ovpn config works with Windows OpenVPN GUI, but not with Tunnelblick

52 views

Skip to first unread message

Sun5555

unread,

May 21, 2018, 1:30:35 PM5/21/18

to tunnelblick-discuss

Hello,

I'm trying to set up a home VPN server from a Tomatousb which runs on a Netgear R7000 router. I followed this for Tomatousb:

https://learntomato.com/how-to-setup-a-vpn-server-with-tomato-openvpn/

I chose "static key" for simplicity and everything else is set by default. Please See the attached images.

Using Windows OpenVPN GUI, I am able to connect from two different locations and both local access (to my home folders) and internet work fine.

But using the same ovpn config, it does not with Tunnelblick on OSX 10.12. There was a bit progress, so I'm going to post three log files with slightly different settings.

Thank you very much in advance! Your help would be greatly appreciated!

This first one, all Tunnelblick settings were by default, particularly "Set DNS/WINS" is set to "Set nameserver", and "Check if the apparent public IP address changed after connecting" is checked.

It didn't work:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050); prior version 3.7.5a (build 5011); Admin user

git commit 1417c1a1c5bd33c34277585f02de388622192e72

Configuration 98232

"Sanitized" condensed configuration file for /Users/sun/Library/Application Support/Tunnelblick/Configurations/98232.tblk:

proto udp

remote xxx.xxx.xxx.xxx

secret staticvpn.key

port 1194

dev tap

comp-lzo

route-gateway 192.168.1.1

redirect-gateway def1

float

route-method exe

route-delay 2

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

270 0 0xffffff7f8338d000 0x7000 0x7000 net.tunnelblick.tap (5050.3) 7CADB84E-01B1-3CD4-8FE3-CA4D2BE6C67E <7 5 4 1>

================================================================================

There are no unusual files in 98232.tblk

================================================================================

Configuration preferences:

-skipWarningThatMayNotConnectInFutureBecauseOfOpenVPNOptions = 1

useDNS = 1

-notMonitoringConnection = 0

-routeAllTrafficThroughVpn = 0

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.6beta04 (build 5050)",

"3.7.5a (build 5011)"

)

lastLaunchTime = 548523841.737798

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

lastConnectedDisplayName = 98232

keyboardShortcutIndex = 1

updateCheckAutomatically = 0

NSWindow Frame ConnectingWindow = 525 518 389 187 0 0 1440 877

detailsWindowFrameVersion = 5011

detailsWindowFrame = {{60, 361}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = 98232

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

haveDealtWithAfterDisconnect = 1

SUEnableAutomaticChecks = 0

SUScheduledCheckInterval = 86400

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050); prior version 3.7.5a (build 5011)

2018-05-20 14:54:27 *Tunnelblick: Attempting connection with 98232 using shadow copy; Set nameserver = 769; monitoring connection

2018-05-20 14:54:27 *Tunnelblick: openvpnstart start 98232.tblk 61997 769 0 1 0 1065330 -ptADGNWradsgnw 2.4.6-openssl-1.0.2o

2018-05-20 14:54:28 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.6-openssl-1.0.2o/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Ssun-SLibrary-SApplication Support-STunnelblick-SConfigurations-S98232.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065330.61997.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 5050 3.7.6beta04 (build 5050)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources

--management

127.0.0.1

61997

/Library/Application Support/Tunnelblick/ajjlgfkgjkmcmfkpoekflfgnhgompkapfpddnjan.mip

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

--route-pre-down

/Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

2018-05-20 14:54:27 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode

2018-05-20 14:54:27 OpenVPN 2.4.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Apr 26 2018

2018-05-20 14:54:27 library versions: OpenSSL 1.0.2o 27 Mar 2018, LZO 2.10

2018-05-20 14:54:27 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:61997

2018-05-20 14:54:27 Need hold release from management interface, waiting...

2018-05-20 14:54:27 *Tunnelblick: openvpnstart starting OpenVPN

2018-05-20 14:54:28 *Tunnelblick: Established communication with OpenVPN

2018-05-20 14:54:28 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:61997

2018-05-20 14:54:28 MANAGEMENT: CMD 'pid'

2018-05-20 14:54:28 MANAGEMENT: CMD 'state on'

2018-05-20 14:54:28 MANAGEMENT: CMD 'state'

2018-05-20 14:54:28 MANAGEMENT: CMD 'bytecount 1'

2018-05-20 14:54:28 MANAGEMENT: CMD 'hold release'

2018-05-20 14:54:28 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2018-05-20 14:54:28 Outgoing Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key

2018-05-20 14:54:28 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2018-05-20 14:54:28 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication

2018-05-20 14:54:28 Incoming Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key

2018-05-20 14:54:28 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2018-05-20 14:54:28 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication

2018-05-20 14:54:28 TUN/TAP device /dev/tap0 opened

2018-05-20 14:54:28 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1577 init

**********************************************

Start of output from client.up.tunnelblick.sh

NOTE: No network configuration changes need to be made.

