Uncaught Exception when trying to connect to VPN Server since 3.4Beta16

741 views
Skip to first unread message

Don Oerkfitz

unread,
Jan 21, 2014, 5:31:28 PM1/21/14
to
Ever since the release of TunnelBlick 3.4Beta16, I have been getting this uncaught error exception.  the program goes through the motions of connecting to my vpn server and then as soon as it connects it immediately disconnects.  the Logs show everything is normal then towards the bottom is this:

2014-01-20 20:20:41 *Tunnelblick:
Output from openvpnstart stderr:
2014-01-20 20:20:41.711 openvpnstart[976:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'
*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
    10  ???                                 0x00000004 0x0 + 4
)
2014-01-20 20:20:34 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-20 20:20:41 *Tunnelblick: Disconnecting because script failed
                                        add net : gateway 192.168.1.254
                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-20 20:20:41 GID set to nobody
2014-01-20 20:20:41 UID set to nobody
2014-01-20 20:20:41 Initialization Sequence Completed
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        sh: /Library/Application: No such file or directory
2014-01-20 20:20:41 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-20 20:20:41 ERROR: up/down plugin call failed
2014-01-20 20:20:41 Exiting due to fatal error
2014-01-20 20:20:44 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources...
post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net
2014-01-20 20:20:44 *Tunnelblick: Expected disconnection occurred.



If the full log is needed please let me know and I will attach. 

This error does not happen in 3.4Beta14 and earlier.  I am running Mac OS X 10.9.

Thank you for your assistance.

jkbull...gmail.com

unread,
Jan 20, 2014, 10:27:48 PM1/20/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Please post the full diagnostic info (not the log) from the "Copy Diagnostic Info to Clipboard" button.


On Monday, January 20, 2014 9:30:02 PM UTC-5, Don Oerkfitz wrote:
Ever since the release of TunnelBlick 3.4Beta16, I have been getting this uncaught error exception.  the program goes through the motions of connecting to my vpn server and then as soon as it connects it immediately disconnects.  the Logs show everything is normal then towards the bottom is this:

2014-01-20 20:20:41 *Tunnelblick:
Output from openvpnstart stderr:
2014-01-20 20:20:41.711 openvpnstart[976:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'
*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
    10  ???                                 0x00000004 0x0 + 4
)
2014-01-20 20:20:34 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-20 20:20:41 *Tunnelblick: Disconnecting because script failed
                                        add net 37.59.211.120: gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-20 20:20:41 GID set to nobody
2014-01-20 20:20:41 UID set to nobody
2014-01-20 20:20:41 Initialization Sequence Completed
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        sh: /Library/Application: No such file or directory
2014-01-20 20:20:41 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-20 20:20:41 ERROR: up/down plugin call failed
2014-01-20 20:20:41 Exiting due to fatal error
2014-01-20 20:20:44 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources...
post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net 37.59.211.120

Don Oerkfitz

unread,
Jan 21, 2014, 5:31:00 PM1/21/14
to
Sorry,
here is the full diagnostic info:

2014-01-20 20:20:31 *Tunnelblick: OS X 10.9.1; Tunnelblick 3.4beta20 (build 3727); prior version 3.4beta14 (build 3649)
2014-01-20 20:20:34 *Tunnelblick: Attempting connection with Steppenwolf2 using shadow copy; Set nameserver = 3; monitoring connection
2014-01-20 20:20:34 *Tunnelblick: openvpnstart start Steppenwolf2.tblk 1337 3 0 1 0 370 -ptADGNWradsgnw 2.3.2
2014-01-20 20:20:35 *Tunnelblick: openvpnstart log:
     Warning: Tunnelblick is using 'openvpn-down-root.so', so the route-pre-down script will not be used. You can override this by providing a custom route-pre-down script (which may be a copy of Tunnelblick's standard route-pre-down script) in a Tunnelblick VPN Configuration. However, that script will not be executed as root unless the 'user' and 'group' options are removed from the OpenVPN configuration file. If the 'user' and 'group' options are removed, then you don't need to use a custom route-pre-down script.Loading tap-signed.kext
    
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
    
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn
          --cd
          /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources
          --daemon
          --management
          127.0.0.1
          1337
          --config
          /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources/config.ovpn
          --log
          /Library/Application Support/Tunnelblick/Logs/-SUsers-SDon-SLibrary-SApplication Support-STunnelblick-SConfigurations-SSteppenwolf2.tblk-SContents-SResources-Sconfig.ovpn.3_0_1_0_370.1337.openvpn.log
          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          "/Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources/up.tunnelblick.sh" -m -w -d -a -f -ptADGNWradsgnw
          --plugin
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
          "/Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources/down.tunnelblick.sh" -m -w -d -a -f -ptADGNWradsgnw

