I would appreciate help solving dns problem
140 views
Skip to first unread message
Tim
Feb 11, 2021, 11:06:32 AM2/11/21
to tunnelbli...@googlegroups.com
Trying to get access to my work VPN (to do some work!) and am not having success via the suggestions on Tunnelblick site: https://tunnelblick.net/cConnectedBut.html
I am able to connect, but once connected I am unable to do anything else on computer, apparently because of a DNS issue. I have manually set DNS servers per TB instructions, but still no luck.
Other coworkers are successfully using VPN, including others on Macs.
Logs below.
Any help would be appreciated.
Thank you,
Tim
*Tunnelblick: macOS 10.14.6 (18G8012); Tunnelblick 3.8.4a (build 5601); Admin user
git commit 73f5ce7b5ccd45d0286a1c9fc30064a914046d3f
The Tunnelblick.app process is not being translated
System Integrity Protection is enabled
Configuration twojtyniak
"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/twojtyniak.tblk:
client
dev tun
proto udp
remote 52.0.54.25 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert twojtyniak.crt
key twojtyniak.key
remote-cert-tls server
verb 3
redirect-gateway def1
================================================================================
Files in twojtyniak.tblk:
Contents/Resources/two….crt
Contents/Resources/ca.crt
Contents/Resources/config.ovpn
Contents/Resources/two….key
================================================================================
Tunnelblick Kext Policy Data:
================================================================================
Configuration preferences:
useDNS = 1
-resetPrimaryInterfaceAfterUnexpectedDisconnect = 0
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-disableNetworkAccessAfterUnexpectedDisconnect = 0
-lastConnectionSucceeded = 1
================================================================================
Wildcard preferences:
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
================================================================================
Program preferences:
launchAtNextLogin = 1
tunnelblickVersionHistory = (
"3.8.4a (build 5601)"
)
statusDisplayNumber = 0
lastLaunchTime = 634750981.831625
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = twojtyniak
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 2765 1241 389 187 1680 589 2560 1057
NSWindow Frame ListingWindow = 1794 569 500 422 1680 589 2560 1057
detailsWindowFrameVersion = 5601
detailsWindowFrame = {{1714, 920}, {903, 713}}
detailsWindowLeftFrame = {{0, 0}, {163.5, 595}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = twojtyniak
AdvancedWindowTabIdentifier = vpnCredentials
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2021-02-11 15:43:02 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times
================================================================================
Forced preferences:
(None)
================================================================================
Deployed forced preferences:
(None)
================================================================================
Tunnelblick Log:
2021-02-11 10:43:47.705002 *Tunnelblick: macOS 10.14.6 (18G8012); Tunnelblick 3.8.4a (build 5601)
2021-02-11 10:43:47.863768 *Tunnelblick: Attempting connection with twojtyniak; Set nameserver = 769; monitoring connection
2021-02-11 10:43:47.864460 *Tunnelblick: openvpnstart start twojtyniak.tblk 54074 769 0 3 0 1098032 -ptADGNWradsgnw 2.4.9-openssl-1.1.1i
2021-02-11 10:43:47.882937 *Tunnelblick: openvpnstart starting OpenVPN
2021-02-11 10:43:48.165805 OpenVPN 2.4.9 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Dec 14 2020
2021-02-11 10:43:48.165864 library versions: OpenSSL 1.1.1i 8 Dec 2020, LZO 2.10
2021-02-11 10:43:48.166768 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:54074
2021-02-11 10:43:48.166796 Need hold release from management interface, waiting...
2021-02-11 10:43:48.490096 *Tunnelblick: openvpnstart log:
OpenVPN started successfully.
Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.9-openssl-1.1.1i/openvpn
--daemon
--log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1098032.54074.openvpn.log
--cd /Library/Application Support/Tunnelblick/Shared/twojtyniak.tblk/Contents/Resources
--machine-readable-output
--setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5601 3.8.4a (build 5601)"
--verb 3
--config /Library/Application Support/Tunnelblick/Shared/twojtyniak.tblk/Contents/Resources/config.ovpn
--setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/twojtyniak.tblk/Contents/Resources
--verb 3
--cd /Library/Application Support/Tunnelblick/Shared/twojtyniak.tblk/Contents/Resources
--management 127.0.0.1 54074 /Library/Application Support/Tunnelblick/pobkmoncjokkgjgkhhjdgggfilmiileckclgocia.mip
--management-query-passwords
--management-hold
--script-security 2
--route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
--down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2021-02-11 10:43:48.501585 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:54074
2021-02-11 10:43:48.527604 MANAGEMENT: CMD 'pid'
2021-02-11 10:43:48.527696 MANAGEMENT: CMD 'auth-retry interact'
2021-02-11 10:43:48.527730 MANAGEMENT: CMD 'state on'
2021-02-11 10:43:48.527753 MANAGEMENT: CMD 'state'
2021-02-11 10:43:48.527782 MANAGEMENT: CMD 'bytecount 1'
2021-02-11 10:43:48.529172 *Tunnelblick: Established communication with OpenVPN
2021-02-11 10:43:48.532652 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2021-02-11 10:43:48.535928 MANAGEMENT: CMD 'hold release'
2021-02-11 10:43:48.536093 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2021-02-11 10:43:48.538190 TCP/UDP: Preserving recently used remote address: [AF_INET]52.0.54.25:1194
2021-02-11 10:43:48.538244 Socket Buffers: R=[786896->786896] S=[9216->9216]
2021-02-11 10:43:48.538256 UDP link local: (not bound)
2021-02-11 10:43:48.538265 UDP link remote: [AF_INET]52.0.54.25:1194
2021-02-11 10:43:48.538286 MANAGEMENT: >STATE:1613058228,WAIT,,,,,,
2021-02-11 10:43:48.583825 MANAGEMENT: >STATE:1613058228,AUTH,,,,,,
2021-02-11 10:43:48.583889 TLS: Initial packet from [AF_INET]52.0.54.25:1194, sid=12fff9a3 9c8f26ef
2021-02-11 10:43:48.630822 VERIFY OK: depth=1, C=US, ST=GA, L=Norcross, O=ProfitZoom, OU=DevGroup, CN=ProfitZoom CA, name=EasyRSA, emailAddress=mfo...@bravepoint.com
2021-02-11 10:43:48.631355 VERIFY KU OK
2021-02-11 10:43:48.631392 Validating certificate extended key usage
2021-02-11 10:43:48.631412 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-02-11 10:43:48.631465 VERIFY EKU OK
2021-02-11 10:43:48.631490 VERIFY OK: depth=0, C=US, ST=GA, L=Norcross, O=ProfitZoom, OU=DevGroup, CN=server, name=EasyRSA, emailAddress=mfo...@bravepoint.com
2021-02-11 10:43:48.726286 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2021-02-11 10:43:48.726383 [server] Peer Connection Initiated with [AF_INET]52.0.54.25:1194
2021-02-11 10:43:49.886307 MANAGEMENT: >STATE:1613058229,GET_CONFIG,,,,,,
2021-02-11 10:43:49.886393 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2021-02-11 10:43:49.928816 PUSH: Received control message: 'PUSH_REPLY,route 172.31.16.0 255.255.240.0,route 192.168.160.0 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.56 255.255.255.0,peer-id 6,cipher AES-256-GCM'
2021-02-11 10:43:49.929011 OPTIONS IMPORT: timers and/or timeouts modified
2021-02-11 10:43:49.929102 OPTIONS IMPORT: --ifconfig/up options modified
2021-02-11 10:43:49.929130 OPTIONS IMPORT: route options modified
