Re: [tunnelblick-discuss] Connection succeed. Nslookup and ping all worked. But could not to open webpage either using domain or ip address!

191 views

Skip to first unread message

Jonathan K. Bullard

unread,

May 10, 2013, 5:59:16 AM5/10/13

to tunnelbli...@googlegroups.com, leich...@gmail.com

Tunnelblick 3.2.8 is NOT recomended for use on OS X 10.8 ("Mountain Lion").

Try the latest beta from the Downloads page, with DNS/WINS set to "Set nameserver".

On Fri, May 10, 2013 at 2:00 AM, 陈磊 <leich...@gmail.com> wrote:

I made the connection to my openvpn server succeed, but I can not open any website.
Ping and nslookup all worked, but I could not open webpage using the domain name or the ip address.

BTW:I could connect to the same server using windows openvpn client without any probelm.
ps:I have tried the openvpn server v2.2.2 and v2.2.1, both of them have the same problem when I used tunelblick to connect to it.

The detail symtoms:

I found the dns config was modified succeed:
$cat /etc/resolv.conf
#
# Mac OS X Notice
#
# This file is not used by the host name and address resolution
# or the DNS query routing mechanisms used by most processes on
# this Mac OS X system.
#
# This file is automatically generated.
#
domain openvpn
nameserver 8.8.8.8

nslookup work fine:
$nslookup www.facebook.com
Server: 8.8.8.8
Address: 8.8.8.8#53
Non-authoritative answer:
www.facebook.com canonical name = star.c10r.facebook.com.
Name: star.c10r.facebook.com
Address: 31.13.73.7

traceroute:
$traceroute 31.13.73.7
traceroute to 31.13.73.7 (31.13.73.7), 64 hops max, 52 byte packets
1 10.2.0.1 (10.2.0.1) 225.021 ms 224.627 ms 224.657 ms
2 198.52.235.50 (198.52.235.50) 224.674 ms 224.585 ms 224.737 ms
3 69.31.63.161 (69.31.63.161) 226.383 ms 448.882 ms 228.341 ms
4 69.31.63.65 (69.31.63.65) 489.322 ms
69.31.63.177 (69.31.63.177) 225.179 ms
69.31.63.65 (69.31.63.65) 443.904 ms
5 129.250.2.10 (129.250.2.10) 251.071 ms 448.846 ms 228.048 ms
6 129.250.3.175 (129.250.3.175) 258.890 ms 448.847 ms 257.397 ms
7 129.250.3.173 (129.250.3.173) 258.030 ms 448.802 ms 257.265 ms
8 129.250.193.78 (129.250.193.78) 256.578 ms 448.829 ms 258.207 ms
9 74.119.76.53 (74.119.76.53) 264.532 ms 265.537 ms 255.826 ms
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *

server conf:
local 184.22.232.250
port 10272
proto tcp
dev tun
ca /etc/ca.crt
cert /etc/server.crt
key /etc/server.key
dh /etc/dh1024.pem
server 10.2.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
rcvbuf 65536
mssfix 1300
plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name

client conf:
client
dev tun
proto tcp
remote ip_addr port
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
auth-user-pass
ns-cert-type server
comp-lzo
verb 3
auth-nocache
tun-mtu 1500
redirect-gateway def1

