problem on multiple vpns and configs

Jaqen Nki

unread,

Mar 3, 2018, 1:16:04 AM3/3/18

to tunnelblick-discuss

using latest mac el capitan, tunnelblick, DHCP enabled, custom set openDNS and Google public DNS. I cannot seem to get any of my 6 vpn configs to work except one. I don't get it, I've tried three different services and only one config works, which is posted below, I've emailed these services about this problem to possibly fix any issues on their end, and I'm wondering if anybody else developing tunnelBlick or in this forum can test VPNbook.com or freevpn.se to see if it's just me getting the problem. I've tried them with and without the setting to 'set DNS routes after'wards, and with route–delay set to 7 or 10 seconds. Also I tried with the setting 'comp-lzo' in the configuration which these services still use even though tunnelblick gives me a message saying this setting is deprecated - so I removed the setting from my configurations and still no difference. Here's all the detailed information with only the IP's replaced. What can I do? and thanks for your assistance.

#NOT WORKING configs
client
dev tun1
proto tcp
remote MY.VPN.SERV.IP 443
remote MY.VPNNAME.COM 443
remote-cert-tls server
resolv-retry infinite
nobind
persist-key
persist-tun
auth-user-pass
verb 3
cipher AES-128-CBC
fast-io
pull
route-delay 2
redirect-gateway

# FAIL #2
client
dev tun2
proto udp
remote MY.VPN.SERV.IP 25000
remote MY.VPNNAME.com 25000
remote-cert-tls server
resolv-retry infinite
nobind
persist-key
persist-tun
auth-user-pass
verb 3
cipher AES-128-CBC
fast-io
pull
route-delay 2
redirect-gateway

#ONLY WORKING config freevpn . me
client
dev tun
proto tcp
remote MY.ALT.VPN.IP 443
remote-cert-tls server
resolv-retry infinite
nobind
persist-key
persist-tun
auth-user-pass
verb 3
cipher AES-128-CBC
pull
route-delay 2
redirect-gateway

    all config settings:
Manually
Set NS
default
loglevel3
do nothing
disable net access
[all boxes checked:
monitor net settings
route all traffic
disable ipv6
check if IP changed
]

    advanced settings:
Flush DNS
Set DNS after routes (tried with and without, route-delay 2, 7, with no difference)

      LOG: ( ERROR: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.)

2018-03-02 21:50:21 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2018-03-02 21:50:21 MANAGEMENT: CMD 'pid'
2018-03-02 21:50:21 MANAGEMENT: CMD 'state on'
2018-03-02 21:50:21 MANAGEMENT: CMD 'state'
2018-03-02 21:50:21 MANAGEMENT: CMD 'bytecount 1'
2018-03-02 21:50:21 MANAGEMENT: CMD 'hold release'
2018-03-02 21:50:29 MANAGEMENT: CMD 'username "Auth" "vpnbook"'
2018-03-02 21:50:29 MANAGEMENT: CMD 'password [...]'
2018-03-02 21:50:29 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2018-03-02 21:50:29 NOTE: --fast-io is disabled since we are not using UDP
2018-03-02 21:50:29 TCP/UDP: Preserving recently used remote address: [AF_INET]MY.VPN.SERVER.IP:443
2018-03-02 21:50:29 Socket Buffers: R=[131072->131072] S=[131072->131072]
2018-03-02 21:50:29 Attempting to establish TCP connection with [AF_INET]MY.VPN.SERVER.IP:443 [nonblock]
2018-03-02 21:50:29 MANAGEMENT: >STATE:1520052629,TCP_CONNECT,,,,,,
2018-03-02 21:50:30 TCP connection established with [AF_INET]MY.VPN.SERVER.IP:443
2018-03-02 21:50:30 TCP_CLIENT link local: (not bound)
2018-03-02 21:50:30 TCP_CLIENT link remote: [AF_INET]MY.VPN.SERVER.IP:443
2018-03-02 21:50:30 MANAGEMENT: >STATE:1520052630,WAIT,,,,,,
2018-03-02 21:50:30 MANAGEMENT: >STATE:1520052630,AUTH,,,,,,
2018-03-02 21:50:30 TLS: Initial packet from [AF_INET]MY.VPN.SERVER.IP:443, sid=5bde931b a4988a7c
2018-03-02 21:50:30 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2018-03-02 21:50:30 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin @ vpnbook.com
2018-03-02 21:50:30 VERIFY KU OK
2018-03-02 21:50:30 Validating certificate extended key usage
2018-03-02 21:50:30 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2018-03-02 21:50:30 VERIFY EKU OK
2018-03-02 21:50:30 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin @ vpnbook.com
2018-03-02 21:50:31 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1559', remote='link-mtu 1560'
2018-03-02 21:50:31 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2018-03-02 21:50:31 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
2018-03-02 21:50:31 [vpnbook.com] Peer Connection Initiated with [AF_INET]MY.VPN.SERVER.IP:443
2018-03-02 21:50:32 MANAGEMENT: >STATE:1520052632,GET_CONFIG,,,,,,
2018-03-02 21:50:32 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
2018-03-02 21:50:32 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS XXX.XXX.XXX.IP,dhcp-option DNS XXX.XXX.XXX.IP,route XXX.EXX.XXX.IP,topology net30,ping 5,ping-restart 30,ifconfig XXX.XXX.XXX.IP XXX.XXX.XXX.IP,peer-id 0,cipher AES-256-GCM'
