_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=196000   route_default_gateway = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=196000   route_noexec = DISABLED
Sat Apr 29 21:21:26 2006 us=196000   route_delay = 0
Sat Apr 29 21:21:26 2006 us=196000   route_delay_window = 30
Sat Apr 29 21:21:26 2006 us=196000   route_delay_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=196000   route_nopull = DISABLED
Sat Apr 29 21:21:26 2006 us=196000   management_addr = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=196000   management_port = 0
Sat Apr 29 21:21:26 2006 us=206000   management_user_pass = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=206000   management_log_history_cache = 250
Sat Apr 29 21:21:26 2006 us=206000   management_echo_buffer_size = 100
Sat Apr 29 21:21:26 2006 us=206000   management_query_passwords = DISABLED
Sat Apr 29 21:21:26 2006 us=206000   management_hold = DISABLED
Sat Apr 29 21:21:26 2006 us=206000   shared_secret_file = '/var/tmp/static.key'
Sat Apr 29 21:21:26 2006 us=206000   key_direction = 0
Sat Apr 29 21:21:26 2006 us=206000   ciphername_defined = ENABLED
Sat Apr 29 21:21:26 2006 us=206000   ciphername = 'BF-CBC'
Sat Apr 29 21:21:26 2006 us=216000   authname_defined = ENABLED
Sat Apr 29 21:21:26 2006 us=216000   authname = 'SHA1'
Sat Apr 29 21:21:26 2006 us=216000   keysize = 0
Sat Apr 29 21:21:26 2006 us=216000   engine = DISABLED
Sat Apr 29 21:21:26 2006 us=216000   replay = ENABLED
Sat Apr 29 21:21:26 2006 us=216000   mute_replay_warnings = DISABLED
Sat Apr 29 21:21:26 2006 us=216000   replay_window = 64
Sat Apr 29 21:21:26 2006 us=216000   replay_time = 15
Sat Apr 29 21:21:26 2006 us=216000   packet_id_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=216000   use_iv = ENABLED
Sat Apr 29 21:21:26 2006 us=216000   test_crypto = DISABLED
Sat Apr 29 21:21:26 2006 us=226000   tls_server = DISABLED
Sat Apr 29 21:21:26 2006 us=226000   tls_client = DISABLED
Sat Apr 29 21:21:26 2006 us=226000   key_method = 2
Sat Apr 29 21:21:26 2006 us=226000   ca_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   ca_path = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   dh_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   cert_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   priv_key_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   pkcs12_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=226000   cipher_list = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=236000   tls_verify = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=236000   tls_remote = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=236000   crl_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=236000   ns_cert_type = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=236000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=246000   remote_cert_ku[i] = 0
Sat Apr 29 21:21:26 2006 us=256000   remote_cert_eku = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=256000   tls_timeout = 2
Sat Apr 29 21:21:26 2006 us=256000   renegotiate_bytes = 0
Sat Apr 29 21:21:26 2006 us=256000   renegotiate_packets = 0
Sat Apr 29 21:21:26 2006 us=256000   renegotiate_seconds = 3600
Sat Apr 29 21:21:26 2006 us=256000   handshake_window = 60
Sat Apr 29 21:21:26 2006 us=256000   transition_window = 3600
Sat Apr 29 21:21:26 2006 us=256000   single_session = DISABLED
Sat Apr 29 21:21:26 2006 us=256000   tls_exit = DISABLED
Sat Apr 29 21:21:26 2006 us=256000   tls_auth_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=256000   pkcs11_slot_type = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_slot = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_id_type = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_id = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_pin_cache_period = -1
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_protected_authentication = DISABLED
Sat Apr 29 21:21:26 2006 us=266000   pkcs11_cert_private = DISABLED
Sat Apr 29 21:21:26 2006 us=266000   server_network = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=266000   server_netmask = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=266000   server_bridge_ip = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=266000   server_bridge_netmask = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   server_bridge_pool_start = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   server_bridge_pool_end = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_start = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_end = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=276000   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 29 21:21:26 2006 us=276000   n_bcast_buf = 256
Sat Apr 29 21:21:26 2006 us=286000   tcp_queue_limit = 64
Sat Apr 29 21:21:26 2006 us=286000   real_hash_size = 256
Sat Apr 29 21:21:26 2006 us=286000   virtual_hash_size = 256
Sat Apr 29 21:21:26 2006 us=286000   client_connect_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=286000   learn_address_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=286000   client_disconnect_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=286000   client_config_dir = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=286000   ccd_exclusive = DISABLED