WARNING: Will NOT monitor for other network configuration changes.

DNS servers '192.168.43.1' will be used for DNS queries when the VPN is active

NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.

Flushed the DNS cache via dscacheutil

/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil

Notified mDNSResponder that the DNS cache was flushed

End of output from client.up.tunnelblick.sh

**********************************************

2018-05-20 14:54:30 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 14:54:30 Socket Buffers: R=[196724->196724] S=[9216->9216]

2018-05-20 14:54:30 UDP link local (bound): [AF_INET][undef]:1194

2018-05-20 14:54:30 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 14:54:50 Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 14:54:50 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:51 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:52 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:53 /sbin/route add -net xxx.xxx.xxx.xxx 192.168.43.1 255.255.255.255

add net xxx.xxx.xxx.xxx: gateway 192.168.43.1

2018-05-20 14:54:53 /sbin/route add -net 0.0.0.0 192.168.1.1 128.0.0.0

add net 0.0.0.0: gateway 192.168.1.1

2018-05-20 14:54:53 /sbin/route add -net 128.0.0.0 192.168.1.1 128.0.0.0

add net 128.0.0.0: gateway 192.168.1.1

2018-05-20 14:54:53 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2018-05-20 14:54:53 Initialization Sequence Completed

2018-05-20 14:54:53 MANAGEMENT: >STATE:1526853293,CONNECTED,SUCCESS,,xxx.xxx.xxx.xxx,1194,,

2018-05-20 14:54:53 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:54 *Tunnelblick: No 'connected.sh' script to execute

2018-05-20 14:54:54 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:55 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:56 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:57 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:58 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:54:59 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:00 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:01 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:02 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:03 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:04 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:05 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:06 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:07 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:08 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:09 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:10 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:11 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:12 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:13 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:14 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:15 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:16 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:17 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:18 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:19 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:20 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:21 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:22 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:23 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:24 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:25 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:26 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:27 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:28 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:29 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:30 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:31 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:31 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.

2018-05-20 14:55:31 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:32 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:33 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:34 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:35 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:36 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:37 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:38 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:39 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:40 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:41 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:42 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:43 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:44 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:45 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:46 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:47 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:48 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:49 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:50 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:52 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:55:53 write to TUN/TAP : Input/output error (code=5)

2018-05-20 14:56:03 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's IP address after connecting.

2018-05-20 14:58:07 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed

2018-05-20 14:58:07 *Tunnelblick: No 'pre-disconnect.sh' script to execute

2018-05-20 14:58:07 *Tunnelblick: Disconnecting using 'kill'

2018-05-20 14:58:07 event_wait : Interrupted system call (code=4)

2018-05-20 14:58:07 /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1577 init

**********************************************

Start of output from client.route-pre-down.tunnelblick.sh

WARNING: Not restoring DNS settings because no saved Tunnelblick DNS information was found.

End of output from client.route-pre-down.tunnelblick.sh

**********************************************

2018-05-20 14:58:08 /sbin/route delete -net xxx.xxx.xxx.xxx 192.168.43.1 255.255.255.255

delete net xxx.xxx.xxx.xxx: gateway 192.168.43.1

2018-05-20 14:58:08 /sbin/route delete -net 0.0.0.0 192.168.1.1 128.0.0.0

delete net 0.0.0.0: gateway 192.168.1.1

2018-05-20 14:58:08 /sbin/route delete -net 128.0.0.0 192.168.1.1 128.0.0.0

delete net 128.0.0.0: gateway 192.168.1.1

2018-05-20 14:58:08 Closing TUN/TAP interface

2018-05-20 14:58:08 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1577 init

**********************************************

Start of output from client.down.tunnelblick.sh

WARNING: Not restoring DNS settings because no saved Tunnelblick DNS information was found.

