August 17, 201312 yr my ovpn file as edited by the plugin: client ping 5 dev tun resolv-retry infinite nobind ;user nobody ;group nobody persist-key persist-remote-ip persist-tun ;http-proxy-retry # retry on connection failures ;http-proxy [proxy server] [proxy port #] ;mute-replay-warnings ns-cert-type server verb 3 ;mute 20 route-metric 1 proto tcp ping-exit 90 #show-net-up #dhcp-renew #dhcp-release #route-delay 0 120 #hand-window 180 <ca> -----BEGIN CERTIFICATE----- **<snip by me>** -----END CERTIFICATE----- </ca> <cert> -----BEGIN CERTIFICATE----- **<snip by me>** -----END CERTIFICATE----- </cert> <key> -----BEGIN RSA PRIVATE KEY----- **<snip by me>** -----END RSA PRIVATE KEY----- </key> remote 184.154.4.2 443 auth-user-pass /boot/config/plugins/openvpn/password.txt status /tmp/openvpn/openvpn-status.log One other item to also note is the plugin writes the 'auth-user-pass' inline with the "remote 184.154.4.2 443" so it looks like this before I edit it remote 184.154.4.2 443auth-user-pass /boot/config/plugins/openvpn/password.txt Using HMA VPN service. Works great on my ubuntu system using gopenvpn. You can grab all their ovpn files for TCP and UDP at http://hidemyass.com/vpn-config/vpn-config.zip One small request would be to have the plugin check/create the '/boot/openvpn' directory at installation and perhaps have some text on the settings page to the effect install the ovpn file there. The plugin was silk until I had trouble figuring out where to place the ovpn file. Ended up going through the plugin code to see where it was looking for the file to figure it out. Also may want to put a check in to detect two interfaces being used, in my case it was 'tun0' and 'tun1' and the plugin was happy yet nothing was going in the tunnel. Other than those few issues, nice work on the plugin. Edit: noticed you updated the plugin to 2.7.11, the above was using 2.7.10
August 17, 201312 yr Author my ovpn file as edited by the plugin: One other item to also note is the plugin writes the 'auth-user-pass' inline with the "remote 184.154.4.2 443" so it looks like this before I edit it remote 184.154.4.2 443auth-user-pass /boot/config/plugins/openvpn/password.txt One small request would be to have the plugin check/create the '/boot/openvpn' directory at installation and perhaps have some text on the settings page to the effect install the ovpn file there. Edit: noticed you updated the plugin to 2.7.11, the above was using 2.7.10 On first page is stated Unpack your provider certificate/files to /boot/openvpn (create that folder if it's not exist) shall be the ovpn file and all other files (crt, key ......) But I can add to plugin so this folder creates if not exist, but you should have done that before you install the plugin One other item to also note is the plugin writes the 'auth-user-pass' inline with the "remote 184.154.4.2 443" so it looks like this before I edit it remote 184.154.4.2 443auth-user-pass /boot/config/plugins/openvpn/password.txt Can you add your original ovpn file to /boot/openvpn, the plugin shall have been fixed to avoid this, please check, if not I need to check this again
August 17, 201312 yr A bit long, but trying to get you the most info... Upgraded to 2.7.11. Clicked start and said it was connected, yet the plugin did not update status. Attached is screenshot - OpenVpnPlugin2711.jpg. Same behavior it had with 2.7.10 in my case. If I click start again I go into an incredibly long wait - upwards of 5-10 minutes. I had to hard reset last night because even a telnet powerdown would not free it up after 20+ minutes. Below is a snippet of the syslog from 2.7.11. Last night the line 'Aug 17 11:22:36 Tower avahi-daemon[23050]: Withdrawing workstation service for tun5.' would cycle between tun0 and tun1 for minutes on end. Pic attachments: OpenVPNPlugin2711.jpg: First 'start' click - assigned tun5, buy did not connect OpenVpnPlugin2711-1.jpg: Second 'start' click - no other changes OpenVPNPlugin2711-2.jpg: Results after waiting a few minutes Aug 17 11:12:38 Tower rc.openvpnclient[7453]: Plugin configuration written Aug 17 11:12:57 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn (Minor Issues) Aug 17 11:13:02 Tower kernel: tun: Universal TUN/TAP device driver, 1.6 (System) Aug 17 11:13:02 Tower kernel: tun: (C) 1999-2004 Max Krasnyansky <[email protected]> Aug 17 11:15:01 Tower ntpd[1088]: Listen normally on 3 tun5 10.200.1.236 UDP 123 Aug 17 11:15:01 Tower ntpd[1088]: 66.228.59.187 interface 192.168.150.45 -> 10.200.1.236 Aug 17 11:15:01 Tower ntpd[1088]: 192.155.88.169 interface 192.168.150.45 -> 10.200.1.236 Aug 17 11:15:01 Tower ntpd[1088]: 69.164.217.193 interface 192.168.150.45 -> 10.200.1.236 Aug 17 11:15:01 Tower ntpd[1088]: new interface(s) found: waking up resolver Aug 17 11:16:12 Tower mountd[23042]: authenticated mount request from 192.168.150.36:1017 for /mnt/user/Music (/mnt/user/Music) Aug 17 11:16:12 Tower mountd[23042]: authenticated mount request from 192.168.150.36:695 for /mnt/user/Movies (/mnt/user/Movies) Aug 17 11:22:22 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn (Minor Issues) Aug 17 11:22:36 Tower avahi-daemon[23050]: