Tunnelblick connects, but gives up on fetching IP address

3,237 views

Skip to first unread message

John Carrasquillo

unread,

Sep 19, 2013, 5:15:16 PM9/19/13

to tunnelbli...@googlegroups.com

Hello all,

This is the first time I've set anything like a VPN up before, so please know that my knowledge is limited. When I connect, I can ping 10.8.0.1 as well as 10.8.0.6, but I get the error when fetching the IP address and the internet does not work. I have tried to go to Google using an IP address, but that was a no-go either, which according to what I've read means that it's not a DNS issue. Here are the 3 files requested:

CONFIGURATION FILE:

##############################################

# Sample client-side OpenVPN 2.0 config file #

# for connecting to multi-client server. #

# #

# This configuration can be used by multiple #

# clients, however each client should have #

# its own cert and key files. #

# #

# On Windows, you might want to rename this #

# file so it has a .ovpn extension #

##############################################

# Specify that we are a client and that we

# will be pulling certain config file directives

# from the server.

client

# Use the same setting as you are using on

# the server.

# On most systems, the VPN will not function

# unless you partially or fully disable

# the firewall for the TUN/TAP interface.

;dev tap

dev tun

# Windows needs the TAP-Win32 adapter name

# from the Network Connections panel

# if you have more than one. On XP SP2,

# you may need to disable the firewall

# for the TAP adapter.

;dev-node MyTap

# Are we connecting to a TCP or

# UDP server? Use the same setting as

# on the server.

;proto tcp

proto udp

# The hostname/IP and port of the server.

# You can have multiple remote entries

# to load balance between the servers.

remote <my hostname> <port>

;remote my-server-2 1194

# Choose a random host from the remote

# list for load-balancing. Otherwise

# try hosts in the order specified.

;remote-random

# Keep trying indefinitely to resolve the

# host name of the OpenVPN server. Very useful

# on machines which are not permanently connected

# to the internet such as laptops.

resolv-retry infinite

# Most clients don't need to bind to

# a specific local port number.

nobind

# Downgrade privileges after initialization (non-Windows only)

;user nobody

;group nobody

# Try to preserve some state across restarts.

persist-key

persist-tun

# If you are connecting through an

# HTTP proxy to reach the actual OpenVPN

# server, put the proxy server/IP and

# port number here. See the man page

# if your proxy server requires

# authentication.

;http-proxy-retry # retry on connection failures

;http-proxy [proxy server] [proxy port #]

# Wireless networks often produce a lot

# of duplicate packets. Set this flag

# to silence duplicate packet warnings.

;mute-replay-warnings

# SSL/TLS parms.

# See the server config file for more

# description. It's best to use

# a separate .crt/.key file pair

# for each client. A single ca

# file can be used for all clients.

ca ca.crt

cert X.crt

key X.key

# Verify server certificate by checking

# that the certicate has the nsCertType

# field set to "server". This is an

# important precaution to protect against

# a potential attack discussed here:

# http://openvpn.net/howto.html#mitm

# To use this feature, you will need to generate

# your server certificates with the nsCertType

# field set to "server". The build-key-server

# script in the easy-rsa folder will do this.

ns-cert-type server

# If a tls-auth key is used on the server

# then every client must also have the key.

;tls-auth ta.key 1

# Select a cryptographic cipher.

# If the cipher option is used on the server

# then you must also specify it here.

;cipher x

# Enable compression on the VPN link.

# Don't enable this unless it is also

# enabled in the server config file.

comp-lzo

# Set log file verbosity.

verb 3

# Silence repeating messages

;mute 20

redirect-gateway def1

================================================================================

TUNNELBLICK LOG:

2013-09-19 15:57:53 *Tunnelblick: OS X 10.8.4; Tunnelblick 3.4beta08 (build 3576); prior version 3.3.0 (build 3518)

2013-09-19 15:57:55 *Tunnelblick: Attempting connection with HomeServer Configuration using shadow copy; Set nameserver = 5; monitoring connection

2013-09-19 15:57:55 *Tunnelblick: openvpnstart start HomeServer\ Configuration.tblk 1337 5 0 1 0 817 -atADGNWradsgnw -

2013-09-19 15:57:55 *Tunnelblick: openvpnstart log:

Loading tun.kext

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn

--cd

/Library/Application Support/Tunnelblick/Users/NAME/CONFIGURATION.tblk/Contents/Resources

--daemon

--management

127.0.0.1

1337

--config

/Library/Application Support/Tunnelblick/Users/NAME/CONFIGURATION.tblk/Contents/Resources/config.ovpn