Flushed the DNS cache via dscacheutil

/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil

Notified mDNSResponder that the DNS cache was flushed

End of output from client.down.tunnelblick.sh

**********************************************

2018-05-20 14:58:10 SIGTERM[hard,] received, process exiting

2018-05-20 14:58:10 MANAGEMENT: >STATE:1526853490,EXITING,SIGTERM,,,,,

2018-05-20 14:58:10 *Tunnelblick: No 'post-disconnect.sh' script to execute

2018-05-20 14:58:10 *Tunnelblick: Expected disconnection occurred.

================================================================================

"Sanitized" full configuration file

#dev tun

proto udp

# The hostname/IP and port of the server.

# You can have multiple remote entries

# to load balance between the servers.

remote xxx.xxx.xxx.xxx

# Try to preserve some state across restarts.

#persist-key

#persist-tun

secret staticvpn.key

#remote digiex.no-ip.org

port 1194

dev tap

#secret staticvpn.key

#proto udp

comp-lzo

route-gateway 192.168.1.1

redirect-gateway def1

float

route-method exe

route-delay 2

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether d4:61:9d:00:ba:86

inet6 fe80::1817:aee7:b36c:2fa0%en0 prefixlen 64 secured scopeid 0x4

inet 192.168.43.100 netmask 0xffffff00 broadcast 192.168.43.255

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500

options=60<TSO4,TSO6>

ether 9a:00:0d:ba:42:70

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 9a:00:0d:ba:42:70

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 5 priority 0 path cost 0

nd6 options=201<PERFORMNUD,DAD>

media: <unknown type>

status: inactive

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 06:61:9d:00:ba:86

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether a2:89:ea:f4:8a:b4

inet6 fe80::a089:eaff:fef4:8ab4%awdl0 prefixlen 64 scopeid 0x8

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

inet6 fe80::e4ff:58bc:670f:6c7e%utun0 prefixlen 64 scopeid 0x9

nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2018-05-20 09:41:47 Tunnelblick[15553] Set 'expect disconnect' flag

2018-05-20 09:42:13 Tunnelblick[15553] Tunnelblick needs to perform an action that requires a computer administrator's authorization.

2018-05-20 09:42:13 Tunnelblick[15553] Beginning installation or repair

2018-05-20 09:42:13 Tunnelblick[15553] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-05-20 09:42:13. 2 arguments: 0x2001

/Users/sun/Library/Application Support/Tunnelblick/Configurations/suns.tblk

removed /Users/sun/Library/Application Support/Tunnelblick/Configurations/suns.tblk

removed /Library/Application Support/Tunnelblick/Users/sun/suns.tblk

Tunnelblick installer finished without error

2018-05-20 09:42:13 Tunnelblick[15553] Uninstalled configuration file /Users/sun/Library/Application Support/Tunnelblick/Configurations/suns.tblk

2018-05-20 14:55:31 Tunnelblick[15553] currentIPInfo(Name): IP address info could not be fetched within 32.2 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1004 "Could not connect to the server." UserInfo={NSUnderlyingError=0x60800045b450 {Error Domain=kCFErrorDomainCFNetwork Code=-1004 "Could not connect to the server." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=51, _kCFStreamErrorDomainKey=1, NSLocalizedDescription=Could not connect to the server.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=1, _kCFStreamErrorCodeKey=51, NSLocalizedDescription=Could not connect to the server.}'; the response was '(null)'

2018-05-20 14:56:03 Tunnelblick[15553] currentIPInfo(Address): IP address info could not be fetched within 32.2 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1004 "Could not connect to the server." UserInfo={NSUnderlyingError=0x600000453ce0 {Error Domain=kCFErrorDomainCFNetwork Code=-1004 "Could not connect to the server." UserInfo={NSErrorFailingURLStringKey=http://205.233.73.116/ipinfo, NSErrorFailingURLKey=http://205.233.73.116/ipinfo, _kCFStreamErrorCodeKey=51, _kCFStreamErrorDomainKey=1, NSLocalizedDescription=Could not connect to the server.}}, NSErrorFailingURLStringKey=http://205.233.73.116/ipinfo, NSErrorFailingURLKey=http://205.233.73.116/ipinfo, _kCFStreamErrorDomainKey=1, _kCFStreamErrorCodeKey=51, NSLocalizedDescription=Could not connect to the server.}'; the response was '(null)'

2018-05-20 14:58:07 Tunnelblick[15553] Set 'expect disconnect' flag

vpnServer1B.jpg

vpnServer1A.jpg

Sun5555

unread,

May 21, 2018, 1:38:01 PM5/21/18

to tunnelblick-discuss

This second one, "Check if the apparent public IP address changed after connecting" is unchecked. It made a little progress: it didn't show "After 30.0 seconds, gave up trying to fetch IP address...", but still stuck on "Connecting...":