Withdrawing workstation service for tun5. Aug 17 11:25:01 Tower ntpd[1088]: Listen normally on 4 tun5 10.200.3.51 UDP 123 Aug 17 11:25:01 Tower ntpd[1088]: Deleting interface #3 tun5, 10.200.1.236#123, interface stats: received=23, sent=23, dropped=0, active_time=600 secs Aug 17 11:25:01 Tower ntpd[1088]: 69.164.217.193 interface 10.200.1.236 -> (null) Aug 17 11:25:01 Tower ntpd[1088]: 192.155.88.169 interface 10.200.1.236 -> (null) Aug 17 11:25:01 Tower ntpd[1088]: 66.228.59.187 interface 10.200.1.236 -> (null) Aug 17 11:25:01 Tower ntpd[1088]: new interface(s) found: waking up resolver This is the openvpn log after it connected: Sat Aug 17 11:22:22 2013 OpenVPN 2.3.2 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jun 22 2013 Sat Aug 17 11:22:22 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sat Aug 17 11:22:22 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 11:22:22 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 11:22:23 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:23 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 11:22:23 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:23 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=03221499 dc657805 Sat Aug 17 11:22:23 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sat Aug 17 11:22:23 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 11:22:23 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 11:22:23 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 11:22:25 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 11:22:25 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 11:22:25 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 11:22:25 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 11:22:25 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 11:22:25 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:27 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 11:22:27 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.2.122 255.255.252.0' Sat Aug 17 11:22:27 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 11:22:27 2013 OPTIONS IMPORT: route options modified Sat Aug 17 11:22:27 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 11:22:27 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 11:22:27 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 11:22:27 2013 ERROR: Cannot ioctl TUNSETIFF tun5: Device or resource busy (errno=16) Sat Aug 17 11:22:27 2013 Exiting due to fatal error ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Sat Aug 17 11:22:26 2013 Connection reset, restarting [-1] Sat Aug 17 11:22:26 2013 SIGUSR1[soft,connection-reset] received, process restarting Sat Aug 17 11:22:26 2013 Restart pause, 5 second(s) Sat Aug 17 11:22:31 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 11:22:31 2013 TCP/UDP: Preserving recently used remote address: [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:31 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 11:22:32 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:32 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 11:22:32 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:32 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=103c880c cd91ceed Sat Aug 17 11:22:32 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 11:22:32 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 11:22:32 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 11:22:34 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 11:22:34 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 11:22:34 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 11:22:34 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 11:22:34 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 11:22:34 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 11:22:36 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 11:22:36 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.3.51 255.255.252.0' Sat Aug 17 11:22:36 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 11:22:36 2013 OPTIONS IMPORT: route options modified Sat Aug 17 11:22:36 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 11:22:36 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 11:22:36 2013 Preserving previous TUN/TAP instance: tun5 Sat Aug 17 11:22:36 2013 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Sat Aug 17 11:22:36 2013 /usr/sbin/ip route del 184.154.4.2/32 Sat Aug 17 11:22:36 2013 /usr/sbin/ip route del 0.0.0.0/1 Sat Aug 17 11:22:36 2013 /usr/sbin/ip route del 128.0.0.0/1 Sat Aug 17 11:22:36 2013 Closing TUN/TAP interface Sat Aug 17 11:22:36 2013 /usr/sbin/ip addr del dev tun5 10.200.1.236/22 Sat Aug 17 11:22:37 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 11:22:37 2013 TUN/TAP device tun5 opened Sat Aug 17 11:22:37 2013 TUN/TAP TX queue length set to 100 Sat Aug 17 11:22:37 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat Aug 17 11:22:37 2013 /usr/sbin/ip link set dev tun5 up mtu 1500 Sat Aug 17 11:22:37 2013 /usr/sbin/ip addr add dev tun5 10.200.3.51/22 broadcast 10.200.3.255 Sat Aug 17 11:22:37 2013 /usr/sbin/ip route add 184.154.4.2/32 via 192.168.150.1 Sat Aug 17 11:22:37 2013 /usr/sbin/ip route add 0.0.0.0/1 via 10.200.0.1 Sat Aug 17 11:22:37 2013 /usr/sbin/ip route add 128.0.0.0/1 via 10.200.0.1 Sat Aug 17 11:22:37 2013 Initialization Sequence Completed I replaced the ovpn file with a clean copy as requested. When I clicked start, the file was written to, was assigned an IP and said was connected, yet the plugin reported not connected and had the option to click start still available. The below is the ovpn file unaltered by me other than removing the hashes for the keys/certs: client ping 5 resolv-retry infinite nobind ;user nobody ;group nobody persist-key persist-remote-ip persist-tun ;http-proxy-retry # retry on connection failures ;http-proxy [proxy server] [proxy port #] ;mute-replay-warnings ns-cert-type server verb 3 ;mute 20 route-metric 1 proto tcp dev tun5 ping-exit 90 #show-net-up #dhcp-renew #dhcp-release #route-delay 0 120 #hand-window 180 <ca> -----BEGIN CERTIFICATE----- **<snip by me>** -----END CERTIFICATE----- </ca> <cert> -----BEGIN CERTIFICATE----- **<snip by me>** -----END CERTIFICATE----- </cert> <key> -----BEGIN RSA PRIVATE KEY----- **<snip by me>** -----END RSA PRIVATE KEY----- </key> remote 184.154.4.2 443auth-user-pass /boot/config/plugins/openvpn/password.txt status /tmp/openvpn/openvpn-status.log I could not connect until I broke up the line: remote 184.154.4.2 443auth-user-pass /boot/config/plugins/openvpn/password.txt
August 17, 201312 yr I rebooted the server to see how it works from clean start. First time clicking 'start' it ran through the connection, said it was connected in the log at the bottom, but the plugin still showed not connected with option of clicking start still enabled. Tun5 was listed in the interface list. I clicked start again and has been sitting there for the past 3-4 minutes. The one line that is cut off by the 'waiting for tower' is ' Logging in to VPN was successful'. (OpenVPNPlugin2711-3.jpg) At 4-5 minutes the plugin updated. 'OpenVPNPlugin2711-4.jpg' is the result of that. Openvpn log after second click of start and 4-5 minute delay: Sat Aug 17 12:00:01 2013 OpenVPN 2.3.2 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jun 22 2013 Sat Aug 17 12:00:01 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sat Aug 17 12:00:01 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 12:00:01 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 12:00:02 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:02 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 12:00:02 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:02 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=3ea3bebd 81affbe9 Sat Aug 17 12:00:02 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sat Aug 17 12:00:04 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 12:00:04 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 12:00:04 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 12:00:11 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:00:11 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:00:11 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:00:11 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:00:11 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 12:00:11 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:14 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 12:00:14 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.2.232 255.255.252.0' Sat Aug 17 12:00:14 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 12:00:14 2013 OPTIONS IMPORT: route options modified Sat Aug 17 12:00:14 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 12:00:14 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 12:00:14 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 12:00:14 2013 ERROR: Cannot ioctl TUNSETIFF tun5: Device or resource busy (errno=16) Sat Aug 17 12:00:14 2013 Exiting due to fatal error ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Sat Aug 17 12:00:12 2013 Connection reset, restarting [0] Sat Aug 17 12:00:12 2013 SIGUSR1[soft,connection-reset] received, process restarting Sat Aug 17 12:00:12 2013 Restart pause, 5 second(s) Sat Aug 17 12:00:17 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 12:00:17 2013 TCP/UDP: Preserving recently used remote address: [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:17 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 12:00:18 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:18 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 12:00:18 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:18 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=4443906d 0c733cdc Sat Aug 17 12:00:21 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 12:00:21 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 12:00:21 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 12:00:28 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:00:28 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:00:28 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:00:28 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:00:28 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 12:00:28 