karldonteljames

Afternoon all, I'm trying to setup delugevpn, I've got it installed and pointed to my downloads share on UnRaid, if I set VPN to no, then I can connect to the webui without any problems. If I enable the VPN it doesn't seem to connect to my VPN server. My log shows the following: IP address changed to 172.X.X.X for privacy but this is showing a real IP address. In the openvpn folder I have the ovpn config file, Wdc.key and Ca.crt. I'm having the same issue with qbittorrentvpn but Transmission_VPN is connecting ok. (I'm moving from using a VM on unraid to using the dockers) Any help would be appreciated. ErrorWarningSystemArrayLogin BASH_ARGC=() BASH_ARGV=() BASH_CMDS=() BASH_LINENO=([0]="0") BASH_SOURCE=([0]="/root/start.sh") 2018-10-30 15:44:29,245 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2018-10-30 15:44:29,245 INFO success: deluge-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2018-10-30 15:44:29,246 INFO success: deluge-web-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2018-10-30 15:44:29,246 INFO success: privoxy-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2018-10-30 15:44:29,247 DEBG 'start-script' stdout output: BASH_VERSINFO=([0]="4" [1]="4" [2]="23" [3]="1" [4]="release" [5]="x86_64-unknown-linux-gnu") BASH_VERSION='4.4.23(1)-release' DEBUG=true DIRSTACK=() ENABLE_PRIVOXY=yes EUID=0 ) HOME=/home/nobody HOSTNAME=7dbaf2c713ab HOSTTYPE=x86_64 HOST_OS=unRAID IFS=$' \t\n' LANG=en_GB.UTF-8 LAN_NETWORK=192.168.10.0/24 MACHTYPE=x86_64-unknown-linux-gnu NAME_SERVERS=209.222.18.222,37.235.1.174,1.1.1.1,8.8.8.8,209.222.18.218,37.235.1.177,1.0.0.1,8.8.4.4 OPTERR=1 OPTIND=1 OSTYPE=linux-gnu PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PGID=100 PIPESTATUS=([0]="0") PPID=7 PS4='+ ' PUID=99 PWD=/ SHELL=/bin/bash SHELLOPTS=braceexpand:hashall:interactive-comments SHLVL=1 STRICT_PORT_FORWARD=yes SUPERVISOR_ENABLED=1 SUPERVISOR_GROUP_NAME=start-script SUPERVISOR_PROCESS_NAME=start-script TCP_PORT_58846=58846 TCP_PORT_58946=58946 TCP_PORT_8112=8112 TCP_PORT_8118=8118 TERM=xterm TZ=Europe/London UDP_PORT_58946=58946 UID=0 0 VPN_CONFIG=/config/openvpn/Romania-Bucharest-TCP.ovpn VPN_DEVICE_TYPE=tun0 VPN_ENABLED=yes VPN_OPTIONS= VPN_PASS=mmocz7yy VPN_PORT=80 VPN_PROTOCOL=tcp-client VPN_PROV=custom VPN_REMOTE=ro1-ovpn-tcp.pointtoserver.com VPN_USER=purevpn0s4804519 _='[debug] Environment variables defined as follows' [debug] Directory listing of files in /config/openvpn as follows 2018-10-30 15:44:29,248 DEBG 'deluge-script' stdout output: [info] Deluge config file already exists, skipping copy 2018-10-30 15:44:29,252 DEBG 'deluge-script' stdout output: [info] VPN is enabled, checking VPN tunnel local ip is valid 2018-10-30 15:44:29,253 DEBG 'deluge-script' stdout output: [debug] Waiting for valid IP address from tunnel... 2018-10-30 15:44:29,256 DEBG 'start-script' stdout output: total 16 drwxrwxr-x 1 nobody users 110 Oct 30 15:44 . drwxrwxr-x 1 nobody users 80 Oct 30 14:26 .. -rwxrwxr-x 1 nobody users 1667 Oct 30 14:18 ca.crt -rwxrwxr-x 1 nobody users 26 Oct 30 15:43 credentials.conf -rwxrwxr-x 1 nobody users 265 Oct 30 15:44 Romania-Bucharest-TCP.ovpn -rwxrwxr-x 1 nobody users 657 Oct 30 14:18 Wdc.key 2018-10-30 15:44:29,260 DEBG 'privoxy-script' stdout output: [debug] Waiting for valid IP address from tunnel... 