Sun5555

unread,

May 21, 2018, 1:50:46 PM5/21/18

to tunnelblick-discuss

The third one, "Set DNS/WINS" is set to "Set nameserver (3.0b10)" and "Check if the apparent public IP address changed after connecting" is unchecked. It did connect. I was able to access my local shared folders, although very slow. Remote desktop also worked with a local IP such as 192.168.1.16, but not with a computer name. Internet didn't work, couldn't connect to outside at all. It appeared not being a DNS problem, because I pinged 8.8.8.8 with 100% loss, and using IP addresses on a browser didn't work.

My log files were probably too long and got truncated. I will just attach them as files here.

Thanks a lot!

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050); Admin user

git commit 1417c1a1c5bd33c34277585f02de388622192e72

Configuration 98232

"Sanitized" condensed configuration file for /Users/sun/Library/Application Support/Tunnelblick/Configurations/98232.tblk:

proto udp

remote xxx.xxx.xxx.xxx

secret staticvpn.key

port 1194

dev tap

comp-lzo

route-gateway 192.168.1.1

redirect-gateway def1

float

route-method exe

route-delay 2

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

================================================================================

There are no unusual files in 98232.tblk

================================================================================

Configuration preferences:

-skipWarningThatMayNotConnectInFutureBecauseOfOpenVPNOptions = 1

useDNS = 3

-notMonitoringConnection = 0

-routeAllTrafficThroughVpn = 0

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1

-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.6beta04 (build 5050)"

)

lastLaunchTime = 548546836.852152

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

lastConnectedDisplayName = 98232

keyboardShortcutIndex = 1

updateCheckAutomatically = 0

NSWindow Frame ConnectingWindow = 525 518 389 187 0 0 1440 877

detailsWindowFrameVersion = 5050

detailsWindowFrame = {{79, 314}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = 98232

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

haveDealtWithAfterDisconnect = 1

SUEnableAutomaticChecks = 0

SUScheduledCheckInterval = 86400

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050)

2018-05-20 15:07:50 *Tunnelblick: Attempting connection with 98232 using shadow copy; Set nameserver = 777; not monitoring connection

2018-05-20 15:07:50 *Tunnelblick: openvpnstart start 98232.tblk 61310 777 0 1 1 1065330 -ptADGNWradsgnw 2.4.6-openssl-1.0.2o

2018-05-20 15:07:51 *Tunnelblick: openvpnstart log:

Loading tap-signed.kext

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.6-openssl-1.0.2o/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Ssun-SLibrary-SApplication Support-STunnelblick-SConfigurations-S98232.tblk-SContents-SResources-Sconfig.ovpn.777_0_1_1_1065330.61310.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 5050 3.7.6beta04 (build 5050)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/sun/98232.tblk/Contents/Resources

--management

127.0.0.1

61310

/Library/Application Support/Tunnelblick/ajjlgfkgjkmcmfkpoekflfgnhgompkapfpddnjan.mip

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.2.up.tunnelblick.sh -9 -a -d -f -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.2.down.tunnelblick.sh -9 -a -d -f -w -ptADGNWradsgnw

2018-05-20 15:07:50 *Tunnelblick: openvpnstart starting OpenVPN

2018-05-20 15:07:51 *Tunnelblick: Established communication with OpenVPN

2018-05-20 15:07:51 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode

2018-05-20 15:07:51 OpenVPN 2.4.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Apr 26 2018

2018-05-20 15:07:51 library versions: OpenSSL 1.0.2o 27 Mar 2018, LZO 2.10

2018-05-20 15:07:51 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:61310

2018-05-20 15:07:51 Need hold release from management interface, waiting...