2018-03-02 21:50:32 OPTIONS IMPORT: timers and/or timeouts modified
2018-03-02 21:50:32 OPTIONS IMPORT: --ifconfig/up options modified
2018-03-02 21:50:32 OPTIONS IMPORT: route options modified
2018-03-02 21:50:32 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2018-03-02 21:50:32 OPTIONS IMPORT: peer-id set
2018-03-02 21:50:32 OPTIONS IMPORT: adjusting link_mtu to 1626
2018-03-02 21:50:32 OPTIONS IMPORT: data channel crypto options modified
2018-03-02 21:50:32 Data Channel: using negotiated cipher 'AES-256-GCM'
2018-03-02 21:50:32 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-02 21:50:32 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-02 21:50:32 Opened utun device utun0
2018-03-02 21:50:32 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2018-03-02 21:50:32 MANAGEMENT: >STATE:1520052632,ASSIGN_IP,,XXX.XXX.XXX.IP,,,,
2018-03-02 21:50:32 /sbin/ifconfig utun0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2018-03-02 21:50:32 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2018-03-02 21:50:32 /sbin/ifconfig utun0 XXX.XXX.XXX.IP XXX.XXX.XXX.IP mtu 1500 netmask 255.255.255.255 up
2018-03-02 21:50:34 /sbin/route add -net MY.VPN.SERVER.IP XXX.ROUT.XXX.IP 255.255.255.255
                                        add net MY.VPN.SERVER.IP: gateway XXX.ROUT.XXX.IP
2018-03-02 21:50:34 /sbin/route add -net 0.0.0.0 XXX.XXX.XXX.IP 128.0.0.0
                                        add net 0.0.0.0: gateway XXX.XXX.XXX.IP
2018-03-02 21:50:34 /sbin/route add -net 128.0.0.0 XXX.XXX.XXX.IP 128.0.0.0
                                        add net 128.0.0.0: gateway XXX.XXX.XXX.IP
2018-03-02 21:50:34 MANAGEMENT: >STATE:1520052634,ADD_ROUTES,,,,,,
2018-03-02 21:50:34 /sbin/route add -net XXX.EXX.XXX.IP XXX.XXX.XXX.IP 255.255.255.255
                                        add net XXX.EXX.XXX.IP: gateway XXX.XXX.XXX.IP
                                        **********************************************
                                        Start of output from client.up.tunnelblick.sh
                                        Disabled IPv6 for 'Android'
                                        Disabled IPv6 for 'USB Ethernet'
                                        Disabled IPv6 for 'Bluetooth PAN'
                                        Disabled IPv6 for 'Thunderbolt Bridge'
                                        Retrieved from OpenVPN: name server(s) [ XXX.XXX.XXX.IP XXX.XXX.XXX.IP ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
                                        WARNING: Ignoring ServerAddresses 'XXX.XXX.XXX.IP XXX.XXX.XXX.IP' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified
                                        Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                        Saved the DNS and SMB configurations so they can be restored
                                        Did not change DNS ServerAddresses setting of '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' (but re-set it)
                                        Changed DNS SearchDomains setting from '' to 'openvpn'
                                        Changed DNS DomainName setting from '' to 'openvpn'
                                        Did not change SMB NetBIOSName setting of ''
                                        Did not change SMB Workgroup setting of 'WORKGROUP'
                                        Did not change SMB WINSAddresses setting of ''
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' were set manually
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                        The DNS servers include only free public DNS servers known to Tunnelblick.
                                        Flushed the DNS cache via dscacheutil
                                        /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                        Notified mDNSResponder that the DNS cache was flushed
                                        Setting up to monitor system configuration with process-network-changes
                                        End of output from client.up.tunnelblick.sh
                                        **********************************************
2018-03-02 21:50:38 *Tunnelblick: No 'connected.sh' script to execute
2018-03-02 21:50:38 Initialization Sequence Completed
2018-03-02 21:50:38 MANAGEMENT: >STATE:1520052638,CONNECTED,SUCCESS,XXX.XXX.XXX.IP,MY.VPN.SERVER.IP,443,MY.XXX.XXX.IP,49262
2018-03-02 21:50:43 *Tunnelblick process-network-changes: A system configuration change was ignored
2018-03-02 21:51:21 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2018-03-02 21:51:32 Connection reset, restarting [0]
2018-03-02 21:51:32 SIGUSR1[soft,connection-reset] received, process restarting

