Jump to content

[Support] binhex - SABnzbdVPN

binhex

By binhex
in Docker Containers

Recommended Posts

Recommended

Posted by binhex,

There has been an issue raised on GitHub related to tracker announce request IP leakage under certain circumstances, after careful review of iptables i have tightened up the rules to prevent this. A new image has now been rolled out for all vpn enabled docker images (25th Feb 2021) i produce with the fix in place, i would encourage everyone to update to the recently created 'latest' tagged image.   You can force the upgrade by toggling 'basic view' to 'advanced view' and then clicking on
Recommended by binhex
  • Thanks

1 reaction

Go to this post
  • Replies 1.6k
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

binhex
binhex

hi guys, spotted the issue regards dos2unix.sh and corrected it, image now  building, should be done in around an hour.. then pull and you should be back up and running.

binhex
binhex

there are ongoing issues with PIA DNS, you can try setting NAME_SERVERS to the following (removes PIA DNS):- 84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1  

binhex
binhex

ok guys, spotted the issue. it was a legacy bug that the additional logging picked up causing the exit of sabnzbd (even though it was running). sadly i cannot currently build a new image with the fix

Posted Images

betaman Enthusiast

betaman

Posted
Posted

I switched to NZBget a while ago due to obfuscation issues with SABnzbd. Now I'm running into issues with downloads failing to repair (seems to be a known issue with ParPar recovery files?). Anyway, seems like this docker is still being supported by @binhex so I assume the obfuscation issues from several years ago are gone? Just want to confirm before I go thru the effort of setting up this docker. Thanks.

Link to comment
  • 2 weeks later...
timbuckiii Noob

timbuckiii

Posted
Posted (edited)

Hello!

 

I recently updated to latest and am getting the following error, presumably to do with RSS feeds. Any suggestions on how to fix?
  

Error during scheduler execution: join() argument must be str, bytes, or os.PathLike object, not 'NoneType'
Traceback (most recent call last):
  File "/usr/lib/sabnzbd/sabnzbd/utils/kronos.py", line 293, in __call__
    self.execute()
  File "/usr/lib/sabnzbd/sabnzbd/utils/kronos.py", line 304, in execute
    self.action(*self.args, **self.kw)
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 461, in run
    self.run_feed(feed, download=True, ignoreFirst=True)
  File "/usr/lib/sabnzbd/sabnzbd/decorators.py", line 44, in call_func
    return func(*args, **kw)
           ^^^^^^^^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 398, in run_feed
    _HandleLink(
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 632, in _HandleLink
    sabnzbd.urlgrabber.add_url(
  File "/usr/lib/sabnzbd/sabnzbd/urlgrabber.py", line 408, in add_url
    future_nzo = NzbObject(
                 ^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 738, in __init__
    self.handle_duplicate_action()
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 2006, in handle_duplicate_action
    self.purge_data()
  File "/usr/lib/sabnzbd/sabnzbd/decorators.py", line 44, in call_func
    return func(*args, **kw)
           ^^^^^^^^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 1817, in purge_data
    remove_data(self.nzo_id, self.admin_path)
  File "/usr/lib/sabnzbd/sabnzbd/filesystem.py", line 1179, in remove_data
    path = os.path.join(path, _id)
           ^^^^^^^^^^^^^^^^^^^^^^^
  File "<frozen posixpath>", line 90, in join
  File "<frozen genericpath>", line 152, in _check_arg_types
TypeError: join() argument must be str, bytes, or os.PathLike object, not 'NoneType'

 

Edited by timbuckiii
fix formatting of code
Link to comment
binhex Mentor

binhex

Posted
  • Author
Posted
5 minutes ago, Mephistopheles said:

It seems the last update of the docker container has just killed it. I can't connect to the WebUI anymore. How can I troubleshoot that? 🙂 Or: What kind of Logs or configurations are needed to find out, what has killed it?

if its happened all of a sudden its nearly always vpn provider related, do this:- https://github.com/binhex/documentation/blob/master/docker/faq/help.md

Link to comment
betaman Enthusiast

betaman

Posted
Posted
On 12/28/2023 at 11:19 AM, betaman said:

Haha! I’ve only ever had an issue once with DMCA and it was torrent related. Home Box…

You jinxed me…well not really. I had disabled VPN during Troubleshooting and forgot to re-enable…🤦🏼‍♂️

Link to comment
timbuckiii Noob

timbuckiii

Posted
Posted
On 1/10/2024 at 1:30 PM, timbuckiii said:

Hello!

 

I recently updated to latest and am getting the following error, presumably to do with RSS feeds. Any suggestions on how to fix?
  

Error during scheduler execution: join() argument must be str, bytes, or os.PathLike object, not 'NoneType'
Traceback (most recent call last):
  File "/usr/lib/sabnzbd/sabnzbd/utils/kronos.py", line 293, in __call__
    self.execute()
  File "/usr/lib/sabnzbd/sabnzbd/utils/kronos.py", line 304, in execute
    self.action(*self.args, **self.kw)
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 461, in run
    self.run_feed(feed, download=True, ignoreFirst=True)
  File "/usr/lib/sabnzbd/sabnzbd/decorators.py", line 44, in call_func
    return func(*args, **kw)
           ^^^^^^^^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 398, in run_feed
    _HandleLink(
  File "/usr/lib/sabnzbd/sabnzbd/rss.py", line 632, in _HandleLink
    sabnzbd.urlgrabber.add_url(
  File "/usr/lib/sabnzbd/sabnzbd/urlgrabber.py", line 408, in add_url
    future_nzo = NzbObject(
                 ^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 738, in __init__
    self.handle_duplicate_action()
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 2006, in handle_duplicate_action
    self.purge_data()
  File "/usr/lib/sabnzbd/sabnzbd/decorators.py", line 44, in call_func
    return func(*args, **kw)
           ^^^^^^^^^^^^^^^^^
  File "/usr/lib/sabnzbd/sabnzbd/nzbstuff.py", line 1817, in purge_data
    remove_data(self.nzo_id, self.admin_path)
  File "/usr/lib/sabnzbd/sabnzbd/filesystem.py", line 1179, in remove_data
    path = os.path.join(path, _id)
           ^^^^^^^^^^^^^^^^^^^^^^^
  File "<frozen posixpath>", line 90, in join
  File "<frozen genericpath>", line 152, in _check_arg_types
TypeError: join() argument must be str, bytes, or os.PathLike object, not 'NoneType'

 

The current version of sabnzbd is bugged, so we'll have to wait for binhex to update the version used in their docker image in order for this issue to disappear. 

