Hallo zusammen,
habe leider einige Probleme mit dem OpenVPN. Würde gerne meinen kompletten Dreambox Traffic über einen VPN laufen lassen. Habe alles entsprechend angelegt keys, cert, conf, etc. und läuft auch... jedoch nur fast.
Leider kommt es in unregelmäßigen Abständen zum Abbruch der VPN Verbindung und ab dann läuft der Traffic wieder normal, aber nicht mehr über den VPN. Vielleicht könnt ihr mir weiterhelfen?
openvpn.log
server.conf
habe leider einige Probleme mit dem OpenVPN. Würde gerne meinen kompletten Dreambox Traffic über einen VPN laufen lassen. Habe alles entsprechend angelegt keys, cert, conf, etc. und läuft auch... jedoch nur fast.
Leider kommt es in unregelmäßigen Abständen zum Abbruch der VPN Verbindung und ab dann läuft der Traffic wieder normal, aber nicht mehr über den VPN. Vielleicht könnt ihr mir weiterhelfen?
openvpn.log
Code:
Fri May 9 02:13:55 2014 OpenVPN 2.1.3 mipsel-oe-linux [SSL] [LZO2] [EPOLL] built on Apr 17 2012
Fri May 9 02:13:55 2014 WARNING: file '/etc/openvpn/password.txt' is group or others accessible
Fri May 9 02:13:55 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 9 02:13:55 2014 WARNING: file '/etc/openvpn/ivacy-client.key' is group or others accessible
Fri May 9 02:13:55 2014 WARNING: file '/etc/openvpn/ivacy-tls.key' is group or others accessible
Fri May 9 02:13:55 2014 Control Channel Authentication: using '/etc/openvpn/ivacy-tls.key' as a OpenVPN static key file
Fri May 9 02:13:55 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:13:55 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:13:55 2014 LZO compression initialized
Fri May 9 02:13:55 2014 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 9 02:13:55 2014 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri May 9 02:14:03 2014 RESOLVE: NOTE: openvpn.ivacy.com resolves to 3 addresses
Fri May 9 02:14:03 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 9 02:14:03 2014 Local Options hash (VER=V4): '504e774e'
Fri May 9 02:14:03 2014 Expected Remote Options hash (VER=V4): '14168603'
Fri May 9 02:14:03 2014 UDPv4 link local: [undef]
Fri May 9 02:14:03 2014 UDPv4 link remote: 213.232.200.170:1194
Fri May 9 02:14:05 2014 TLS: Initial packet from 213.232.200.170:1194, sid=d9b84426 c937aa1e
Fri May 9 02:14:05 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 9 02:14:15 2014 VERIFY OK: depth=1, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=ivacy.com_CA/emailAddress=admin@ivacy.com
Fri May 9 02:14:15 2014 VERIFY OK: nsCertType=SERVER
Fri May 9 02:14:15 2014 VERIFY OK: depth=0, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=openvpn.ivacy.com/emailAddress=admin@ivacy.com
Fri May 9 02:14:34 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 9 02:14:34 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:14:34 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 9 02:14:34 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:14:34 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri May 9 02:14:34 2014 [openvpn.ivacy.com] Peer Connection Initiated with 213.232.200.170:1194
Fri May 9 02:14:37 2014 SENT CONTROL [openvpn.ivacy.com]: 'PUSH_REQUEST' (status=1)
Fri May 9 02:14:38 2014 AUTH: Received AUTH_FAILED control message
Fri May 9 02:14:38 2014 TCP/UDP: Closing socket
Fri May 9 02:14:38 2014 SIGTERM[soft,auth-failure] received, process exiting
Fri May 9 02:21:52 2014 OpenVPN 2.1.3 mipsel-oe-linux [SSL] [LZO2] [EPOLL] built on Apr 17 2012
Fri May 9 02:21:52 2014 WARNING: file '/etc/openvpn/password.txt' is group or others accessible
Fri May 9 02:21:52 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 9 02:21:52 2014 WARNING: file '/etc/openvpn/ivacy-client.key' is group or others accessible
Fri May 9 02:21:52 2014 WARNING: file '/etc/openvpn/ivacy-tls.key' is group or others accessible
Fri May 9 02:21:52 2014 Control Channel Authentication: using '/etc/openvpn/ivacy-tls.key' as a OpenVPN static key file
Fri May 9 02:21:52 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:21:52 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:21:52 2014 LZO compression initialized
Fri May 9 02:21:52 2014 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 9 02:21:52 2014 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri May 9 02:21:52 2014 RESOLVE: NOTE: openvpn.ivacy.com resolves to 3 addresses
Fri May 9 02:21:52 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 9 02:21:52 2014 Local Options hash (VER=V4): '504e774e'
