Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am working on a 'Liberte Linux > OpenVPN > Tor > VPN server > Internet' and have hit a brickwall. OpenVPN appears to connect to the VPN server succesfully using TOr as a SOCKS proxy. But after initializing OpenVPN, no changes occur.

As I dont know where the problem is, Ill just dump some data and hope that a trained eye might spot the issue.

OpenVPN client cfg:

client
dev tap1
proto tcp
remote 46.23.68.180 443
remote uk180.vpnbook.com 443
resolv-retry infinite
nobind
persist-key
auth-user-pass
comp-lzo
verb 3
cipher AES-128-CBC
fast-io
pull
route-delay 2
redirect-gateway
status /home/anon/persist/documents/vpnbook-uk/openvpn.log 15
socks-proxy 127.0.0.1 9050
<ca>
-----BEGIN CERTIFICATE-----
// Cut out to save space
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
// Cut out to save space
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
// Cut out to save space
-----END RSA PRIVATE KEY-----
</key>

OpenVPN initialization:

openvpn vpnbook-uk1-tcp443.ovpn
Wed May 14 17:24:11 2014 OpenVPN 2.2.2 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Aug 26 2012
Enter Auth Username:vpnbook
Enter Auth Password:
Wed May 14 17:24:32 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed May 14 17:24:32 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 14 17:24:32 2014 NOTE: --fast-io is disabled since we are not using UDP
Wed May 14 17:24:32 2014 LZO compression initialized
Wed May 14 17:24:32 2014 Control Channel MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed May 14 17:24:32 2014 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed May 14 17:24:32 2014 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Wed May 14 17:24:32 2014 Local Options hash (VER=V4): '39ac68d4'
Wed May 14 17:24:32 2014 Expected Remote Options hash (VER=V4): 'de0ebdfe'
Wed May 14 17:24:32 2014 Attempting to establish TCP connection with 127.0.0.1:9050 [nonblock]
Wed May 14 17:24:32 2014 TCP connection established with 127.0.0.1:9050
Wed May 14 17:24:33 2014 TCPv4_CLIENT link local: [undef]
Wed May 14 17:24:33 2014 TCPv4_CLIENT link remote: 127.0.0.1:9050
Wed May 14 17:24:38 2014 TLS: Initial packet from 127.0.0.1:9050, sid=c5cb075f 434855b8
Wed May 14 17:24:38 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 14 17:24:51 2014 VERIFY OK: depth=1, /C=CH/ST=Zurich/L=Zurich/O=vpnbook.com/OU=IT/CN=vpnbook.com/name=vpnbook.com/emailAddress=admin@vpnbook.com
Wed May 14 17:24:51 2014 VERIFY OK: depth=0, /C=CH/ST=Zurich/L=Zurich/O=vpnbook.com/OU=IT/CN=vpnbook.com/name=vpnbook.com/emailAddress=admin@vpnbook.com
Wed May 14 17:24:56 2014 WARNING: 'dev-type' is used inconsistently, local='dev-type tap', remote='dev-type tun'
Wed May 14 17:24:56 2014 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1592', remote='link-mtu 1560'
Wed May 14 17:24:56 2014 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Wed May 14 17:24:56 2014 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 14 17:24:56 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 14 17:24:56 2014 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 14 17:24:56 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 14 17:24:56 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 14 17:24:56 2014 [vpnbook.com] Peer Connection Initiated with 127.0.0.1:9050
Wed May 14 17:24:58 2014 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
Wed May 14 17:25:00 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS  83.170.64.2,dhcp-option DNS  83.170.69.2,route 10.9.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.9.0.74 10.9.0.73'
Wed May 14 17:25:00 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 14 17:25:00 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 14 17:25:00 2014 OPTIONS IMPORT: route options modified
Wed May 14 17:25:00 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 14 17:25:00 2014 WARNING: Since you are using --dev tap, the second argument to --ifconfig must be a netmask, for example something like 255.255.255.0. (silence this warning with --ifconfig-nowarn)
Wed May 14 17:25:00 2014 ROUTE default_gateway=192.168.1.1
Wed May 14 17:25:00 2014 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Wed May 14 17:25:00 2014 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.9.0.1
Wed May 14 17:25:00 2014 TUN/TAP device tap1 opened
Wed May 14 17:25:00 2014 TUN/TAP TX queue length set to 100
Wed May 14 17:25:00 2014 /sbin/ip link set dev tap1 up mtu 1500
Wed May 14 17:25:00 2014 /sbin/ip addr add dev tap1 10.9.0.74/7 broadcast 255.255.255.254
Wed May 14 17:25:02 2014 NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing
Wed May 14 17:25:02 2014 Initialization Sequence Completed

OpenVPN status log after about 15 min.:

OpenVPN STATISTICS
Updated,Wed May 14 17:50:55 2014
TUN/TAP read bytes,0
TUN/TAP write bytes,0
TCP/UDP read bytes,20990
TCP/UDP write bytes,23887
Auth read bytes,3760
pre-compress bytes,0
post-compress bytes,0
pre-decompress bytes,0
post-decompress bytes,0
END

Routes:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.1.1     0.0.0.0         UG    0      0        0 wlan0
10.0.0.0        *               254.0.0.0       U     0      0        0 tap1
loopback        localhost       255.0.0.0       UG    0      0        0 lo
192.168.1.0     *               255.255.255.0   U     2      0        0 wlan0
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.