# LOG - SUCCESSFUL connection
2018-03-02 22:15:35 MANAGEMENT: CMD 'pid'
2018-03-02 22:15:35 MANAGEMENT: CMD 'state on'
2018-03-02 22:15:35 MANAGEMENT: CMD 'state'
2018-03-02 22:15:35 MANAGEMENT: CMD 'bytecount 1'
2018-03-02 22:15:35 MANAGEMENT: CMD 'hold release'
2018-03-02 22:15:46 MANAGEMENT: CMD 'username "Auth" "freevpnme"'
2018-03-02 22:15:46 MANAGEMENT: CMD 'password [...]'
2018-03-02 22:15:46 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2018-03-02 22:15:46 TCP/UDP: Preserving recently used remote address: [AF_INET]MY.VPN.SERV.IP:443
2018-03-02 22:15:46 Socket Buffers: R=[131072->131072] S=[131072->131072]
2018-03-02 22:15:46 Attempting to establish TCP connection with [AF_INET]MY.VPN.SERV.IP:443 [nonblock]
2018-03-02 22:15:46 MANAGEMENT: >STATE:1520054146,TCP_CONNECT,,,,,,
2018-03-02 22:15:47 TCP connection established with [AF_INET]MY.VPN.SERV.IP:443
2018-03-02 22:15:47 TCP_CLIENT link local: (not bound)
2018-03-02 22:15:47 TCP_CLIENT link remote: [AF_INET]MY.VPN.SERV.IP:443
2018-03-02 22:15:47 MANAGEMENT: >STATE:1520054147,WAIT,,,,,,
2018-03-02 22:15:49 MANAGEMENT: >STATE:1520054149,AUTH,,,,,,
2018-03-02 22:15:49 TLS: Initial packet from [AF_INET]MY.VPN.SERV.IP:443, sid=c9d56281 df335b60
2018-03-02 22:15:49 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2018-03-02 22:15:49 VERIFY OK: depth=1, C=MT, ST=MLT, L=Valletta, O=FreeVPN.me, OU=FreeVPN.me, CN=FreeVPN.me CA, name=FreeVPN.me, emailAddress=contact @ freevpn.me
2018-03-02 22:15:49 VERIFY KU OK
2018-03-02 22:15:49 Validating certificate extended key usage
2018-03-02 22:15:49 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2018-03-02 22:15:49 VERIFY EKU OK
2018-03-02 22:15:49 VERIFY OK: depth=0, C=MT, ST=MLT, L=Valletta, O=FreeVPN.me, OU=FreeVPN.me, CN=FreeVPN.me, name=FreeVPN.me, emailAddress=contact @ freevpn.me
2018-03-02 22:15:49 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1559', remote='link-mtu 1560'
2018-03-02 22:15:49 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2018-03-02 22:15:49 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2018-03-02 22:15:49 [FreeVPN.me] Peer Connection Initiated with [AF_INET]MY.VPN.SERV.IP:443
2018-03-02 22:15:51 MANAGEMENT: >STATE:1520054151,GET_CONFIG,,,,,,
2018-03-02 22:15:51 SENT CONTROL [FreeVPN.me]: 'PUSH_REQUEST' (status=1)
2018-03-02 22:15:51 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,comp-lzo no,comp-noadapt,route 10.xx.0.xx,topology net30,ping 10,ping-restart 60,ifconfig 10.xx.0.xx 10.xx.0.xx,peer-id 0,cipher AES-256-GCM'
2018-03-02 22:15:51 OPTIONS IMPORT: timers and/or timeouts modified
2018-03-02 22:15:51 OPTIONS IMPORT: compression parms modified
2018-03-02 22:15:51 OPTIONS IMPORT: --ifconfig/up options modified
2018-03-02 22:15:51 OPTIONS IMPORT: route options modified
2018-03-02 22:15:51 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2018-03-02 22:15:51 OPTIONS IMPORT: peer-id set
2018-03-02 22:15:51 OPTIONS IMPORT: adjusting link_mtu to 1626
2018-03-02 22:15:51 OPTIONS IMPORT: data channel crypto options modified
2018-03-02 22:15:51 Data Channel: using negotiated cipher 'AES-256-GCM'
2018-03-02 22:15:51 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-02 22:15:51 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-02 22:15:51 Opened utun device utun0
2018-03-02 22:15:51 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2018-03-02 22:15:51 MANAGEMENT: >STATE:1520054151,ASSIGN_IP,,10.xx.0.xx,,,,
2018-03-02 22:15:51 /sbin/ifconfig utun0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2018-03-02 22:15:51 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2018-03-02 22:15:51 /sbin/ifconfig utun0 10.xx.0.xx 10.xx.0.xx mtu 1500 netmask 255.255.255.255 up
2018-03-02 22:15:53 /sbin/route add -net MY.VPN.SERV.IP 192.168.1.x1 255.255.255.255
                                        add net MY.VPN.SERV.IP: gateway 192.168.1.x
2018-03-02 22:15:53 /sbin/route add -net 0.0.0.0 10.xx.0.xx 128.0.0.0
                                        add net 0.0.0.0: gateway 10.xx.0.xx
2018-03-02 22:15:53 /sbin/route add -net 128.0.0.0 10.xx.0.xx 128.0.0.0
                                        add net 128.0.0.0: gateway 10.xx.0.xx
2018-03-02 22:15:53 MANAGEMENT: >STATE:1520054153,ADD_ROUTES,,,,,,
2018-03-02 22:15:53 /sbin/route add -net 10.xx.0.xx 10.xx.0.xx 255.255.255.255
                                        add net 10.xx.0.xx: gateway 10.xx.0.xx
                                        **********************************************
                                        Start of output from client.up.tunnelblick.sh
                                        Disabled IPv6 for 'Android'
                                        Disabled IPv6 for 'USB Ethernet'
                                        Disabled IPv6 for 'Bluetooth PAN'
                                        Disabled IPv6 for 'Thunderbolt Bridge'
                                        Retrieved from OpenVPN: name server(s) [ 8.8.8.8 8.8.4.4 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
                                        WARNING: Ignoring ServerAddresses '8.8.8.8 8.8.4.4' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified
                                        Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                        Saved the DNS and SMB configurations so they can be restored
                                        Did not change DNS ServerAddresses setting of '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' (but re-set it)
                                        Changed DNS SearchDomains setting from '' to 'openvpn'
                                        Changed DNS DomainName setting from '' to 'openvpn'
                                        Did not change SMB NetBIOSName setting of ''
                                        Did not change SMB Workgroup setting of 'WORKGROUP'
                                        Did not change SMB WINSAddresses setting of ''
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' were set manually
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                        The DNS servers include only free public DNS servers known to Tunnelblick.
                                        Flushed the DNS cache via dscacheutil
                                        /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                        Notified mDNSResponder that the DNS cache was flushed
                                        Setting up to monitor system configuration with process-network-changes
                                        End of output from client.up.tunnelblick.sh
                                        **********************************************
2018-03-02 22:15:57 *Tunnelblick: No 'connected.sh' script to execute
2018-03-02 22:15:57 Initialization Sequence Completed
2018-03-02 22:15:57 MANAGEMENT: >STATE:1520054157,CONNECTED,SUCCESS,10.xx.0.xx,MY.VPN.SERV.IP,443,192.168.1.x1,49307
2018-03-02 22:16:02 *Tunnelblick process-network-changes: A system configuration change was ignored
2018-03-02 22:16:08 *Tunnelblick: This computer's apparent public IP address changed from MY.HOME.IP.ADDR before connection to MY.VPN.SERV.IP after connection