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 12:00:31 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 12:00:31 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.1.146 255.255.252.0' Sat Aug 17 12:00:31 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 12:00:31 2013 OPTIONS IMPORT: route options modified Sat Aug 17 12:00:31 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 12:00:31 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 12:00:31 2013 Preserving previous TUN/TAP instance: tun5 Sat Aug 17 12:00:31 2013 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Sat Aug 17 12:00:31 2013 /usr/sbin/ip route del 184.154.4.2/32 Sat Aug 17 12:00:31 2013 /usr/sbin/ip route del 0.0.0.0/1 Sat Aug 17 12:00:31 2013 /usr/sbin/ip route del 128.0.0.0/1 Sat Aug 17 12:00:31 2013 Closing TUN/TAP interface Sat Aug 17 12:00:31 2013 /usr/sbin/ip addr del dev tun5 10.200.2.217/22 Sat Aug 17 12:00:32 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 12:00:32 2013 TUN/TAP device tun5 opened Sat Aug 17 12:00:32 2013 TUN/TAP TX queue length set to 100 Sat Aug 17 12:00:32 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat Aug 17 12:00:32 2013 /usr/sbin/ip link set dev tun5 up mtu 1500 Sat Aug 17 12:00:32 2013 /usr/sbin/ip addr add dev tun5 10.200.1.146/22 broadcast 10.200.3.255 Sat Aug 17 12:00:32 2013 /usr/sbin/ip route add 184.154.4.2/32 via 192.168.150.1 Sat Aug 17 12:00:32 2013 /usr/sbin/ip route add 0.0.0.0/1 via 10.200.0.1 Sat Aug 17 12:00:32 2013 /usr/sbin/ip route add 128.0.0.0/1 via 10.200.0.1 Sat Aug 17 12:00:32 2013 Initialization Sequence Completed Syslog snippet of the activity: Aug 17 11:59:39 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn (Minor Issues) Aug 17 11:59:44 Tower kernel: tun: Universal TUN/TAP device driver, 1.6 (System) Aug 17 11:59:44 Tower kernel: tun: (C) 1999-2004 Max Krasnyansky <[email protected]> Aug 17 11:59:47 Tower ntpd[1106]: Listen normally on 3 tun5 10.200.2.217 UDP 123 Aug 17 11:59:47 Tower ntpd[1106]: 198.211.101.144 interface 192.168.150.45 -> 10.200.2.217 Aug 17 11:59:47 Tower ntpd[1106]: 50.116.38.157 interface 192.168.150.45 -> 10.200.2.217 Aug 17 11:59:47 Tower ntpd[1106]: 138.236.128.112 interface 192.168.150.45 -> 10.200.2.217 Aug 17 11:59:47 Tower ntpd[1106]: new interface(s) found: waking up resolver Aug 17 12:00:01 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn (Minor Issues) Aug 17 12:00:31 Tower avahi-daemon[23048]: Withdrawing workstation service for tun5. Aug 17 12:04:47 Tower ntpd[1106]: Listen normally on 4 tun5 10.200.1.146 UDP 123 Aug 17 12:04:47 Tower ntpd[1106]: Deleting interface #3 tun5, 10.200.2.217#123, interface stats: received=3, sent=3, dropped=12, active_time=300 secs Aug 17 12:04:47 Tower ntpd[1106]: 138.236.128.112 interface 10.200.2.217 -> (null) Aug 17 12:04:47 Tower ntpd[1106]: 50.116.38.157 interface 10.200.2.217 -> (null) Aug 17 12:04:47 Tower ntpd[1106]: 198.211.101.144 interface 10.200.2.217 -> (null) Aug 17 12:04:47 Tower ntpd[1106]: new interface(s) found: waking up resolver At this point the VPN is connected and traffic is going in the tunnel, though the WAN IP is not listed in the plugin page as seen in the second screenshot. Stopping and starting the plugin does not change the results (WAN IP). Below is the last openvpn log: Sat Aug 17 12:19:06 2013 OpenVPN 2.3.2 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jun 22 2013 Sat Aug 17 12:19:06 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sat Aug 17 12:19:06 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 12:19:06 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 12:19:07 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 12:19:07 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 12:19:07 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 12:19:07 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=85dbecb0 6ded4fba Sat Aug 17 12:19:07 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sat Aug 17 12:19:07 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 12:19:07 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 12:19:07 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 12:19:09 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:19:09 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:19:09 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 12:19:09 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 12:19:09 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 12:19:09 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 12:19:11 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 12:19:11 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.3.124 255.255.252.0' Sat Aug 17 12:19:11 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 12:19:11 2013 OPTIONS IMPORT: route options modified Sat Aug 17 12:19:11 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 12:19:11 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 12:19:11 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 12:19:11 2013 ERROR: Cannot ioctl TUNSETIFF tun5: Device or resource busy (errno=16) Sat Aug 17 12:19:11 2013 Exiting due to fatal error Traffic is still going into the tunnel, however.