2014-01-20 20:20:35 *Tunnelblick: Established communication with OpenVPN
2014-01-20 20:20:35 Multiple --up scripts defined.  The previously configured script is overridden.
2014-01-20 20:20:35 OpenVPN 2.3.2 i386-apple-darwin10.8.0 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [MH] [IPv6] built on Jan  6 2014
2014-01-20 20:20:35 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2014-01-20 20:20:35 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
2014-01-20 20:20:35 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2014-01-20 20:20:35 UDPv4 link local (bound): [undef]
2014-01-20 20:20:35 UDPv4 link remote: [AF_INET]
2014-01-20 20:20:38 [steppenwolf] Peer Connection Initiated with [AF_INET]
2014-01-20 20:20:41 TUN/TAP device /dev/tap0 opened
2014-01-20 20:20:41 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2014-01-20 20:20:41 /sbin/ifconfig tap0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2014-01-20 20:20:41 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2014-01-20 20:20:41 /sbin/ifconfig tap0 192.168.5.50 netmask 255.255.255.0 mtu 1500 up
2014-01-20 20:20:41 /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources/up.tunnelblick.sh -m -w -d -a -f -ptADGNWradsgnw tap0 1500 1574 192.168.5.50 255.255.255.0 init
                                        add net 173.194.0.0: gateway 192.168.1.254

2014-01-20 20:20:41 *Tunnelblick:
Output from openvpnstart stderr:
2014-01-20 20:20:41.711 openvpnstart[976:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'
*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
    10  ???                                 0x00000004 0x0 + 4
)
2014-01-20 20:20:34 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-20 20:20:41 *Tunnelblick: Disconnecting because script failed
                                        add net : gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-20 20:20:41 GID set to nobody
2014-01-20 20:20:41 UID set to nobody
2014-01-20 20:20:41 Initialization Sequence Completed
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        sh: /Library/Application: No such file or directory
2014-01-20 20:20:41 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-20 20:20:41 ERROR: up/down plugin call failed
2014-01-20 20:20:41 Exiting due to fatal error
2014-01-20 20:20:44 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources...
post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net
2014-01-20 20:20:44 *Tunnelblick: Expected disconnection occurred.


On Monday, January 20, 2014 9:27:48 PM UTC-6, jkbull...gmail.com wrote:
Please post the full diagnostic info (not the log) from the "Copy Diagnostic Info to Clipboard" button.


On Monday, January 20, 2014 9:30:02 PM UTC-5, Don Oerkfitz wrote:
Ever since the release of TunnelBlick 3.4Beta16, I have been getting this uncaught error exception.  the program goes through the motions of connecting to my vpn server and then as soon as it connects it immediately disconnects.  the Logs show everything is normal then towards the bottom is this:

2014-01-20 20:20:41 *Tunnelblick:
Output from openvpnstart stderr:
2014-01-20 20:20:41.711 openvpnstart[976:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'
*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
    10  ???                                 0x00000004 0x0 + 4
)
2014-01-20 20:20:34 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-20 20:20:41 *Tunnelblick: Disconnecting because script failed
                                        add net : gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-20 20:20:41 GID set to nobody
2014-01-20 20:20:41 UID set to nobody
2014-01-20 20:20:41 Initialization Sequence Completed
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        sh: /Library/Application: No such file or directory
2014-01-20 20:20:41 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-20 20:20:41 ERROR: up/down plugin call failed
2014-01-20 20:20:41 Exiting due to fatal error
2014-01-20 20:20:44 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources...
post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net

jkbull...gmail.com

unread,
Jan 21, 2014, 6:32:59 AM1/21/14
to tunnelbli...@googlegroups.com
The full diagnostic info would be much more helpful -- you posted part of the Tunnelblick log. Please use the "Copy Diagnostic Info to Clipboard" button (and edit to remove public IP addresses or names).

If your configurations include custom scripts, please include a list of which script(s) it uses -- just the names of the scripts, not the contents.

Thanks.


On Monday, January 20, 2014 11:27:31 PM UTC-5, Don Oerkfitz wrote:
Sorry,
here is the full diagnostic info:
<snip> 

Don Oerkfitz

unread,
Jan 21, 2014, 5:29:51 PM1/21/14
to
Even the "Snapshot version" of tunnelblick still has an uncaught exception.  Here is the full diagnostic that was copied from clicking Copy Diagnostic info button:
2014-01-20 20:20:41 *Tunnelblick:
Output from openvpnstart stderr:
2014-01-20 20:20:41.711 openvpnstart[976:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'
*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
    10  ???                                 0x00000004 0x0 + 4
)
2014-01-20 20:20:34 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-20 20:20:41 *Tunnelblick: Disconnecting because script failed
                                        add net  gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-20 20:20:41 GID set to nobody
2014-01-20 20:20:41 UID set to nobody
2014-01-20 20:20:41 Initialization Sequence Completed
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        route: must be root to alter routing table
2014-01-20 20:20:41 ERROR: OS X route delete command failed: external program exited with error status: 77
                                        sh: /Library/Application: No such file or directory
2014-01-20 20:20:41 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-20 20:20:41 ERROR: up/down plugin call failed
2014-01-20 20:20:41 Exiting due to fatal error
2014-01-20 20:20:44 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf2.tblk/Contents/Resources...
post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net
2014-01-20 20:20:44 *Tunnelblick: Expected disconnection occurred.


jkbull...gmail.com

unread,
Jan 21, 2014, 6:07:58 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
There is something very wrong. What you posted is not the "full diagnostic info" -- in fact, it is exactly the same output as you included in your second post -- look at the timestamps!