 

For now I've just pinned to the previous image.

Link to comment
Mephistopheles Rookie

Mephistopheles

Posted
Posted
37 minutes ago, binhex said:

if its happened all of a sudden its nearly always vpn provider related, do this:- https://github.com/binhex/documentation/blob/master/docker/faq/help.md

Uhm... I don't understand, the connection between the fail to connect to the local docker-container and the vpn-provider.

But, here is the log:  

Created by...
___.   .__       .__
\_ |__ |__| ____ |  |__   ____ ___  ___
 | __ \|  |/    \|  |  \_/ __ \\  \/  /
 | \_\ \  |   |  \   Y  \  ___/ >    <
 |___  /__|___|  /___|  /\___  >__/\_ \
     \/        \/     \/     \/      \/
   https://hub.docker.com/u/binhex/

2024-01-11 19:45:47.033150 [info] Host is running unRAID
2024-01-11 19:45:47.125290 [info] System information Linux 0c564fac1cfd 6.1.64-Unraid #1 SMP PREEMPT_DYNAMIC Wed Nov 29 12:48:16 PST 2023 x86_64 GNU/Linux
2024-01-11 19:45:47.215604 [info] PUID defined as '99'
2024-01-11 19:45:47.307258 [info] PGID defined as '100'
2024-01-11 19:45:47.419764 [info] UMASK defined as '000'
2024-01-11 19:45:47.499505 [info] Permissions already set for '/config'
2024-01-11 19:45:47.582146 [info] Deleting files in /tmp (non recursive)...
2024-01-11 19:45:47.682455 [info] VPN_ENABLED defined as 'yes'
2024-01-11 19:45:47.762250 [info] VPN_CLIENT defined as 'openvpn'
2024-01-11 19:45:47.843344 [info] VPN_PROV defined as 'custom'
2024-01-11 19:45:47.941712 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/jfk-006.default.ovpn
2024-01-11 19:45:48.093784 [info] VPN remote server(s) defined as 'jfk-006.vpn.privado.io,'
2024-01-11 19:45:48.164818 [info] VPN remote port(s) defined as '1194,'
2024-01-11 19:45:48.233888 [info] VPN remote protcol(s) defined as 'udp,'
2024-01-11 19:45:48.312596 [info] VPN_DEVICE_TYPE defined as 'tun0'
2024-01-11 19:45:48.392636 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2024-01-11 19:45:48.494509 [debug] DNS operational, we can resolve name 'jfk-006.vpn.privado.io' to address '146.70.115.81'
2024-01-11 19:45:48.587132 [debug] iptables default policies available, setting policy to drop...
2024-01-11 19:45:48.672862 [debug] ip6tables default policies available, setting policy to drop...
2024-01-11 19:45:48.763614 [debug] Docker interface defined as eth0
2024-01-11 19:45:48.867470 [info] LAN_NETWORK defined as '192.168.1.0/24'
2024-01-11 19:45:48.947075 [info] NAME_SERVERS defined as '84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1'
2024-01-11 19:45:49.026094 [info] VPN_USER defined as ''
2024-01-11 19:45:49.105541 [info] VPN_PASS defined as ''
2024-01-11 19:45:49.183352 [info] ENABLE_PRIVOXY defined as 'no'
2024-01-11 19:45:49.269856 [info] VPN_INPUT_PORTS not defined (via -e VPN_INPUT_PORTS), skipping allow for custom incoming ports
2024-01-11 19:45:49.349204 [info] VPN_OUTPUT_PORTS not defined (via -e VPN_OUTPUT_PORTS), skipping allow for custom outgoing ports
2024-01-11 19:45:49.434055 [info] Starting Supervisor...
2024-01-11 19:45:49,945 INFO Included extra file "/etc/supervisor/conf.d/sabnzbdvpn.conf" during parsing
2024-01-11 19:45:49,946 INFO Set uid to user 0 succeeded
2024-01-11 19:45:49,952 INFO supervisord started with pid 7
2024-01-11 19:45:50,958 INFO spawned: 'start-script' with pid 201
2024-01-11 19:45:50,963 INFO spawned: 'watchdog-script' with pid 202
2024-01-11 19:45:50,965 INFO reaped unknown pid 8 (exit status 0)
2024-01-11 19:45:50,975 DEBG 'start-script' stdout output:
[info] VPN is enabled, beginning configuration of VPN

2024-01-11 19:45:50,976 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2024-01-11 19:45:50,976 INFO success: watchdog-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2024-01-11 19:45:51,006 DEBG 'start-script' stdout output:
[warn] Password contains characters which could cause authentication issues, please consider changing this if possible

2024-01-11 19:45:51,130 DEBG 'start-script' stdout output:
[debug] Contents of ovpn file /config/openvpn/jfk-006.default.ovpn as follows...