August 17, 201312 yr Author I have fixed the update of the ovpn , so the new updates going in to own line, new plugin will be uploaded later..... going to check your other issue.... what do you see if you type in this command ? with connected and not connected curl -s curl -s https://www.privateinternetaccess.com/pages/how-it-works/ | grep "IP Address:"
August 17, 201312 yr Author for me is the rout looks like this connected Wan ip : 178.73.202.156 0.0.0.0/1 via 178.73.202.129 dev tap5 default via 192.168.0.1 dev eth0 metric 1 80.67.8.197 via 192.168.0.1 dev eth0 127.0.0.0/8 dev lo scope link 128.0.0.0/1 via 178.73.202.129 dev tap5 178.73.202.128/25 dev tap5 proto kernel scope link src 178.73.202.156 192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.171 eth0: 192.168.0.171 lo: 127.0.0.1 tap5: 178.73.202.156 not connected default via 192.168.0.1 dev eth0 metric 1 127.0.0.0/8 dev lo scope link 192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.171
August 17, 201312 yr The curl command returned nothing, though curl by itself worked which means it is in the path. Using Putty with telnet. With OpenVPN connected and not connected all traffic was still going through the active tunnel. Yep - with the plugin stopped the tunnel was still active. I rebooted the server and tried the curl command again with the same result - no output. I removed he grep portion and got a few lines of header info from the web site, but no IP. I definitely did not get full output though (without the pipe to grep) compared to running the same command on my xubuntu system. Subsequent tries with grep or no grep produced nothing. As a sanity check, I tried it on my xubuntu system with VPN disconnected and connected and the command works fine and shows different IP for connected/disconnected. I rebooted the server again and tried the curl command again before starting openvpn and had same result no output with or without the pipe to grep. Did tracepath and it works - goes through my ISP. Started the VPN and curl command still not work, tracepath showed it went through the tunnel, but same issue on the plugin page - no WAN IP. Stopped the VPN and this time tun5 was removed and a tracepath showed the tunnel was disconnected and traffic was going through my ISP again. Curl command still reports nothing - no output. I have only installed the plugin and the ovpn file - have not done anything else with openvpn. I have Sabnzbd, Sickbeard, Couchpotato, Headphones (all four influencer unplugged), Subsonic, Plex (though not enabled), unMENU, and cache_dirs plugin installed on 5.0rc16c. No active downloads or processing. Let me know what else you need.
