September 4, 201411 yr Can you try 443 just as a sanity check temporarily? Its the only port that works for me
September 4, 201411 yr Can you try 443 just as a sanity check temporarily? Its the only port that works for me I still get connection timed out. I am going to try from an external point with the actual OpenVPN client and see if I get any different behaviour. Thanks for the suggestions.
September 4, 201411 yr Yes you would need to try it externally. Canyouseeme.org should show the port as open though if it was working. Are you running other plugins? Post screenshots of your server page and conf files if external doesn't connect
September 4, 201411 yr Okay, so even though I can't use canyouseme.org I was able to successfully connect from outside, and am given an IP address of 10.8.0.6. However, I can't access any internal resources. My UnRAID server hosting OpenVPN is 192.168.1.52 and OpenVPN assigns 10.8.0.1. If I open a web browser from my VPN client and try and connect to either IP address it fails. I do see a couple of errors in the OpenVPN Connect window: Thu Sep 04 10:22:35 2014 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\kastnerblpt.log: Access is denied. (errno=5) Thu Sep 04 10:22:35 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [iPv6] built on May 2 2014 Thu Sep 04 10:22:35 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05 Thu Sep 04 10:22:35 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Thu Sep 04 10:22:35 2014 Need hold release from management interface, waiting... Thu Sep 04 10:22:35 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Thu Sep 04 10:22:35 2014 MANAGEMENT: CMD 'state on' Thu Sep 04 10:22:35 2014 MANAGEMENT: CMD 'log all on' Thu Sep 04 10:22:35 2014 MANAGEMENT: CMD 'hold off' Thu Sep 04 10:22:35 2014 MANAGEMENT: CMD 'hold release' Thu Sep 04 10:22:36 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file Thu Sep 04 10:22:36 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Sep 04 10:22:36 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Sep 04 10:22:36 2014 Socket Buffers: R=[65536->65536] S=[64512->64512] Thu Sep 04 10:22:36 2014 UDPv4 link local: [undef] Thu Sep 04 10:22:36 2014 UDPv4 link remote: [AF_INET]*Public IP Addr*:994 Thu Sep 04 10:22:36 2014 MANAGEMENT: >STATE:1409840556,WAIT,,, Thu Sep 04 10:22:36 2014 MANAGEMENT: >STATE:1409840556,AUTH,,, Thu Sep 04 10:22:36 2014 TLS: Initial packet from [AF_INET]*Public IP Addr*:994, sid=8bc221a0 475f42cb Thu Sep 04 10:22:36 2014 VERIFY OK: depth=1, C=CA, ST=ONTARIO, *Rest of Cert Details* Thu Sep 04 10:22:36 2014 Validating certificate key usage Thu Sep 04 10:22:36 2014 ++ Certificate has key usage 00a0, expects 00a0 Thu Sep 04 10:22:36 2014 VERIFY KU OK Thu Sep 04 10:22:36 2014 Validating certificate extended key usage Thu Sep 04 10:22:36 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Thu Sep 04 10:22:36 2014 VERIFY EKU OK Thu Sep 04 10:22:36 2014 VERIFY OK: depth=0, C=CA, ST=ONTARIO, L=BRAMPTON, *Rest of Cert Details* Thu Sep 04 10:22:36 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Sep 04 10:22:36 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Sep 04 10:22:36 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Sep 04 10:22:36 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Sep 04 10:22:36 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Thu Sep 04 10:22:36 2014 [server] Peer Connection Initiated with [AF_INET]99.227.254.169:994 Thu Sep 04 10:22:37 2014 MANAGEMENT: >STATE:1409840557,GET_CONFIG,,, Thu Sep 04 10:22:38 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu Sep 04 10:22:38 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,route 192.168.1.0 255.255.255.0,resolv-retry infinite,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Thu Sep 04 10:22:38 2014 Options error: option 'resolv-retry' cannot be used in this context ([PUSH-OPTIONS]) Thu Sep 04 10:22:38 2014 OPTIONS IMPORT: timers and/or timeouts modified Thu Sep 04 10:22:38 2014 OPTIONS IMPORT: --ifconfig/up options modified Thu Sep 04 10:22:38 2014 OPTIONS IMPORT: route options modified Thu Sep 04 10:22:38 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu Sep 04 10:22:38 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Sep 04 10:22:38 2014 MANAGEMENT: >STATE:1409840558,ASSIGN_IP,,10.8.0.6, Thu Sep 04 10:22:38 2014 open_tun, tt->ipv6=0 Thu Sep 04 10:22:38 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{0C35E57B-6BAD-41D5-A1A9-2018D1B399C2}.tap Thu Sep 04 10:22:38 2014 TAP-Windows Driver Version 9.9 Thu Sep 04 10:22:38 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {0C35E57B-6BAD-41D5-A1A9-2018D1B399C2} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Thu Sep 04 10:22:38 2014 NOTE: FlushIpNetTable failed on interface [27] {0C35E57B-6BAD-41D5-A1A9-2018D1B399C2} (status=5) : Access is denied. Thu Sep 04 10:22:40 2014 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up Thu Sep 04 10:22:40 2014 MANAGEMENT: >STATE:1409840560,ADD_ROUTES,,, Thu Sep 04 10:22:40 2014 C:\Windows\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 10.8.0.5 Thu Sep 04 10:22:40 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=27] Thu Sep 04 10:22:40 2014 Route addition via IPAPI failed [adaptive] Thu Sep 04 10:22:40 2014 Route addition fallback to route.exe Thu Sep 04 10:22:40 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem Thu Sep 04 10:22:40 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1 Thu Sep 04 10:22:40 2014 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5 Thu Sep 04 10:22:40 2014 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=27] Thu Sep 04 10:22:40 2014 Route addition via IPAPI failed [adaptive] Thu Sep 04 10:22:40 2014 Route addition fallback to route.exe Thu Sep 04 10:22:40 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem Thu Sep 04 10:22:40 2014 ERROR: Windows route add command failed [adaptive]: returned error code 1 Thu Sep 04 10:22:40 2014 Initialization Sequence Completed Thu Sep 04 10:22:40 2014 MANAGEMENT: >STATE:1409840560,CONNECTED,SUCCESS,10.8.0.6,99.227.254.169 It looks like I am not able to correctly create routes. I am guessing this is my issue?
September 4, 201411 yr Okay... I googled the error and found it's a Windows permission problem. I needed to edit the shortcut for the client to run as Administrator. I am now able to connect to my home LAN properly. Woohoo! Thanks for the assistance in getting this running.
September 6, 201411 yr Hi - I have Private internet access as my VPN provider. I would like to open up few ports for a webserver, running Plex and subsonic. Can the OpenVPNserver help with this? Running a OpenVPN client + OpenVPN server and using iptables to redirect the traffic? Thanks!
September 8, 201411 yr Question for the OpenVPN masses. Does anyone have an issue shutting down their UnRAID Server with OpenVPN Server installed? I am running the latest server on 6.0-beta8, but when I try and stop the UnRAID server it keeps cycling through trying to dismount disks. I checked the array disks and there is nothing tying them up, but when I look at the cache disk: root@Tower:/mnt# /usr/bin/fuser -mv /mnt/cache /mnt/user/* Specified filename /mnt/user/* does not exist. USER PID ACCESS COMMAND /mnt/cache: root kernel mount /mnt/cache nobody 6197 F.... openvpn I tried changing the setting of turning off OpenVPN when the array dismounts, but it doesn't seem to matter. Once I killed the process for openvpn the server unmounted the array properly. Is this common/known behaviour? Is there any suggestions on how to work around this?
September 8, 201411 yr Author @bkastner I did a test , I have server to start during mount, and Disconnect OpenVPN Server when stopping array to No and it works fine to stop & start. //Peter
September 8, 201411 yr @bkastner I did a test , I have server to start during mount, and Disconnect OpenVPN Server when stopping array to No and it works fine to stop & start. //Peter Okay, so it's just me. Any thoughts as to why this may be the case? Is there any additional info I can provide (I don't know if a syslog would help with this).
September 9, 201411 yr Any other plugins installed? Nope - everything else is running through Docker. I've tried stopping each Docker container and then stopping array, also without luck (which isn't surprising I guess since the PID is tied to openvpn).
September 9, 201411 yr Quite happy to look through your conf files but the quickest solution will be to remove the plugin, delete all conf files, reboot and start again.
