VPN Probleme mit DNS forwarding

Chris8080 · 19 Mrz 2014

Hallo,

habe einen Server in D und wohne in China.
Soweit ich weiß funktioniert die Zensur hier per DNS.

Habe jetzt auf meinem Server (Debian 7.4) OpenVPN installiert und auf meinem Client auch (Ubuntu).
Die Verbindung funktioniert auch gut, sobald ich whatsmyip.net eingebe bekomme ich hier in China die IP aus D angezeigt.
Allerdings kann ich Seiten wie Facebook etc. noch nicht öffnen - ich schätze das liegt daran, dass mein Ubuntu nicht den DNS aus D verwendet.
Wie kann ich dem das denn beibringen?

Hier meine server.conf:

Code:

;local a.b.c.d
port 15194
proto udp
;dev tap
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
client-config-dir ccd
route 192.168.1.0 255.255.255.0
push "dhcp-option DNS 194.25.2.130" 
push "dhcp-option DNS 217.237.150.33"
keepalive 10 120
comp-lzo
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 5

Und die client.conf:

Code:

client
;dev tap
dev tun
proto udp
remote 	94.250.213.170 15194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 5

Danke schon mal
Bye, Chris

sf3978 · 19 Mrz 2014

Chris8080 schrieb:
Allerdings kann ich Seiten wie Facebook etc. noch nicht öffnen - ich schätze das liegt daran, dass mein Ubuntu nicht den DNS aus D verwendet.
Wie kann ich dem das denn beibringen?

Wie sind in deinem Ubuntu (... wenn in China die IP aus D angezeigt wird), die Ausgaben für:

Code:

dig facebook.com
cat /etc/resolv.conf

?

Chris8080 · 20 Mrz 2014

Das sieht so aus:

Code:

dig facebook.com

; <<>> DiG 9.8.1-P1 <<>> facebook.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13527
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;facebook.com.                  IN      A

;; ANSWER SECTION:
facebook.com.           18904   IN      A       59.24.3.173

;; AUTHORITY SECTION:
facebook.com.           44630   IN      NS      b.ns.facebook.com.
facebook.com.           44630   IN      NS      a.ns.facebook.com.

;; ADDITIONAL SECTION:
a.ns.facebook.com.      9773    IN      A       203.98.7.65
b.ns.facebook.com.      68722   IN      A       69.171.255.12

;; Query time: 25 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Mar 20 07:43:10 2014
;; MSG SIZE  rcvd: 113

# cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1

Die Ausgaben sind mit und ohne VPN Verbindung identisch.

sf3978 · 20 Mrz 2014

Chris8080 schrieb:
Code:

;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Mar 20 07:43:10 2014 # cat /etc/resolv.conf nameserver 127.0.0.1

... mit und ohne VPN Verbindung identisch.

OK, dann wird dein Ubuntu, evtl. den dnsmasq benutzen. Siehe die Ausgabe von:

Code:

sudo ss -inputeam | grep -i :53

Immer nach dem Löschen des dns-cache (... oder gleichwertig) und mit tcpdump könntest Du evtl. feststellen, welche dns-Server, dein Ubuntu mit und ohne vpn benutzt:

Code:

sudo sh -x /etc/init.d/dns-clean restart
sudo tcpdump -vn -i any udp dst port 53 or udp src port 53

Evtl. hast Du auf deinem Ubuntu, den dnsmasq installiert, den man nicht konfigurieren kann (d. h. ohne die "/etc/dnsmasq.conf"). Das kann man ändern.

Chris8080 · 20 Mrz 2014

Hmm .. jetzt wird es kompliziert :-S

Code:

sudo ss -inputeam | grep -i :53
udp    UNCONN     0      0              127.0.0.1:53                    *:*      users:(("dnsmasq",1336,4)) ino=10525 sk=ffff88012985ca80
tcp    LISTEN     0      5              127.0.0.1:53                    *:*      users:(("dnsmasq",1336,5)) ino:10526 sk:ffff880129849440

Mit VPN:

Code:

20:47.777208 IP (tos 0x0, ttl 64, id 62802, offset 0, flags [DF], proto UDP (17), length 62)
    127.0.0.1.55258 > 127.0.0.1.53: 51731+ A? www.facebook.com. (34)
23:20:47.777266 IP (tos 0x0, ttl 64, id 51999, offset 0, flags [DF], proto UDP (17), length 62)
    10.8.0.6.3195 > 61.235.70.98.53: 19713+ A? www.facebook.com. (34)
23:20:47.777272 IP (tos 0x0, ttl 64, id 23184, offset 0, flags [DF], proto UDP (17), length 62)
    10.8.0.6.3195 > 211.98.2.4.53: 19713+ A? www.facebook.com. (34)
23:20:48.515474 IP (tos 0x10, ttl 186, id 45548, offset 0, flags [none], proto UDP (17), length 94)
    61.235.70.98.53 > 10.8.0.6.3195: 19713* 1/0/0 www.facebook.com. A 203.98.7.65 (66)
23:20:48.515618 IP (tos 0x0, ttl 64, id 62803, offset 0, flags [DF], proto UDP (17), length 94)
    127.0.0.1.53 > 127.0.0.1.55258: 51731* 1/0/0 www.facebook.com. A 203.98.7.65 (66)

und ohne VPN (beide Male DNS cache gelöscht).

Code:

127.0.0.1.52522 > 127.0.0.1.53: 60657+ A? facebook.com. (30)
23:24:35.262159 IP (tos 0x0, ttl 64, id 51986, offset 0, flags [DF], proto UDP (17), length 58)
    192.168.1.99.32389 > 61.235.70.98.53: 5838+ A? facebook.com. (30)
23:24:35.277724 IP (tos 0x0, ttl 250, id 6239, offset 0, flags [DF], proto UDP (17), length 141)
    61.235.70.98.53 > 192.168.1.99.32389: 5838 1/2/2 facebook.com. A 243.185.187.39 (113)
23:24:35.277820 IP (tos 0x0, ttl 64, id 62626, offset 0, flags [DF], proto UDP (17), length 141)
    127.0.0.1.53 > 127.0.0.1.52522: 60657 1/2/2 facebook.com. A 243.185.187.39 (113)

Das scheint schon irgendwie über den Server in D zu gehen - aber dennoch funktioniert es nicht :-S

sf3978 · 20 Mrz 2014

Chris8080 schrieb:
Das scheint schon irgendwie über den Server in D zu gehen - aber dennoch funktioniert es nicht

Wie sind dann mit VPN, die Ausgaben von:

Code:

sudo traceroute -n4T -p 80 facebook.com
route -n

?

Chris8080 · 21 Mrz 2014

Die Ausgaben sehen so aus:

Code:

sudo traceroute -n4T -p 80 facebook.com
traceroute to facebook.com (173.252.110.27), 30 hops max, 60 byte packets
 1  193.192.58.1  0.201 ms  24.655 ms  24.663 ms
 2  80.95.152.209  0.359 ms  0.334 ms  0.368 ms
 3  80.95.144.21  0.772 ms  0.843 ms  0.866 ms
 4  80.95.152.122  0.309 ms  0.300 ms  0.279 ms
 5  217.5.95.30  0.956 ms  0.953 ms  0.913 ms
 6  80.157.128.166  1.198 ms  1.194 ms  1.209 ms
 7  * * *
 8  * * *
 9  * * *
10  * 31.13.24.86  106.707 ms *
11  31.13.27.55  116.886 ms 74.119.79.209  117.603 ms 31.13.27.69  99.841 ms
12  * 173.252.64.191  99.191 ms *
13  * * *
14  * * *
15  * * *
16  * * *
17  173.252.110.27  105.718 ms  105.382 ms  105.737 ms