August 17, 201312 yr Output from plugin page when VPN connected: 0.0.0.0/1 via 10.200.0.1 dev tun5 default via 192.168.150.1 dev eth0 metric 1 10.200.0.0/22 dev tun5 proto kernel scope link src 10.200.2.62 127.0.0.0/8 dev lo scope link 128.0.0.0/1 via 10.200.0.1 dev tun5 184.154.4.2 via 192.168.150.1 dev eth0 192.168.150.0/24 dev eth0 proto kernel scope link src 192.168.150.45 eth0: 192.168.150.45 lo: 127.0.0.1 tun5: 10.200.2.62 Sat Aug 17 13:42:24 2013 OpenVPN 2.3.2 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jun 22 2013 Sat Aug 17 13:42:24 2013 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible Sat Aug 17 13:42:24 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 13:42:24 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 13:42:25 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:25 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 13:42:25 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:25 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=8da5b280 dc58f5d4 Sat Aug 17 13:42:25 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sat Aug 17 13:42:25 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 13:42:25 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 13:42:25 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 13:42:27 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 13:42:27 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 13:42:27 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 13:42:27 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 13:42:27 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 13:42:27 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:29 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 13:42:29 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.1.230 255.255.252.0' Sat Aug 17 13:42:29 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 13:42:29 2013 OPTIONS IMPORT: route options modified Sat Aug 17 13:42:29 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 13:42:29 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 13:42:29 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 13:42:29 2013 ERROR: Cannot ioctl TUNSETIFF tun5: Device or resource busy (errno=16) Sat Aug 17 13:42:29 2013 Exiting due to fatal error ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Sat Aug 17 13:42:27 2013 Connection reset, restarting [0] Sat Aug 17 13:42:27 2013 SIGUSR1[soft,connection-reset] received, process restarting Sat Aug 17 13:42:27 2013 Restart pause, 5 second(s) Sat Aug 17 13:42:32 2013 Socket Buffers: R=[87380->131072] S=[16384->131072] Sat Aug 17 13:42:32 2013 TCP/UDP: Preserving recently used remote address: [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:32 2013 Attempting to establish TCP connection with [AF_INET]184.154.4.2:443 [nonblock] Sat Aug 17 13:42:33 2013 TCP connection established with [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:33 2013 TCPv4_CLIENT link local: [undef] Sat Aug 17 13:42:33 2013 TCPv4_CLIENT link remote: [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:33 2013 TLS: Initial packet from [AF_INET]184.154.4.2:443, sid=2a3099c8 80fe52d6 Sat Aug 17 13:42:34 2013 VERIFY OK: depth=1, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=vpn.hidemyass.com, [email protected] Sat Aug 17 13:42:34 2013 VERIFY OK: nsCertType=SERVER Sat Aug 17 13:42:34 2013 VERIFY OK: depth=0, C=UK, ST=NR, L=Attleborough, O=Hide My Ass! Pro, OU=VPN, CN=server, [email protected] Sat Aug 17 13:42:35 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 13:42:35 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 13:42:35 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Sat Aug 17 13:42:35 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 17 13:42:35 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Sat Aug 17 13:42:35 2013 [server] Peer Connection Initiated with [AF_INET]184.154.4.2:443 Sat Aug 17 13:42:37 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Sat Aug 17 13:42:37 2013 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.200.0.1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,redirect-gateway def1,ifconfig 10.200.2.62 255.255.252.0' Sat Aug 17 13:42:37 2013 OPTIONS IMPORT: --ifconfig/up options modified Sat Aug 17 13:42:37 2013 OPTIONS IMPORT: route options modified Sat Aug 17 13:42:37 2013 OPTIONS IMPORT: route-related options modified Sat Aug 17 13:42:37 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Sat Aug 17 13:42:37 2013 Preserving previous TUN/TAP instance: tun5 Sat Aug 17 13:42:37 2013 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Sat Aug 17 13:42:37 2013 /usr/sbin/ip route del 184.154.4.2/32 Sat Aug 17 13:42:37 2013 /usr/sbin/ip route del 0.0.0.0/1 Sat Aug 17 13:42:37 2013 /usr/sbin/ip route del 128.0.0.0/1 Sat Aug 17 13:42:37 2013 Closing TUN/TAP interface Sat Aug 17 13:42:37 2013 /usr/sbin/ip addr del dev tun5 10.200.1.188/22 Sat Aug 17 13:42:38 2013 ROUTE_GATEWAY 192.168.150.1/255.255.255.0 IFACE=eth0 HWADDR=54:04:a6:f2:4c:05 Sat Aug 17 13:42:38 2013 TUN/TAP device tun5 opened Sat Aug 17 13:42:38 2013 TUN/TAP TX queue length set to 100 Sat Aug 17 13:42:38 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat Aug 17 13:42:38 2013 /usr/sbin/ip link