2021-02-11 10:43:49.929141 OPTIONS IMPORT: route-related options modified
2021-02-11 10:43:49.929150 OPTIONS IMPORT: peer-id set
2021-02-11 10:43:49.929159 OPTIONS IMPORT: adjusting link_mtu to 1624
2021-02-11 10:43:49.929167 OPTIONS IMPORT: data channel crypto options modified
2021-02-11 10:43:49.929176 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-02-11 10:43:49.929270 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-02-11 10:43:49.929283 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-02-11 10:43:49.929573 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2021-02-11 10:43:49.929605 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2021-02-11 10:43:49.929702 Opened utun device utun2
2021-02-11 10:43:49.929746 MANAGEMENT: >STATE:1613058229,ASSIGN_IP,,10.8.0.56,,,,
2021-02-11 10:43:49.929771 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2021-02-11 10:43:49.933905 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2021-02-11 10:43:49.933974 /sbin/ifconfig utun2 10.8.0.56 10.8.0.56 netmask 255.255.255.0 mtu 1500 up
2021-02-11 10:43:49.937430 /sbin/route add -net 10.8.0.0 10.8.0.56 255.255.255.0
add net 10.8.0.0: gateway 10.8.0.56
2021-02-11 10:43:49.941595 /sbin/route add -net 52.0.54.25 192.168.68.1 255.255.255.255
add net 52.0.54.25: gateway 192.168.68.1
2021-02-11 10:43:49.943959 /sbin/route add -net 0.0.0.0 10.8.0.1 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.1
2021-02-11 10:43:49.946977 /sbin/route add -net 128.0.0.0 10.8.0.1 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.1
2021-02-11 10:43:49.958100 MANAGEMENT: >STATE:1613058229,ADD_ROUTES,,,,,,
2021-02-11 10:43:49.958296 /sbin/route add -net 172.31.16.0 10.8.0.1 255.255.240.0
add net 172.31.16.0: gateway 10.8.0.1
2021-02-11 10:43:49.964924 /sbin/route add -net 192.168.160.0 10.8.0.1 255.255.255.0
add net 192.168.160.0: gateway 10.8.0.1
10:43:50 *Tunnelblick: **********************************************
10:43:50 *Tunnelblick: Start of output from client.up.tunnelblick.sh
10:43:52 *Tunnelblick: NOTE: No network configuration changes need to be made.
10:43:52 *Tunnelblick: WARNING: Will NOT monitor for other network configuration changes.
10:43:52 *Tunnelblick: WARNING: Will NOT disable IPv6 settings.
10:43:52 *Tunnelblick: DNS servers '10.8.0.1' were set manually
10:43:52 *Tunnelblick: DNS servers '10.8.0.1' will be used for DNS queries when the VPN is active
10:43:52 *Tunnelblick: NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
10:43:52 *Tunnelblick: Flushed the DNS cache via dscacheutil
10:43:52 *Tunnelblick: /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
10:43:52 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
10:43:52 *Tunnelblick: Not notifying mDNSResponderHelper that the DNS cache was flushed because it is not running
10:43:52 *Tunnelblick: End of output from client.up.tunnelblick.sh
10:43:52 *Tunnelblick: **********************************************
2021-02-11 10:43:52.383868 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-02-11 10:43:52.383907 Initialization Sequence Completed
2021-02-11 10:43:52.383948 MANAGEMENT: >STATE:1613058232,CONNECTED,SUCCESS,10.8.0.56,52.0.54.25,1194,,
2021-02-11 10:43:53.608328 *Tunnelblick: DNS address 10.8.0.1 is being routed through the VPN
2021-02-11 10:44:36.105912 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2021-02-11 10:44:36.243763 *Tunnelblick: fetched IP address information using the ipInfo host's IP address after connecting.