route -n
Kernel-IP-Routentabelle
Ziel            Router          Genmask         Flags Metric Ref    Use Iface
0.0.0.0         94.250.223.97   0.0.0.0         UG    0      0        0 eth0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
10.8.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 tun0
94.250.223.96   0.0.0.0         255.255.255.224 U     0      0        0 eth0
192.168.1.0     10.8.0.2        255.255.255.0   UG    0      0        0 tun0

kingbecher · 21 Mrz 2014

Versuche es doch mal mit bitte einem anderen VPN Client (Smartphone oder Router) aus. Ich bin gespannt ob es wegen Ubuntu oder wegen China nicht geht.

Chris8080 · 21 Mrz 2014

Ok .. habe es jetzt mit 3 Geräten versucht - alle hinter dem gleichen Router.
Ubuntu (sh. oben).
Win 8 - ähnliche Probleme. Verbindung steht aber die IP ist falsch (die in China und das Internet nach wie vor zensiert).
Android - Installiert, Zertifikate geladen und fertig, alles läuft. Facebook, Youtube etc. direkt auf Anhieb.

Der Server scheint somit korrekt konfiguriert zu sein und nur die PCs sträuben sich - wieso?

Das Log vom Windows Rechner:

Code:

Fri Mar 21 17:30:06 2014 us=461567 Current Parameter Settings:
Fri Mar 21 17:30:06 2014 us=461567   config = 'client2.ovpn'
Fri Mar 21 17:30:06 2014 us=461567   mode = 0
Fri Mar 21 17:30:06 2014 us=461567   show_ciphers = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   show_digests = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   show_engines = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   genkey = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   key_pass_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   show_tls_ciphers = DISABLED
Fri Mar 21 17:30:06 2014 us=461567 Connection profiles [default]:
Fri Mar 21 17:30:06 2014 us=461567   proto = udp
Fri Mar 21 17:30:06 2014 us=461567   local = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   local_port = 0
Fri Mar 21 17:30:06 2014 us=461567   remote = '94.250.213.170'
Fri Mar 21 17:30:06 2014 us=461567   remote_port = 1194
Fri Mar 21 17:30:06 2014 us=461567   remote_float = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   bind_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   bind_local = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   connect_retry_seconds = 5
Fri Mar 21 17:30:06 2014 us=461567   connect_timeout = 10
Fri Mar 21 17:30:06 2014 us=461567   connect_retry_max = 0
Fri Mar 21 17:30:06 2014 us=461567   socks_proxy_server = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   socks_proxy_port = 0
Fri Mar 21 17:30:06 2014 us=461567   socks_proxy_retry = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tun_mtu = 1500
Fri Mar 21 17:30:06 2014 us=461567   tun_mtu_defined = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   link_mtu = 1500
Fri Mar 21 17:30:06 2014 us=461567   link_mtu_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tun_mtu_extra = 0
Fri Mar 21 17:30:06 2014 us=461567   tun_mtu_extra_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   mtu_discover_type = -1
Fri Mar 21 17:30:06 2014 us=461567   fragment = 0
Fri Mar 21 17:30:06 2014 us=461567   mssfix = 1450
Fri Mar 21 17:30:06 2014 us=461567   explicit_exit_notification = 0
Fri Mar 21 17:30:06 2014 us=461567 Connection profiles END
Fri Mar 21 17:30:06 2014 us=461567   remote_random = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ipchange = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   dev = 'tun'
Fri Mar 21 17:30:06 2014 us=461567   dev_type = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   dev_node = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   lladdr = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   topology = 1
Fri Mar 21 17:30:06 2014 us=461567   tun_ipv6 = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_local = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_remote_netmask = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_noexec = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_nowarn = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_local = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_netbits = 0
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_remote = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   shaper = 0
Fri Mar 21 17:30:06 2014 us=461567   mtu_test = 0
Fri Mar 21 17:30:06 2014 us=461567   mlock = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   keepalive_ping = 0