set dev tun5 up mtu 1500 Sat Aug 17 13:42:38 2013 /usr/sbin/ip addr add dev tun5 10.200.2.62/22 broadcast 10.200.3.255 Sat Aug 17 13:42:38 2013 /usr/sbin/ip route add 184.154.4.2/32 via 192.168.150.1 Sat Aug 17 13:42:38 2013 /usr/sbin/ip route add 0.0.0.0/1 via 10.200.0.1 Sat Aug 17 13:42:38 2013 /usr/sbin/ip route add 128.0.0.0/1 via 10.200.0.1 Sat Aug 17 13:42:38 2013 Initialization Sequence Completed Syslog snippet: Aug 17 13:23:31 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn Aug 17 13:23:36 Tower kernel: tun: Universal TUN/TAP device driver, 1.6 Aug 17 13:23:36 Tower kernel: tun: (C) 1999-2004 Max Krasnyansky Aug 17 13:24:11 Tower avahi-daemon[23053]: Withdrawing workstation service for tun5. Aug 17 13:42:09 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn Aug 17 13:42:24 Tower sudo: root : TTY=unknown ; PWD=/boot/openvpn ; USER=root ; COMMAND=/usr/sbin/openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --client --config /boot/openvpn/USA.Illinois.Chicago_LOC2S1.TCP.ovpn Aug 17 13:42:37 Tower avahi-daemon[23053]: Withdrawing workstation service for tun5. Aug 17 13:46:46 Tower ntpd[1090]: Listen normally on 3 tun5 10.200.2.62 UDP 123 Aug 17 13:46:46 Tower ntpd[1090]: 108.61.73.244 interface 192.168.150.45 -> 10.200.2.62 Aug 17 13:46:46 Tower ntpd[1090]: 148.240.19.26 interface 192.168.150.45 -> 10.200.2.62 Aug 17 13:46:46 Tower ntpd[1090]: 69.50.219.51 interface 192.168.150.45 -> 10.200.2.62 Aug 17 13:46:46 Tower ntpd[1090]: new interface(s) found: waking up resolver After a reboot, I have to click 'start' two times to get a connection. The first time through I get 'tun5' to appear, but no connection and the second time around I get a connection but no WAN IP reported. VPN is up, however. Screenshot attached.
August 18, 201312 yr Author It looks like you don't get any info from https://www.privateinternetaccess.com/pages/hide-my-ip/ Hovewer there are a change in the new version for this, it's now use http://my-ip-address.com/ //Peter
August 18, 201312 yr It looks like you don't get any info from https://www.privateinternetaccess.com/pages/hide-my-ip/ Hovewer there are a change in the new version for this, it's now use http://my-ip-address.com/ //Peter Yep, I disabled the silent switch and saw that I had to use the '-k' switch because curl reports the certificate for that site being invalid or something to that effect. I changed it in the plugin to: curl -s http://geoip.hidemyass.com/ip/ Seems to work on reporting WAN IP. Still trying to figure out why it always takes two attempts to start up the VPN and why the stop does not always kill the openvpn process. Also fixed the problem with writing the auth-user... thing where it writes it to the end of an existing line. The '\n' was at the end of the line instead of the beginning: echo -e "\nauth-user-pass /boot/config/plugins/openvpn/password.txt" >> /boot/openvpn/$ovpn
August 18, 201312 yr The reason I could not stop the VPN (plugin reports it stopped, but VPN was still active) was because the PID changed from the time the plugin wrote the pid file to the time it was called to kill it by reading the pid file. I changed the plugin kill command to this: killall -HUP openvpn Seems to work every time. Still trying to figure out why it takes two attempts to start the VPN.
August 18, 201312 yr Can you see if latest version are OK ? Try with original ovpn file Tried 2.7.12: * WAN IP works because it is not using that https://privateinternet whatever address that curl reports as having invalid certificate. * writing the auth-user... line to the ovpn file works because you have the extra echo line to add \n. Look at previous post to use only one echo to correct (move the \n to the begining of string instead of the end, same for both writes).
August 18, 201312 yr Author See new version (2.7.13) , it shall be OK to connect the first time after a reboot. //Peter
August 18, 201312 yr Author version (2.7.14) Minor WEB UI changing, moved update button top of right side
August 18, 201312 yr after the new update the UI is a little messed up the words are overlapping under the updates section. I have tried clearing the cache but still is the same thing.
August 18, 201312 yr version (2.7.14) Minor WEB UI changing, moved update button top of right side peter_sm: As I mentioned in my PM, I'd like you to take a look at the attached plugin-in. Some screen shots are attached. Fixed the stuff that we have been exchanging posts on for the past couple days and added another feature to show current host and location. I don't use the extended routing or simple features so those hooks are not tested. Fixed the writing of the ovpn file by relocating the '\n', fixed the connection issues requiring two clicks to start it by incorporating the longer sleep times you implemented and also did some reordering in the connection process, and fixed the stop issue by ignoring the pid file captured at start and going more direct since openvpn can restart on it's own and change pid. The left picture is disconnected status showing the host is my local Internet provider. The center picture is connected to a Chicago VPN server (no errors in the openVPN log) The right picture is connected to a Belgium VPM server.