2021-02-11 10:44:56.694711 *Tunnelblick: Disconnecting; 'Disconnect' (toggle) menu command invoked
2021-02-11 10:44:56.842841 *Tunnelblick: Disconnecting using 'kill'
2021-02-11 10:44:57.006627 event_wait : Interrupted system call (code=4)
2021-02-11 10:44:57.007394 /sbin/route delete -net 172.31.16.0 10.8.0.1 255.255.240.0
delete net 172.31.16.0: gateway 10.8.0.1
2021-02-11 10:44:57.011590 /sbin/route delete -net 192.168.160.0 10.8.0.1 255.255.255.0
delete net 192.168.160.0: gateway 10.8.0.1
2021-02-11 10:44:57.013653 /sbin/route delete -net 52.0.54.25 192.168.68.1 255.255.255.255
delete net 52.0.54.25: gateway 192.168.68.1
2021-02-11 10:44:57.016102 /sbin/route delete -net 0.0.0.0 10.8.0.1 128.0.0.0
delete net 0.0.0.0: gateway 10.8.0.1
2021-02-11 10:44:57.018354 /sbin/route delete -net 128.0.0.0 10.8.0.1 128.0.0.0
delete net 128.0.0.0: gateway 10.8.0.1
2021-02-11 10:44:57.020573 Closing TUN/TAP interface
2021-02-11 10:44:57.020887 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1552 10.8.0.56 255.255.255.0 init
10:44:57 *Tunnelblick: **********************************************
10:44:57 *Tunnelblick: Start of output from client.down.tunnelblick.sh
10:44:58 *Tunnelblick: WARNING: Not restoring network settings because no saved Tunnelblick DNS information was found.
10:44:58 *Tunnelblick: Flushed the DNS cache with dscacheutil -flushcache
10:44:58 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
10:44:58 *Tunnelblick: End of output from client.down.tunnelblick.sh
10:44:58 *Tunnelblick: **********************************************
2021-02-11 10:44:58.546633 SIGTERM[hard,] received, process exiting
2021-02-11 10:44:58.546675 MANAGEMENT: >STATE:1613058298,EXITING,SIGTERM,,,,,
2021-02-11 10:44:58.907959 *Tunnelblick: Expected disconnection occurred.
================================================================================
Down log:
10:44:57 *Tunnelblick: **********************************************
10:44:57 *Tunnelblick: Start of output from client.down.tunnelblick.sh
10:44:58 *Tunnelblick: WARNING: Not restoring network settings because no saved Tunnelblick DNS information was found.
10:44:58 *Tunnelblick: Flushed the DNS cache with dscacheutil -flushcache
10:44:58 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
10:44:58 *Tunnelblick: End of output from client.down.tunnelblick.sh
10:44:58 *Tunnelblick: **********************************************
================================================================================
Previous down log:
10:16:45 *Tunnelblick: **********************************************
10:16:45 *Tunnelblick: Start of output from client.down.tunnelblick.sh
10:16:46 *Tunnelblick: WARNING: Not restoring network settings because no saved Tunnelblick DNS information was found.
10:16:46 *Tunnelblick: Flushed the DNS cache with dscacheutil -flushcache
10:16:46 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
10:16:46 *Tunnelblick: End of output from client.down.tunnelblick.sh
10:16:46 *Tunnelblick: **********************************************
================================================================================
Network services:
An asterisk (*) denotes that a network service is disabled.
Thunderbolt Ethernet Slot 2
USB 10/100/1000 LAN
AX88179 USB 3.0 to Gigabit Ethernet
iPhone USB 3
iPhone USB 2
Wi-Fi
iPhone USB
Thunderbolt Bridge
Tracker Protection
Wi-Fi Power (en0): On
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
XHC0: flags=0<> mtu 0
XHC20: flags=0<> mtu 0
en5: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_HWTAGGING>
ether 64:4b:f0:00:0d:22
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (<unknown type>)
status: inactive
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 98:01:a7:ab:3c:13
inet6 fe80::838:9bfd:a32d:232a%en0 prefixlen 64 secured scopeid 0x7
inet 192.168.68.112 netmask 0xffffff00 broadcast 192.168.68.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 0a:01:a7:ab:3c:13