Fri Mar 21 17:30:06 2014 us=461567   keepalive_timeout = 0
Fri Mar 21 17:30:06 2014 us=461567   inactivity_timeout = 0
Fri Mar 21 17:30:06 2014 us=461567   ping_send_timeout = 0
Fri Mar 21 17:30:06 2014 us=461567   ping_rec_timeout = 0
Fri Mar 21 17:30:06 2014 us=461567   ping_rec_timeout_action = 0
Fri Mar 21 17:30:06 2014 us=461567   ping_timer_remote = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   remap_sigusr1 = 0
Fri Mar 21 17:30:06 2014 us=461567   persist_tun = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   persist_local_ip = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   persist_remote_ip = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   persist_key = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   passtos = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   resolve_retry_seconds = 1000000000
Fri Mar 21 17:30:06 2014 us=461567   username = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   groupname = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   chroot_dir = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   cd_dir = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   writepid = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   up_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   down_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   down_pre = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   up_restart = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   up_delay = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   daemon = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   inetd = 0
Fri Mar 21 17:30:06 2014 us=461567   log = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   suppress_timestamps = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   nice = 0
Fri Mar 21 17:30:06 2014 us=461567   verbosity = 5
Fri Mar 21 17:30:06 2014 us=461567   mute = 0
Fri Mar 21 17:30:06 2014 us=461567   status_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   status_file_version = 1
Fri Mar 21 17:30:06 2014 us=461567   status_file_update_freq = 60
Fri Mar 21 17:30:06 2014 us=461567   occ = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   rcvbuf = 0
Fri Mar 21 17:30:06 2014 us=461567   sndbuf = 0
Fri Mar 21 17:30:06 2014 us=461567   sockflags = 0
Fri Mar 21 17:30:06 2014 us=461567   fast_io = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   lzo = 7
Fri Mar 21 17:30:06 2014 us=461567   route_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   route_default_gateway = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   route_default_metric = 0
Fri Mar 21 17:30:06 2014 us=461567   route_noexec = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   route_delay = 5
Fri Mar 21 17:30:06 2014 us=461567   route_delay_window = 30
Fri Mar 21 17:30:06 2014 us=461567   route_delay_defined = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   route_nopull = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   route_gateway_via_dhcp = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   max_routes = 100
Fri Mar 21 17:30:06 2014 us=461567   allow_pull_fqdn = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   management_addr = '127.0.0.1'
Fri Mar 21 17:30:06 2014 us=461567   management_port = 25340
Fri Mar 21 17:30:06 2014 us=461567   management_user_pass = 'stdin'
Fri Mar 21 17:30:06 2014 us=461567   management_log_history_cache = 250
Fri Mar 21 17:30:06 2014 us=461567   management_echo_buffer_size = 100
Fri Mar 21 17:30:06 2014 us=461567   management_write_peer_info_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   management_client_user = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   management_client_group = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   management_flags = 6
Fri Mar 21 17:30:06 2014 us=461567   shared_secret_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   key_direction = 0
Fri Mar 21 17:30:06 2014 us=461567   ciphername_defined = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   ciphername = 'BF-CBC'
Fri Mar 21 17:30:06 2014 us=461567   authname_defined = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   authname = 'SHA1'
Fri Mar 21 17:30:06 2014 us=461567   prng_hash = 'SHA1'
Fri Mar 21 17:30:06 2014 us=461567   prng_nonce_secret_len = 16
Fri Mar 21 17:30:06 2014 us=461567   keysize = 0