2018-10-30 15:44:29,297 DEBG 'start-script' stdout output: [debug] Contents of ovpn file /config/openvpn/Romania-Bucharest-TCP.ovpn as follows... 2018-10-30 15:44:29,297 DEBG 'start-script' stdout output: remote ro1-ovpn-tcp.pointtoserver.com 80 client dev tun proto tcp-client nobind persist-key cipher AES-256-CBC key-direction 1 verb 1 mute 20 float route-delay 2 auth-user-pass credentials.conf auth-retry interact ifconfig-nowarn ca ca.crt tls-auth Wdc.key 1 2018-10-30 15:44:29,303 DEBG 'start-script' stdout output: [info] Default route for container is 192.168.10.254 2018-10-30 15:44:29,305 DEBG 'start-script' stdout output: [info] Adding 209.222.18.222 to /etc/resolv.conf 2018-10-30 15:44:29,307 DEBG 'start-script' stdout output: [info] Adding 37.235.1.174 to /etc/resolv.conf 2018-10-30 15:44:29,309 DEBG 'start-script' stdout output: [info] Adding 1.1.1.1 to /etc/resolv.conf 2018-10-30 15:44:29,310 DEBG 'start-script' stdout output: [info] Adding 8.8.8.8 to /etc/resolv.conf 2018-10-30 15:44:29,312 DEBG 'start-script' stdout output: [info] Adding 209.222.18.218 to /etc/resolv.conf 2018-10-30 15:44:29,314 DEBG 'start-script' stdout output: [info] Adding 37.235.1.177 to /etc/resolv.conf 2018-10-30 15:44:29,316 DEBG 'start-script' stdout output: [info] Adding 1.0.0.1 to /etc/resolv.conf 2018-10-30 15:44:29,317 DEBG 'start-script' stdout output: [info] Adding 8.8.4.4 to /etc/resolv.conf 2018-10-30 15:44:39,467 DEBG 'start-script' stdout output: [info] Remote VPN endpoint resolves to the following A record(s)... 172.X.X.X 2018-10-30 15:44:39,493 DEBG 'start-script' stdout output: [debug] Show name servers defined for container 2018-10-30 15:44:39,494 DEBG 'start-script' stdout output: nameserver 209.222.18.222 nameserver 37.235.1.174 nameserver 1.1.1.1 nameserver 8.8.8.8 nameserver 209.222.18.218 nameserver 37.235.1.177 nameserver 1.0.0.1 nameserver 8.8.4.4 2018-10-30 15:44:39,495 DEBG 'start-script' stdout output: [debug] Show name resolution for VPN endpoint ro1-ovpn-tcp.pointtoserver.com 2018-10-30 15:44:39,603 DEBG 'start-script' stdout output: ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 40135 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;; ro1-ovpn-tcp.pointtoserver.com. IN A ;; ANSWER SECTION: ro1-ovpn-tcp.pointtoserver.com. 99 IN CNAME ro-ovpn-tcp.pointtoserver.com. ro-ovpn-tcp.pointtoserver.com. 119 IN A 172.X.X.X ;; AUTHORITY SECTION: ;; ADDITIONAL SECTION: ;; Query time: 105 msec ;; SERVER: 8.8.8.8 ;; WHEN: Tue Oct 30 15:44:39 2018 ;; MSG SIZE rcvd: 90 2018-10-30 15:44:39,604 DEBG 'start-script' stdout output: [debug] Show contents of hosts file 2018-10-30 15:44:39,605 DEBG 'start-script' stdout output: 127.0.0.1 localhost ::1 localhost ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters 192.168.10.211 7dbaf2c713ab 172.X.X.X ro1-ovpn-tcp.pointtoserver.com 2018-10-30 15:44:39,612 DEBG 'start-script' stdout output: [info] Adding 192.168.10.0/24 as route via docker eth0 2018-10-30 15:44:39,614 DEBG 'start-script' stderr output: RTNETLINK answers: File exists 2018-10-30 15:44:39,614 DEBG 'start-script' stdout output: [info] ip route defined as follows... -------------------- 