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
ether 52:74:82:63:4a:9c
inet6 fe80::5074:82ff:fe63:4a9c%awdl0 prefixlen 64 scopeid 0x9
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether 6a:00:02:62:50:c0
media: autoselect <full-duplex>
status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether 6a:00:02:62:50:c1
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 6a:00:02:62:50:c0
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en1 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 10 priority 0 path cost 0
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 11 priority 0 path cost 0
nd6 options=201<PERFORMNUD,DAD>
media: <unknown type>
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::82bd:9dd2:7439:62bb%utun0 prefixlen 64 scopeid 0xd
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::7b81:e79b:5c8:aff7%utun1 prefixlen 64 scopeid 0xe
nd6 options=201<PERFORMNUD,DAD>
ipsec0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1400
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
65 0 0xffffff7f81207000 0x184000 0x184000 at.obdev.nke.LittleSnitch (5474) 21D3E540-82E5-38B3-9030-999B3D754C89 <8 6 5 3 1>
105 0 0xffffff7f81094000 0x10000 0x10000 com.usboverdrive.driver.hid (4016) 2F37229C-F840-3242-B938-70EE79F0048E <43 6 5 3>
145 0 0xffffff7f80f5a000 0x5000 0x5000 com.driver.LogJoystick (2.0) B02191E1-23F0-3B9B-BD97-F6173C3C2BD4 <43 6 5 3>
164 0 0xffffff7f815e0000 0x5000 0x5000 com.nomachine.driver.nxau (4.1.b2) 78172556-B6A4-3112-BA41-E79D18108476 <85 6 5 3 1>
166 0 0xffffff7f8108a000 0x5000 0x5000 com.Cycling74.driver.Soundflower (2) 2D779840-7439-31E5-8A66-D786C3F47B75 <85 6 5 3>
193 0 0xffffff7f84d40000 0x7000 0x7000 com.joshuawise.kexts.HoRNDIS (6) 2FF769BE-1667-3CE2-A8AE-C9D86BAF30D4 <54 16 6 5 3 1>
199 0 0xffffff7f84d61000 0x77000 0x77000 com.coriolis-systems.driver.Snapshot (123) D5FF7465-F50B-31F7-9F48-95605BCB7050 <27 6 5 3 1>
================================================================================
Quit Log:
2021-02-11 10:42:54.109627 applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes)
2021-02-11 10:42:54.111267 shutDownTunnelblick: started.
2021-02-11 10:42:54.112602 shutDownTunnelblick: Starting cleanup.
2021-02-11 10:42:54.113072 cleanup: Entering cleanup
2021-02-11 10:42:54.113525 synchronized user defaults
2021-02-11 10:42:54.760022 shutDownTunnelblick: Cleanup finished.
2021-02-11 10:42:54.760471 Finished shutting down Tunnelblick; allowing termination
================================================================================
Console Log:
2021-02-11 10:16:20.974087 Tunnelblick[517] currentIPInfo(Name): IP address info could not be fetched within 38.4 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000033c780 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2021-02-11 10:16:21.109752 Tunnelblick[517] currentIPInfo(Address): Code = -1202, indicating an SSL error but that the server was reached by IP address; probably have a DNS problem
2021-02-11 10:16:45.091084 Tunnelblick[517] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
2021-02-11 10:19:03.526839 Tunnelblick[517] currentIPInfo(Name): IP address info could not be fetched within 38.4 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6000001e2400 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2021-02-11 10:19:03.675051 Tunnelblick[517] currentIPInfo(Address): Code = -1202, indicating an SSL error but that the server was reached by IP address; probably have a DNS problem
2021-02-11 10:25:01.263858 Tunnelblick[517] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
2021-02-11 10:36:32.242401 Tunnelblick[517] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
2021-02-11 10:37:17.864961 Tunnelblick[517] currentIPInfo(Name): IP address info could not be fetched within 38.2 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6000000cb390 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2021-02-11 10:37:18.015310 Tunnelblick[517] currentIPInfo(Address): Code = -1202, indicating an SSL error but that the server was reached by IP address; probably have a DNS problem