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-$NAME-SLibrary-SApplication Support-STunnelblick-SConfigurations-SCONFIGURATION.tblk-SContents-SResources-Sconfig.ovpn.5_0_1_0_817.1337.openvpn.log

--management-query-passwords

--management-hold

--redirect-gateway

def1

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -m -w -d -f -atADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.1.down.tunnelblick.sh -m -w -d -f -atADGNWradsgnw

--up-restart

2013-09-19 15:57:55 *Tunnelblick: Established communication with OpenVPN

2013-09-19 15:57:55 OpenVPN 2.3.2 i386-apple-darwin10.8.0 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [MH] [IPv6] built on Aug 20 2013

2013-09-19 15:57:55 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2013-09-19 15:57:55 Need hold release from management interface, waiting...

2013-09-19 15:57:55 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2013-09-19 15:57:55 MANAGEMENT: CMD 'pid'

2013-09-19 15:57:55 MANAGEMENT: CMD 'state on'

2013-09-19 15:57:55 MANAGEMENT: CMD 'state'

2013-09-19 15:57:55 MANAGEMENT: CMD 'bytecount 1'

2013-09-19 15:57:55 MANAGEMENT: CMD 'hold release'

2013-09-19 15:57:55 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2013-09-19 15:57:55 Socket Buffers: R=[196724->65536] S=[9216->65536]

2013-09-19 15:57:55 MANAGEMENT: >STATE:1379624275,RESOLVE,,,

2013-09-19 15:57:55 UDPv4 link local: [undef]

2013-09-19 15:57:55 UDPv4 link remote: [AF_INET]XX.XX.XXX.XX:XXXX

2013-09-19 15:57:55 MANAGEMENT: >STATE:1379624275,WAIT,,,

2013-09-19 15:57:55 MANAGEMENT: >STATE:1379624275,AUTH,,,

2013-09-19 15:57:55 TLS: Initial packet from [AF_INET]XX.XX.XXX.XX:XXXX, sid=3a0b5f65 bee48171

2013-09-19 15:57:55 *Tunnelblick: openvpnstart starting OpenVPN:

* /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn --cd /Library/Application Support/Tunnelblick/Users/NAME/CONFIGURATION.tblk/Contents/Resources --daemon --management 127.0.0.1 1337 --config /Library/Application Support/Tunnelblick/Users/NAME/CONFIGURATION.tblk/Contents/Resources/config.ovpn --log /Library/Application Support/Tunnelblick/Logs/-SUsers-SNAME-SLibrary-SApplication Support-STunnelblick-SConfigurations-SCONFIGURATION.tblk-SContents-SResources-Sconfig.ovpn.5_0_1_0_817.1337.openvpn.log --management-query-passwords --management-hold --redirect-gateway def1 --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -m -w -d -f -atADGNWradsgnw --down /Applications/Tunnelblick.app/Contents/Resources/client.1.down.tunnelblick.sh -m -w -d -f -atADGNWradsgnw --up-restart

2013-09-19 15:57:56 VERIFY OK: depth=1, C=US, ST=AL, L=Oxford, O=OpenVPN, CN=OpenVPN-CA, emailAddress=X

2013-09-19 15:57:56 VERIFY OK: nsCertType=SERVER

2013-09-19 15:57:56 VERIFY OK: depth=0, C=US, ST=AL, O=OpenVPN, CN=server, emailAddress=X

2013-09-19 15:57:57 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key

2013-09-19 15:57:57 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2013-09-19 15:57:57 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key

2013-09-19 15:57:57 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2013-09-19 15:57:57 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

2013-09-19 15:57:57 [server] Peer Connection Initiated with [AF_INET]XX.XX.XXX.XX:XXXX

2013-09-19 15:57:58 MANAGEMENT: >STATE:1379624278,GET_CONFIG,,,

2013-09-19 15:57:59 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

2013-09-19 15:57:59 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS XX.XX.XX.X,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'

2013-09-19 15:57:59 OPTIONS IMPORT: timers and/or timeouts modified

2013-09-19 15:57:59 OPTIONS IMPORT: --ifconfig/up options modified

2013-09-19 15:57:59 OPTIONS IMPORT: route options modified

2013-09-19 15:57:59 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2013-09-19 15:57:59 TUN/TAP device /dev/tun0 opened

2013-09-19 15:57:59 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

2013-09-19 15:57:59 MANAGEMENT: >STATE:1379624279,ASSIGN_IP,,10.8.0.6,

2013-09-19 15:57:59 /sbin/ifconfig tun0 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address <---- Is that something?