I suppose it is possible that there is something wrong with the "Copy Diagnostic Info to Clipboard" button -- it can take several seconds to process, but I have never seen it fail to modify the Clipboard.

Please try the following:
  1. Copy the word "test" from this line to the Clipboard.
  2. Paste the Clipboard into something to make sure it contains "test".
  3. Quit Tunnelblick if it is running
  4. Launch Tunnelblick again
  5. Without connecting, click the "Copy Diagnostic Info to Clipboard" button.
  6. Wait (it may be a few seconds) for the button to return to its normal state (grey, usually, but it may depend on what version of OS X you are running).
  7. Paste the Clipboard into something to make sure it does not contain "test".
If you would prefer, email me privately with a .zip of your .tblk and I will try to figure out what is going on.



On Tuesday, January 21, 2014 5:28:10 PM UTC-5, Don Oerkfitz wrote:
Even the "Snapshot version" of tunnelblick still has an uncaught exception.  Here is the full diagnostic that was copied from clicking Copy Diagnostic info button:

2014-01-20 20:20:31 *Tunnelblick: OS X 10.9.1; Tunnelblick 3.4beta20 (build 3727); prior version 3.4beta14 (build 3649)
<snip>
 

Don Oerkfitz

unread,
Jan 21, 2014, 6:31:29 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
I did as you instructed and nothing was copied to my clipboard - it still pasted "test" that i copied from your last post.  Any other thoughts?

jkbull...gmail.com

unread,
Jan 21, 2014, 7:31:39 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Something very odd is going on. Try posting the Console Log. (That's part of the diagnostic info.)

Don Oerkfitz

unread,
Jan 21, 2014, 10:37:47 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Even when i click the "Copy Console Log to Clipboard" button it doesn't copy anything to my clipboard.  The only thing i can copy is what shows up in the "Log" window when I am trying to connect to the vpn server and what I have posted previously in this board.  The buttons don't seem to be working for me.

jkbull...gmail.com

unread,
Jan 21, 2014, 10:46:24 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
That's why I wrote earlier that you should post the Console Log, which is part of OS X, not Tunnelblick:

To view the Console log, launch the Console application, located at /Applications/Utilities/Console.app. The Console application is built into all versions of OS X.

If you don't see a list of different logs to view on the left of the Console window, click "View", then "Show Log List".

If you don't see a toolbar at the top of the Console window, click "View", then "Show Toolbar".

All of Tunnelblick's messages appear in the Console log, which you can view by selecting "Console Messages" in the log list on the left of the Console window. OpenVPN may output messages which only appear when viewing "All Messages" in the log list.

There is a "Filter" text box in the upper right corner of the Console window. If you type "tunnelblick" (without the quote marks) into the text box, Console will only show messages from Tunnelblick, not from other programs.

 
(I assume you meant that the "Copy Diagnostic Info to Clipboard" button doesn't copy anything to the Clipboard -- there isn't any "Copy Console Log to Clipboard" button.)

Don Oerkfitz

unread,
Jan 21, 2014, 10:53:09 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
i was confused as there is a "copy console log" button in tunnelblick (or at least on mine) shown here https://www.dropbox.com/s/j65c97y7e8pionk/Screenshot%202014-01-21%2021.49.33.jpg

Here are the only two "tunnelblick" logs showing in the Console.app:

1/21/14 9:34:56.756 PM Tunnelblick[10147]: *** setObjectForKey: object cannot be nil (key: ASLAuxURL)
1/21/14 9:34:56.758 PM Tunnelblick[10147]: (

    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x95232a32 -[__NSDictionaryM setObject:forKey:] + 1042
    3   Tunnelblick                         0x00050edd -[MyPrefsWindowController stringContainingRelevantConsoleLogEntries] + 318
    4   Tunnelblick                         0x00050077 -[MyPrefsWindowController utilitiesCopyConsoleLogButtonWasClicked:] + 142
    5   libobjc.A.dylib                     0x9868e2af -[NSObject performSelector:withObject:] + 70
    6   AppKit                              0x9b399c35 -[NSApplication sendAction:to:from:] + 438
    7   AppKit                              0x9b399a3d -[NSControl sendAction:to:] + 102
    8   AppKit                              0x9b3e8fcb -[NSCell _sendActionFrom:] + 159
    9   AppKit                              0x9b4042ea -[NSCell trackMouse:inRect:ofView:untilMouseUp:] + 2465
    10  AppKit                              0x9b403521 -[NSButtonCell trackMouse:inRect:ofView:untilMouseUp:] + 513
    11  AppKit                              0x9b402b45 -[NSControl mouseDown:] + 690
    12  AppKit                              0x9b37ee4d -[NSWindow sendEvent:] + 11953
    13  AppKit                              0x9b31acad -[NSApplication sendEvent:] + 4034
    14  AppKit                              0x9b15f3bc -[NSApplication run] + 823
    15  AppKit                              0x9b1481f8 NSApplicationMain + 1165
    16  Tunnelblick                         0x000028b9 _start + 208
    17  Tunnelblick                         0x000027e8 start + 40
)

