Tunnelblick can connect but the public IP is not changed.

306 views
Skip to first unread message

msa...@gmail.com

unread,
Aug 9, 2017, 6:09:00 AM8/9/17
to tunnelblick-discuss
I enabled VPN Service from my Netgear router and followed the guide from https://kb.netgear.com/25389/Enabling-VPN-service-on-a-Nighthawk-router-using-a-MAC-OS-computer
However,  even Tunnelblick can connect, the static IP still shows the same.

I read to add push "redirect-gateway def1" to the client.config file but I still cannot make it work.
I followed the before post and got the following log. Please help thanks!!



*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.1b (build 4813); prior version 3.7.2beta03 (build 4840); Admin user
git commit ea4b9e30939b4dfd3b69a71f62e91625fa8dd97f


Configuration myvpn

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/myvpn.tblk:

client
dev tap
proto udp
remote iamme.no-ip.org 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
push "redirect-gateway def1"
verb 5


================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>
   65    1 0xffffff7f80d83000 0x3b000    0x3b000    com.seagate.driver.PowSecDriverCore (5.2.7) 7145229E-88B7-259B-0054-63A19629690E <64 63 61 42 16 5 4 3>
   96    0 0xffffff7f80dc6000 0x11000    0x11000    com.seagate.driver.PowSecLeafDriver_10_5 (5.2.7) 221C918E-8AE8-C995-2739-3B5C025ABA14 <65 63 61 5 4 3>
  141    0 0xffffff7f80a22000 0x34000    0x34000    com.paragon-software.filesystems.ntfs (288.2.14) 45BD8A05-DF87-3335-89C6-41776D72ABD2 <7 5 4 1>

================================================================================

There are no unusual files in myvpn.tblk

================================================================================

Configuration preferences:

useDNS = 1
-routeAllTrafficThroughVpn = 1
-runMtuTest = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:


================================================================================

Program preferences:

launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
    "3.7.1b (build 4813)",
    "3.7.2beta03 (build 4840)",
    "3.7.1b (build 4813)"
)
lastLaunchTime = 523941915.378888
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame SettingsSheetWindow = 1332 90 829 524 0 0 2560 1418 
NSWindow Frame ConnectingWindow = 1085 924 389 187 0 0 2560 1418 
detailsWindowFrameVersion = 4813
detailsWindowFrame = {{1376, 541}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = myvpn
AdvancedWindowTabIdentifier = whileConnected
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2017-08-09 03:25:15 +0000
SULastProfileSubmissionDate = 2017-08-08 03:50:15 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.1b (build 4813); prior version 3.7.2beta03 (build 4840)
2017-08-08 22:30:52 *Tunnelblick: Attempting connection with myvpn; Set nameserver = 769; monitoring connection
2017-08-08 22:30:52 *Tunnelblick: openvpnstart start myvpn.tblk 1337 769 0 3 0 1067890 -ptADGNWradsgnw 2.3.17-openssl-1.0.2k
2017-08-08 22:30:52 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
     
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.17-openssl-1.0.2k/openvpn
          --daemon
          --log
          /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Smyvpn.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1067890.1337.openvpn.log
          --cd
          /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources
          --verb
          3
          --config
          /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/config.ovpn
          --verb
          3
          --cd
          /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources
          --management
          127.0.0.1
          1337
          --mtu-test
          --management-query-passwords
          --management-hold
          --redirect-gateway
          def1
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
          --route-pre-down
          /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