2024-01-11 19:45:51,133 DEBG 'start-script' stdout output:
client
dev tun
proto udp
remote jfk-006.vpn.privado.io 1194
resolv-retry infinite
nobind
persist-key
persist-remote-ip

tls-client

#block-outside-dns
route 0.0.0.0 0.0.0.0 vpn_gateway
route-delay 3

# if you're using openvpn versions later than 2.5 uncomment the following:
# data-ciphers AES-256-CBC
# data-ciphers-fallback AES-256-CBC

# openvpn versions <= 2.5 use the following default settings:
auth SHA256
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA

remote-cert-tls server
auth-user-pass credentials.conf
verb 3

<ca>
-----BEGIN CERTIFICATE-----
MIIFKDCCAxCgAwIBAgIJAMtrmqZxIV/OMA0GCSqGSIb3DQEBDQUAMBIxEDAOBgNV
BAMMB1ByaXZhZG8wHhcNMjAwMTA4MjEyODQ1WhcNMzUwMTA5MjEyODQ1WjASMRAw
DgYDVQQDDAdQcml2YWRvMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
xPwOgiwNJzZTnKIXwAB0TSu/Lu2qt2U2I8obtQjwhi/7OrfmbmYykSdro70al2XP
hnwAGGdCxW6LDnp0UN/IOhD11mgBPo14f5CLkBQjSJ6VN5miPbvK746LsNZl9H8r
QGvDuPo4CG9BfPZMiDRGlsMxij/jztzgT1gmuxQ7WHfFRcNzBas1dHa9hV/d3TU6
/t47x4SE/ljdcCtJiu7Zn6ODKQoys3mB7Luz2ngqUJWvkqsg+E4+3eJ0M8Hlbn5T
PaRJBID7DAdYo6Vs6xGCYr981ThFcmoIQ10js10yANrrfGAzd03b3TnLAgko0uQM
HjliMZL6L8sWOPHxyxJI0us88SFh4UgcFyRHKHPKux7w24SxAlZUYoUcTHp9VjG5
XvDKYxzgV2RdM4ulBGbQRQ3y3/CyddsyQYMvA55Ets0LfPaBvDIcct70iXijGsdv
lX1du3ArGpG7Vaje/RU4nbbGT6HYRdt5YyZfof288ukMOSj20nVcmS+c/4tqsxSe
rRb1aq5LOi1IemSkTMeC5gCbexk+L1vl7NT/58sxjGmu5bXwnvev/lIItfi2AlIT
rfUSEv19iDMKkeshwn/+sFJBMWYyluP+yJ56yR+MWoXvLlSWphLDTqq19yx3BZn0
P1tgbXoR0g8PTdJFcz8z3RIb7myVLYulV1oGG/3rka0CAwEAAaOBgDB+MB0GA1Ud
DgQWBBTFtJkZCVDuDAD6k5bJzefjJdO3DTBCBgNVHSMEOzA5gBTFtJkZCVDuDAD6
k5bJzefjJdO3DaEWpBQwEjEQMA4GA1UEAwwHUHJpdmFkb4IJAMtrmqZxIV/OMAwG
A1UdEwQFMAMBAf8wCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBDQUAA4ICAQB7MUSX
MeBb9wlSv4sUaT1JHEwE26nlBw+TKmezfuPU5pBlY0LYr6qQZY95DHqsRJ7ByUzG
UrGo17dNGXlcuNc6TAaQQEDRPo6y+LVh2TWMk15TUMI+MkqryJtCret7xGvDigKY
MJgBy58HN3RAVr1B7cL9youwzLgc2Y/NcFKvnQJKeiIYAJ7g0CcnJiQvgZTS7xdw
kEBXfsngmUCIG320DLPEL+Ze0HiUrxwWljMRya6i40AeH3Zu2i532xX1wV5+cjA4
RJWIKg6ri/Q54iFGtZrA9/nc6y9uoQHkmz8cGyVUmJxFzMrrIICVqUtVRxLhkTMe
4UzwRWTBeGgtW4tS0yq1QonAKfOyjgRw/CeY55D2UGvnAFZdTadtYXS4Alu2P9zd
woEk3fzHiVmDjqfJVr5wz9383aABUFrPI3nz6ed/Z6LZflKh1k+DUDEp8NxU4klU
ULWsSOKoa5zGX51G8cdHxwQLImXvtGuN5eSR8jCTgxFZhdps/xes4KkyfIz9FMYG
748M+uOTgKITf4zdJ9BAyiQaOufVQZ8WjhWzWk9YHec9VqPkzpWNGkVjiRI5ewuX
wZzZ164tMv2hikBXSuUCnFz37/ZNwGlDi0oBdDszCk2GxccdFHHaCSmpjU5MrdJ+
5IhtTKGeTx+US2hTIVHQFIO99DmacxSYvLNcSQ==
-----END CERTIFICATE-----
</ca>

2024-01-11 19:45:51,154 DEBG 'start-script' stdout output:
[debug] Environment variables defined as follows
ADDITIONAL_PORTS=
APPLICATION=sabnzbd
BASH=/bin/bash
BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
BASH_ALIASES=()
BASH_ARGC=()
BASH_ARGV=()
BASH_CMDS=()
BASH_LINENO=([0]="0")
BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.