at last, the client log:
2013-05-10 13:39:24 *Tunnelblick: OS X 10.8.3; Tunnelblick 3.2.8 (build 2891.3099)
2013-05-10 13:39:25 *Tunnelblick: Attempting connection with VIP-USO1-T; Set nameserver = 5; monitoring connection
2013-05-10 13:39:25 *Tunnelblick: /Applications/Tunnelblick.app/Contents/Resources/openvpnstart start VIP-USO1-T.ovpn 1338 5 0 0 0 49 -atDNGWrdngw
2013-05-10 13:39:25 *Tunnelblick: openvpnstart message: Loading tun.kext
2013-05-10 13:39:25 *Tunnelblick: Established communication with OpenVPN
2013-05-10 13:39:25 *Tunnelblick: Obtained VPN username and password from the Keychain
2013-05-10 13:39:25 OpenVPN 2.2.1 i386-apple-darwin10.8.0 [SSL] [LZO2] [PKCS11] [eurephia] built on Aug 10 2012
2013-05-10 13:39:25 MANAGEMENT: TCP Socket listening on 127.0.0.1:1338
2013-05-10 13:39:25 Need hold release from management interface, waiting...
2013-05-10 13:39:25 MANAGEMENT: Client connected from 127.0.0.1:1338
2013-05-10 13:39:25 MANAGEMENT: CMD 'pid'
2013-05-10 13:39:25 MANAGEMENT: CMD 'state on'
2013-05-10 13:39:25 MANAGEMENT: CMD 'state'
2013-05-10 13:39:25 MANAGEMENT: CMD 'hold release'
2013-05-10 13:39:25 MANAGEMENT: CMD 'username "Auth" "testuser"'
2013-05-10 13:39:25 MANAGEMENT: CMD 'password [...]'
2013-05-10 13:39:25 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2013-05-10 13:39:25 LZO compression initialized
2013-05-10 13:39:25 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
2013-05-10 13:39:25 Socket Buffers: R=[131072->65536] S=[131072->65536]
2013-05-10 13:39:25 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
2013-05-10 13:39:25 Local Options hash (VER=V4): '69109d17'
2013-05-10 13:39:25 Expected Remote Options hash (VER=V4): 'c0103fa8'
2013-05-10 13:39:25 Attempting to establish TCP connection with 111.111.111.111:7757 [nonblock]
2013-05-10 13:39:25 MANAGEMENT: >STATE:1368164365,TCP_CONNECT,,,
2013-05-10 13:39:25 *Tunnelblick: openvpnstart: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn --cd /Users/Chandler/Library/Application Support/Tunnelblick/Configurations --daemon --management 127.0.0.1 1338 --config /Users/Chandler/Library/Application Support/Tunnelblick/Configurations/VIP-USO1-T.ovpn --log /Library/Application Support/Tunnelblick/Logs/-SUsers-SChandler-SLibrary-SApplication Support-STunnelblick-SConfigurations-SVIP--USO1--T.ovpn.5_0_0_0_49.1338.openvpn.log --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -m -w -d -atDNGWrdngw --down /Applications/Tunnelblick.app/Contents/Resources/client.1.down.tunnelblick.sh -m -w -d -atDNGWrdngw --up-restart
2013-05-10 13:39:26 TCP connection established with 111.111.111.111:7757
2013-05-10 13:39:26 TCPv4_CLIENT link local: [undef]
2013-05-10 13:39:26 TCPv4_CLIENT link remote: 111.111.111.111:7757
2013-05-10 13:39:26 MANAGEMENT: >STATE:1368164366,WAIT,,,
2013-05-10 13:39:26 MANAGEMENT: >STATE:1368164366,AUTH,,,
2013-05-10 13:39:26 TLS: Initial packet from 111.111.111.111:7757, sid=a610681d 7d156053
2013-05-10 13:39:30 VERIFY OK: depth=1, /C=HK/ST=HK/L=Hongkong/O=openvpn/CN=openvpn_CA/emailAddress=te...@126.com
2013-05-10 13:39:30 VERIFY OK: nsCertType=SERVER
2013-05-10 13:39:30 VERIFY OK: depth=0, /C=HK/ST=HK/L=Hongkong/O=openvpn/CN=server/emailAddress=te...@126.com
2013-05-10 13:39:34 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2013-05-10 13:39:34 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2013-05-10 13:39:34 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2013-05-10 13:39:34 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2013-05-10 13:39:34 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2013-05-10 13:39:34 [server] Peer Connection Initiated with 111.111.111.111:7757
2013-05-10 13:39:35 MANAGEMENT: >STATE:1368164375,GET_CONFIG,,,
2013-05-10 13:39:36 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2013-05-10 13:39:37 *Tunnelblick: Flushed the DNS cache
2013-05-10 13:39:37 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.2.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.2.0.6 10.2.0.5'
2013-05-10 13:39:37 OPTIONS IMPORT: timers and/or timeouts modified
2013-05-10 13:39:37 OPTIONS IMPORT: --ifconfig/up options modified
2013-05-10 13:39:37 OPTIONS IMPORT: route options modified
2013-05-10 13:39:37 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2013-05-10 13:39:37 ROUTE default_gateway=192.168.74.254
2013-05-10 13:39:37 TUN/TAP device /dev/tun0 opened
2013-05-10 13:39:37 MANAGEMENT: >STATE:1368164377,ASSIGN_IP,,10.2.0.6,
2013-05-10 13:39:37 /sbin/ifconfig tun0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2013-05-10 13:39:37 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2013-05-10 13:39:37 /sbin/ifconfig tun0 10.2.0.6 10.2.0.5 mtu 1500 netmask 255.255.255.255 up
2013-05-10 13:39:37 /Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -m -w -d -atDNGWrdngw tun0 1500 1544 10.2.0.6 10.2.0.5 init
2013-05-10 13:39:37 /sbin/route add -net 111.111.111.111 192.168.74.254 255.255.255.255
add net 111.111.111.111: gateway 192.168.74.254
2013-05-10 13:39:37 /sbin/route add -net 0.0.0.0 10.2.0.5 128.0.0.0
add net 0.0.0.0: gateway 10.2.0.5
2013-05-10 13:39:37 /sbin/route add -net 128.0.0.0 10.2.0.5 128.0.0.0
add net 128.0.0.0: gateway 10.2.0.5
2013-05-10 13:39:37 MANAGEMENT: >STATE:1368164377,ADD_ROUTES,,,
2013-05-10 13:39:37 /sbin/route add -net 10.2.0.1 10.2.0.5 255.255.255.255
add net 10.2.0.1: gateway 10.2.0.5
2013-05-10 13:39:37 Initialization Sequence Completed
2013-05-10 13:39:37 MANAGEMENT: >STATE:1368164377,CONNECTED,SUCCESS,10.2.0.6,111.111.111.111

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at http://groups.google.com/group/tunnelblick-discuss?hl=en-US.
For more options, visit https://groups.google.com/groups/opt_out.

Reply all

Reply to author

Forward

0 new messages