Tunnelblick developer

unread,

Mar 3, 2018, 4:53:57 AM3/3/18

to tunnelblick-discuss

Try (A) changing the "dev tun1" and "dev tun2" in each of the failing configurations with "dev tun" and (B) removing the "fast-io" lines from them.

Also, note that a "route-delay" of 2 (seconds) is pretty short. When it is needed, it is more common to use 10. So fi you have intermittent problems you might want to bump it up to 10.

The specific error you're having (no traffic through the VPN) can be caused by lots of things, most commonly a problem with the OpenVPN server itself.

Jaqen Nki

unread,

Mar 3, 2018, 4:54:31 PM3/3/18

to tunnelblick-discuss

ok tried that. no difference. This is just ridiculous, I've had near flawless connections for years up until the last six months there have been issues like this. So do you think it's most likely the VPN service providers servers that are causing the problems? Because I noticed tunnelblick updates often and uses the latest openvpn Version - probably the servers use an older version which could cause conflicts correct? They know that if they update their server's Open VPN version it may affect everyone using older versions.

Here is a level 4 verbosity log below, in case anything can be gleaned from it.

2018-03-03 14:32:18 *Tunnelblick: Established communication with OpenVPN
2018-03-03 14:32:18 us=797412 Current Parameter Settings:
2018-03-03 14:32:18 us=797605   config = '/Library/Application Support/Tunnelblick/Users/USER/vpbkus2-tcp443.tblk/Contents/Resources/config.ovpn'
2018-03-03 14:32:18 us=797614   mode = 0
2018-03-03 14:32:18 us=797619   show_ciphers = DISABLED
2018-03-03 14:32:18 us=797624   show_digests = DISABLED
2018-03-03 14:32:18 us=797628   show_engines = DISABLED
2018-03-03 14:32:18 us=797633   genkey = DISABLED
2018-03-03 14:32:18 us=797638   key_pass_file = '[UNDEF]'
2018-03-03 14:32:18 us=797642   show_tls_ciphers = DISABLED
2018-03-03 14:32:18 us=797647   connect_retry_max = 0
2018-03-03 14:32:18 us=797652 Connection profiles [0]:
2018-03-03 14:32:18 us=797657   proto = tcp-client
2018-03-03 14:32:18 us=797661   local = '[UNDEF]'
2018-03-03 14:32:18 us=797666   local_port = '[UNDEF]'
2018-03-03 14:32:18 us=797671   remote = 'MY.VPN.SERV.IP'
2018-03-03 14:32:18 us=797675   remote_port = '443'
2018-03-03 14:32:18 us=797680   remote_float = DISABLED
2018-03-03 14:32:18 us=797685   bind_defined = DISABLED
2018-03-03 14:32:18 us=797689   bind_local = DISABLED
2018-03-03 14:32:18 us=797694   bind_ipv6_only = DISABLED
2018-03-03 14:32:18 us=797699   connect_retry_seconds = 5
2018-03-03 14:32:18 us=797703   connect_timeout = 120
2018-03-03 14:32:18 us=797708   xormethod = 0
2018-03-03 14:32:18 us=797713   xormask = ''
2018-03-03 14:32:18 us=797717   xormasklen = 0
2018-03-03 14:32:18 us=797722   socks_proxy_server = '[UNDEF]'
2018-03-03 14:32:18 us=797727   socks_proxy_port = '[UNDEF]'
2018-03-03 14:32:18 us=797732   tun_mtu = 1500
2018-03-03 14:32:18 us=797736   tun_mtu_defined = ENABLED
2018-03-03 14:32:18 us=797741   link_mtu = 1500
2018-03-03 14:32:18 us=797746   link_mtu_defined = DISABLED
2018-03-03 14:32:18 us=797750   tun_mtu_extra = 0
2018-03-03 14:32:18 us=797755   tun_mtu_extra_defined = DISABLED
2018-03-03 14:32:18 us=797760   mtu_discover_type = -1
2018-03-03 14:32:18 us=797765   fragment = 0
2018-03-03 14:32:18 us=797769   mssfix = 1450
2018-03-03 14:32:18 us=797774   explicit_exit_notification = 0
2018-03-03 14:32:18 us=797779 Connection profiles [1]:
2018-03-03 14:32:18 us=797783   proto = tcp-client
2018-03-03 14:32:18 us=797788   local = '[UNDEF]'
2018-03-03 14:32:18 us=797792   local_port = '[UNDEF]'
2018-03-03 14:32:18 us=797797   remote = 'us2.vpbkcom'
2018-03-03 14:32:18 us=797801   remote_port = '443'
2018-03-03 14:32:18 us=797806   remote_float = DISABLED
2018-03-03 14:32:18 us=797811   bind_defined = DISABLED
2018-03-03 14:32:18 us=797815   bind_local = DISABLED
2018-03-03 14:32:18 us=797820   bind_ipv6_only = DISABLED
2018-03-03 14:32:18 us=797824   connect_retry_seconds = 5
2018-03-03 14:32:18 us=797829   connect_timeout = 120
2018-03-03 14:32:18 us=797834   xormethod = 0
2018-03-03 14:32:18 us=797838   xormask = ''
2018-03-03 14:32:18 us=797843   xormasklen = 0
2018-03-03 14:32:18 us=797847   socks_proxy_server = '[UNDEF]'
2018-03-03 14:32:18 us=797852   socks_proxy_port = '[UNDEF]'
2018-03-03 14:32:18 us=797857   tun_mtu = 1500
2018-03-03 14:32:18 us=797861   tun_mtu_defined = ENABLED
2018-03-03 14:32:18 us=797866   link_mtu = 1500
2018-03-03 14:32:18 us=797870   link_mtu_defined = DISABLED
2018-03-03 14:32:18 us=797875   tun_mtu_extra = 0
2018-03-03 14:32:18 us=797880   tun_mtu_extra_defined = DISABLED
2018-03-03 14:32:18 us=797884   mtu_discover_type = -1
2018-03-03 14:32:18 us=797889   fragment = 0
2018-03-03 14:32:18 us=797894   mssfix = 1450
2018-03-03 14:32:18 us=797898   explicit_exit_notification = 0
2018-03-03 14:32:18 us=797903 Connection profiles END
2018-03-03 14:32:18 us=797907   remote_random = DISABLED
2018-03-03 14:32:18 us=797912   ipchange = '[UNDEF]'
2018-03-03 14:32:18 us=797917   dev = 'tun1'
2018-03-03 14:32:18 us=797927   dev_type = '[UNDEF]'
2018-03-03 14:32:18 us=797932   dev_node = '[UNDEF]'
2018-03-03 14:32:18 us=797937   lladdr = '[UNDEF]'
2018-03-03 14:32:18 us=797941   topology = 1
2018-03-03 14:32:18 us=797946   ifconfig_local = '[UNDEF]'
2018-03-03 14:32:18 us=797951   ifconfig_remote_netmask = '[UNDEF]'
2018-03-03 14:32:18 us=797955   ifconfig_noexec = DISABLED
2018-03-03 14:32:18 us=797960   ifconfig_nowarn = DISABLED
2018-03-03 14:32:18 us=797965   ifconfig_ipv6_local = '[UNDEF]'
2018-03-03 14:32:18 us=797969   ifconfig_ipv6_netbits = 0
2018-03-03 14:32:18 us=797974   ifconfig_ipv6_remote = '[UNDEF]'
2018-03-03 14:32:18 us=797978   shaper = 0
2018-03-03 14:32:18 us=797986   mtu_test = 0
2018-03-03 14:32:18 us=797991   mlock = DISABLED
2018-03-03 14:32:18 us=797996   keepalive_ping = 0
2018-03-03 14:32:18 us=798000   keepalive_timeout = 0
2018-03-03 14:32:18 us=798005   inactivity_timeout = 0
2018-03-03 14:32:18 us=798010   ping_send_timeout = 0
2018-03-03 14:32:18 us=798014   ping_rec_timeout = 0