Fri Mar 21 17:30:06 2014 us=461567   engine = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   replay = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   mute_replay_warnings = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   replay_window = 64
Fri Mar 21 17:30:06 2014 us=461567   replay_time = 15
Fri Mar 21 17:30:06 2014 us=461567   packet_id_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   use_iv = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   test_crypto = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tls_server = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tls_client = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   key_method = 2
Fri Mar 21 17:30:06 2014 us=461567   ca_file = 'ca.crt'
Fri Mar 21 17:30:06 2014 us=461567   ca_path = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   dh_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   cert_file = 'client2.crt'
Fri Mar 21 17:30:06 2014 us=461567   priv_key_file = 'client2.key'
Fri Mar 21 17:30:06 2014 us=461567   pkcs12_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   cryptoapi_cert = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   cipher_list = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   tls_verify = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   tls_export_cert = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   verify_x509_type = 0
Fri Mar 21 17:30:06 2014 us=461567   verify_x509_name = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   crl_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ns_cert_type = 1
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_ku[i] = 0
Fri Mar 21 17:30:06 2014 us=461567   remote_cert_eku = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ssl_flags = 0
Fri Mar 21 17:30:06 2014 us=461567   tls_timeout = 2
Fri Mar 21 17:30:06 2014 us=461567   renegotiate_bytes = 0
Fri Mar 21 17:30:06 2014 us=461567   renegotiate_packets = 0
Fri Mar 21 17:30:06 2014 us=461567   renegotiate_seconds = 3600
Fri Mar 21 17:30:06 2014 us=461567   handshake_window = 60
Fri Mar 21 17:30:06 2014 us=461567   transition_window = 3600
Fri Mar 21 17:30:06 2014 us=461567   single_session = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   push_peer_info = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tls_exit = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tls_auth_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_protected_authentication = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_private_mode = 00000000
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_cert_private = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_pin_cache_period = -1
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_id = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   pkcs11_id_management = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   server_network = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   server_netmask = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   server_network_ipv6 = ::
Fri Mar 21 17:30:06 2014 us=461567   server_netbits_ipv6 = 0
Fri Mar 21 17:30:06 2014 us=461567   server_bridge_ip = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   server_bridge_netmask = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   server_bridge_pool_start = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   server_bridge_pool_end = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_start = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_end = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_netmask = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_pool_persist_refresh_freq = 600
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_pool_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_pool_base = ::
Fri Mar 21 17:30:06 2014 us=461567   ifconfig_ipv6_pool_netbits = 0
Fri Mar 21 17:30:06 2014 us=461567   n_bcast_buf = 256
Fri Mar 21 17:30:06 2014 us=461567   tcp_queue_limit = 64
Fri Mar 21 17:30:06 2014 us=461567   real_hash_size = 256
Fri Mar 21 17:30:06 2014 us=461567   virtual_hash_size = 256
Fri Mar 21 17:30:06 2014 us=461567   client_connect_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   learn_address_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   client_disconnect_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   client_config_dir = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   ccd_exclusive = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   tmp_dir = 'C:\Users\Chong\AppData\Local\Temp\'