2013-09-19 15:57:59 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

2013-09-19 15:57:59 /sbin/ifconfig tun0 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up

2013-09-19 15:57:59 /Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -m -w -d -f -atADGNWradsgnw tun0 1500 1542 10.8.0.6 10.8.0.5 init

2013-09-19 15:57:59 /sbin/route add -net XX.XX.XXX.XX 192.168.43.1 255.255.255.255

add net XX.XX.XXX.XX: gateway 192.168.43.1 <---- This isn't my LAN gateway,

problem?

2013-09-19 15:57:59 /sbin/route add -net 0.0.0.0 10.8.0.5 128.0.0.0

add net 0.0.0.0: gateway 10.8.0.5

2013-09-19 15:57:59 /sbin/route add -net 128.0.0.0 10.8.0.5 128.0.0.0

add net 128.0.0.0: gateway 10.8.0.5

2013-09-19 15:57:59 MANAGEMENT: >STATE:1379624279,ADD_ROUTES,,,

2013-09-19 15:57:59 /sbin/route add -net 10.8.0.0 10.8.0.5 255.255.255.0

add net 10.8.0.0: gateway 10.8.0.5

2013-09-19 15:57:59 Initialization Sequence Completed

2013-09-19 15:57:59 MANAGEMENT: >STATE:1379624279,CONNECTED,SUCCESS,10.8.0.6,67.61.136.87

2013-09-19 15:58:00 *Tunnelblick: No 'connected.sh' script to execute

2013-09-19 15:58:35 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.

2013-09-19 15:58:40 *Tunnelblick: Disconnecting; 'disconnect' button pressed

2013-09-19 15:58:40 *Tunnelblick: Disconnecting using 'killall'

2013-09-19 15:58:40 event_wait : Interrupted system call (code=4)

2013-09-19 15:58:40 /sbin/route delete -net 10.8.0.0 10.8.0.5 255.255.255.0

delete net 10.8.0.0: gateway 10.8.0.5

2013-09-19 15:58:40 /sbin/route delete -net XX.XX.XXX.XX 192.168.43.1 255.255.255.255

delete net XX.XX.XXX.XX: gateway 192.168.43.1

2013-09-19 15:58:40 /sbin/route delete -net 0.0.0.0 10.8.0.5 128.0.0.0

delete net 0.0.0.0: gateway 10.8.0.5

2013-09-19 15:58:40 /sbin/route delete -net 128.0.0.0 10.8.0.5 128.0.0.0

delete net 128.0.0.0: gateway 10.8.0.5

2013-09-19 15:58:40 Closing TUN/TAP interface

2013-09-19 15:58:40 /Applications/Tunnelblick.app/Contents/Resources/client.1.down.tunnelblick.sh -m -w -d -f -atADGNWradsgnw tun0 1500 1542 10.8.0.6 10.8.0.5 init

d.add: too few arguments

2013-09-19 15:58:40 SIGTERM[hard,] received, process exiting

2013-09-19 15:58:40 MANAGEMENT: >STATE:1379624320,EXITING,SIGTERM,,

2013-09-19 15:58:41 *Tunnelblick: No 'post-disconnect.sh' script to execute

================================================================================

CONSOLE LOG:

2013-09-19 13:55:11 Tunnelblick[310] DEBUG: checkIPAddressAfterConnectedThread: Delaying 5.000000 seconds before checking connection

2013-09-19 13:55:46 Tunnelblick[310] DEBUG: currentIPInfo(Name): IP address info could not be fetched within 30.0 seconds

2013-09-19 13:55:46 Tunnelblick[310] DEBUG: isOnCancellingListIPCheckThread: threadID '50844160-38349202709735' is not on the the cancelling list

2013-09-19 13:55:46 Tunnelblick[310] DEBUG: Timeout getting IP address using the ipInfo host's name; retrying by IP address

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: cancelAllIPCheckThreadsForConnection: Entered

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 50844160

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: cancelAllIPCheckThreadsForConnection: threadID '50844160-38349202709735' removed from the active list and added to the cancelling list

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: killAllConnectionsIncludingDaemons: has checked for active daemons

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: includeDaemons = 0; noUnknownOpenVPNsRunning = 1; noActiveDaemons = 1; noDownRootsActive = 1

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: killAllConnectionsIncludingDaemons: will use killAll

2013-09-19 13:56:03 Tunnelblick[310] DEBUG: killAllConnectionsIncludingDaemons: requested killAll

2013-09-19 13:56:04 Tunnelblick[310] DEBUG: cancelAllIPCheckThreadsForConnection: Entered

2013-09-19 13:56:04 Tunnelblick[310] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 50844160