2018-03-03 14:32:18 us=798019   ping_rec_timeout_action = 0
2018-03-03 14:32:18 us=798024   ping_timer_remote = DISABLED
2018-03-03 14:32:18 us=798028   remap_sigusr1 = 0
2018-03-03 14:32:18 us=798033   persist_tun = ENABLED
2018-03-03 14:32:18 us=798038   persist_local_ip = DISABLED
2018-03-03 14:32:18 us=798042   persist_remote_ip = DISABLED
2018-03-03 14:32:18 us=798047   persist_key = ENABLED
2018-03-03 14:32:18 us=798051   passtos = DISABLED
2018-03-03 14:32:18 us=798056   resolve_retry_seconds = 1000000000
2018-03-03 14:32:18 us=798061   resolve_in_advance = DISABLED
2018-03-03 14:32:18 us=798065   username = '[UNDEF]'
2018-03-03 14:32:18 us=798070   groupname = '[UNDEF]'
2018-03-03 14:32:18 us=798075   chroot_dir = '[UNDEF]'
2018-03-03 14:32:18 us=798080   cd_dir = '/Library/Application Support/Tunnelblick/Users/USER/vpnbook-us2-tcp443.tblk/Contents/Resources'
2018-03-03 14:32:18 us=798085   writepid = '[UNDEF]'
2018-03-03 14:32:18 us=798090   up_script = '/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -ku -m -w -ASDfdsdfgasdhsdfg'
2018-03-03 14:32:18 us=798095   down_script = '/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -ku -m -w -ASDfdsdfgasdhsdfg'
2018-03-03 14:32:18 us=798102   down_pre = DISABLED
2018-03-03 14:32:18 us=798108   up_restart = DISABLED
2018-03-03 14:32:18 us=798112   up_delay = DISABLED
2018-03-03 14:32:18 us=798117   daemon = ENABLED
2018-03-03 14:32:18 us=798122   inetd = 0
2018-03-03 14:32:18 us=798127   log = ENABLED
2018-03-03 14:32:18 us=798132   suppress_timestamps = DISABLED
2018-03-03 14:32:18 us=798136   machine_readable_output = DISABLED
2018-03-03 14:32:18 us=798141   nice = 0
2018-03-03 14:32:18 us=798146   verbosity = 4
2018-03-03 14:32:18 us=798151   mute = 0
2018-03-03 14:32:18 us=798156   status_file = '[UNDEF]'
2018-03-03 14:32:18 us=798161   status_file_version = 1
2018-03-03 14:32:18 us=798166   status_file_update_freq = 60
2018-03-03 14:32:18 us=798170   occ = ENABLED
2018-03-03 14:32:18 us=798175   rcvbuf = 0
2018-03-03 14:32:18 us=798180   sndbuf = 0
2018-03-03 14:32:18 us=798185   sockflags = 0
2018-03-03 14:32:18 us=798190   fast_io = DISABLED
2018-03-03 14:32:18 us=798195   comp.alg = 0
2018-03-03 14:32:18 us=798200   comp.flags = 0
2018-03-03 14:32:18 us=798204   route_script = '[UNDEF]'
2018-03-03 14:32:18 us=798209   route_default_gateway = '[UNDEF]'
2018-03-03 14:32:18 us=798214   route_default_metric = 0
2018-03-03 14:32:18 us=798219   route_noexec = DISABLED
2018-03-03 14:32:18 us=798224   route_delay = 10
2018-03-03 14:32:18 us=798228   route_delay_window = 30
2018-03-03 14:32:18 us=798233   route_delay_defined = ENABLED
2018-03-03 14:32:18 us=798238   route_nopull = DISABLED
2018-03-03 14:32:18 us=798247   route_gateway_via_dhcp = DISABLED
2018-03-03 14:32:18 us=798252   allow_pull_fqdn = DISABLED
2018-03-03 14:32:18 us=798262   [redirect_default_gateway local=0]
2018-03-03 14:32:18 us=798267   management_addr = '127.0.0.1'
2018-03-03 14:32:18 us=798272   management_port = '1337'
2018-03-03 14:32:18 us=798277   management_user_pass = '/Library/Application Support/Tunnelblick/hekpcpkbibdeecjcdeaidgkfdnilhniikfoccmpg.mip'
2018-03-03 14:32:18 us=798282   management_log_history_cache = 250
2018-03-03 14:32:18 us=798287   management_echo_buffer_size = 100
2018-03-03 14:32:18 us=798292   management_write_peer_info_file = '[UNDEF]'
2018-03-03 14:32:18 us=798297   management_client_user = '[UNDEF]'
2018-03-03 14:32:18 us=798302   management_client_group = '[UNDEF]'
2018-03-03 14:32:18 us=798307   management_flags = 6
2018-03-03 14:32:18 us=798311   shared_secret_file = '[UNDEF]'
2018-03-03 14:32:18 us=798316   key_direction = not set
2018-03-03 14:32:18 us=798321   ciphername = 'AES-128-CBC'
2018-03-03 14:32:18 us=798326   ncp_enabled = ENABLED
2018-03-03 14:32:18 us=798331   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
2018-03-03 14:32:18 us=798336   authname = 'SHA1'
2018-03-03 14:32:18 us=798341   prng_hash = 'SHA1'
2018-03-03 14:32:18 us=798346   prng_nonce_secret_len = 16
2018-03-03 14:32:18 us=798351   keysize = 0
2018-03-03 14:32:18 us=798355   engine = DISABLED
2018-03-03 14:32:18 us=798360   replay = ENABLED
2018-03-03 14:32:18 us=798365   mute_replay_warnings = DISABLED
2018-03-03 14:32:18 us=798370   replay_window = 64
2018-03-03 14:32:18 us=798375   replay_time = 15
2018-03-03 14:32:18 us=798379   packet_id_file = '[UNDEF]'
2018-03-03 14:32:18 us=798384   use_iv = ENABLED
2018-03-03 14:32:18 us=798389   test_crypto = DISABLED
2018-03-03 14:32:18 us=798394   tls_server = DISABLED
2018-03-03 14:32:18 us=798399   tls_client = ENABLED
2018-03-03 14:32:18 us=798406   key_method = 2
2018-03-03 14:32:18 us=798411   ca_file = '[[INLINE]]'
2018-03-03 14:32:18 us=798415   ca_path = '[UNDEF]'
2018-03-03 14:32:18 us=798420   dh_file = '[UNDEF]'
2018-03-03 14:32:18 us=798425   cert_file = '[[INLINE]]'
2018-03-03 14:32:18 us=798430   extra_certs_file = '[UNDEF]'
2018-03-03 14:32:18 us=798435   priv_key_file = '[[INLINE]]'
2018-03-03 14:32:18 us=798440   pkcs12_file = '[UNDEF]'
2018-03-03 14:32:18 us=798445   cipher_list = '[UNDEF]'
2018-03-03 14:32:18 us=798449   tls_cert_profile = '[UNDEF]'
2018-03-03 14:32:18 us=798454   tls_verify = '[UNDEF]'
2018-03-03 14:32:18 us=798459   tls_export_cert = '[UNDEF]'
2018-03-03 14:32:18 us=798464   verify_x509_type = 0
2018-03-03 14:32:18 us=798468   verify_x509_name = '[UNDEF]'
2018-03-03 14:32:18 us=798473   crl_file = '[UNDEF]'
2018-03-03 14:32:18 us=798478   ns_cert_type = 0
2018-03-03 14:32:18 us=798483   remote_cert_ku[i] = 65535
2018-03-03 14:32:18 us=798488   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798492   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798497   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798502   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798507   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798511   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798516   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798521   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798525   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798530   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798535   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798539   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798544   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798549   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798554   remote_cert_ku[i] = 0