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_local = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_remote_netmask = 0.0.0.0
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_ipv6_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_ipv6_local = ::/0
Fri Mar 21 17:30:06 2014 us=461567   push_ifconfig_ipv6_remote = ::
Fri Mar 21 17:30:06 2014 us=461567   enable_c2c = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   duplicate_cn = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   cf_max = 0
Fri Mar 21 17:30:06 2014 us=461567   cf_per = 0
Fri Mar 21 17:30:06 2014 us=461567   max_clients = 1024
Fri Mar 21 17:30:06 2014 us=461567   max_routes_per_client = 256
Fri Mar 21 17:30:06 2014 us=461567   auth_user_pass_verify_script = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   auth_user_pass_verify_script_via_file = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   client = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   pull = ENABLED
Fri Mar 21 17:30:06 2014 us=461567   auth_user_pass_file = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   show_net_up = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   route_method = 0
Fri Mar 21 17:30:06 2014 us=461567   ip_win32_defined = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   ip_win32_type = 3
Fri Mar 21 17:30:06 2014 us=461567   dhcp_masq_offset = 0
Fri Mar 21 17:30:06 2014 us=461567   dhcp_lease_time = 31536000
Fri Mar 21 17:30:06 2014 us=461567   tap_sleep = 0
Fri Mar 21 17:30:06 2014 us=461567   dhcp_options = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   dhcp_renew = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   dhcp_pre_release = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   dhcp_release = DISABLED
Fri Mar 21 17:30:06 2014 us=461567   domain = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   netbios_scope = '[UNDEF]'
Fri Mar 21 17:30:06 2014 us=461567   netbios_node_type = 0
Fri Mar 21 17:30:06 2014 us=461567   disable_nbt = DISABLED
Fri Mar 21 17:30:06 2014 us=461567 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Fri Mar 21 17:30:06 2014 us=461567 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Mar 21 17:30:06 2014 us=461567 Need hold release from management interface, waiting...
Fri Mar 21 17:30:06 2014 us=477168 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Mar 21 17:30:06 2014 us=602213 MANAGEMENT: CMD 'state on'
Fri Mar 21 17:30:06 2014 us=602213 MANAGEMENT: CMD 'log all on'
Fri Mar 21 17:30:06 2014 us=757943 MANAGEMENT: CMD 'hold off'
Fri Mar 21 17:30:06 2014 us=757943 MANAGEMENT: CMD 'hold release'
Fri Mar 21 17:30:06 2014 us=898343 LZO compression initialized
Fri Mar 21 17:30:06 2014 us=898343 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Mar 21 17:30:06 2014 us=898343 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Mar 21 17:30:06 2014 us=898343 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 21 17:30:06 2014 us=898343 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Mar 21 17:30:06 2014 us=898343 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Mar 21 17:30:06 2014 us=898343 Local Options hash (VER=V4): '41690919'
Fri Mar 21 17:30:06 2014 us=898343 Expected Remote Options hash (VER=V4): '530fdded'
Fri Mar 21 17:30:06 2014 us=898343 UDPv4 link local: [undef]
Fri Mar 21 17:30:06 2014 us=898343 UDPv4 link remote: [AF_INET]94.250.213.170:1194
Fri Mar 21 17:30:06 2014 us=898343 MANAGEMENT: >STATE:1395394206,WAIT,,,
Fri Mar 21 17:30:07 2014 us=210627 MANAGEMENT: >STATE:1395394207,AUTH,,,
Fri Mar 21 17:30:07 2014 us=210627 TLS: Initial packet from [AF_INET]94.250.213.170:1194, sid=84052a27 a12459ac
Fri Mar 21 17:30:08 2014 us=895486 VERIFY OK: depth=1, C=DE, ST=HE, L=Frankfurt, O=Fort, OU=VPN, CN=VPN, name=VPN, [email protected]
Fri Mar 21 17:30:08 2014 us=926687 VERIFY OK: nsCertType=SERVER
Fri Mar 21 17:30:08 2014 us=926687 VERIFY OK: depth=0, C=DE, ST=HE, L=Frankfurt, O=Fort, OU=VPN, CN=VPN, name=VPN, [email protected]
Fri Mar 21 17:30:12 2014 us=592799 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Mar 21 17:30:12 2014 us=592799 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 17:30:12 2014 us=592799 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Mar 21 17:30:12 2014 us=592799 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 17:30:12 2014 us=608128 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Mar 21 17:30:12 2014 us=608128 [VPN] Peer Connection Initiated with [AF_INET]94.250.213.170:1194