2024-01-11 19:45:51,155 DEBG 'start-script' stdout output:
BASH_SOURCE=([0]="/root/start.sh")
BASH_VERSINFO=([0]="5" [1]="2" [2]="21" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
BASH_VERSION='5.2.21(1)-release'
DEBUG=true
DIRSTACK=()
ENABLE_PRIVOXY=no
EUID=0
GROUPS=()
HOME=/home/nobody
HOSTNAME=0c564fac1cfd
HOSTTYPE=x86_64
HOST_CONTAINERNAME=binhex-sabnzbdvpn
HOST_HOSTNAME=AngryNerds
HOST_OS=Unraid
IFS=$' \t\n'
LANG=en_GB.UTF-8
LAN_NETWORK=192.168.1.0/24
MACHTYPE=x86_64-pc-linux-gnu
NAME_SERVERS=84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1
OPTERR=1
OPTIND=1
OSTYPE=linux-gnu
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PGID=100
PIPESTATUS=([0]="0")
PPID=7
PS4='+ '
PUID=99
PWD=/
SHELL=/bin/bash
SHELLOPTS=braceexpand:hashall:interactive-comments
SHLVL=1
STRICT_PORT_FORWARD=no
SUPERVISOR_ENABLED=1
SUPERVISOR_GROUP_NAME=start-script
SUPERVISOR_PROCESS_NAME=start-script
TCP_PORT_8080=8080
TCP_PORT_8090=8090
TCP_PORT_8118=8118
TERM=xterm
TZ=Europe/Berlin
UID=0
UMASK=000
VPN_CLIENT=openvpn
VPN_CONFIG=/config/openvpn/jfk-006.default.ovpn
VPN_DEVICE_TYPE=tun0
VPN_ENABLED=yes
VPN_INPUT_PORTS=
VPN_OPTIONS=
VPN_OUTPUT_PORTS=
VPN_PASS=''
VPN_PROV=custom
VPN_REMOTE_IP_LIST=146.70.115.81
VPN_REMOTE_PORT=1194,
VPN_REMOTE_PROTOCOL=udp,
VPN_REMOTE_SERVER=jfk-006.vpn.privado.io,
VPN_USER=
_='[debug] Environment variables defined as follows'
password_char_check=$'#\n&'
username_char_check=
vpn_ping=
[debug] Directory listing of files in /config/openvpn/ as follows

2024-01-11 19:45:51,165 DEBG 'start-script' stdout output:
total 8
drwxrwxr-x 1 nobody users   72 Jan 11 19:45 .
drwxrwxr-x 1 nobody users  164 Jan 11 19:45 ..
-rwxrwxr-x 1 nobody users   24 Jan 11 19:45 credentials.conf
-rwxrwxr-x 1 nobody users 2463 Jan 11 19:45 jfk-006.default.ovpn

2024-01-11 19:45:51,167 DEBG 'start-script' stdout output:
[debug] Contents of OpenVPN config file '/config/openvpn/jfk-006.default.ovpn' as follows...

2024-01-11 19:45:51,170 DEBG 'start-script' stdout output:
client
dev tun
proto udp
remote jfk-006.vpn.privado.io 1194
resolv-retry infinite
nobind
persist-key
persist-remote-ip

tls-client

#block-outside-dns
route 0.0.0.0 0.0.0.0 vpn_gateway
route-delay 3

# if you're using openvpn versions later than 2.5 uncomment the following:
# data-ciphers AES-256-CBC
# data-ciphers-fallback AES-256-CBC

# openvpn versions <= 2.5 use the following default settings:
auth SHA256
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA

remote-cert-tls server
auth-user-pass credentials.conf
verb 3

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

2024-01-11 19:45:51,182 DEBG 'start-script' stdout output:
[info] Adding 84.200.69.80 to /etc/resolv.conf

2024-01-11 19:45:51,192 DEBG 'start-script' stdout output:
[info] Adding 37.235.1.174 to /etc/resolv.conf

2024-01-11 19:45:51,202 DEBG 'start-script' stdout output:
[info] Adding 1.1.1.1 to /etc/resolv.conf

2024-01-11 19:45:51,214 DEBG 'start-script' stdout output:
[info] Adding 37.235.1.177 to /etc/resolv.conf

2024-01-11 19:45:51,223 DEBG 'start-script' stdout output:
[info] Adding 84.200.70.40 to /etc/resolv.conf

2024-01-11 19:45:51,233 DEBG 'start-script' stdout output:
[info] Adding 1.0.0.1 to /etc/resolv.conf

2024-01-11 19:45:51,268 DEBG 'start-script' stdout output:
[debug] Show name servers defined for container

2024-01-11 19:45:51,270 DEBG 'start-script' stdout output:
nameserver 84.200.69.80
nameserver 37.235.1.174
nameserver 1.1.1.1
nameserver 37.235.1.177
nameserver 84.200.70.40
nameserver 1.0.0.1

2024-01-11 19:45:51,271 DEBG 'start-script' stdout output:
[debug] Show contents of hosts file

2024-01-11 19:45:51,274 DEBG 'start-script' stdout output:
127.0.0.1	localhost
::1	localhost ip6-localhost ip6-loopback
fe00::0	ip6-localnet
ff00::0	ip6-mcastprefix
ff02::1	ip6-allnodes
ff02::2	ip6-allrouters
192.168.178.30	0c564fac1cfd
146.70.115.81	jfk-006.vpn.privado.io

2024-01-11 19:45:51,295 DEBG 'start-script' stdout output:
[debug] Docker interface defined as eth0

2024-01-11 19:45:51,308 DEBG 'start-script' stdout output:
[info] Default route for container is 192.168.178.1

2024-01-11 19:45:51,322 DEBG 'start-script' stdout output:
[debug] Docker IP defined as 192.168.178.30

2024-01-11 19:45:51,332 DEBG 'start-script' stdout output:
[debug] Docker netmask defined as 255.255.255.0

2024-01-11 19:45:51,900 DEBG 'start-script' stdout output:
[info] Docker network defined as    192.168.178.0/24

2024-01-11 19:45:51,909 DEBG 'start-script' stdout output:
[info] Adding 192.168.1.0/24 as route via docker eth0

2024-01-11 19:45:51,914 DEBG 'start-script' stdout output:
[info] ip route defined as follows...
--------------------