2018-03-03 14:32:18 us=798559   remote_cert_eku = 'TLS Web Server Authentication'
2018-03-03 14:32:18 us=798564   ssl_flags = 0
2018-03-03 14:32:18 us=798573   tls_timeout = 2
2018-03-03 14:32:18 us=798578   renegotiate_bytes = -1
2018-03-03 14:32:18 us=798583   renegotiate_packets = 0
2018-03-03 14:32:18 us=798588   renegotiate_seconds = 3600
2018-03-03 14:32:18 us=798593   handshake_window = 60
2018-03-03 14:32:18 us=798597   transition_window = 3600
2018-03-03 14:32:18 us=798602   single_session = DISABLED
2018-03-03 14:32:18 us=798607   push_peer_info = DISABLED
2018-03-03 14:32:18 us=798612   tls_exit = DISABLED
2018-03-03 14:32:18 us=798616   tls_auth_file = '[UNDEF]'
2018-03-03 14:32:18 us=798621   tls_crypt_file = '[UNDEF]'
2018-03-03 14:32:18 us=798626   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798631   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798636   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798641   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798645   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798650   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798655   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798660   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798665   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798670   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798675   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798680   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798684   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798689   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798694   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798699   pkcs11_protected_authentication = DISABLED
2018-03-03 14:32:18 us=798704   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798709   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798714   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798719   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798724   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798729   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798733   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798738   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798743   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798748   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798752   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798757   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798762   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798767   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798772   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798777   pkcs11_private_mode = 00000000
2018-03-03 14:32:18 us=798781   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798786   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798791   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798795   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798800   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798805   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798810   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798814   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798819   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798824   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798829   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798834   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798838   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798843   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798848   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798852   pkcs11_cert_private = DISABLED
2018-03-03 14:32:18 us=798861   pkcs11_pin_cache_period = -1
2018-03-03 14:32:18 us=798866   pkcs11_id = '[UNDEF]'
2018-03-03 14:32:18 us=798871   pkcs11_id_management = DISABLED
2018-03-03 14:32:18 us=798880   server_network = 0.0.0.0
2018-03-03 14:32:18 us=798885   server_netmask = 0.0.0.0
2018-03-03 14:32:18 us=798894   server_network_ipv6 = ::
2018-03-03 14:32:18 us=798899   server_netbits_ipv6 = 0
2018-03-03 14:32:18 us=798904   server_bridge_ip = 0.0.0.0
2018-03-03 14:32:18 us=798909   server_bridge_netmask = 0.0.0.0
2018-03-03 14:32:18 us=798915   server_bridge_pool_start = 0.0.0.0
2018-03-03 14:32:18 us=798920   server_bridge_pool_end = 0.0.0.0
2018-03-03 14:32:18 us=798925   ifconfig_pool_defined = DISABLED
2018-03-03 14:32:18 us=798931   ifconfig_pool_start = 0.0.0.0
2018-03-03 14:32:18 us=798936   ifconfig_pool_end = 0.0.0.0
2018-03-03 14:32:18 us=798941   ifconfig_pool_netmask = 0.0.0.0
2018-03-03 14:32:18 us=798946   ifconfig_pool_persist_filename = '[UNDEF]'
2018-03-03 14:32:18 us=798951   ifconfig_pool_persist_refresh_freq = 600
2018-03-03 14:32:18 us=798956   ifconfig_ipv6_pool_defined = DISABLED
2018-03-03 14:32:18 us=798961   ifconfig_ipv6_pool_base = ::
2018-03-03 14:32:18 us=798966   ifconfig_ipv6_pool_netbits = 0
2018-03-03 14:32:18 us=798971   n_bcast_buf = 256
2018-03-03 14:32:18 us=798976   tcp_queue_limit = 64
2018-03-03 14:32:18 us=798980   real_hash_size = 256
2018-03-03 14:32:18 us=798985   virtual_hash_size = 256
2018-03-03 14:32:18 us=798990   client_connect_script = '[UNDEF]'
2018-03-03 14:32:18 us=798995   learn_address_script = '[UNDEF]'
2018-03-03 14:32:18 us=799000   client_disconnect_script = '[UNDEF]'
2018-03-03 14:32:18 us=799005   client_config_dir = '[UNDEF]'
2018-03-03 14:32:18 us=799009   ccd_exclusive = DISABLED
2018-03-03 14:32:18 us=799014   tmp_dir = '/var/folders/qk/b210t6h15j5d5m6f_gjhhjlm0000gq/T/'
2018-03-03 14:32:18 us=799019   push_ifconfig_defined = DISABLED
2018-03-03 14:32:18 us=799025   push_ifconfig_local = 0.0.0.0
2018-03-03 14:32:18 us=799030   push_ifconfig_remote_netmask = 0.0.0.0