jkbull...gmail.com

unread,
Jan 21, 2014, 11:02:26 PM1/21/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
There is something very wrong with Tunnelblick on your system.

There should be a lot more Tunnelblick entries in the Console Log's All Messages list. For example, when you launch Tunnelblick, it should add three entries like this:

1/21/14 10:58:28.014 PM Tunnelblick[6949]: Set program update feedURL to https://www.tunnelblick.net/appcast-b.rss
1/21/14 10:58:28.568 PM Tunnelblick[6949]: DEBUG: Updater: systemVersion 10.8.5 satisfies minimumSystemVersion 10.4.0
1/21/14 10:58:28.568 PM Tunnelblick[6949]: DEBUG: Updater: systemVersion 10.8.5 satisfies minimumSystemVersion 10.4.0

so at the very least, they should have shown up.

Don Oerkfitz

unread,
Jan 22, 2014, 12:29:26 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
hmmm that is strange - do you think fully uninstalling the software off of my system and reinstalling it would maybe fix the issue?

jkbull...gmail.com

unread,
Jan 22, 2014, 12:44:44 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Before uninstalling, open the Console application, make sure it is displaying "all messages", and launch Tunnelblick. You should get the three messages I posted before:

1/21/14 10:58:28.014 PM Tunnelblick[6949]: Set program update feedURL to https://www.tunnelblick.net/appcast-b.rss
1/21/14 10:58:28.568 PM Tunnelblick[6949]: DEBUG: Updater: systemVersion 10.8.5 satisfies minimumSystemVersion 10.4.0
1/21/14 10:58:28.568 PM Tunnelblick[6949]: DEBUG: Updater: systemVersion 10.8.5 satisfies minimumSystemVersion 10.4.0

If you don't see similar messages, go ahead and uninstall, using the instructions at Uninstalling Tunnelblick.

If you do see similar messages, try to connect your VPN, get the error, and then post the Console log entries starting with the ones from when you launched Tunnelblick.

One other thought: are you are using Tunnelblick in a virtual machine (VM) and copying to the VM's Clipboard, and then trying to paste from the host computer's Clipboard? Sometimes VM Clipboards are propagated to the host machine and sometimes not.

Don Oerkfitz

unread,
Jan 22, 2014, 2:01:20 PM1/22/14
to
when i launched tunnelblick i did receive similar messages when i launched tunnelblick:
1/22/14 12:55:36.705 PM Tunnelblick[14511]: Set program update feedURL to https://www.tunnelblick.net/appcast-b.rss
1/22/14 12:55:37.679 PM Tunnelblick[14511]: DEBUG: Updater: systemVersion 10.9.1 satisfies minimumSystemVersion 10.4.0
1/22/14 12:55:37.679 PM Tunnelblick[14511]: DEBUG: Updater: systemVersion 10.9.1 satisfies minimumSystemVersion 10.4.0

when i try to connect - only one message shows up in the console:
1/22/14 12:57:58.842 PM Tunnelblick[14511]: Disconnecting via management interface

and the "Copy diagnostic info" button worked! see below - hope this helps!


*Tunnelblick: OS X 10.9.1; Tunnelblick 3.4beta21 (build 3741); prior version 3.4beta14 (build 3649); Admin user

"Sanitized" configuration file for /Users/Don/Library/Application Support/Tunnelblick/Configurations/Steppenwolf.tblk:

remote <redacted>
port 443
proto udp
dev tap0
keepalive 5 15
tls-client
ns-cert-type server

ca ca.crt
cert macbook.crt
key macbook.key
tls-auth ta.key 1
up up.tunnelblick.sh
down down.tunnelblick.sh
cipher DES-EDE3-CBC
comp-lzo
pull
user nobody
group nobody
persist-key
persist-tun

script-security 2




================================================================================

Unusual files in Steppenwolf.tblk:
      Contents/Resources/connected.sh
      Contents/Resources/down.tunnelblick.sh
      Contents/Resources/post-disconnect.sh
      Contents/Resources/up.tunnelblick.sh

================================================================================

Configuration preferences:

-useDownRootPlugin = 1
-openvpnVersion = -
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