2018-10-30 15:44:39,615 DEBG 'start-script' stdout output: default via 192.168.10.254 dev eth0 192.168.10.0/24 dev eth0 proto kernel scope link src 192.168.10.211 2018-10-30 15:44:39,616 DEBG 'start-script' stdout output: -------------------- [debug] Modules currently loaded for kernel 2018-10-30 15:44:39,619 DEBG 'start-script' stdout output: Module Size Used by xt_CHECKSUM 16384 1 iptable_mangle 16384 1 ipt_REJECT 16384 2 nf_reject_ipv4 16384 1 ipt_REJECT ebtable_filter 16384 0 ebtables 32768 1 ebtable_filter ip6table_filter 16384 0 ip6_tables 24576 1 ip6table_filter vhost_net 20480 0 vhost 32768 1 vhost_net tap 20480 1 vhost_net macvlan 20480 0 tun 32768 4 vhost_net veth 16384 0 xt_nat 16384 23 ipt_MASQUERADE 16384 16 nf_nat_masquerade_ipv4 16384 1 ipt_MASQUERADE iptable_nat 16384 4 nf_conntrack_ipv4 16384 43 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 nf_nat_ipv4 16384 1 iptable_nat iptable_filter 16384 1 ip_tables 24576 3 iptable_mangle,iptable_filter,iptable_nat nf_nat 24576 3 xt_nat,nf_nat_masquerade_ipv4,nf_nat_ipv4 xfs 630784 6 md_mod 49152 6 bonding 106496 0 e1000e 172032 0 igb 159744 0 ptp 20480 2 igb,e1000e pps_core 16384 1 ptp i2c_algo_bit 16384 1 igb x86_pkg_temp_thermal 16384 0 intel_powerclamp 16384 0 coretemp 16384 0 kvm_intel 192512 0 kvm 339968 1 kvm_intel crct10dif_pclmul 16384 0 crc32_pclmul 16384 0 crc32c_intel 24576 0 ghash_clmulni_intel 16384 0 pcbc 16384 0 aesni_intel 184320 0 aes_x86_64 20480 1 aesni_intel crypto_simd 16384 1 aesni_intel glue_helper 16384 1 aesni_intel cryptd 20480 3 crypto_simd,ghash_clmulni_intel,aesni_intel intel_cstate 16384 0 intel_uncore 102400 0 ahci 36864 10 intel_rapl_perf 16384 0 libahci 28672 1 ahci mxm_wmi 16384 0 wmi_bmof 16384 0 wmi 20480 2 wmi_bmof,mxm_wmi video 40960 0 i2c_i801 24576 0 i2c_core 36864 3 i2c_algo_bit,igb,i2c_i801 backlight 16384 1 video acpi_pad 20480 0 button 16384 0 2018-10-30 15:44:39,624 DEBG 'start-script' stdout output: iptable_mangle 16384 1 ip_tables 24576 3 iptable_mangle,iptable_filter,iptable_nat 2018-10-30 15:44:39,625 DEBG 'start-script' stdout output: [info] iptable_mangle support detected, adding fwmark for tables 2018-10-30 15:44:39,635 DEBG 'start-script' stdout output: [debug] Docker interface defined as eth0 2018-10-30 15:44:39,642 DEBG 'start-script' stdout output: [debug] Docker IP defined as 192.168.10.211 2018-10-30 15:44:39,648 DEBG 'start-script' stdout output: [debug] Docker netmask defined as 255.255.255.0 2018-10-30 15:44:39,661 DEBG 'start-script' stdout output: [info] Docker network defined as 192.168.10.0/24 2018-10-30 15:44:39,834 DEBG 'start-script' stdout output: [info] iptables defined as follows... -------------------- 2018-10-30 15:44:39,836 DEBG 'start-script' stdout output: -P INPUT DROP -P FORWARD ACCEPT -P OUTPUT DROP -A INPUT -i tun0 -j ACCEPT -A INPUT -s 192.168.10.0/24 -d 192.168.10.0/24 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 80 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 8112 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 8112 -j ACCEPT -A INPUT -s 192.168.10.0/24 -i eth0 -p tcp -m tcp --dport 58846 -j ACCEPT -A INPUT -s 192.168.10.0/24 -d 192.168.10.0/24 -i eth0 -p tcp -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT -A INPUT -i lo -j ACCEPT -A OUTPUT -o tun0 -j ACCEPT -A OUTPUT -s 192.168.10.0/24 -d 192.168.10.0/24 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --dport 80 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --dport 8112 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --sport 8112 -j ACCEPT -A OUTPUT -d 192.168.10.0/24 -o eth0 -p tcp -m tcp --sport 58846 -j ACCEPT -A OUTPUT -s 192.168.10.0/24 -d 192.168.10.0/24 -o eth0 -p tcp -j ACCEPT -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A OUTPUT -o lo -j ACCEPT 2018-10-30 15:44:39,836 DEBG 'start-script' stdout output: -------------------- 2018-10-30 15:44:39,837 DEBG 'start-script' stdout output: [debug] OpenVPN command line:- /usr/bin/openvpn --daemon --reneg-sec 0 --mute-replay-warnings --auth-nocache --setenv VPN_PROV 'custom' --setenv DEBUG 'true' --setenv VPN_DEVICE_TYPE 'tun0' --setenv VPN_REMOTE 'ro1-ovpn-tcp.pointtoserver.com' --script-security 2 --up /root/openvpnup.sh --up-delay --up-restart --writepid /root/openvpn.pid --remap-usr1 SIGHUP --log-append /dev/stdout --pull-filter ignore 'up' --pull-filter ignore 'down' --pull-filter ignore 'route-ipv6' --pull-filter ignore 'ifconfig-ipv6' --pull-filter ignore 'tun-ipv6' --pull-filter ignore 'persist-tun' --pull-filter ignore 'reneg-sec' --remote 172.X.X.X 80 tcp-client --remote-random --keepalive 10 60 --auth-user-pass credentials.conf --cd /config/openvpn --config '/config/openvpn/Romania-Bucharest-TCP.ovpn' [info] Starting OpenVPN... 2018-10-30 15:44:39,854 DEBG 'start-script' stdout output: Tue Oct 30 15:44:39 2018 WARNING: file 'Wdc.key' is group or others accessible 2018-10-30 15:44:39,854 DEBG 'start-script' stdout output: Tue Oct 30 15:44:39 2018 WARNING: file 'credentials.conf' is group or others accessible Tue Oct 30 15:44:39 2018 OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 24 2018 Tue Oct 30 15:44:39 2018 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10 2018-10-30 15:44:39,855 DEBG 'start-script' stdout output: [info] OpenVPN started Tue Oct 30 15:44:39 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 15:44:39 2018 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2018-10-30 15:44:39,855 DEBG 'start-script' stdout output: [debug] Waiting for valid IP address from tunnel... 2018-10-30 15:44:39,855 DEBG 'start-script' stdout output: Tue Oct 30 15:44:39 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]172.X.X.X:80 Tue Oct 30 15:44:39 2018 Attempting to establish TCP connection with [AF_INET]172.X.X.X:80 [nonblock] 2018-10-30 15:44:40,856 DEBG 'start-script' stdout output: Tue Oct 30 15:44:40 2018 TCP connection established with [AF_INET]172.X.X.X:80 Tue Oct 30 15:44:40 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 15:44:40 2018 TCP_CLIENT link remote: [AF_INET]172.X.X.X:80 2018-10-30 15:45:40,223 DEBG 'start-script' stdout output: Tue Oct 30 15:45:40 2018 [UNDEF] Inactivity timeout (--ping-restart), restarting 2018-10-30 15:45:40,223 DEBG 'start-script' stdout output: Tue Oct 30 15:45:40 2018 SIGHUP[soft,ping-restart] received, process restarting 2018-10-30 15:45:40,224 DEBG 'start-script' stdout output: Tue Oct 30 15:45:40 2018 WARNING: file 'Wdc.key' is group or others accessible 2018-10-30 