2021-02-11 10:40:39.405752 Tunnelblick[517] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
2021-02-11 10:41:49.021893 Tunnelblick[517] Removing *-skipWarningAboutDownroot
2021-02-11 10:41:49.022017 Tunnelblick[517] Removing *-skipWarningAboutNoTunOrTap
2021-02-11 10:41:49.022109 Tunnelblick[517] Removing *-skipWarningUnableToToEstablishOpenVPNLink
2021-02-11 10:41:49.022209 Tunnelblick[517] Removing *-skipWarningThatCannotConnectBecauseOfOpenVPNOptions
2021-02-11 10:41:49.022286 Tunnelblick[517] Removing *-skipWarningThatNotUsingSpecifiedOpenVPN
2021-02-11 10:41:49.022360 Tunnelblick[517] Removing *-skipWarningThatCannotConnectBecauseOfOpenVPNOptionConflicts
2021-02-11 10:41:49.022446 Tunnelblick[517] Removing *-skipWarningThatMayNotConnectInFutureBecauseOfOpenVPNOptions
2021-02-11 10:42:54.112972 Tunnelblick[517] cleanup: Entering cleanup
2021-02-11 10:42:54.113443 Tunnelblick[517] synchronized user defaults
2021-02-11 10:42:54.401299 Tunnelblick[517] Set 'expect disconnect 0 ALL'
2021-02-11 10:42:54.760407 Tunnelblick[517] Finished shutting down Tunnelblick; allowing termination
2021-02-11 10:43:00.457269 Tunnelblick[11889] Tunnelblick: macOS 10.14.6; Tunnelblick 3.8.4a (build 5601)
2021-02-11 10:43:02.049886 Tunnelblick[11889] Sparkle: ===== Tunnelblick.app =====
2021-02-11 10:43:02.050302 Tunnelblick[11889] Sparkle: Verified appcast signature
2021-02-11 10:43:47.704446 Tunnelblick[11889] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
2021-02-11 10:44:36.104386 Tunnelblick[11889] currentIPInfo(Name): IP address info could not be fetched within 38.6 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600001347870 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2021-02-11 10:44:36.243145 Tunnelblick[11889] currentIPInfo(Address): Code = -1202, indicating an SSL error but that the server was reached by IP address; probably have a DNS problem
2021-02-11 10:44:56.985544 Tunnelblick[11889] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Stwojtyniak-Dtblk-SContents-SResources'
Tunnelblick developer
Feb 11, 2021, 11:12:28 AM2/11/21
to tunnelblick-discuss
This:
10:43:52 *Tunnelblick: DNS servers '10.8.0.1' were set manually
means that you manually set the DNS servers to 10.8.0.1, which is not a public DNS server. It is probably the IP address of your router (which is not what any Tunnelblick instructions say to set DNS to).
Instead, try setting DNS to 8.8.8.8 or 8.8.4.4 (Google Public DNS) or 1.1.1.1 (Cloudflare/APNIC).
Tim Wojtyniak
Feb 11, 2021, 12:23:09 PM2/11/21
to tunnelblick-discuss
Thank you. I saw that, but that does not match anything that I have set on the client, which is all I have access to change. Is this happening on the server or is it part of the config file I got, perhaps?
Does it make sense that others do not have this problem?
Regards,
Tim
Tim Wojtyniak
Feb 11, 2021, 12:24:34 PM2/11/21
to tunnelblick-discuss
10.8.0.1 is not the address of the router that the client is connecting through.
Tunnelblick developer
Feb 11, 2021, 12:32:24 PM2/11/21
to tunnelblick-discuss
"DNS servers '10.8.0.1' were set manually" means exactly that: DNS was set manually. It isn't from the OpenVPN configuration file, the OpenVPN server, or Tunnelblick.
I cannot reconcile the screenshot of the Network System Preferences with that. (Unless you're connected to the Internet via both Wi-Fi and another method such as Ethernet; I'm not sure what happens with that.)
You might want to restart your computer; maybe something is messed up with your network setup that might be fixed by that.
Tim Wojtyniak
Feb 11, 2021, 12:52:09 PM2/11/21
to tunnelblick-discuss
I very much appreciate you taking the time to review this. The behavior doesn't match anyone else's nor anything I knowingly configured. I will try restart and other things at the OS level.
Reply all
Reply to author
Forward
0 new messages