-openvpnVersion = -
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
    "3.4beta21 (build 3741)",
    "3.4beta14 (build 3649)",
    "3.4beta20 (build 3727)",
    "3.4beta14 (build 3649)",
    "3.4beta18 (build 3704)",
    "3.4beta14 (build 3649)",
    "3.4beta16 (build 3679)",
    "3.4beta14 (build 3649)",
    "3.4beta12 (build 3636)",
    "3.3.0 (build 3518)"
)
showConnectedDurations = 1
openvpnVersion = -
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 10485760
lastConnectedDisplayName = Steppenwolf
installationUID = 355488EA-B3F7-490C-85D0-EC19313C9C57
keyboardShortcutIndex = 1
updateAutomatically = 0
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame ConnectingWindow = 525 519 389 187 0 0 1440 878
NSWindow Frame SUStatusFrame = 350 645 384 129 0 0 1440 878
detailsWindowFrameVersion = 3741
detailsWindowFrame = {{148, 296}, {760, 468}}
detailsWindowLeftFrame = {{0, 0}, {135, 350}}
leftNavSelectedDisplayName = Steppenwolf
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
SUEnableAutomaticChecks = 1
SUFeedURL = https://www.tunnelblick.net/appcast-b.rss
SUSendProfileInfo = 1
SUAutomaticallyUpdate = 0
SULastCheckTime = 2014-01-22 18:55:36 +0000
SULastProfileSubmissionDate = 2014-01-21 02:16:58 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 11
WebKitStandardFont = Lucida Grande

================================================================================

Tunnelblick Log:

2014-01-22 12:57:48 *Tunnelblick: OS X 10.9.1; Tunnelblick 3.4beta21 (build 3741); prior version 3.4beta14 (build 3649)
2014-01-22 12:57:48 *Tunnelblick: Attempting connection with Steppenwolf using shadow copy; Set nameserver = 3; monitoring connection
2014-01-22 12:57:48 *Tunnelblick: openvpnstart start Steppenwolf.tblk 1337 3 0 1 0 370 -ptADGNWradsgnw 2.3.2
2014-01-22 12:57:48 *Tunnelblick: openvpnstart starting OpenVPN
2014-01-22 12:57:50 *Tunnelblick: openvpnstart log:

     Warning: Tunnelblick is using 'openvpn-down-root.so', so the route-pre-down script will not be used. You can override this by providing a custom route-pre-down script (which may be a copy of Tunnelblick's standard route-pre-down script) in a Tunnelblick VPN Configuration. However, that script will not be executed as root unless the 'user' and 'group' options are removed from the OpenVPN configuration file. If the 'user' and 'group' options are removed, then you don't need to use a custom route-pre-down script.Loading tap-signed.kext
    
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
    
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn
          --cd
          /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources

          --daemon
          --management
          127.0.0.1
          1337
          --config
          /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources/config.ovpn
          --log
          /Library/Application Support/Tunnelblick/Logs/-SUsers-SDon-SLibrary-SApplication Support-STunnelblick-SConfigurations-SSteppenwolf.tblk-SContents-SResources-Sconfig.ovpn.3_0_1_0_370.1337.openvpn.log

          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          "/Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources/up.tunnelblick.sh" -m -w -d -a -f -ptADGNWradsgnw
          --plugin
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
          "/Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources/down.tunnelblick.sh" -m -w -d -a -f -ptADGNWradsgnw

2014-01-22 12:57:50 *Tunnelblick: Established communication with OpenVPN
2014-01-22 12:57:50 Multiple --up scripts defined.  The previously configured script is overridden.
2014-01-22 12:57:50 OpenVPN 2.3.2 i386-apple-darwin10.8.0 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [MH] [IPv6] built on Jan  6 2014
2014-01-22 12:57:50 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2014-01-22 12:57:50 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
2014-01-22 12:57:50 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2014-01-22 12:57:50 UDPv4 link local (bound): [undef]
2014-01-22 12:57:50 UDPv4 link remote: [AF_INET]
2014-01-22 12:57:54 [steppenwolf] Peer Connection Initiated with [AF_INET]
2014-01-22 12:57:57 TUN/TAP device /dev/tap0 opened
2014-01-22 12:57:57 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2014-01-22 12:57:57 /sbin/ifconfig tap0 delete

                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2014-01-22 12:57:57 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2014-01-22 12:57:57 /sbin/ifconfig tap0 192.168.5.50 netmask 255.255.255.0 mtu 1500 up
2014-01-22 12:57:57 /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources/up.tunnelblick.sh -m -w -d -a -f -ptADGNWradsgnw tap0 1500 1574 192.168.5.50 255.255.255.0 init

                                        add net 173.194.0.0: gateway 192.168.1.254
                                        add net : gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-22 12:57:57 GID set to nobody
2014-01-22 12:57:57 UID set to nobody
2014-01-22 12:57:57 Initialization Sequence Completed

                                        route: must be root to alter routing table
2014-01-22 12:57:58 *Tunnelblick:
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        route: must be root to alter routing table
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        route: must be root to alter routing table
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        sh: /Library/Application: No such file or directory
2014-01-22 12:57:58 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-22 12:57:58 ERROR: up/down plugin call failed
2014-01-22 12:57:58 Exiting due to fatal error
Output from openvpnstart stderr:
2014-01-22 12:57:57.385 openvpnstart[14577:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'

*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
)
2014-01-22 12:57:58 *Tunnelblick: Disconnecting because script failed
2014-01-22 12:58:00 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources...

post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net
2014-01-22 12:58:00 *Tunnelblick: Expected disconnection occurred.