2018-05-20 15:07:51 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:61310

2018-05-20 15:07:51 MANAGEMENT: CMD 'pid'

2018-05-20 15:07:51 MANAGEMENT: CMD 'state on'

2018-05-20 15:07:51 MANAGEMENT: CMD 'state'

2018-05-20 15:07:51 MANAGEMENT: CMD 'bytecount 1'

2018-05-20 15:07:51 MANAGEMENT: CMD 'hold release'

2018-05-20 15:07:51 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2018-05-20 15:07:51 Outgoing Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key

2018-05-20 15:07:51 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2018-05-20 15:07:51 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication

2018-05-20 15:07:51 Incoming Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key

2018-05-20 15:07:51 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

2018-05-20 15:07:51 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication

2018-05-20 15:07:51 TUN/TAP device /dev/tap0 opened

2018-05-20 15:07:51 /Applications/Tunnelblick.app/Contents/Resources/client.2.up.tunnelblick.sh -9 -a -d -f -w -ptADGNWradsgnw tap0 1500 1577 init

2018-05-20 15:07:51 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 15:07:51 Socket Buffers: R=[196724->196724] S=[9216->9216]

2018-05-20 15:07:51 UDP link local (bound): [AF_INET][undef]:1194

2018-05-20 15:07:51 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 15:07:51 Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194

2018-05-20 15:07:54 /sbin/route add -net xxx.xxx.xxx.xxx 192.168.43.1 255.255.255.255

add net xxx.xxx.xxx.xxx: gateway 192.168.43.1

2018-05-20 15:07:54 /sbin/route add -net 0.0.0.0 192.168.1.1 128.0.0.0

add net 0.0.0.0: gateway 192.168.1.1

2018-05-20 15:07:54 /sbin/route add -net 128.0.0.0 192.168.1.1 128.0.0.0

2018-05-20 15:07:54 *Tunnelblick: No 'connected.sh' script to execute

add net 128.0.0.0: gateway 192.168.1.1

2018-05-20 15:07:54 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2018-05-20 15:07:54 Initialization Sequence Completed

2018-05-20 15:07:54 MANAGEMENT: >STATE:1526854074,CONNECTED,SUCCESS,,xxx.xxx.xxx.xxx,1194,,

2018-05-20 15:10:12 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed

2018-05-20 15:10:12 *Tunnelblick: No 'pre-disconnect.sh' script to execute

2018-05-20 15:10:12 *Tunnelblick: Disconnecting using 'kill'

2018-05-20 15:10:12 event_wait : Interrupted system call (code=4)

2018-05-20 15:10:12 /sbin/route delete -net xxx.xxx.xxx.xxx 192.168.43.1 255.255.255.255

delete net xxx.xxx.xxx.xxx: gateway 192.168.43.1

2018-05-20 15:10:12 /sbin/route delete -net 0.0.0.0 192.168.1.1 128.0.0.0

delete net 0.0.0.0: gateway 192.168.1.1

2018-05-20 15:10:12 /sbin/route delete -net 128.0.0.0 192.168.1.1 128.0.0.0

delete net 128.0.0.0: gateway 192.168.1.1

2018-05-20 15:10:12 Closing TUN/TAP interface

2018-05-20 15:10:12 /Applications/Tunnelblick.app/Contents/Resources/client.2.down.tunnelblick.sh -9 -a -d -f -w -ptADGNWradsgnw tap0 1500 1577 init

ipconfig_set tap0 NONE failed: interface doesn't exist

2018-05-20 15:10:12 MANAGEMENT: Client disconnected

2018-05-20 15:10:12 WARNING: Failed running command (--up/--down): external program exited with error status: 1

2018-05-20 15:10:12 Exiting due to fatal error

2018-05-20 15:10:14 *Tunnelblick: No 'post-disconnect.sh' script to execute

2018-05-20 15:10:14 *Tunnelblick: Expected disconnection occurred.

2018-05-20 15:01:18 Tunnelblick[15553] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-05-20 15:01:19 Tunnelblick[15553] Finished shutting down Tunnelblick; allowing termination

2018-05-20 15:01:35 Tunnelblick[16033] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050)

2018-05-20 15:04:36 Tunnelblick[16033] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked

2018-05-20 15:05:28 Tunnelblick[16033] Set 'expect disconnect' flag

2018-05-20 15:06:53 Tunnelblick[16033] applicationShouldTerminate: termination for unknown reason, probably Command-Q; delayed until 'shutdownTunnelblick' finishes

2018-05-20 15:06:54 Tunnelblick[16033] Finished shutting down Tunnelblick; allowing termination

2018-05-20 15:07:15 Tunnelblick[16152] Tunnelblick: OS X 10.12.6; Tunnelblick 3.7.6beta04 (build 5050)

2018-05-20 15:10:12 Tunnelblick[16152] Set 'expect disconnect' flag

2018-05-20 15:10:19 Tunnelblick[16152] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked

NameserverCheckPublicIPYes.log

NameserverCheckPublicIPNo.log

Nameserver30b10CheckPublicIPNo.log

Reply all

Reply to author

Forward

0 new messages