syniex

Thank you for the help, the server is finally stable at release 6.12.x

I changed it few minutes ago, will monitor and update

sure syslog-previous syslog

Hi, I had multiple issue with version 6.12.x that i had to hard reboot the server, so i downgrade to 6.11.x. After 6.12.5 was released i upgraded to it, and then 6.12.6. Since then i had 2 "crashes", nothing on the server is reachable: GUI, Docker. Even my router doesn't reconize the unraid server. I enabled syslog on the last crash, adding diagnostics. Thanks unraid-diagnostics-20231209-0946.zip

Already enabled it in the last crash I opened a thread regarding the issue.

Just had my second crash since the upgrade. I upgrade before to version 6.12.3 and had crashes every 24 hours+-, so i downgrade to 6.11.x. When 6.12.5 was release i upgraded to it and now to 6.12.6. update: opened a topic about it

I had so many crashes since i upgraded to release 6.12.x. I was restarting my server every 1-2 days for the last month. Yesterday i gave up on trying to fix it, and downgrade back to 6.11.5.

not related to your issue, but what is tool you're using for monitoring?

Hey, I am getting a lot of out of sync subtitles lately, Bazarr is considering to add Subsync to the application. I was wondering what would be the easiest way to add it to the container until they will add it. Any help will be appreciated.

Upgraded from 6.7.2 without issues. Love the WireGuard feature!

while you were replaying i updated my message it was solved by upgrading the client itself (UDP still doesn't work) but i am wondering how to protect the vpn more, it seems the client web has to be enabled (without it i can't connect)

After deleting openvpn-as from appdata and reinstall it seems to work, but i can't seems to configure it so i can connect remotely, anyone got a good new guide? with the new settings? seems like MTU problem? 2019-05-12T18:00:27+0300 [stdout#info] [OVPN 0] OUT: 'Sun May 12 18:00:27 2019 TCP connection established with [AF_INET]ip.ip.ip.ip:63189' 2019-05-12T18:00:27+0300 [stdout#info] [OVPN 0] OUT: 'Sun May 12 18:00:27 2019 Socket flags: TCP_NODELAY=1 succeeded' 2019-05-12T18:00:27+0300 [stdout#info] [OVPN 0] OUT: 'Sun May 12 18:00:27 2019 ip.ip.ip.ip:63189 WARNING: Bad encapsulated packet length from peer (5635), which must be > 0 and <= 1627 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]' 2019-05-12T18:00:27+0300 [stdout#info] [OVPN 0] OUT: 'Sun May 12 18:00:27 2019 ip.ip.ip.ip:63189 Connection reset, restarting [0]' 2019-05-12T18:00:27+0300 [stdout#info] [OVPN 0] OUT: 'Sun May 12 18:00:27 2019 ip.ip.ip.ip:63189 SIGUSR1[soft,connection-reset] received, client-instance restarting' Update: Upgrading the client fix the issue with TCP connections but UDP still didn't work. How you guys protect your VPN server?

i am trying to resetup my openvpn, but seems like i miss something on the admin setup

it's on host, i tried to run it using cli using bridge mode also , didn't work either when i try it it gives me the following error 2019-05-11T10:13:52-0700 [stdout#info] *** MyError.report *** 2019-05-11T10:13:52-0700 [stdout#info] Stack Traceback 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/svc/svc.py', 636, '_walk', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnsvc.py', 454, 'start', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnsvc.py', 83, 'parse_validate', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 258, 'daemon_dict_port_forward_log_info', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 253, 'daemon_dict_port_forward', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 246, 'fw', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 241, 'fw_proto', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 237, 'fw_dest', None) 2019-05-11T10:13:52-0700 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/vpnconfig.py', 226, 'dest_addr_mod', None) 2019-05-11T10:13:52-0700 [stdout#info] 'ip_address': svc/svc:636,sagent/vpnsvc:454,sagent/vpnsvc:83,sagent/vpnconfig:258,sagent/vpnconfig:253,sagent/vpnconfig:246,sagent/vpnconfig:241,sagent/vpnconfig:237,sagent/vpnconfig:226 (exceptions.KeyError) 2019-05-11T10:13:52-0700 [stdout#info] Server agent initialization failed (2/6 attempts) because the following network resources are unavailable: set(['bond0'])

upgrade went find from 6.6.7, but i lost openvpn-as, so now i can't access to the box it raise errors on ip-tables