15:45:40,224 DEBG 'start-script' stdout output: Tue Oct 30 15:45:40 2018 WARNING: file 'credentials.conf' is group or others accessible Tue Oct 30 15:45:40 2018 OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 24 2018 Tue Oct 30 15:45:40 2018 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10 2018-10-30 15:45:45,225 DEBG 'start-script' stdout output: Tue Oct 30 15:45:45 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 15:45:45 2018 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2018-10-30 15:45:45,227 DEBG 'start-script' stdout output: Tue Oct 30 15:45:45 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]172.X.X.X:80 Tue Oct 30 15:45:45 2018 Attempting to establish TCP connection with [AF_INET]172.X.X.X:80 [nonblock] 2018-10-30 15:45:46,228 DEBG 'start-script' stdout output: Tue Oct 30 15:45:46 2018 TCP connection established with [AF_INET]172.X.X.X:80 Tue Oct 30 15:45:46 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 15:45:46 2018 TCP_CLIENT link remote: [AF_INET]172.X.X.X:80 2018-10-30 15:45:46,228 DEBG 'start-script' stdout output: Tue Oct 30 15:45:46 2018 TCP connection established with [AF_INET]172.X.X.X:80 Tue Oct 30 15:45:46 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 15:45:46 2018 TCP_CLIENT link remote: [AF_INET]172.X.X.X:80

Morning. I'm just moving to qbitdocker from a vm (to free up some overheads.) I've got the docker installed and running. With VPN off I can open the webui and am presented with the login screen, if I enable the VPN setting I get connection refused, but it looks like the VPN is connecting ok, this is from my log: 2018-10-30 12:13:47.524216 [info] VPN_ENABLED defined as 'yes' 2018-10-30 12:13:47.545426 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/Netherlands-Amsterdam-TCP.ovpn dos2unix: converting file /config/openvpn/Netherlands-Amsterdam-TCP.ovpn to Unix format... 2018-10-30 12:13:47.563242 [info] VPN remote line defined as 'nl1-ovpn-tcp.pointtoserver.com 80' 2018-10-30 12:13:47.577025 [info] VPN_REMOTE defined as 'nl1-ovpn-tcp.pointtoserver.com' 2018-10-30 12:13:47.590801 [info] VPN_PORT defined as '80' 2018-10-30 12:13:47.604599 [info] VPN_PROTOCOL defined as 'tcp' 2018-10-30 12:13:47.618544 [info] VPN_DEVICE_TYPE defined as 'tun0' 2018-10-30 12:13:47.632245 [info] LAN_NETWORK defined as '192.168.10.0/24' 2018-10-30 12:13:47.646542 [info] NAME_SERVERS defined as '8.8.8.8,8.8.4.4' 2018-10-30 12:13:47.660380 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS) 2018-10-30 12:13:47.674485 [info] Adding 8.8.8.8 to resolv.conf 2018-10-30 12:13:47.688371 [info] Adding 8.8.4.4 to resolv.conf 2018-10-30 12:13:47.702022 [info] Starting OpenVPN... Tue Oct 30 12:13:47 2018 WARNING: file 'Wdc.key' is group or others accessible Tue Oct 30 12:13:47 2018 WARNING: file 'credentials.conf' is group or others accessible Tue Oct 30 12:13:47 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018 Tue Oct 30 12:13:47 2018 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08 Tue Oct 30 12:13:47 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 12:13:47 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]213.x.x.x:80 Tue Oct 30 12:13:47 2018 Attempting to establish TCP connection with [AF_INET]213.x.x.x:80 [nonblock] Tue Oct 30 12:13:48 2018 TCP connection established with [AF_INET]213.x.x.x:80 Tue Oct 30 12:13:48 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 12:13:48 2018 TCP_CLIENT link remote: [AF_INET]213.x.x.x:80 Tue Oct 30 12:13:48 2018 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...] Tue Oct 30 12:13:48 2018 Connection reset, restarting [0] Tue Oct 30 12:13:48 2018 SIGUSR1[soft,connection-reset] received, process restarting Tue Oct 30 12:13:53 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 12:13:53 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]213.x.x.x:80 Tue Oct 30 12:13:53 2018 Attempting to establish TCP connection with [AF_INET]213.x.x.x:80 [nonblock] Tue Oct 30 12:13:54 2018 TCP connection established with [AF_INET]213.x.x.x:80 Tue Oct 30 12:13:54 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 12:13:54 2018 TCP_CLIENT link remote: [AF_INET]213.x.x.x:80 Also tried using a different endpoint: Tue Oct 30 13:10:40 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]172.x.x.x:80 Tue Oct 30 13:10:40 2018 Attempting to establish TCP connection with [AF_INET]172.x.x.x:80 [nonblock] Tue Oct 30 13:10:41 2018 TCP connection established with [AF_INET]172.x.x.x:80 Tue Oct 30 13:10:41 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 13:10:41 2018 TCP_CLIENT link remote: [AF_INET]172.x.x.x:80 Tue Oct 30 13:11:41 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Tue Oct 30 13:11:41 2018 TLS Error: TLS handshake failed Tue Oct 30 13:11:41 2018 Fatal TLS error (check_tls_errors_co), restarting Tue Oct 30 13:11:41 2018 SIGUSR1[soft,tls-error] received, process restarting Tue Oct 30 13:11:51 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 13:11:51 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]172.x.x.x:80 Tue Oct 30 13:11:51 2018 Attempting to establish TCP connection with [AF_INET]172.x.x.x:80 [nonblock] Tue Oct 30 13:11:52 2018 TCP connection established with [AF_INET]172.x.x.x:80 Tue Oct 30 13:11:52 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 13:11:52 2018 TCP_CLIENT link remote: [AF_INET]172.x.x.x:80 Tue Oct 30 13:11:54 2018 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...] Tue Oct 30 13:11:54 2018 Connection reset, restarting [0] Tue Oct 30 13:11:54 2018 SIGUSR1[soft,connection-reset] received, process restarting Tue Oct 30 13:12:14 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Oct 30 13:12:15 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]172.x.x.x:80 Tue Oct 30 13:12:15 2018 Attempting to establish TCP connection with [AF_INET]172.x.x.x:80 [nonblock] Tue Oct 30 13:12:16 2018 TCP connection established with [AF_INET]172.x.x.x:80 Tue Oct 30 13:12:16 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 13:12:16 2018 TCP_CLIENT link remote: [AF_INET]172.x.x.x:80 Tue Oct 30 13:12:16 2018 TCP connection established with [AF_INET]172.x.x.x:80 Tue Oct 30 13:12:16 2018 TCP_CLIENT link local: (not bound) Tue Oct 30 13:12:16 2018 TCP_CLIENT link remote: [AF_INET]172.x.x.x:80 Tue Oct 30 13:12:30 2018 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...] Tue Oct 30 13:12:30 2018 Connection reset, restarting [0] Tue Oct 30 13:12:30 2018 SIGUSR1[soft,connection-reset] received, process restarting