Sat Apr 29 21:21:26 2006 us=286000   tmp_dir = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=286000   push_ifconfig_defined = DISABLED
Sat Apr 29 21:21:26 2006 us=286000   push_ifconfig_local = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=296000   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 29 21:21:26 2006 us=296000   enable_c2c = DISABLED
Sat Apr 29 21:21:26 2006 us=296000   duplicate_cn = DISABLED
Sat Apr 29 21:21:26 2006 us=296000   cf_max = 0
Sat Apr 29 21:21:26 2006 us=296000   cf_per = 0
Sat Apr 29 21:21:26 2006 us=296000   max_clients = 1024
Sat Apr 29 21:21:26 2006 us=296000   max_routes_per_client = 256
Sat Apr 29 21:21:26 2006 us=296000   client_cert_not_required = DISABLED
Sat Apr 29 21:21:26 2006 us=296000   username_as_common_name = DISABLED
Sat Apr 29 21:21:26 2006 us=306000   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=306000   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 29 21:21:26 2006 us=306000   client = DISABLED
Sat Apr 29 21:21:26 2006 us=306000   pull = DISABLED
Sat Apr 29 21:21:26 2006 us=306000   auth_user_pass_file = '[UNDEF]'
Sat Apr 29 21:21:26 2006 us=306000 OpenVPN 2.1_beta8 mipsel-linux [SSL] [LZO2] built on Feb 11 2006
Sat Apr 29 21:21:26 2006 us=316000 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 21:21:26 2006 us=316000 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 29 21:21:26 2006 us=326000 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 29 21:21:26 2006 us=326000 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 29 21:21:26 multid[363]: interface tun0 new.
Sat Apr 29 21:21:26 2006 us=336000 TUN/TAP device tun0 opened
Sat Apr 29 21:21:26 2006 us=336000 TUN/TAP TX queue length set to 100
Sat Apr 29 21:21:26 2006 us=336000 /sbin/ifconfig tun0 192.168.200.1 pointopoint 192.168.200.2 mtu 1500
Apr 29 21:21:26 multid[363]: bridge lan has 2 interfaces only_this=tun0
Apr 29 21:21:26 multid[363]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Apr 29 21:21:26 multid[363]: interface tun0 up.
Apr 29 21:21:26 multid[363]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Sat Apr 29 21:21:26 2006 us=456000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Sat Apr 29 21:21:26 2006 us=456000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.2 192.168.200.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 21:21:26 2006 us=456000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 192.168.200.1 192.168.200.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Apr 29 21:21:26 2006 us=456000 Local Options hash (VER=V4): '27d76c6d'
Sat Apr 29 21:21:26 2006 us=456000 Expected Remote Options hash (VER=V4): '1db64539'
Sat Apr 29 21:21:26 2006 us=456000 Socket Buffers: R=[65535->131070] S=[65535->131070]
Sat Apr 29 21:21:26 2006 us=456000 UDPv4 link local (bound): [undef]:1194
Sat Apr 29 21:21:26 2006 us=456000 UDPv4 link remote: [undef]
Sat Apr 29 21:21:45 2006 us=366000 UDPv4 READ [60] from 84.182.x.x:61253:  DATA len=60
Sat Apr 29 21:21:45 2006 us=366000 Peer Connection Initiated with 84.182.x.x:61253
Sat Apr 29 21:21:45 2006 us=366000 Initialization Sequence Completed
Sat Apr 29 21:21:45 2006 us=376000 UDPv4 WRITE [196] to 84.182.x.x:61253:  DATA len=196
Sat Apr 29 21:21:45 2006 us=456000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 21:21:45 2006 us=456000 UDPv4 READ [-1] from [undef]:61253: DATA UNDEF len=-1
Sat Apr 29 21:21:46 2006 us=606000 UDPv4 WRITE [60] to 84.182.x.x:61253:  DATA len=60
Sat Apr 29 21:21:46 2006 us=686000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 21:21:46 2006 us=686000 UDPv4 READ [-1] from [undef]:61253: DATA UNDEF len=-1
Sat Apr 29 21:21:55 2006 us=676000 UDPv4 READ [60] from 84.182.x.x:61253:  DATA len=60
Sat Apr 29 21:21:55 2006 us=686000 UDPv4 WRITE [196] to 84.182.x.x:61253:  DATA len=196
Sat Apr 29 21:21:55 2006 us=766000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 21:21:55 2006 us=766000 UDPv4 READ [-1] from [undef]:61253: DATA UNDEF len=-1
Sat Apr 29 21:21:56 2006 us=936000 UDPv4 WRITE [60] to 84.182.x.x:61253:  DATA len=60
Sat Apr 29 21:21:57 2006 us=6000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Apr 29 21:21:57 2006 us=16000 UDPv4 READ [-1] from [undef]:61253: DATA UNDEF len=-1
Sat Apr 29 21:22:04 2006 us=226000 event_wait : Interrupted system call (code=4)
Sat Apr 29 21:22:04 2006 us=226000 TCP/UDP: Closing socket
Sat Apr 29 21:22:04 2006 us=226000 Closing TUN/TAP interface
Apr 29 21:22:04 multid[363]: interface tun0 down.
Sat Apr 29 21:22:04 2006 us=236000 SIGINT[hard,] received, process exiting
# Apr 29 21:22:04 multid[363]: interface tun0 gone.

Liegt denn in

Sat Apr 29 21:21:57 2006 us=6000 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)

der Fehler?

OpenVPN geht nicht mit udp

Neuer User

Mitglied

Neuer User

Mitglied

Neuer User

Mitglied

Neuer User

Mitglied

Neuer User

Mitglied

Neuer User

Mitglied

Mitglied

Mitglied

Neuer User

Neuer User

Neuer User

Mitglied

Mitglied

Neuer User

Statistik des Forums