After upgrading to unraid 6.7 2019-05-11T19:54:29+0300 [stdout#info] ***** END command data 2019-05-11T19:54:29+0300 [stdout#info] *** MyError.report *** 2019-05-11T19:54:29+0300 [stdout#info] Stack Traceback 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/defer.py', 653, '_runCallbacks', 'current.result = callback(current.result, *args, **kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 133, 'cb3', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 50, 'process_cmd_result', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/util/daemon.py', 28, 'twistd_with_reactor', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/util/daemon.py', 69, 'twistd', None) 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/application/app.py', 384, 'run', 'self.postApplication()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/scripts/_twistd_unix.py', 258, 'postApplication', 'self.startReactor(None, self.oldstdout, self.oldstderr)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/application/app.py', 396, 'startReactor', 'self.config, oldstdout, oldstderr, self.profiler, reactor)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/application/app.py', 311, 'runReactorWithLogging', 'reactor.run()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/base.py', 1243, 'run', 'self.mainLoop()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/base.py', 1255, 'mainLoop', 'self.doIteration(t)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/epollreactor.py', 235, 'doPoll', 'log.callWithLogger(selectable, _drdw, selectable, fd, event)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/python/log.py', 103, 'callWithLogger', 'return callWithContext({"system": lp}, func, *args, **kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/python/log.py', 86, 'callWithContext', 'return context.call({ILogContext: newCtx}, func, *args, **kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/python/context.py', 122, 'callWithContext', 'return self.currentContext().callWithContext(ctx, func, *args, **kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/python/context.py', 85, 'callWithContext', 'return func(*args,**kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/posixbase.py', 627, '_doReadOrWrite', 'self._disconnectSelectable(selectable, why, inRead)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/posixbase.py', 252, '_disconnectSelectable', 'selectable.readConnectionLost(f)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/abstract.py', 313, 'readConnectionLost', 'self.connectionLost(reason)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/process.py', 312, 'connectionLost', 'self.proc.childConnectionLost(self.name, reason)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/process.py', 973, 'childConnectionLost', 'self.maybeCallProcessEnded()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/process.py', 985, 'maybeCallProcessEnded', 'self.reapProcess()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/process.py', 350, 'reapProcess', 'self.processEnded(status)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/_baseprocess.py', 52, 'processEnded', 'self.maybeCallProcessEnded()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/process.py', 987, 'maybeCallProcessEnded', '_BaseProcess.maybeCallProcessEnded(self)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/_baseprocess.py', 64, 'maybeCallProcessEnded', 'proto.processEnded(Failure(reason))') 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/svc/pp.py', 142, 'processEnded', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/svc/svcnotify.py', 32, 'notify_change_state', None) 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/defer.py', 459, 'callback', 'self._startRunCallbacks(result)') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/defer.py', 567, '_startRunCallbacks', 'self._runCallbacks()') 2019-05-11T19:54:29+0300 [stdout#info] ('/usr/local/openvpn_as/lib/python2.7/site-packages/Twisted-17.9.0-py2.7-linux-x86_64.egg/twisted/internet/defer.py', 653, '_runCallbacks', 'current.result = callback(current.result, *args, **kw)') 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 133, 'cb3', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 50, 'process_cmd_result', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/util/error.py', 66, '__init__', None) 2019-05-11T19:54:29+0300 [stdout#info] ('build/bdist.linux-x86_64/egg/pyovpn/util/error.py', 47, '__init__', None) 2019-05-11T19:54:29+0300 [stdout#info] Service deferred error: IPTablesServiceBase: failed to run iptables-restore [status=2]: ['iptables-restore v1.6.0: Bad IP address ""', '', 'Error occurred at line: 157', "Try `iptables-restore -h' or 'iptables-restore --help' for