2024-01-11 19:45:51,917 DEBG 'start-script' stdout output:
default via 192.168.178.1 dev eth0 
10.253.0.0/24 via 192.168.178.10 dev eth0 
192.168.1.0/24 via 192.168.178.1 dev eth0 
192.168.178.0/24 dev eth0 proto kernel scope link src 192.168.178.30 
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 

2024-01-11 19:45:51,918 DEBG 'start-script' stdout output:
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 
local 192.168.178.30 dev eth0 table local proto kernel scope host src 192.168.178.30 
broadcast 192.168.178.255 dev eth0 table local proto kernel scope link src 192.168.178.30 
--------------------
[debug] Modules currently loaded for kernel

2024-01-11 19:45:51,928 DEBG 'start-script' stdout output:
Module                  Size  Used by
xt_mark                16384  0
cmac                   16384  0
cifs                  827392  0
asn1_decoder           16384  1 cifs
cifs_arc4              16384  1 cifs
cifs_md4               16384  1 cifs
oid_registry           16384  1 cifs
dns_resolver           16384  1 cifs
veth                   32768  0
xt_CHECKSUM            16384  1
ipt_REJECT             16384  2
nf_reject_ipv4         16384  1 ipt_REJECT
xt_nat                 16384  20
xt_tcpudp              16384  29
ip6table_mangle        16384  1
ip6table_nat           16384  1
iptable_mangle         16384  1
vhost_net              28672  0
tun                    53248  1 vhost_net
vhost                  40960  1 vhost_net
vhost_iotlb            16384  1 vhost
tap                    24576  1 vhost_net
macvlan                28672  0
xt_conntrack           16384  2
xt_MASQUERADE          16384  4
nf_conntrack_netlink    49152  0
nfnetlink              16384  2 nf_conntrack_netlink
xfrm_user              45056  1
xfrm_algo              16384  1 xfrm_user
iptable_nat            16384  6
nf_nat                 49152  4 ip6table_nat,xt_nat,iptable_nat,xt_MASQUERADE
nf_conntrack          143360  5 xt_conntrack,nf_nat,xt_nat,nf_conntrack_netlink,xt_MASQUERADE
nf_defrag_ipv6         16384  1 nf_conntrack
nf_defrag_ipv4         16384  1 nf_conntrack
xt_addrtype            16384  2
br_netfilter           32768  0
ccp                    32768  0
dm_crypt               45056  3
dm_mod                131072  7 dm_crypt
md_mod                 53248  3
zfs                  3530752  0
zunicode              327680  1 zfs
zzstd                 552960  1 zfs
zlua                  151552  1 zfs
zavl                   16384  1 zfs
icp                   286720  1 zfs
zcommon                98304  2 zfs,icp
znvpair                94208  2 zfs,zcommon
spl                   102400  6 zfs,icp,zzstd,znvpair,zcommon,zavl
tcp_diag               16384  0
inet_diag              20480  1 tcp_diag
nct6775                24576  0
nct6775_core           65536  1 nct6775
hwmon_vid              16384  1 nct6775
k10temp                16384  0
ip6table_filter        16384  1
ip6_tables             28672  3 ip6table_filter,ip6table_nat,ip6table_mangle
iptable_filter         16384  2
ip_tables              28672  3 iptable_filter,iptable_nat,iptable_mangle
x_tables               45056  16 ip6table_filter,xt_conntrack,iptable_filter,ip6table_nat,xt_tcpudp,xt_addrtype,xt_CHECKSUM,xt_nat,ip6_tables,ipt_REJECT,ip_tables,iptable_nat,ip6table_mangle,xt_MASQUERADE,iptable_mangle,xt_mark
bridge                262144  1 br_netfilter
stp                    16384  1 bridge
llc                    16384  2 bridge,stp
bonding               151552  0
tls                   122880  1 bonding
intel_rapl_msr         16384  0
intel_rapl_common      24576  1 intel_rapl_msr
x86_pkg_temp_thermal    16384  0
intel_powerclamp       16384  0
coretemp               16384  0
kvm_intel             282624  0
i915                 2527232  0
kvm                   983040  1 kvm_intel
iosf_mbi               20480  2 i915,intel_rapl_common
drm_buddy              16384  1 i915
i2c_algo_bit           16384  1 i915
ttm                    77824  1 i915
drm_display_helper    135168  1 i915
drm_kms_helper        167936  2 drm_display_helper,i915
crct10dif_pclmul       16384  1
crc32_pclmul           16384  0
crc32c_intel           24576  6
ghash_clmulni_intel    16384  0
sha512_ssse3           45056  0
sha256_ssse3           32768  0
sha1_ssse3             28672  0
drm                   495616  6 drm_kms_helper,drm_display_helper,drm_buddy,i915,ttm
aesni_intel           393216  6
crypto_simd            16384  1 aesni_intel
mpt3sas               282624  5
cryptd                 24576  5 crypto_simd,ghash_clmulni_intel
i2c_i801               24576  0
intel_gtt              24576  1 i915
rapl                   16384  0
raid_class             16384  1 mpt3sas
mei_hdcp               16384  0
mei_pxp                16384  0
intel_cstate           20480  0
i2c_smbus              16384  1 i2c_i801
r8168  
2024-01-11 19:45:51,930 DEBG 'start-script' stdout output:
               385024  0
scsi_transport_sas     40960  1 mpt3sas
agpgart                40960  2 intel_gtt,ttm
ahci                   45056  0
mei_me                 36864  2
i2c_core               86016  7 drm_kms_helper,i2c_algo_bit,drm_display_helper,i2c_smbus,i2c_i801,i915,drm
libahci                45056  1 ahci
mei                    98304  5 mei_hdcp,mei_pxp,mei_me
syscopyarea            16384  1 drm_kms_helper
sysfillrect            16384  1 drm_kms_helper
sysimgblt              16384  1 drm_kms_helper
fb_sys_fops            16384  1 drm_kms_helper
fan                    16384  0
thermal                20480  0
video                  61440  1 i915
button                 20480  0
wmi                    28672  1 video
backlight              20480  4 video,drm_display_helper,i915,drm
intel_pmc_core         49152  0
unix                   49152  893