2018-03-03 14:32:18 us=799035   push_ifconfig_ipv6_defined = DISABLED
2018-03-03 14:32:18 us=799040   push_ifconfig_ipv6_local = ::/0
2018-03-03 14:32:18 us=799045   push_ifconfig_ipv6_remote = ::
2018-03-03 14:32:18 us=799050   enable_c2c = DISABLED
2018-03-03 14:32:18 us=799055   duplicate_cn = DISABLED
2018-03-03 14:32:18 us=799060   cf_max = 0
2018-03-03 14:32:18 us=799064   cf_per = 0
2018-03-03 14:32:18 us=799069   max_clients = 1024
2018-03-03 14:32:18 us=799077   max_routes_per_client = 256
2018-03-03 14:32:18 us=799081   auth_user_pass_verify_script = '[UNDEF]'
2018-03-03 14:32:18 us=799086   auth_user_pass_verify_script_via_file = DISABLED
2018-03-03 14:32:18 us=799091   auth_token_generate = DISABLED
2018-03-03 14:32:18 us=799096   auth_token_lifetime = 0
2018-03-03 14:32:18 us=799101   port_share_host = '[UNDEF]'
2018-03-03 14:32:18 us=799106   port_share_port = '[UNDEF]'
2018-03-03 14:32:18 us=799111   client = ENABLED
2018-03-03 14:32:18 us=799115   pull = ENABLED
2018-03-03 14:32:18 us=799120   auth_user_pass_file = 'stdin'
2018-03-03 14:32:18 us=799127 OpenVPN 2.4.5 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Mar 2 2018
2018-03-03 14:32:18 us=799137 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10
2018-03-03 14:32:18 us=800146 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2018-03-03 14:32:18 us=800247 Need hold release from management interface, waiting...
2018-03-03 14:32:18 us=944753 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2018-03-03 14:32:18 us=955830 MANAGEMENT: CMD 'pid'
2018-03-03 14:32:18 us=955956 MANAGEMENT: CMD 'state on'
2018-03-03 14:32:18 us=956032 MANAGEMENT: CMD 'state'
2018-03-03 14:32:18 us=956132 MANAGEMENT: CMD 'bytecount 1'
2018-03-03 14:32:18 us=988774 MANAGEMENT: CMD 'hold release'
2018-03-03 14:32:18 *Tunnelblick: openvpnstart starting OpenVPN
2018-03-03 14:32:21 us=624185 MANAGEMENT: CMD 'username "Auth" "vpnbook"'
2018-03-03 14:32:21 us=624346 MANAGEMENT: CMD 'password [...]'
2018-03-03 14:32:21 us=624641 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2018-03-03 14:32:21 us=625343 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
2018-03-03 14:32:21 us=625440 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
2018-03-03 14:32:21 us=625510 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2018-03-03 14:32:21 us=625561 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2018-03-03 14:32:21 us=625619 TCP/UDP: Preserving recently used remote address: [AF_INET]MY.VPN.SERV.IP:443
2018-03-03 14:32:21 us=625699 Socket Buffers: R=[131072->131072] S=[131072->131072]
2018-03-03 14:32:21 us=625757 Attempting to establish TCP connection with [AF_INET]MY.VPN.SERV.IP:443 [nonblock]
2018-03-03 14:32:21 us=625810 MANAGEMENT: >STATE:1520112741,TCP_CONNECT,,,,,,
2018-03-03 14:32:22 us=627183 TCP connection established with [AF_INET]MY.VPN.SERV.IP:443
2018-03-03 14:32:22 us=627456 TCP_CLIENT link local: (not bound)
2018-03-03 14:32:22 us=627587 TCP_CLIENT link remote: [AF_INET]MY.VPN.SERV.IP:443
2018-03-03 14:32:22 us=627724 MANAGEMENT: >STATE:1520112742,WAIT,,,,,,
2018-03-03 14:32:23 us=869717 MANAGEMENT: >STATE:1520112743,AUTH,,,,,,
2018-03-03 14:32:23 us=869940 TLS: Initial packet from [AF_INET]MY.VPN.SERV.IP:443, sid=358b617f 51eed8a9
2018-03-03 14:32:23 us=870293 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2018-03-03 14:32:24 us=115854 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=ad...@vpnbook.com
2018-03-03 14:32:24 us=116386 VERIFY KU OK
2018-03-03 14:32:24 us=116509 Validating certificate extended key usage
2018-03-03 14:32:24 us=116610 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2018-03-03 14:32:24 us=116705 VERIFY EKU OK
2018-03-03 14:32:24 us=116800 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=ad...@vpnbook.com
2018-03-03 14:32:24 us=324927 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1559', remote='link-mtu 1560'
2018-03-03 14:32:24 us=325180 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2018-03-03 14:32:24 us=325389 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
2018-03-03 14:32:24 us=325525 [vpnbook.com] Peer Connection Initiated with [AF_INET]MY.VPN.SERV.IP:443
2018-03-03 14:32:25 us=490578 MANAGEMENT: >STATE:1520112745,GET_CONFIG,,,,,,
2018-03-03 14:32:25 us=490888 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
2018-03-03 14:32:26 us=705031 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS DNS.XX.XX.IP,dhcp-option DNS DNS.XX.XX.IP,route DNS.XX.XX.IP,topology net30,ping 5,ping-restart 30,ifconfig DNS.XX.XX.IP DNS.XX.XX.IP,peer-id 0,cipher AES-256-GCM'
2018-03-03 14:32:26 us=705356 OPTIONS IMPORT: timers and/or timeouts modified
2018-03-03 14:32:26 us=705472 OPTIONS IMPORT: --ifconfig/up options modified
2018-03-03 14:32:26 us=705571 OPTIONS IMPORT: route options modified
2018-03-03 14:32:26 us=705861 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2018-03-03 14:32:26 us=706053 OPTIONS IMPORT: peer-id set
2018-03-03 14:32:26 us=706220 OPTIONS IMPORT: adjusting link_mtu to 1626
2018-03-03 14:32:26 us=706339 OPTIONS IMPORT: data channel crypto options modified
2018-03-03 14:32:26 us=706441 Data Channel: using negotiated cipher 'AES-256-GCM'
2018-03-03 14:32:26 us=706547 Data Channel MTU parms [ L:1554 D:1450 EF:54 EB:406 ET:0 EL:3 ]
2018-03-03 14:32:26 us=706753 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-03 14:32:26 us=706861 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2018-03-03 14:32:26 us=707437 Opened utun device utun0
2018-03-03 14:32:26 us=707658 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2018-03-03 14:32:26 us=707850 MANAGEMENT: >STATE:1520112746,ASSIGN_IP,,DNS.XX.XX.IP,,,,
2018-03-03 14:32:26 us=708095 /sbin/ifconfig utun0 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2018-03-03 14:32:26 us=711618 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2018-03-03 14:32:26 us=711804 /sbin/ifconfig utun0 DNS.XX.XX.IP DNS.XX.XX.IP mtu 1500 netmask 255.255.255.255 up
2018-03-03 14:32:26 us=715771 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -ku -m -w -ptADGNWradsgnw utun0 1500 1554 DNS.XX.XX.IP DNS.XX.XX.IP init