================================================================================

Console Log:

s
2014-01-22 12:54:53 Tunnelblick[10147] Finished shutting down Tunnelblick; allowing termination
2014-01-22 12:55:36 Tunnelblick[14511] Set program update feedURL to https://www.tunnelblick.net/appcast-b.rss
2014-01-22 12:55:37 Tunnelblick[14511] DEBUG: Updater: systemVersion 10.9.1 satisfies minimumSystemVersion 10.4.0
2014-01-22 12:55:37 Tunnelblick[14511] DEBUG: Updater: systemVersion 10.9.1 satisfies minimumSystemVersion 10.4.0
2014-01-22 12:57:58 Tunnelblick[14511] Disconnecting via management interface

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) <Linked Against>
   84    1 0xffffff7f80880000 0x43000    0x43000    org.virtualbox.kext.VBoxDrv (4.2.18) <7 5 4 3 1>
   85    0 0xffffff7f808c9000 0x8000     0x8000     org.virtualbox.kext.VBoxUSB (4.2.18) <84 50 36 7 5 4 3 1>
  104    0 0xffffff7f817a8000 0x4000     0x4000     com.makemkv.kext.daspi (1) <59 55 5 4 3>
  130    0 0xffffff7f80c40000 0x7000     0x7000     com.hzsystems.terminus.driver (4) <123 5 4 3 1>
  143    0 0xffffff7f828fc000 0x3000     0x3000     com.avast.PacketForwarder (1.3) <4 1>
  144    0 0xffffff7f828ff000 0x6000     0x6000     com.avast.AvastFileShield (2.0.0) <5 4 1>
  146    0 0xffffff7f808d6000 0x8000     0x8000     foo.tun (1.0) <7 5 4 1>

jkbull...gmail.com

unread,
Jan 22, 2014, 2:40:01 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Thanks for the diagnostic info. I'm glad you were finally able to get it copied!


You have a complicated setup -- you are doing a lot of non-standard things, some of which conflict with each other:
  • You are using your own up/down scripts
  • You are specifying the "up" and "down" options in the configuration file
  • You have set Tunnelblick's "Set DNS/WINS" set to something other than "Do not set nameserver" or "Set nameserver" (the default)
  • You are using "user nobody" and "group nobody"
  • You are using your own "connected" and "post-disconnect" scripts
First, remove the "up" and "down" options from your configuration file. They are confusing OpenVPN, and may be making OpenVPN may try to use the "down" script without using the openvpn-down-root.so plugin.

Next, set Tunnelblick's "Set DNS/WINS" setting to "Set nameserver".

If that works, great; otherwise, please post the diagnostic output from that.

                                        add net : gateway 192.168.1.254

                                        add net 0.0.0.0: gateway 192.168.5.1
                                        add net 128.0.0.0: gateway 192.168.5.1
2014-01-22 12:57:57 GID set to nobody
2014-01-22 12:57:57 UID set to nobody
2014-01-22 12:57:57 Initialization Sequence Completed

                                        route: must be root to alter routing table
2014-01-22 12:57:58 *Tunnelblick:
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        route: must be root to alter routing table
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        route: must be root to alter routing table
2014-01-22 12:57:58 ERROR: OS X route delete command failed: external program exited with error status: 77

                                        sh: /Library/Application: No such file or directory
2014-01-22 12:57:58 PLUGIN_CALL: plugin function PLUGIN_DOWN failed with status 1: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.2/openvpn-down-root.so
2014-01-22 12:57:58 ERROR: up/down plugin call failed
2014-01-22 12:57:58 Exiting due to fatal error
Output from openvpnstart stderr:
2014-01-22 12:57:57.385 openvpnstart[14577:303] *** Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't posix_spawn: error 8'

*** Call stack at first throw:
(
    0   CoreFoundation                      0x9534b6b1 __raiseError + 193
    1   libobjc.A.dylib                     0x98682091 objc_exception_throw + 162
    2   CoreFoundation                      0x9534b5cb +[NSException raise:format:] + 139
    3   Foundation                          0x927c87af -[NSConcreteTask launchWithDictionary:] + 4105
    4   Foundation                          0x927c77a1 -[NSConcreteTask launch] + 40
    5   openvpnstart                        0x00005e7e runAsRoot + 1117
    6   openvpnstart                        0x00008e26 runScript + 842
    7   openvpnstart                        0x000095ed main + 1920
    8   openvpnstart                        0x00001e95 _start + 208
    9   openvpnstart                        0x00001dc4 start + 40
)
2014-01-22 12:57:58 *Tunnelblick: Disconnecting because script failed
2014-01-22 12:58:00 *Tunnelblick: Executing post-disconnect.sh in /Library/Application Support/Tunnelblick/Users/Don/Steppenwolf.tblk/Contents/Resources...

post-disconnect.sh returned with status 0
Output from openvpnstart stderr:
stdout from post-disconnect.sh: delete net 173.194.0.0
delete net

Don Oerkfitz

unread,
Jan 22, 2014, 3:07:38 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
I went back and checked some of things you said -

You are specifying the "up" and "down" options in the configuration file
the up file simply is just adding static routes that i require when i use a VPN (i.e. for certain email servers). and the down scripts just put the vpn interface down. 