2024-01-11 19:45:51,942 DEBG 'start-script' stdout output:
iptable_mangle         16384  1
ip_tables              28672  3 iptable_filter,iptable_nat,iptable_mangle
x_tables               45056  16 ip6table_filter,xt_conntrack,iptable_filter,ip6table_nat,xt_tcpudp,xt_addrtype,xt_CHECKSUM,xt_nat,ip6_tables,ipt_REJECT,ip_tables,iptable_nat,ip6table_mangle,xt_MASQUERADE,iptable_mangle,xt_mark

2024-01-11 19:45:51,943 DEBG 'start-script' stdout output:
[info] iptable_mangle support detected, adding fwmark for tables

2024-01-11 19:45:52,066 DEBG 'start-script' stdout output:
[info] iptables defined as follows...
--------------------

2024-01-11 19:45:52,070 DEBG 'start-script' stdout output:
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP
-A INPUT -s 146.70.115.81/32 -i eth0 -j ACCEPT
-A INPUT -s 192.168.178.0/24 -d 192.168.178.0/24 -j ACCEPT
-A INPUT -s 146.70.115.81/32 -i eth0 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --dport 8080 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8090 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --dport 8090 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i tun0 -j ACCEPT
-A OUTPUT -d 146.70.115.81/32 -o eth0 -j ACCEPT
-A OUTPUT -s 192.168.178.0/24 -d 192.168.178.0/24 -j ACCEPT
-A OUTPUT -d 146.70.115.81/32 -o eth0 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --sport 8080 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8090 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --sport 8090 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT

2024-01-11 19:45:52,073 DEBG 'start-script' stdout output:
--------------------

2024-01-11 19:45:52,074 DEBG 'start-script' stdout output:
[debug] VPN remote configuration options as follows...
[debug] VPN remote server is defined as 'jfk-006.vpn.privado.io'
[debug] VPN remote port is defined as '1194'
[debug] VPN remote protocol is defined as 'udp'

2024-01-11 19:45:52,075 DEBG 'start-script' stdout output:
[debug] VPN remote ip is defined as '146.70.115.81'

2024-01-11 19:45:52,075 DEBG 'start-script' stdout output:
[debug] OpenVPN command line:- /usr/bin/openvpn --reneg-sec 0 --mute-replay-warnings --auth-nocache --setenv VPN_PROV 'custom' --setenv VPN_CLIENT 'openvpn' --setenv DEBUG 'true' --setenv VPN_DEVICE_TYPE 'tun0' --setenv VPN_ENABLED 'yes' --setenv VPN_REMOTE_SERVER 'jfk-006.vpn.privado.io' --setenv APPLICATION 'sabnzbd' --script-security 2 --writepid /root/openvpn.pid --remap-usr1 SIGHUP --log-append /dev/stdout --pull-filter ignore 'up' --pull-filter ignore 'down' --pull-filter ignore 'route-ipv6' --pull-filter ignore 'ifconfig-ipv6' --pull-filter ignore 'tun-ipv6' --pull-filter ignore 'dhcp-option DNS6' --pull-filter ignore 'persist-tun' --pull-filter ignore 'reneg-sec' --up /root/openvpnup.sh --up-delay --up-restart --keepalive 10 60 --auth-user-pass credentials.conf --cd /config/openvpn --config '/config/openvpn/jfk-006.default.ovpn' --remote 146.70.115.81 1194 udp --remote-random
[info] Starting OpenVPN (non daemonised)...

2024-01-11 19:45:52,097 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:45:52,101 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:45:52,102 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 WARNING: file 'credentials.conf' is group or others accessible

2024-01-11 19:45:52,103 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:45:52 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:45:52 DCO version: N/A

2024-01-11 19:45:52,104 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:45:52,109 DEBG 'start-script' stdout output:
2024-01-11 19:45:52 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:45:52 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:45:52 UDPv4 link local: (not bound)
2024-01-11 19:45:52 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:46:52,535 DEBG 'start-script' stdout output:
2024-01-11 19:46:52 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:46:52,536 DEBG 'start-script' stdout output:
2024-01-11 19:46:52 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:46:52,537 DEBG 'start-script' stdout output:
2024-01-11 19:46:52 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:46:52,542 DEBG 'start-script' stdout output:
2024-01-11 19:46:52 Note: Kernel support for ovpn-dco missing, disabling data channel offload.
2024-01-11 19:46:52 WARNING: file 'credentials.conf' is group or others accessible

2024-01-11 19:46:52,543 DEBG 'start-script' stdout output:
2024-01-11 19:46:52 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:46:52 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:46:52 DCO version: N/A
2024-01-11 19:46:52 Restart pause, 1 second(s)

2024-01-11 19:46:53,543 DEBG 'start-script' stdout output:
2024-01-11 19:46:53 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:46:53,545 DEBG 'start-script' stdout output:
2024-01-11 19:46:53 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:46:53 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:46:53 UDPv4 link local: (not bound)
2024-01-11 19:46:53 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:47:54,102 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:47:54,104 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:47:54,106 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:47:54,111 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:47:54,111 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 WARNING: file 'credentials.conf' is group or others accessible
2024-01-11 19:47:54 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023

2024-01-11 19:47:54,112 DEBG 'start-script' stdout output:
2024-01-11 19:47:54 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:47:54 DCO version: N/A
2024-01-11 19:47:54 Restart pause, 1 second(s)