August 19, 201312 yr version (2.7.14) Minor WEB UI changing, moved update button top of right side As I mentioned in my PM, I'd like you to take a look at the attached plugin-in. Some screen shots are attached. Fixed the stuff that we have been exchanging posts on for the past couple days and added another feature to show current host and location. I don't use the extended routing or simple features so those hooks are not tested. Fixed the writing of the ovpn file by relocating the '\n', fixed the connection issues requiring two clicks to start it by incorporating the longer sleep times you implemented and also did some reordering in the connection process, and fixed the stop issue by ignoring the pid file captured at start and going more direct since openvpn can restart on it's own and change pid. I really like the addition of the Current Host and location that you made. Very helpful. When you are changing your Hosts and locations are you just putting a different .ovpn file in you openvpn folder?
August 19, 201312 yr version (2.7.14) Minor WEB UI changing, moved update button top of right side As I mentioned in my PM, I'd like you to take a look at the attached plugin-in. Some screen shots are attached. Fixed the stuff that we have been exchanging posts on for the past couple days and added another feature to show current host and location. I don't use the extended routing or simple features so those hooks are not tested. Fixed the writing of the ovpn file by relocating the '\n', fixed the connection issues requiring two clicks to start it by incorporating the longer sleep times you implemented and also did some reordering in the connection process, and fixed the stop issue by ignoring the pid file captured at start and going more direct since openvpn can restart on it's own and change pid. I really like the addition of the Current Host and location that you made. Very helpful. When you are changing your Hosts and locations are you just putting a different .ovpn file in you openvpn folder? Correct - just a different ovpn file for a different VPN server available from my VPN provider. The host location and flag display is determined through a curl http query that way you know for sure if the VPN is connected or not and who you are connected to.
August 19, 201312 yr Thats perfect. It would be great if there was a drop down that had all of the ovpn files an we could just select one from the UI.
August 19, 201312 yr Author Thats perfect. It would be great if there was a drop down that had all of the ovpn files an we could just select one from the UI. I'm working om this right now. but are busy at work, so this comes in second priority, or third. //Peter
August 19, 201312 yr Author version (2.7.14) Minor WEB UI changing, moved update button top of right side peter_sm: As I mentioned in my PM, I'd like you to take a look at the attached plugin-in. Some screen shots are attached. Fixed the stuff that we have been exchanging posts on for the past couple days and added another feature to show current host and location. I don't use the extended routing or simple features so those hooks are not tested. Fixed the writing of the ovpn file by relocating the '\n', fixed the connection issues requiring two clicks to start it by incorporating the longer sleep times you implemented and also did some reordering in the connection process, and fixed the stop issue by ignoring the pid file captured at start and going more direct since openvpn can restart on it's own and change pid. The left picture is disconnected status showing the host is my local Internet provider. The center picture is connected to a Chicago VPN server (no errors in the openVPN log) The right picture is connected to a Belgium VPM server. Thanks for the updates, I will take a look and implement this on the GIT, so you can remove the attached file now, and I will update this during the week. Thanks for your help. further discussion I like to take over PM, so we not cover this thread with our discussions. //Peter
August 19, 201312 yr I'm working om this right now. but are busy at work, so this comes in second priority, or third. //Peter Wow that's awesome. I completely understand, Thank you for all the great work you have done so far.
August 20, 201312 yr I have SABnzbd set up to send me a notification email when a downloading completes. Now that i have started running a vpn SAB is unable to connect to the mail server. How would i go about allowing this email to still happen. Would i create a bypassed.txt file the enter the ip address for gmail? Thank you in advance
August 20, 201312 yr I have SABnzbd set up to send me a notification email when a downloading completes. Now that i have started running a vpn SAB is unable to connect to the mail server. How would i go about allowing this email to still happen. Would i create a bypassed.txt file the enter the ip address for gmail? Thank you in advance Does SAB report anything in its logs for the email not being sent?
Archived
This topic is now archived and is closed to further replies.