You have set Tunnelblick's "Set DNS/WINS" set to something other than "Do not set nameserver" or "Set nameserver" (the default)
According to my options on my tunnelblick window i have it set to "Set nameserver", so i am not sure how it is set to something other than. https://www.dropbox.com/s/7xm8f9tbdmak0d5/Screenshot%202014-01-22%2013.45.04.jpg


You are using "user nobody" and "group nobody"
what would be your suggestions to on what to use other than those two?
 
You are using your own "connected" and "post-disconnect" scripts
the connected script is just an empty file - if i remember correctly tunnelblick woudn't install my configuration file unless i had that file in the package contents.  and the post-disconnect file deletes static routes that were added by the up file.

i removed the Up and down scripts as requested and tunnelblick seemed to have connected to the VPN server but i am not sure it was allowing traffic.  I transferred the contents from the up.tunnelblick.sh file to connected.sh so that it would still set up my static routes and everything seemed to execute but it didn't change my public IP over.  I also tried to copy the diagnostic info and the button once again stopped working (idk why).

jkbull...gmail.com

unread,
Jan 22, 2014, 3:32:32 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
I wasn't questioning about the "complications"; I was just trying to explain why it may be hard to get this all working.


On Wednesday, January 22, 2014 3:07:38 PM UTC-5, Don Oerkfitz wrote:
You are specifying the "up" and "down" options in the configuration file
the up file simply is just adding static routes that i require when i use a VPN (i.e. for certain email servers). and the down scripts just put the vpn interface down.

No problem; just more complicated.

 
  You have set Tunnelblick's "Set DNS/WINS" set to something other than "Do not set nameserver" or "Set nameserver" (the default)
According to my options on my tunnelblick window i have it set to "Set nameserver", so i am not sure how it is set to something other than. https://www.dropbox.com/s/7xm8f9tbdmak0d5/Screenshot%202014-01-22%2013.45.04.jpg

You're right, sorry. I misread the log.

 
You are using "user nobody" and "group nobody"
what would be your suggestions to on what to use other than those two?

They just make it more complicated while you are trying to get things working, that's all. Some setups _cannot_ use them, but since you seem to have it at least partly working, I would leave them in.

 
You are using your own "connected" and "post-disconnect" scripts
the connected script is just an empty file - if i remember correctly tunnelblick woudn't install my configuration file unless i had that file in the package contents.  and the post-disconnect file deletes static routes that were added by the up file.

The "connected.sh" script is optional. Tunnelblick wouldn't have required it. If it was truly empty (not even a "#!/bin/bash" line or something), I can understand why that might be a problem. I'll check that out -- Tunnelblick should be able to handle it gracefully.


i removed the Up and down scripts as requested and tunnelblick seemed to have connected to the VPN server but i am not sure it was allowing traffic.  I transferred the contents from the up.tunnelblick.sh file to connected.sh so that it would still set up my static routes and everything seemed to execute

Whether your routing should be done in the "up" script or the "connected" script depends on when you want it done. The "up" script is run before OpenVPN does any routing changes, and the "connected" script is run after OpenVPN makes its routing changes (including the changes for "redirect-gateway def1" described below).

 
but it didn't change my public IP over.

By default, OpenVPN only routes traffic destined for the VPN through the VPN. To change that, enable "Route all traffic through the VPN" on the Advanced settings page "While Connected" tab, or add a line containing

redirect-gateway def1

to the OpenVPN configuration file. (Your choice -- adding it to the configuration file is probably better since it forces it and if you move the configuration to another computer it will do the routing without having to check the box on the new computer, but checking a box is easier. The checkbox just forces Tunnelblick to start OpenVPN with the "--redirect-gateway def1" option, so the two are equivalent.)


  I also tried to copy the diagnostic info and the button once again stopped working (idk why).

Hmmm. Is Tunnelblick running in the virtual machine or the host machine? Might restarting change this? Or relaunching Tunnelblick?