2024-01-11 19:47:55,112 DEBG 'start-script' stdout output:
2024-01-11 19:47:55 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:47:55,114 DEBG 'start-script' stdout output:
2024-01-11 19:47:55 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:47:55 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:47:55 UDPv4 link local: (not bound)
2024-01-11 19:47:55 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:48:55,692 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:48:55,694 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:48:55,695 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:48:55,700 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:48:55,701 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 WARNING: file 'credentials.conf' is group or others accessible
2024-01-11 19:48:55 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:48:55 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:48:55 DCO version: N/A

2024-01-11 19:48:55,702 DEBG 'start-script' stdout output:
2024-01-11 19:48:55 Restart pause, 1 second(s)

2024-01-11 19:48:56,701 DEBG 'start-script' stdout output:
2024-01-11 19:48:56 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:48:56,705 DEBG 'start-script' stdout output:
2024-01-11 19:48:56 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:48:56 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:48:56 UDPv4 link local: (not bound)
2024-01-11 19:48:56 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:49:56,135 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:49:56,136 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:49:56,138 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:49:56,142 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:49:56,143 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 WARNING: file 'credentials.conf' is group or others accessible
2024-01-11 19:49:56 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:49:56 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:49:56 DCO version: N/A

2024-01-11 19:49:56,144 DEBG 'start-script' stdout output:
2024-01-11 19:49:56 Restart pause, 1 second(s)

2024-01-11 19:49:57,144 DEBG 'start-script' stdout output:
2024-01-11 19:49:57 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:49:57,146 DEBG 'start-script' stdout output:
2024-01-11 19:49:57 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:49:57 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:49:57 UDPv4 link local: (not bound)
2024-01-11 19:49:57 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:50:58,041 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:50:58,043 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:50:58,045 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:50:58,049 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:50:58,050 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 WARNING: file 'credentials.conf' is group or others accessible
2024-01-11 19:50:58 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:50:58 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:50:58 DCO version: N/A

2024-01-11 19:50:58,051 DEBG 'start-script' stdout output:
2024-01-11 19:50:58 Restart pause, 1 second(s)

2024-01-11 19:50:59,051 DEBG 'start-script' stdout output:
2024-01-11 19:50:59 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:50:59,053 DEBG 'start-script' stdout output:
2024-01-11 19:50:59 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:50:59 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:50:59 UDPv4 link local: (not bound)
2024-01-11 19:50:59 UDPv4 link remote: [AF_INET]146.70.115.81:1194

2024-01-11 19:51:59,708 DEBG 'start-script' stdout output:
2024-01-11 19:51:59 [UNDEF] Inactivity timeout (--ping-restart), restarting

2024-01-11 19:51:59,709 DEBG 'start-script' stdout output:
2024-01-11 19:51:59 SIGHUP[soft,ping-restart] received, process restarting

2024-01-11 19:51:59,710 DEBG 'start-script' stdout output:
2024-01-11 19:51:59 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

2024-01-11 19:51:59,716 DEBG 'start-script' stdout output:
2024-01-11 19:51:59 Note: Kernel support for ovpn-dco missing, disabling data channel offload.

2024-01-11 19:51:59,717 DEBG 'start-script' stdout output:
2024-01-11 19:51:59 WARNING: file 'credentials.conf' is group or others accessible
2024-01-11 19:51:59 OpenVPN 2.6.8 [git:makepkg/3b0d9489cc423da3+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Nov 17 2023
2024-01-11 19:51:59 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-01-11 19:51:59 DCO version: N/A
2024-01-11 19:51:59 Restart pause, 1 second(s)

2024-01-11 19:52:00,716 DEBG 'start-script' stdout output:
2024-01-11 19:52:00 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2024-01-11 19:52:00,719 DEBG 'start-script' stdout output:
2024-01-11 19:52:00 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.115.81:1194
2024-01-11 19:52:00 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-01-11 19:52:00 UDPv4 link local: (not bound)
2024-01-11 19:52:00 UDPv4 link remote: [AF_INET]146.70.115.81:1194

 

Link to comment
binhex Mentor

binhex

Posted
  • Author
Posted
56 minutes ago, Mephistopheles said:

I don't understand, the connection between the fail to connect to the local docker-container and the vpn-provider.

Because if the vpn fails to come up the application is not started and thus you cannot access the web ui, its a safety feature to prevent ip leakage.

 

This is your issue, from your log:- [UNDEF] Inactivity timeout (--ping-restart), restarting

 

see Q17:- https://github.com/binhex/documentation/blob/master/docker/faq/vpn.md 

  • Thanks 1
Link to comment
binhex Mentor

binhex

Posted
  • Author
Posted
1 hour ago, betaman said:

You jinxed me…well not really. I had disabled VPN during Troubleshooting and forgot to re-enable

So you got a DMCA notice from a usenet download?, that is highly unlikely as most if not all usenet providers use TLS encryption and therefore any downloads will not be visible to your ISP either with the VPN turned or not.

 

The VPN is purely there to prevent your usenet provider from being able to identify your IP and therefore potentially (highly unlikely) inform your ISP or copyrights holders of your activities.

Link to comment
betaman Enthusiast

betaman

Posted
Posted
1 minute ago, binhex said:

So you got a DMCA notice from a usenet download?, that is highly unlikely as most if not all usenet providers use TLS encryption and therefore any downloads will not be visible to your ISP either with the VPN turned or not.

 

The VPN is purely there to prevent your usenet provider from being able to identify your IP and therefore potentially (highly unlikely) inform your ISP or copyrights holders of your activities.

Sorry, should’ve reminded you about our exchange. It was related to switching from Deluge to Qbittorrent. I only use torrents when it’s an older tv show not readily available via nzb.