September 9, 201411 yr Quite happy to look through your conf files but the quickest solution will be to remove the plugin, delete all conf files, reboot and start again. Thanks Ashe I only see two conf files: openvpnserver.cfg # openvpnserver plugin configuration file INSTALL_ON_BOOT="enable" DISCONNECT_ON_UMOUNT="no" SERVER_PATH=/mnt/cache/appdata/OpenVPN NETWORK=10.8.0.0 NETMASK=255.255.255.0 SERVER_PORT=994 CANONICAL= PROTOCOL=udp CIPHER="" CLIENT="Enable" HASH_ALGO="" GATEWAY="Disable" SUBNET="Disable" LAN_SUBNET="Enable" COMP_LZO="comp-lzo" IPP="ipp.txt" DHCP_1="dhcp-option DNS 8.8.8.8" TELNET_CONSOLE="No" VERB="verb 3" openvpnserver_cert.cfg # openvpnserver plugin configuration file for the certs KEY_COUNTRY="CA" KEY_PROVINCE="ONTARIO" KEY_CITY="BRAMPTON" KEY_ORG="HOME" KEY_EMAIL="[email protected]" KEY_PATH="/mnt/cache/appdata/OpenVPN/openvpnserver_cert" Please let me know if there are any other relevant files you want to see. If I remove this plugin do I have to remove all of the following: /boot/plugin/config/openvpnserver/* /boot/plugin/config/openvpn*.plg /boot/plugin/config/ssh/* /mnt/cache/appdata/OpenVPN
September 9, 201411 yr Only difference in our openvpnserver.cfg file is GATEWAY="redirect-gateway def1" SUBNET="topology subnet" is included in mine whereas yours are disabled. no difference in the openvpnserver_cert.cfg Neither of the above should affect your problem - mine is the same result as peters /boot/plugin/config/openvpnserver/* - Yes /boot/plugin/config/openvpn*.plg - Yes /boot/plugin/config/ssh/* - i do not have this? /mnt/cache/appdata/OpenVPN - Yes
September 9, 201411 yr Only difference in our openvpnserver.cfg file is GATEWAY="redirect-gateway def1" SUBNET="topology subnet" is included in mine whereas yours are disabled. no difference in the openvpnserver_cert.cfg Neither of the above should affect your problem - mine is the same result as peters /boot/plugin/config/openvpnserver/* - Yes /boot/plugin/config/openvpn*.plg - Yes /boot/plugin/config/ssh/* - i do not have this? /mnt/cache/appdata/OpenVPN - Yes Hrmm... I was wondering if the ssh folder was tied to OpenVPN or not. I assumed so, but maybe not. I wonder why I have it and you don't.
September 9, 201411 yr Ssh have nothing to do with openvpnserver Good point... I was thinking ssl, not ssh.
September 10, 201411 yr I would clear the directories and start again I think I am going to have to live with it for now. I was building a machine for my brother, and was using OpenVPN to manage it. I delivered it tonight and will just have to remember to be careful. I was hoping there was a quick fix, but next time I am there I will remove and reinstall and see what happens.
September 17, 201411 yr bkastner -- I am also encountering this issue. It is occuring on both my personal server and one I built for my parents. I also found it to be holding up the cache disk on dismount. When I run lsof /mnt/cache i get: openvpn 2380 nobody 4u REG 8,81 0 847312 /mnt/cache/appdata/openvpn_server/config_certs/ipp.txt Once I kill the ipp.txt process everything dismounts fine. lsof on all other disks comes back clean.
September 17, 201411 yr I didn't think to do the lsof test, but will have to try that when I connect to that server again. It's strange that it's a txt file that's causing the issue, however I am glad to hear it's not just me. Hopefully your extra details can help with someone posting a solution.
September 19, 201411 yr Author You Can easily disabled this function in the GUI, I have this feature set to no.
September 19, 201411 yr You Can easily disabled this function in the GUI, I have this feature set to no. Can you confirm what feature you are talking about? I don't have the server in close proximity, but next time I am at my brothers I would like to disable this, but don't want to have to hunt around if I can avoid it.
September 19, 201411 yr Peter will confirm but I think he is referring to ifconfig-pool-persist ipp.txt option
Archived
This topic is now archived and is closed to further replies.