                                        **********************************************
                                        Start of output from client.up.tunnelblick.sh
                                        Disabled IPv6 for 'Android'
                                        Disabled IPv6 for 'USB Ethernet'
                                        Disabled IPv6 for 'Bluetooth PAN'
                                        Disabled IPv6 for 'Thunderbolt Bridge'

Retrieved from OpenVPN: name server(s) [ DNS.XX.XX.IP DNS.XX.XX.IP ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
WARNING: Ignoring ServerAddresses 'DNS.XX.XX.IP DNS.XX.XX.IP' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified

                                        Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                        Saved the DNS and SMB configurations so they can be restored
                                        Did not change DNS ServerAddresses setting of '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' (but re-set it)
                                        Changed DNS SearchDomains setting from '' to 'openvpn'
                                        Changed DNS DomainName setting from '' to 'openvpn'
                                        Did not change SMB NetBIOSName setting of ''
                                        Did not change SMB Workgroup setting of 'WORKGROUP'
                                        Did not change SMB WINSAddresses setting of ''
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' were set manually
                                        DNS servers '208.67.222.222 208.67.220.220 8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                        The DNS servers include only free public DNS servers known to Tunnelblick.
                                        Flushed the DNS cache via dscacheutil
                                        /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                        Notified mDNSResponder that the DNS cache was flushed
                                        Setting up to monitor system configuration with process-network-changes
                                        End of output from client.up.tunnelblick.sh
                                        **********************************************

2018-03-03 14:32:34 *Tunnelblick process-network-changes: A system configuration change was ignored
2018-03-03 14:32:41 us=140682 /sbin/route add -net MY.VPN.SERV.IP 192.168.1.1 255.255.255.255
                                        add net MY.VPN.SERV.IP: gateway 192.168.1.1
2018-03-03 14:32:41 us=145760 /sbin/route add -net 0.0.0.0 DNS.XX.XX.IP 128.0.0.0
                                        add net 0.0.0.0: gateway DNS.XX.XX.IP
2018-03-03 14:32:41 us=148801 /sbin/route add -net 128.0.0.0 DNS.XX.XX.IP 128.0.0.0
                                        add net 128.0.0.0: gateway DNS.XX.XX.IP
2018-03-03 14:32:41 us=151197 MANAGEMENT: >STATE:1520112761,ADD_ROUTES,,,,,,
2018-03-03 14:32:41 us=151369 /sbin/route add -net DNS.XX.XX.IP DNS.XX.XX.IP 255.255.255.255
                                        add net DNS.XX.XX.IP: gateway DNS.XX.XX.IP
2018-03-03 14:32:41 us=154405 Initialization Sequence Completed
2018-03-03 14:32:41 us=154525 MANAGEMENT: >STATE:1520112761,CONNECTED,SUCCESS,DNS.XX.XX.IP,MY.VPN.SERV.IP,443,192.168.1.X,50089
2018-03-03 14:32:41 *Tunnelblick: No 'connected.sh' script to execute
2018-03-03 14:33:24 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2018-03-03 14:33:29 us=645075 Connection reset, restarting [0]
2018-03-03 14:33:29 us=645582 TCP/UDP: Closing socket
2018-03-03 14:33:29 us=645836 SIGUSR1[soft,connection-reset] received, process restarting

Tunnelblick developer

unread,

Mar 3, 2018, 5:02:32 PM3/3/18

to tunnelblick-discuss

Different versions of OpenVPN on the server and client usually cause straightforward, easily seen problems, rarely do they cause the problem you are having.

However, Tunnelblick includes two or three different versions of OpenVPN; you can choose which one to connect a configuration with on the "Settings" tab. Although different versions of OpenVPN rarely cause this type of problem, it's easy enough to try them, so you should do that.

You should contact your VPN service provider. That is the organization which gave you your configuration files, and perhaps a username and password, and to which you are probably paying a fee for VPN service. For more information, please see Getting VPN Service.

Tunnelblick is just the free software that many VPN service providers recommend or supply to their customers. We do not provide VPN service, just software.

Reply all

Reply to author

Forward