more information."]: internet/defer:653,sagent/ipts:133,sagent/ipts:50,util/daemon:28,util/daemon:69,application/app:384,scripts/_twistd_unix:258,application/app:396,application/app:311,internet/base:1243,internet/base:1255,internet/epollreactor:235,python/log:103,python/log:86,python/context:122,python/context:85,internet/posixbase:627,internet/posixbase:252,internet/abstract:313,internet/process:312,internet/process:973,internet/process:985,internet/process:350,internet/_baseprocess:52,internet/process:987,internet/_baseprocess:64,svc/pp:142,svc/svcnotify:32,internet/defer:459,internet/defer:567,internet/defer:653,sagent/ipts:133,sagent/ipts:50,util/error:66,util/error:47 2019-05-11T19:54:30+0300 [stdout#info] Server Agent initialization status: 2019-05-11T19:54:30+0300 [stdout#info] { 2019-05-11T19:54:30+0300 [stdout#info] "errors": { 2019-05-11T19:54:30+0300 [stdout#info] "crl": [ 2019-05-11T19:54:30+0300 [stdout#info] [ 2019-05-11T19:54:30+0300 [stdout#info] "error", 2019-05-11T19:54:30+0300 [stdout#info] "service failed to start due to unresolved dependencies: set(['user'])" 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] ], 2019-05-11T19:54:30+0300 [stdout#info] "iptables_live": [ 2019-05-11T19:54:30+0300 [stdout#info] [ 2019-05-11T19:54:30+0300 [stdout#info] "error", 2019-05-11T19:54:30+0300 [stdout#info] "service failed to start due to unresolved dependencies: set(['iptables_openvpn'])" 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] ], 2019-05-11T19:54:30+0300 [stdout#info] "iptables_openvpn": [ 2019-05-11T19:54:30+0300 [stdout#info] [ 2019-05-11T19:54:30+0300 [stdout#info] "error", 2019-05-11T19:54:30+0300 [stdout#info] "Service deferred error: IPTablesServiceBase: failed to run iptables-restore [status=2]: ['iptables-restore v1.6.0: Bad IP address \"\"', '', 'Error occurred at line: 157', \"Try `iptables-restore -h' or 'iptables-restore --help' for more information.\"]: internet/defer:653,sagent/ipts:133,sagent/ipts:50,util/daemon:28,util/daemon:69,application/app:384,scripts/_twistd_unix:258,application/app:396,application/app:311,internet/base:1243,internet/base:1255,internet/epollreactor:235,python/log:103,python/log:86,python/context:122,python/context:85,internet/posixbase:627,internet/posixbase:252,internet/abstract:313,internet/process:312,internet/process:973,internet/process:985,internet/process:350,internet/_baseprocess:52,internet/process:987,internet/_baseprocess:64,svc/pp:142,svc/svcnotify:32,internet/defer:459,internet/defer:567,internet/defer:653,sagent/ipts:133,sagent/ipts:50,util/error:66,util/error:47" 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] ], 2019-05-11T19:54:30+0300 [stdout#info] "openvpn_0": [ 2019-05-11T19:54:30+0300 [stdout#info] [ 2019-05-11T19:54:30+0300 [stdout#info] "error", 2019-05-11T19:54:30+0300 [stdout#info] "service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn'])" 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] ], 2019-05-11T19:54:30+0300 [stdout#info] "user": [ 2019-05-11T19:54:30+0300 [stdout#info] [ 2019-05-11T19:54:30+0300 [stdout#info] "error", 2019-05-11T19:54:30+0300 [stdout#info] "service failed to start due to unresolved dependencies: set(['iptables_live', 'iptables_openvpn'])" 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] ] 2019-05-11T19:54:30+0300 [stdout#info] }, 2019-05-11T19:54:30+0300 [stdout#info] "last_restarted": "Sat May 11 19:54:28 2019", 2019-05-11T19:54:30+0300 [stdout#info] "service_status": { 2019-05-11T19:54:30+0300 [stdout#info] "api": "started", 2019-05-11T19:54:30+0300 [stdout#info] "auth": "started", 2019-05-11T19:54:30+0300 [stdout#info] "bridge": "started", 2019-05-11T19:54:30+0300 [stdout#info] "client_query": "started", 2019-05-11T19:54:30+0300 [stdout#info] "crl": "off", 2019-05-11T19:54:30+0300 [stdout#info] "daemon_pre": "started", 2019-05-11T19:54:30+0300 [stdout#info] "db_push": "started", 2019-05-11T19:54:30+0300 [stdout#info] "ip6tables_live": "started", 2019-05-11T19:54:30+0300 [stdout#info] "ip6tables_openvpn": "started", 2019-05-11T19:54:30+0300 [stdout#info] "iptables_live": "off", 2019-05-11T19:54:30+0300 [stdout#info] "iptables_openvpn": "off", 2019-05-11T19:54:30+0300 [stdout#info] "iptables_web": "started", 2019-05-11T19:54:30+0300 [stdout#info] "license": "started", 2019-05-11T19:54:30+0300 [stdout#info] "log": "started", 2019-05-11T19:54:30+0300 [stdout#info] "openvpn_0": "off", 2019-05-11T19:54:30+0300 [stdout#info] "user": "off", 2019-05-11T19:54:30+0300 [stdout#info] "web": "started" 2019-05-11T19:54:30+0300 [stdout#info] } 2019-05-11T19:54:30+0300 [stdout#info] } 2019-05-11T19:54:30+0300 [stdout#info] Server Agent started can't connect to the vpn anymore, any idea how can i fix that?