2017-08-08 22:30:52 *Tunnelblick: Established communication with OpenVPN
2017-08-08 22:30:52 OpenVPN 2.3.17 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jun 21 2017
2017-08-08 22:30:52 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
2017-08-08 22:30:52 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2017-08-08 22:30:52 Need hold release from management interface, waiting...
2017-08-08 22:30:52 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2017-08-08 22:30:52 MANAGEMENT: CMD 'pid'
2017-08-08 22:30:52 MANAGEMENT: CMD 'state on'
2017-08-08 22:30:52 MANAGEMENT: CMD 'state'
2017-08-08 22:30:52 MANAGEMENT: CMD 'bytecount 1'
2017-08-08 22:30:52 MANAGEMENT: CMD 'hold release'
2017-08-08 22:30:52 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2017-08-08 22:30:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-08-08 22:30:52 Socket Buffers: R=[196724->196724] S=[9216->9216]
2017-08-08 22:30:52 MANAGEMENT: >STATE:1502249452,RESOLVE,,,
2017-08-08 22:30:52 UDPv4 link local: [undef]
2017-08-08 22:30:52 UDPv4 link remote: [AF_INET]67.173.165.19:12974
2017-08-08 22:30:52 MANAGEMENT: >STATE:1502249452,WAIT,,,
2017-08-08 22:30:52 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:30:52 *Tunnelblick: openvpnstart starting OpenVPN
2017-08-08 22:30:54 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:30:54 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:30:58 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:06 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:22 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:22 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:52 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2017-08-08 22:31:52 TLS Error: TLS handshake failed
2017-08-08 22:31:52 SIGUSR1[soft,tls-error] received, process restarting
2017-08-08 22:31:52 MANAGEMENT: >STATE:1502249512,RECONNECTING,tls-error,,
2017-08-08 22:31:52 MANAGEMENT: CMD 'hold release'
2017-08-08 22:31:52 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2017-08-08 22:31:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-08-08 22:31:52 Socket Buffers: R=[196724->196724] S=[9216->9216]
2017-08-08 22:31:52 MANAGEMENT: >STATE:1502249512,RESOLVE,,,
2017-08-08 22:31:52 UDPv4 link local: [undef]
2017-08-08 22:31:52 UDPv4 link remote: [AF_INET]67.173.165.19:12974
2017-08-08 22:31:52 MANAGEMENT: >STATE:1502249512,WAIT,,,
2017-08-08 22:31:52 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:54 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:54 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:58 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:31:58 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:32:06 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:32:22 TCP/UDP: Incoming packet rejected from [AF_INET]192.168.1.1:12974[2], expected peer address: [AF_INET]67.173.165.19:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-08-08 22:32:52 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2017-08-08 22:32:52 *Tunnelblick: No 'pre-disconnect.sh' script to execute
2017-08-08 22:32:52 *Tunnelblick: Disconnecting using 'kill'
2017-08-08 22:32:52 event_wait : Interrupted system call (code=4)
2017-08-08 22:32:52 SIGTERM[hard,] received, process exiting
2017-08-08 22:32:52 MANAGEMENT: >STATE:1502249572,EXITING,SIGTERM,,
2017-08-08 22:32:53 *Tunnelblick: No 'post-disconnect.sh' script to execute
2017-08-08 22:32:53 *Tunnelblick: Expected disconnection occurred.

================================================================================

"Sanitized" full configuration file

client
dev tap
proto udp
remote iamme.no-ip.org 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
push "redirect-gateway def1"
verb 5