Don Oerkfitz

unread,
Jan 22, 2014, 3:38:34 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
well this is even more strange for the WIN/DNS for my original config only shows this: https://www.dropbox.com/s/rna657u7efx4wf9/Screenshot%202014-01-22%2014.34.49.jpg

but the new one i just installed shows this: https://www.dropbox.com/s/qx8kf9thhzs3q8r/Screenshot%202014-01-22%2014.36.28.jpg

no - tunnelblick is not running on a VM it is on my host machine

i have set the new configuration to route all traffic through it - i will test it in a about 45 minutes (in the middle of doing something where i can't have the network connection reset).

jkbull...gmail.com

unread,
Jan 22, 2014, 3:52:29 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
well this is even more strange for the WIN/DNS for my original config only shows this: https://www.dropbox.com/s/rna657u7efx4wf9/Screenshot%202014-01-22%2014.34.49.jpg

but the new one i just installed shows this: https://www.dropbox.com/s/qx8kf9thhzs3q8r/Screenshot%202014-01-22%2014.36.28.jpg

That's as expected because of your setup -- there are some situations that the older scripts ("3.1", "3.0b10", and "alternate 1") were not designed for, so Tunnelblick doesn't let you choose them. (The older scripts are for compatibility with old versions of Tunnelblick; most people use the default "Set nameserver" setting to use the newest, most sophisticated scripts.)


no - tunnelblick is not running on a VM it is on my host machine

OK, just curious :-)

 
i have set the new configuration to route all traffic through it - i will test it in a about 45 minutes (in the middle of doing something where i can't have the network connection reset).

Good luck!

I'm still concerned about Tunnelblick not being able to copy the diagnostic info to the Clipboard. I've never seen that and haven't been able to duplicate it, and it makes it really hard to get the info needed for solving problems. If you get any insight into what is happening, please let me know!

Don Oerkfitz

unread,
Jan 22, 2014, 4:08:49 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
okay - so when trying to connect this is what happened after connecting to my VPN Server:
2014-01-22 15:04:32 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2014-01-22 15:05:02 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's IP address after connecting.

so now something is wonky with the configuration files. 

I'm still concerned about Tunnelblick not being able to copy the diagnostic info to the Clipboard. I've never seen that and haven't been able to duplicate it, and it makes it really hard to get the info needed for solving problems. If you get any insight into what is happening, please let me know!

can you send me a copy of the source code? i tried to check out a copy using the subversion repo and it kept resetting my connection at a certain point.

jkbull...gmail.com

unread,
Jan 22, 2014, 4:27:24 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com


On Wednesday, January 22, 2014 4:08:49 PM UTC-5, Don Oerkfitz wrote:
okay - so when trying to connect this is what happened after connecting to my VPN Server:
2014-01-22 15:04:32 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2014-01-22 15:05:02 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's IP address after connecting.

so now something is wonky with the configuration files. 

Yes. It is apparently a routing problem. It may also be a DNS problem, too, but it may not be able to get to the nameserver if the routing is not right.

(The way the IP check code works is to get a webpage from tunnelblick.net that contains the IP address of the tunnelblick.net webserver. Then if it can't contact tunnelblick.net by name after the connection to the VPN, it tries using that IP address. If it works by IP address but not by name, there is a DNS problem. If it doesn't work with either, it is a routing problem.)

 
I'm still concerned about Tunnelblick not being able to copy the diagnostic info to the Clipboard. I've never seen that and haven't been able to duplicate it, and it makes it really hard to get the info needed for solving problems. If you get any insight into what is happening, please let me know!

can you send me a copy of the source code? i tried to check out a copy using the subversion repo and it kept resetting my connection at a certain point.

Sure. I'll email you a .zip privately.

Don Oerkfitz

unread,
Jan 22, 2014, 8:29:25 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
i definitely think it is a routing problem. after doing some more testing - i did a ping on google to get their public ip then i connected to the VPN and then tried to ping the public IP and it didn't reach it so i definitely think it is a routing issue.

Don Oerkfitz

unread,
Jan 22, 2014, 8:37:46 PM1/22/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
Definitely the most weirdest thing... i changed the some of the lines from my up script and moved them to my connected script and the VPN connected wit no errors and seems to all be working fine! idk why it was giving me issues but it is working now.

But i am still going to look into that Diagnostic info button not working.

thank you for all your help on this most weird and awkward issue.

jkbull...gmail.com

unread,
Jan 23, 2014, 10:46:37 AM1/23/14
to tunnelbli...@googlegroups.com, agodly...@gmail.com
It makes sense, actually.

Probably your script does routing and needs to be run after OpenVPN does its own routing. Using the "connected" script does that -- the "up" script is run before OpenVPN does its routing, so OpenVPN may have overwritten your routing.


On Wednesday, January 22, 2014 8:37:46 PM UTC-5, Don Oerkfitz wrote:
Definitely the most weirdest thing... i changed the some of the lines from my up script and moved them to my connected script and the VPN connected wit no errors and seems to all be working fine! idk why it was giving me issues but it is working now.

It makes sense, actually.

Your script does routing and needs to be run after OpenVPN does its own routing. Using the "connected" script does that -- the "up" script is run before OpenVPN does its routing, so OpenVPN may have overwritten your routing.

 
Reply all
Reply to author
Forward
0 new messages