Fri Mar 21 17:30:13 2014 us=638031 MANAGEMENT: >STATE:1395394213,GET_CONFIG,,,
Fri Mar 21 17:30:14 2014 us=651796 SENT CONTROL [VPN]: 'PUSH_REQUEST' (status=1)
Fri Mar 21 17:30:14 2014 us=964070 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 194.25.2.130,dhcp-option DNS 217.237.150.33,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Fri Mar 21 17:30:14 2014 us=964070 OPTIONS IMPORT: timers and/or timeouts modified
Fri Mar 21 17:30:14 2014 us=964070 OPTIONS IMPORT: --ifconfig/up options modified
Fri Mar 21 17:30:14 2014 us=964070 OPTIONS IMPORT: route options modified
Fri Mar 21 17:30:14 2014 us=964070 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Mar 21 17:30:15 2014 us=26201 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Mar 21 17:30:15 2014 us=26201 MANAGEMENT: >STATE:1395394215,ASSIGN_IP,,10.8.0.10,
Fri Mar 21 17:30:15 2014 us=26201 open_tun, tt->ipv6=0
Fri Mar 21 17:30:15 2014 us=26201 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{AC2FBF29-41C4-4F09-A569-5E86F022961E}.tap
Fri Mar 21 17:30:15 2014 us=26201 TAP-Windows Driver Version 9.9 
Fri Mar 21 17:30:15 2014 us=26201 TAP-Windows MTU=1500
Fri Mar 21 17:30:15 2014 us=41799 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {AC2FBF29-41C4-4F09-A569-5E86F022961E} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Fri Mar 21 17:30:15 2014 us=41799 DHCP option string: 0608c219 0282d9ed 9621
Fri Mar 21 17:30:15 2014 us=41799 Successful ARP Flush on interface [16] {AC2FBF29-41C4-4F09-A569-5E86F022961E}
Fri Mar 21 17:30:20 2014 us=782665 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Mar 21 17:30:20 2014 us=782665 C:\Windows\system32\route.exe ADD 94.250.213.170 MASK 255.255.255.255 192.168.1.1
Fri Mar 21 17:30:20 2014 us=782665 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Mar 21 17:30:20 2014 us=782665 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 17:30:20 2014 us=782665 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 192.168.1.1
Fri Mar 21 17:30:20 2014 us=782665 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 17:30:20 2014 us=782665 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.8.0.9
Fri Mar 21 17:30:20 2014 us=798265 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 17:30:20 2014 us=798265 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 17:30:20 2014 us=798265 MANAGEMENT: >STATE:1395394220,ADD_ROUTES,,,
Fri Mar 21 17:30:20 2014 us=798265 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Fri Mar 21 17:30:20 2014 us=798265 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 17:30:20 2014 us=798265 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 17:30:20 2014 us=798265 Initialization Sequence Completed
Fri Mar 21 17:30:20 2014 us=798265 MANAGEMENT: >STATE:1395394220,CONNECTED,SUCCESS,10.8.0.10,94.250.213.170
Fri Mar 21 17:32:07 2014 us=736554 TCP/UDP: Closing socket
Fri Mar 21 17:32:07 2014 us=736554 C:\Windows\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Fri Mar 21 17:32:07 2014 us=741554 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 17:32:07 2014 us=741554 C:\Windows\system32\route.exe DELETE 94.250.213.170 MASK 255.255.255.255 192.168.1.1
Fri Mar 21 17:32:07 2014 us=752556 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 17:32:07 2014 us=752556 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 10.8.0.9
Fri Mar 21 17:32:07 2014 us=756557 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 17:32:07 2014 us=756557 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 192.168.1.1
Fri Mar 21 17:32:07 2014 us=760558 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Mar 21 17:32:07 2014 us=760558 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 17:32:07 2014 us=760558 Closing TUN/TAP interface
Fri Mar 21 17:32:07 2014 us=762557 SIGTERM[hard,] received, process exiting
Fri Mar 21 17:32:07 2014 us=762557 MANAGEMENT: >STATE:1395394327,EXITING,SIGTERM,,
WR

VPN Probleme mit DNS forwarding

Chris8080

Neuer User

sf3978

IPPF-Promi

Chris8080

Neuer User

sf3978

IPPF-Promi

Chris8080

Neuer User

sf3978

IPPF-Promi

Chris8080

Neuer User

kingbecher

Mitglied

Chris8080

Neuer User

Neueste Beiträge

Kategorien

Wissenswertes

Statistik des Forums

3CX jetzt einen Monat kostenlos testen

Unternehmen

Lösungen

Nützliche Links

Mehr erfahren