================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000 
inet6 ::1 prefixlen 128 
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_HWTAGGING>
ether 7c:6d:62:8a:b9:8d 
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (none)
status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 7c:6d:62:77:60:f1 
inet6 fe80::1ca6:86ab:1e3a:813d%en1 prefixlen 64 secured scopeid 0x5 
inet 192.168.1.20 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
lladdr 7c:6d:62:ff:fe:fd:9a:ac 
nd6 options=201<PERFORMNUD,DAD>
media: autoselect <full-duplex>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 0e:6d:62:77:60:f1 
media: autoselect
status: active
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::d3a5:5b00:4cd:789a%utun0 prefixlen 64 scopeid 0x9 
nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2017-08-08 22:11:44 Tunnelblick[10338] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.1b (build 4813)
2017-08-08 22:11:45 Tunnelblick[10338] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.
2017-08-08 22:11:49 Tunnelblick[10338] Tunnelblick needs to:
                                         • Be installed in /Applications as Tunnelblick
                                         • Change ownership and permissions of the program to secure it
                                         • Secure configurations
2017-08-08 22:11:49 Tunnelblick[10338] Beginning installation or repair
2017-08-08 22:11:53 Tunnelblick[10338] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2017-08-08 22:11:50. 1 arguments: 0x0017
                                       Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755
                                       Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0
                                       Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755
                                       Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Users/ianchan with owner 0:0 and permissions 755
                                       Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app
                                       Removed all 'com.apple.quarantine' extended attributes
                                       Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0
                                       Need to replace and/or reload 'tunnelblickd':
                                           tunnelblickdHashOK   = NO
                                           launchctlPlistHashOK = NO
                                           tunnelblickdPlistOK  = NO
                                           socketOK             = NO
                                       Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
                                       Used launchctl to load tunnelblickd
                                       Tunnelblick installer finished without error
2017-08-08 22:11:53 Tunnelblick[10338] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2017-08-08 22:11:53 Tunnelblick[10347] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.1b (build 4813)
2017-08-08 22:11:53 Tunnelblick[10338] Finished shutting down Tunnelblick; allowing termination
2017-08-08 22:11:55 Tunnelblick[10347] Sparkle: ===== Tunnelblick =====
2017-08-08 22:11:55 Tunnelblick[10347] Sparkle: Verified appcast signature
2017-08-08 22:12:17 Tunnelblick[10347] Unknown option 'redirect' found in /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf
2017-08-08 22:12:17 Tunnelblick[10347] commandOptionsStatusForOpenvpnConfigurationAtPath:forTblk: returned 'unknown option(s) found' for /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf
2017-08-08 22:12:21 Tunnelblick[10347] Error returned from setAttributes: {
                                           NSFilePosixPermissions = 488;
                                       } ofItemAtPath: /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “sr3z6_t91qzbw3m5vzqlt4yw0000gn”." UserInfo={NSFilePath=/private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T, NSUnderlyingError=0x618000246d80 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (
                                        0   Tunnelblick                         0x000000010712254e -[NSFileManager(TB) tbChangeFileAttributes:atPath:] + 161
                                        1   Tunnelblick                         0x000000010715c90a createDir + 303
                                        2   Tunnelblick                         0x000000010715c966 createDir + 395
                                        3   Tunnelblick                         0x000000010712d8e9 -[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:] + 1616
                                        4   Tunnelblick                         0x000000010712dde2 -[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:] + 77
                                        5   Tunnelblick                         0x0000000107132758 +[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:] + 93
                                        6   Foundation                          0x00007fff95a7a8ad __NSThread__start__ + 1243
                                        7   libsystem_pthread.dylib             0x00007fffa9e1593b _pthread_body + 180
                                        8   libsystem_pthread.dylib             0x00007fffa9e15887 _pthread_body + 0
                                        9   libsystem_pthread.dylib             0x00007fffa9e1508d thread_start + 13
                                       )
2017-08-08 22:12:21 Tunnelblick[10347] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T
2017-08-08 22:12:21 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 9: Copied ca.crt
2017-08-08 22:12:21 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-iyGOmG/myvpn.tblk/Contents/Resources/ca.crt
2017-08-08 22:12:21 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 10: Copied client.crt
2017-08-08 22:12:21 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-iyGOmG/myvpn.tblk/Contents/Resources/client.crt
2017-08-08 22:12:21 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 11: Copied client.key
2017-08-08 22:12:21 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-iyGOmG/myvpn.tblk/Contents/Resources/client.key
2017-08-08 22:12:21 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf: Converted OpenVPN configuration
2017-08-08 22:12:29 Tunnelblick[10347] localNameFromDisplayName: 'myvpn' is not a known displayName
2017-08-08 22:12:29 Tunnelblick[10347] Tunnelblick needs to perform an action that requires administrator authorization.
2017-08-08 22:12:29 Tunnelblick[10347] Beginning installation or repair
2017-08-08 22:12:29 Tunnelblick[10347] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2017-08-08 22:12:29. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                            /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-iyGOmG/myvpn.tblk
                                       Copied /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-iyGOmG/myvpn.tblk
                                           to /Library/Application Support/Tunnelblick/Shared/myvpn.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Shared/myvpn.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Shared/myvpn.tblk and its contents from 501:20 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/client.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/client.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/config.ovpn
                                       Tunnelblick installer finished without error
2017-08-08 22:12:43 tunnelblickd[10390] Status = 251 from tunnelblick-helper command 'start myvpn.tblk 1337 769 0 3 0 1065842 -ptADGNWradsgnw 2.3.17-openssl-1.0.2k'
2017-08-08 22:12:43 Tunnelblick[10347] tunnelblickd status from start: 251
2017-08-08 22:12:59 Tunnelblick[10347] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked
2017-08-08 22:14:57 Tunnelblick[10347] Error returned from setAttributes: {
                                           NSFilePosixPermissions = 488;
                                       } ofItemAtPath: /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “sr3z6_t91qzbw3m5vzqlt4yw0000gn”." UserInfo={NSFilePath=/private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T, NSUnderlyingError=0x6080000579a0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (
                                        0   Tunnelblick                         0x000000010712254e -[NSFileManager(TB) tbChangeFileAttributes:atPath:] + 161
                                        1   Tunnelblick                         0x000000010715c90a createDir + 303
                                        2   Tunnelblick                         0x000000010715c966 createDir + 395
                                        3   Tunnelblick                         0x000000010712d8e9 -[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:] + 1616
                                        4   Tunnelblick                         0x000000010712dde2 -[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:] + 77
                                        5   Tunnelblick                         0x0000000107132758 +[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:] + 93
                                        6   Foundation                          0x00007fff95a7a8ad __NSThread__start__ + 1243
                                        7   libsystem_pthread.dylib             0x00007fffa9e1593b _pthread_body + 180
                                        8   libsystem_pthread.dylib             0x00007fffa9e15887 _pthread_body + 0
                                        9   libsystem_pthread.dylib             0x00007fffa9e1508d thread_start + 13
                                       )
2017-08-08 22:14:57 Tunnelblick[10347] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T
2017-08-08 22:14:57 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 9: Copied ca.crt
2017-08-08 22:14:57 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-EWcAFS/myvpn.tblk/Contents/Resources/ca.crt
2017-08-08 22:14:57 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 10: Copied client.crt
2017-08-08 22:14:57 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-EWcAFS/myvpn.tblk/Contents/Resources/client.crt
2017-08-08 22:14:57 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf at line 11: Copied client.key
2017-08-08 22:14:57 Tunnelblick[10347] Changed permissions from 644 to 740 on /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-EWcAFS/myvpn.tblk/Contents/Resources/client.key
2017-08-08 22:14:57 Tunnelblick[10347] Converting/Installing /Volumes/Data/Users/ianchan/Documents/myvpn.tblk/client.conf: Converted OpenVPN configuration
2017-08-08 22:15:01 Tunnelblick[10347] Tunnelblick needs to perform an action that requires administrator authorization.
2017-08-08 22:15:01 Tunnelblick[10347] Beginning installation or repair
2017-08-08 22:15:01 Tunnelblick[10347] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2017-08-08 22:15:01. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                            /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-EWcAFS/myvpn.tblk
                                       Copied /private/var/folders/kj/sr3z6_t91qzbw3m5vzqlt4yw0000gn/T/Tunnelblick-EWcAFS/myvpn.tblk
                                           to /Library/Application Support/Tunnelblick/Shared/myvpn.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Shared/myvpn.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Shared/myvpn.tblk and its contents from 501:20 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/client.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/client.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myvpn.tblk/Contents/Resources/config.ovpn
                                       Tunnelblick installer finished without error
2017-08-08 22:24:04 Tunnelblick[10347] applicationShouldTerminate: termination for unknown reason, probably Command-Q; delayed until 'shutdownTunnelblick' finishes
2017-08-08 22:24:04 Tunnelblick[10347] pthread_mutex_lock( &unloadKextsMutex ) failed; status = 16, errno = 2
2017-08-08 22:24:04 Tunnelblick[10347] Finished shutting down Tunnelblick; allowing termination
2017-08-08 22:25:14 Tunnelblick[10466] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.1b (build 4813)
2017-08-08 22:25:15 Tunnelblick[10466] Sparkle: ===== Tunnelblick =====
2017-08-08 22:25:15 Tunnelblick[10466] Sparkle: Verified appcast signature
2017-08-08 22:31:28 Tunnelblick[10466] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked

Tunnelblick developer

unread,
Aug 9, 2017, 8:21:00 AM8/9/17
to tunnelblick-discuss


On Wednesday, August 9, 2017 at 6:09:00 AM UTC-4, Ian Chan wrote:
I enabled VPN Service from my Netgear router and followed the guide from https://kb.netgear.com/25389/Enabling-VPN-service-on-a-Nighthawk-router-using-a-MAC-OS-computer
However,  even Tunnelblick can connect, the static IP still shows the same.

You should contact Netgear support.


I read to add push "redirect-gateway def1" to the client.config file but I still cannot make it work.

There are two problems with how you did this:
  • You should put push "redirect-gateway def1"  in the server configuration file, not in the client configuration file. In the client configuration, you put only "redirect-gateway def1" to do this;
  • BUT you don't need to do either one because you have Tunnelblick's "Redirect all IPv4 traffic through the VPN" checkbox checked.

msa...@gmail.com

unread,
Aug 9, 2017, 5:15:58 PM8/9/17
to tunnelblick-discuss
Thank you very much.

shaj...@gmail.com

unread,
Aug 22, 2017, 3:46:13 PM8/22/17
to tunnelblick-discuss
I just edit server & client files as you said. but still not working. i suffer a lot for this problem, but didn;t get solution for last 2months

Tunnelblick developer

unread,
Aug 22, 2017, 3:52:21 PM8/22/17
to tunnelblick-discuss, shaj...@gmail.com
@BD -- Where is your diagnostic information?

If you are using a Netgear router, you should also contact Netgear support.
Reply all
Reply to author
Forward
0 new messages