Link to comment
binhex Mentor

binhex

Posted
  • Author
Posted
2 minutes ago, betaman said:

Sorry, should’ve reminded you about our exchange. It was related to switching from Deluge to Qbittorrent. I only use torrents when it’s an older tv show not readily available via nzb.

OK fair enough, i just assumed you were talking about usenet as we are in the support thread for SABnzbdVPN 🙂

Link to comment
Mephistopheles Rookie

Mephistopheles

Posted
Posted
45 minutes ago, binhex said:

Because if the vpn fails to come up the application is not started and thus you cannot access the web ui, its a safety feature to prevent ip leakage.

 

This is your issue, from your log:- [UNDEF] Inactivity timeout (--ping-restart), restarting

 

see Q17:- https://github.com/binhex/documentation/blob/master/docker/faq/vpn.md 

Ha! Great! I exchanged the configuration file to another server and tadaaa - works again. 

And again I learned somethin new today (and got a lot of documentation to read). Thanks! :) 

I assume, it will kill itself too when the vpn connection breaks, to prevent ip leakage? So if I look at the WebUI and find a connection error, it's not a bug it's a safety feature. 😁  

Link to comment
K1LLA_KING_KING Rookie

K1LLA_KING_KING

Posted
Posted (edited)

Sab suddenly has problems:

1. Cannot open GUI in local IP:8080 but I can open GUI with Tailscale IP
2. Sonarr & Radarr says: Download Client is unavailable  

all was working a couple days ago. I have made no changes.
 

Have this error in logs: Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:7: block-outside-dns (2.6.8)

On start up have this:
image.thumb.png.4e34462a5041e23738427b89b7a53a45.png

and this later:
image.thumb.png.638f6b19cc74a21fc93df8edd30ec8d8.png

Using surfshark UDP VPN

All was working fine. Although this did happen before. And a total reinstall solved it. I wanted to avoid that a second time. I wonder if the VPN could be responsible? 

Testing with VPN set to 'no' gives me access to local IP GUI and no errors in log. But Sonarr & Radarr says: Download Client is unavailable still

Im also getting this:
2024-01-14 16:44:21 UDPv4 link local: (not bound)
2024-01-14 16:44:21 UDPv4 link remote: [AF_INET]172.64.151.73:XXXX

(this is my tailscale which works)

Now reinstalling again I:
image.thumb.png.268748ca9759d0800156d08c2a23e588.png

How to troubleshoot this?

 

Edited by K1LLA_KING_KING
Link to comment
betaman Enthusiast

betaman

Posted
Posted (edited)

Anyone else using PIA with this docker? My speeds are severly limited when VPN is enabled. Goes from 100 MB/s to about 18 MB/s if the VPN is enabled. I'm currently using Switzerland server in my ovpn config. I don't have this issue with NZBget (other issues with rar and obfuscation is why I abandoned it).

 

@binhex I know you said TLS is active with newsreaders but I'm just wondering if there's another workaround to get my speeds up without disabling?

Edited by betaman
Link to comment
ConnerVT Enthusiast

ConnerVT

Posted
Posted
On 10/31/2023 at 3:37 PM, ConnerVT said:

I recently upgraded my ISP to 1G symmetrical fiber.  Like a little kid waiting for Christmas, I could not wait to try out my new blazing speed.  Spent the last week making the last configuration changes to the home network, and all is working as I wish - Unraid server speed tests all in the 1000/1000 Mb/s range, be it from docker or VM.  Same for my daily driver desktop.

 

But noticed I really didn't see a speed increase from this SABnzbdVPN docker.  VPN provider is PIA.  Test from the app itself reports ~19 MB/S (152 Mbps) and downloads track about the same speed.  Speed tests, via VPN to the same server, are ~500 Mbps from my desktop and ~400 Mbps from the VM (Win11) on the server.

 

I was looking through your VPN Docker FAQ and tried what you suggested in Q6.  Either I don't follow directions well, or maybe the info in the FAQ is outdated?  I added the following to the .ovpn file (replacing the existing cipher and auth entries):

  

cipher aes-128-gcm 
auth sh**A256 
ncp-disable

(note: It doesn't format into separate lines in the FAQ)

 

The docker started, but did not see any change in speed.  But did note this in my log, regarding cipher being deprecated.

  

2023-10-31 11:20:53 DEPRECATED OPTION: --cipher set to 'aes-128-gcm' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.

 

Curious if I did something wrong here, and any other suggestions you may have.  It would be great to get some more speed out of SABnzbd.

 

I had the same issue, going back to Halloween.  I finally just turned off VPN, which wasn't my desired outcome, but it crippled my download speed otherwise.

  • Thanks 1
Link to comment
betaman Enthusiast

betaman

Posted
Posted
26 minutes ago, Slin said:

Can someone help me understand the paths I need to enter to get SabNZB working with Radarr, Sonarr and Plex

I have created a share called media, within that, two folders Films and TV.

I want films ans Tv series automaticaly placed in those folders when the have been downloaded.

 

You should use categories in both your *arr dockers and have the download clients setup with category paths to match the docker path. Setup your "downloads" folder the same for both. If you use binhex dockers then make them the /data container path with root path to where you want them to go. Do this for all dockers (Plex is really separate and all of the metadata work can be done with the files in their final resting location).

 

If /media is where you store your "completed" files then I would create a separate directory for "in process" downloads. I use /data/incomplete for in process, /data for completed and then I have /data/tv and /data/movies setup for the categories. You'll need to remote path map the category directories in the *arr download clients settings page as well. Make sure all of your download clients are setup with the same categories (e.g. I have both tv and movies categories setup in both qBittorrent and SABnzbd. Radarr monitors /data/movies and Sonarr /data/tv.

 

Finally, I would consider a cache drive for all the in process work and keep the heavy lifting out of the array (i.e. last process is to move the completed download from your category directory on the cache drive to the /media location in the array).

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...