didn't work, "ginx: [emerg] "if" directive is not allowed here in /config/nginx/site-confs/default:118" i tried both default file and nginx.conf

is there a way to make this #LOCAL IP ALLOW GEO BLOCK if ($lan-ip = yes) { set $allowed_country yes; } # COUNTRY GEO BLOCK if ($allowed_country = no) { return 444; } default for all configurations without the need to add it to each proxy-conf configuration?

is there a way to block in nginx any site that isn't configure on proxy-conf? so if someone will try to hit https://something.duckdns.org/notconfigure he won't get any response at all?

Can you please guide me how to install it using CLI? i lost my vpn due the update, and the server is located on remote site, where i can't get in the next month or so. nevermind fix it myself. used this command to install new vpn using docker, then fix everything using the web /usr/local/emhttp/plugins/dynamix.docker.manager/scripts/docker run -d --name="openvpn-as-fix" --net="host" --privileged="true" -e TZ="America/Los_Angeles" -e HOST_OS="unRAID" -e "TCP_PORT_943"="943" -e "TCP_PORT_9443"="9443" -e "UDP_PORT_1194"="1194" -e "INTERFACE"="bond0" -e "PGID"="100" -e "PUID"="99" -v "/mnt/user":"/unraid":rw -v "/mnt/user/appdata/openvpn-as":"/config":rw linuxserver/openvpn-as:2.6.1-ls11

i don't want to screw the server, can you please guide me through?

is there a way to rollback to openvpn-as:2.6.1-ls11 using only SSH? my server is hosted on remote site, and i lost the vpn since last update

not up to me, the server is located at my friend house (he has 1gb/1gb connection, i got only 100mb/3mb).

so my ISP provider doesn't give me the Admin password for my router (pifffff) and the router remote management using https (443) so i want to change the port for the ngnix to something else. so i open a new port forwarding to internal 443 but some of the reverse proxy doesn't work, i am connecting to the server with the custom port but when the reverse proxy forward me the custom port get deleted and forward me to normal https (443) is there a way to make ngnix always add the custom port to the outside world?

Is there a way to make to use letsencrypt as reverse proxy from gitlab-ce? My router doesn't allow https(443) port to be open, so i forward it to custom port, so i added to the default configuration "return 301 https://$host:{PORT}$request_uri;" <---- under the http server so it redirect everything to the https with my custom port but it doesn't seems to work with gitlab. when i try to use the sub-domain i get this url: "https://git.{user}.duckdns.org/users/sign_in" without the custom port. here is the configuration i added to support gitlab: server { listen 443 ssl; server_name git.*; include /config/nginx/ssl.conf; client_max_body_size 0; # enable for ldap auth, fill in ldap details in ldap.conf #include /config/nginx/ldap.conf; location / { # enable the next two lines for http auth #auth_basic "Restricted"; #auth_basic_user_file /config/nginx/.htpasswd; # enable the next two lines for ldap auth #auth_request /auth; #error_page 401 =200 /login; include /config/nginx/proxy.conf; resolver 127.0.0.11 valid=30s; set $upstream_gitlab gitlab; proxy_pass http://$upstream_gitlab:9080; } } Is there something i should change?