Fri May 9 02:21:52 2014 Expected Remote Options hash (VER=V4): '14168603'
Fri May 9 02:21:52 2014 UDPv4 link local: [undef]
Fri May 9 02:21:52 2014 UDPv4 link remote: 213.232.200.172:1194
Fri May 9 02:21:52 2014 TLS: Initial packet from 213.232.200.172:1194, sid=799fc29b 4813bfdf
Fri May 9 02:21:52 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 9 02:21:52 2014 VERIFY OK: depth=1, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=ivacy.com_CA/emailAddress=admin@ivacy.com
Fri May 9 02:21:52 2014 VERIFY OK: nsCertType=SERVER
Fri May 9 02:21:52 2014 VERIFY OK: depth=0, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=openvpn.ivacy.com/emailAddress=admin@ivacy.com
Fri May 9 02:21:55 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 9 02:21:55 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:21:55 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 9 02:21:55 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 9 02:21:55 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri May 9 02:21:55 2014 [openvpn.ivacy.com] Peer Connection Initiated with 213.232.200.172:1194
Fri May 9 02:21:57 2014 SENT CONTROL [openvpn.ivacy.com]: 'PUSH_REQUEST' (status=1)
Fri May 9 02:21:57 2014 PUSH: Received control message: 'PUSH_REPLY,route 1.0.0.0 255.0.0.0,dhcp-option DNS 1.254.2.2,dhcp-option DNS 1.254.2.3,dhcp-option DOMAIN vpn,explicit-exit-notify 2,route-gateway 1.2.112.1,topology subnet,ping 10,ping-restart 60,ifconfig 1.2.112.100 255.255.252.0'
Fri May 9 02:21:57 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 9 02:21:57 2014 OPTIONS IMPORT: explicit notify parm(s) modified
Fri May 9 02:21:57 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 9 02:21:57 2014 OPTIONS IMPORT: route options modified
Fri May 9 02:21:57 2014 OPTIONS IMPORT: route-related options modified
Fri May 9 02:21:57 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 9 02:21:57 2014 ROUTE default_gateway=192.168.1.1
Fri May 9 02:21:57 2014 TUN/TAP device tun0 opened
Fri May 9 02:21:57 2014 TUN/TAP TX queue length set to 100
Fri May 9 02:21:57 2014 /sbin/ifconfig tun0 1.2.112.100 netmask 255.255.252.0 mtu 1500 broadcast 1.2.115.255
Fri May 9 02:21:57 2014 /sbin/route add -net 213.232.200.172 netmask 255.255.255.255 gw 192.168.1.1
Fri May 9 02:21:57 2014 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Fri May 9 02:21:57 2014 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 1.2.112.1
Fri May 9 02:21:57 2014 WARNING: potential route subnet conflict between local LAN [1.2.112.0/255.255.255.0] and remote VPN [1.0.0.0/255.0.0.0]
Fri May 9 02:21:57 2014 /sbin/route add -net 1.0.0.0 netmask 255.0.0.0 gw 1.2.112.1
Fri May 9 02:21:57 2014 Initialization Sequence Completed
Fri May 9 03:24:10 2014 event_wait : Interrupted system call (code=4)
Fri May 9 03:24:10 2014 SIGTERM received, sending exit notification to peer
Fri May 9 03:24:10 2014 write UDPv4 []: Network is unreachable (code=128)
Fri May 9 03:24:12 2014 TCP/UDP: Closing socket
Fri May 9 03:24:12 2014 /sbin/route del -net 1.0.0.0 netmask 255.0.0.0
Fri May 9 03:24:12 2014 /sbin/route del -net 213.232.200.172 netmask 255.255.255.255
route: SIOCDELRT: No such process
Fri May 9 03:24:12 2014 ERROR: Linux route delete command failed: external program exited with error status: 1
Fri May 9 03:24:12 2014 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
route: SIOCDELRT: No such process
Fri May 9 03:24:12 2014 ERROR: Linux route delete command failed: external program exited with error status: 1
Fri May 9 03:24:12 2014 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.1.1
route: SIOCADDRT: Network is unreachable
Fri May 9 03:24:12 2014 ERROR: Linux route add command failed: external program exited with error status: 1
Fri May 9 03:24:12 2014 Closing TUN/TAP interface
Fri May 9 03:24:12 2014 /sbin/ifconfig tun0 0.0.0.0
Fri May 9 03:24:12 2014 SIGTERM[soft,exit-with-notification] received, process exiting
Code:
client
dev tun
proto udp
remote openvpn.ivacy.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ivacy-ca.crt
cert /etc/openvpn/ivacy-client.crt
key /etc/openvpn/ivacy-client.key
tls-auth /etc/openvpn/ivacy-tls.key 1
ns-cert-type server
comp-lzo
verb 3
log-append /etc/openvpn/openvpn.log
auth-user-pass /etc/openvpn/password.txt
redirect-gateway
reneg-sec 0
Zuletzt bearbeitet von einem Moderator: