Add utun default route faild on macOS

138 views
Skip to first unread message

Mie Young

unread,
Sep 14, 2023, 10:48:13 PM9/14/23
to tunnelblick-discuss
Hi, all!
When openvpn server pushes route 0.0.0.0/0(default), client on macOS adds default route of virtual NIC failed when connecting. However, it will delete default route of physical NIC.
The followings are route tables and logs
Connect: 

default            192.168.1.1        UGScg             en1       

127                127.0.0.1          UCS               lo0       

127.0.0.1          127.0.0.1          UH                lo0       

127.0.0.1/32       127.0.0.2          UGSc              lo0       


2023-09-15 09:44:05.050974 /sbin/route add -net 0.0.0.0 10.1.1.25 0.0.0.0                           route: writing to routing socket: File exists
 add net 0.0.0.0: gateway 10.1.1.25: File exists
Disconnect:

Internet:

Destination        Gateway            Flags           Netif Expire

127                127.0.0.1          UCS               lo0       

127.0.0.1          127.0.0.1          UH                lo0       


2023-09-15 09:44:24.774170 /sbin/route delete -net 0.0.0.0 10.1.1.25 0.0.0.0                      delete net 0.0.0.0: gateway 10.1.1.25

How can I solve this problem?

Tunnelblick developer

unread,
Sep 14, 2023, 11:36:56 PM9/14/23
to tunnelblick-discuss
Please post the diagnostic info obtained by following the instructions at Read Before You Post).

Mie Young

unread,
Sep 15, 2023, 3:25:00 AM9/15/23
to tunnelblick-discuss
Hi!the followings are post the diagnostic infos

*Tunnelblick: macOS 12.6.6 (21G646); Tunnelblick 3.8.8d (build 5779); prior version 3.8.8a (build 5776); Admin user
git commit 85e5c2eda41b9d2367be4e51c90a649ffef3f887 + uncommitted changes:
?? ../third_party/sources/IOUserEthernetController.h
The Tunnelblick.app process is not being translated (x86_64)
System Integrity Protection is DISABLED
Model: Macmini7,1

Configuration client

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/client.tblk:

client
dev tun
proto udp
remote 192.168.1.202 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "ca.crt"
data-ciphers-fallback AES-256-CBC
comp-lzo
verb 3
mute 20
auth-user-pass "password.mip.unknown"
connect-timeout 12
connect-retry-max 1
reneg-sec 0


================================================================================

Files in client.tblk:
      Contents/Resources/ca.crt
      Contents/Resources/pas….unknown
      Contents/Resources/config.ovpn

================================================================================

Tunnelblick Kext Policy Data:

net.tunnelblick.tap|Z2SG5H3HC8|Jonathan Bullard|1|4
net.tunnelblick.tun|Z2SG5H3HC8|Jonathan Bullard|1|0

================================================================================

Configuration preferences:

useDNS = 1
-routeAllTrafficThroughVpn = 0
-keychainHasUsername = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-loggingLevel = 3
-loginWindowSecurityTokenCheckboxIsChecked = 0
-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1
tunnelblickVersionHistory = (
    "3.8.8d (build 5779)",
    "3.8.8a (build 5776)"
)
lastLaunchTime = 715924979.007067
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = client
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 879 291 626 378 0 0 1920 1055
NSWindow Frame SUUpdateAlert = 650 508 620 398 0 0 1920 1055
NSWindow Frame ListingWindow = 551 425 500 428 0 0 1920 1055
detailsWindowFrameVersion = 5779
detailsWindowFrame = {{253, 197}, {920, 522}}
detailsWindowLeftFrame = {{0, 0}, {167, 402}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = client
AdvancedWindowTabIdentifier = sounds
haveDealtWithOldTunTapPreferences = 1
haveDealtWithAlwaysShowLoginWindow = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2023-09-15 04:04:01 +0000
SUHasLaunchedBefore = 1
SUSkippedVersion = 5778

================================================================================

Forced preferences:

(None)

================================================================================

Deployed forced preferences:

(None)

================================================================================

Tunnelblick Log:

2023-09-15 15:19:54.619849 *Tunnelblick: macOS 12.6.6 (21G646); Tunnelblick 3.8.8d (build 5779); prior version 3.8.8a (build 5776)
2023-09-15 15:19:55.250068 *Tunnelblick: Attempting connection with client; Set nameserver = 769; monitoring connection
2023-09-15 15:19:55.250468 *Tunnelblick: openvpnstart start client.tblk 59224 769 0 3 0 34652464 -ptADGNWradsgnw 2.5.9-openssl-1.1.1v <password>
2023-09-15 15:19:55.308973 *Tunnelblick: openvpnstart starting OpenVPN
2023-09-15 15:19:55.858017 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2023-09-15 15:19:55.859397 WARNING: file '/Library/Application Support/Tunnelblick/Mips/client.tblk.mip' is group or others accessible
2023-09-15 15:19:55.859546 OpenVPN 2.5.9 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Aug  4 2023
2023-09-15 15:19:55.859847 library versions: OpenSSL 1.1.1v  1 Aug 2023, LZO 2.10
2023-09-15 15:19:55.861184 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:59224
2023-09-15 15:19:55.861246 Need hold release from management interface, waiting...
2023-09-15 15:19:56.514193 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully.
     Command used to start OpenVPN (one argument per displayed line):
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.5.9-openssl-1.1.1v/openvpn
          --daemon
          --log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Sclient.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_34652464.59224.openvpn.log
          --cd /Library/Application Support/Tunnelblick/Shared/client.tblk/Contents/Resources
          --machine-readable-output
          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5779 3.8.8d (build 5779)"
          --verb 3
          --config /Library/Application Support/Tunnelblick/Shared/client.tblk/Contents/Resources/config.ovpn
          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/client.tblk/Contents/Resources
          --verb 3
          --cd /Library/Application Support/Tunnelblick/Shared/client.tblk/Contents/Resources
          --management 127.0.0.1 59224 /Library/Application Support/Tunnelblick/Mips/client.tblk.mip
          --management-query-passwords
          --management-hold
          --script-security 2
          --route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
          --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2023-09-15 15:19:56.516174 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:59224
2023-09-15 15:19:56.538798 MANAGEMENT: CMD 'pid'
2023-09-15 15:19:56.539177 MANAGEMENT: CMD 'auth-retry interact'
2023-09-15 15:19:56.539268 MANAGEMENT: CMD 'state on'
2023-09-15 15:19:56.539408 MANAGEMENT: CMD 'state'
2023-09-15 15:19:56.539576 MANAGEMENT: CMD 'bytecount 1'
2023-09-15 15:19:56.540005 *Tunnelblick: Established communication with OpenVPN
2023-09-15 15:19:56.540840 *Tunnelblick: >INFO:OpenVPN Management Interface Version 3 -- type 'help' for more info
2023-09-15 15:19:56.543440 MANAGEMENT: CMD 'hold release'
2023-09-15 15:20:02.270438 MANAGEMENT: CMD 'username "Auth" "ym"'
2023-09-15 15:20:02.270554 MANAGEMENT: CMD 'password [...]'
2023-09-15 15:20:02.311959 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2023-09-15 15:20:02.312555 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2023-09-15 15:20:02.357493 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.1.202:1194
2023-09-15 15:20:02.357591 Socket Buffers: R=[786896->786896] S=[9216->9216]
2023-09-15 15:20:02.357609 UDP link local: (not bound)
2023-09-15 15:20:02.357623 UDP link remote: [AF_INET]192.168.1.202:1194
2023-09-15 15:20:02.357697 MANAGEMENT: >STATE:1694762402,WAIT,,,,,,
2023-09-15 15:20:02.360972 MANAGEMENT: >STATE:1694762402,AUTH,,,,,,
2023-09-15 15:20:02.361090 TLS: Initial packet from [AF_INET]192.168.1.202:1194, sid=866ac4a6 2c6a5342
2023-09-15 15:20:02.361362 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-09-15 15:20:02.366708 VERIFY OK: 
2023-09-15 15:20:02.367177 VERIFY OK: 
2023-09-15 15:20:02.457886 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-09-15 15:20:02.457960 [server] Peer Connection Initiated with [AF_INET]192.168.1.202:1194
2023-09-15 15:20:03.654843 MANAGEMENT: >STATE:1694762403,GET_CONFIG,,,,,,
2023-09-15 15:20:03.654981 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2023-09-15 15:20:03.661901 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.6.6,route 192.168.6.6 255.255.255.255,dhcp-option DNS 192.168.8.8,route 192.168.8.8 255.255.255.255,ping 10,ping-restart 60,topology subnet,route-gateway 10.1.1.25,ifconfig 10.1.1.57 255.255.255.128,peer-id 0,cipher AES-256-GCM,route 0.0.0.0 0.0.0.0,route 192.168.1.10 255.255.255.255'
2023-09-15 15:20:03.662122 OPTIONS IMPORT: timers and/or timeouts modified
2023-09-15 15:20:03.662166 OPTIONS IMPORT: --ifconfig/up options modified
2023-09-15 15:20:03.662193 OPTIONS IMPORT: route options modified
2023-09-15 15:20:03.662214 OPTIONS IMPORT: route-related options modified
2023-09-15 15:20:03.662234 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2023-09-15 15:20:03.662253 OPTIONS IMPORT: peer-id set
2023-09-15 15:20:03.662272 OPTIONS IMPORT: adjusting link_mtu to 1625
2023-09-15 15:20:03.663329 OPTIONS IMPORT: data channel crypto options modified
2023-09-15 15:20:03.663394 Data Channel: using negotiated cipher 'AES-256-GCM'
2023-09-15 15:20:03.663997 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-09-15 15:20:03.664043 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-09-15 15:20:03.665487 Opened utun device utun8
2023-09-15 15:20:03.665522 MANAGEMENT: >STATE:1694762403,ASSIGN_IP,,10.1.1.57,,,,
2023-09-15 15:20:03.665590 /sbin/ifconfig utun8 delete
                           ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2023-09-15 15:20:03.726066 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2023-09-15 15:20:03.726098 /sbin/ifconfig utun8 10.1.1.57 10.1.1.57 netmask 255.255.255.128 mtu 1500 up
2023-09-15 15:20:03.730154 /sbin/route add -net 10.1.1.0 10.1.1.57 255.255.255.128
                           add net 10.1.1.0: gateway 10.1.1.57
2023-09-15 15:20:03.741407 MANAGEMENT: >STATE:1694762403,ADD_ROUTES,,,,,,
2023-09-15 15:20:03.741454 /sbin/route add -net 192.168.6.6 10.1.1.25 255.255.255.255
                           add net 192.168.6.6: gateway 10.1.1.25
2023-09-15 15:20:03.744655 /sbin/route add -net 192.168.8.8 10.1.1.25 255.255.255.255
                           add net 192.168.8.8: gateway 10.1.1.25
2023-09-15 15:20:03.747278 /sbin/route add -net 0.0.0.0 10.1.1.25 0.0.0.0

                           route: writing to routing socket: File exists
                           add net 0.0.0.0: gateway 10.1.1.25: File exists
2023-09-15 15:20:03.749870 /sbin/route add -net 192.168.1.10 10.1.1.25 255.255.255.255
                           add net 192.168.1.10: gateway 10.1.1.25
                           15:20:03 *Tunnelblick:  **********************************************
                           15:20:03 *Tunnelblick:  Start of output from client.up.tunnelblick.sh
                           15:20:05 *Tunnelblick:  Retrieved from OpenVPN: name server(s) [ 192.168.6.6 192.168.8.8 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
                           15:20:06 *Tunnelblick:  Not aggregating ServerAddresses because running on macOS 10.6 or higher
                           15:20:06 *Tunnelblick:  Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                           15:20:07 *Tunnelblick:  Saved the DNS and SMB configurations so they can be restored
                           15:20:07 *Tunnelblick:  Changed DNS ServerAddresses setting from '192.168.137.1 192.168.1.1' to '192.168.6.6 192.168.8.8'
                           15:20:07 *Tunnelblick:  Changed DNS SearchDomains setting from '' to 'openvpn'
                           15:20:07 *Tunnelblick:  Changed DNS DomainName setting from '' to 'openvpn'
                           15:20:07 *Tunnelblick:  Did not change SMB NetBIOSName setting of ''
                           15:20:07 *Tunnelblick:  Did not change SMB Workgroup setting of ''
                           15:20:07 *Tunnelblick:  Did not change SMB WINSAddresses setting of ''
                           15:20:07 *Tunnelblick:  DNS servers '192.168.6.6 192.168.8.8' will be used for DNS queries when the VPN is active
                           15:20:07 *Tunnelblick:  NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
                           15:20:07 *Tunnelblick:  Flushed the DNS cache via dscacheutil
                           15:20:07 *Tunnelblick:  /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                           15:20:07 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
                           15:20:07 *Tunnelblick:  Not notifying mDNSResponderHelper that the DNS cache was flushed because it is not running
                           15:20:07 *Tunnelblick:  Setting up to monitor system configuration with process-network-changes
                           15:20:07 *Tunnelblick:  End of output from client.up.tunnelblick.sh
                           15:20:07 *Tunnelblick:  **********************************************
2023-09-15 15:20:07.831008 Initialization Sequence Completed
2023-09-15 15:20:07.831140 MANAGEMENT: >STATE:1694762407,CONNECTED,SUCCESS,10.1.1.57,192.168.1.202,1194,,
2023-09-15 15:20:09.078458 *Tunnelblick: DNS address 192.168.6.6 is being routed through the VPN
2023-09-15 15:20:09.191247 *Tunnelblick: DNS address 192.168.8.8 is being routed through the VPN
2023-09-15 15:20:12.595682 AEAD Decrypt error: bad packet ID (may be a replay): [ #0 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
2023-09-15 15:20:14.784975 *Tunnelblick: This computer's apparent public IP address (35.74.240.109) was unchanged after the connection was made
2023-09-15 15:20:22.312552 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2023-09-15 15:20:22.463709 *Tunnelblick: Disconnecting using 'kill'
2023-09-15 15:20:22.652494 event_wait : Interrupted system call (code=4)
2023-09-15 15:20:22.659035 /sbin/route delete -net 192.168.6.6 10.1.1.25 255.255.255.255
                           delete net 192.168.6.6: gateway 10.1.1.25
2023-09-15 15:20:22.663667 /sbin/route delete -net 192.168.8.8 10.1.1.25 255.255.255.255
                           delete net 192.168.8.8: gateway 10.1.1.25
2023-09-15 15:20:22.676953 /sbin/route delete -net 0.0.0.0 10.1.1.25 0.0.0.0

                           delete net 0.0.0.0: gateway 10.1.1.25
2023-09-15 15:20:22.681258 /sbin/route delete -net 192.168.1.10 10.1.1.25 255.255.255.255
                           delete net 192.168.1.10: gateway 10.1.1.25
2023-09-15 15:20:22.684418 Closing TUN/TAP interface
2023-09-15 15:20:22.692779 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun8 1500 1553 10.1.1.57 255.255.255.128 init
                           15:20:22 *Tunnelblick:  **********************************************
                           15:20:22 *Tunnelblick:  Start of output from client.down.tunnelblick.sh
                           15:20:23 *Tunnelblick:  Cancelled monitoring system configuration changes
                           15:20:23 *Tunnelblick:  Restored State:DNS
                           15:20:23 *Tunnelblick:  Removed Setup:DNS
                           15:20:23 *Tunnelblick:  Restored DNS and SMB settings
                           15:20:23 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache
                           15:20:24 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
                           15:20:24 *Tunnelblick:  End of output from client.down.tunnelblick.sh
                           15:20:24 *Tunnelblick:  **********************************************
2023-09-15 15:20:24.755462 SIGTERM[hard,] received, process exiting
2023-09-15 15:20:24.764001 MANAGEMENT: >STATE:1694762424,EXITING,SIGTERM,,,,,
2023-09-15 15:20:25.722840 *Tunnelblick: Expected disconnection occurred.

================================================================================

Down log:

15:20:22 *Tunnelblick:  **********************************************
15:20:22 *Tunnelblick:  Start of output from client.down.tunnelblick.sh
15:20:23 *Tunnelblick:  Cancelled monitoring system configuration changes
15:20:23 *Tunnelblick:  Restored State:DNS
15:20:23 *Tunnelblick:  Removed Setup:DNS
15:20:23 *Tunnelblick:  Removed State:SMB
15:20:23 *Tunnelblick:  Restored DNS and SMB settings
15:20:23 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache
15:20:24 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
15:20:24 *Tunnelblick:  End of output from client.down.tunnelblick.sh
15:20:24 *Tunnelblick:  **********************************************

================================================================================

Previous down log:

15:11:18 *Tunnelblick:  **********************************************
15:11:18 *Tunnelblick:  Start of output from client.down.tunnelblick.sh
15:11:18 *Tunnelblick:  Cancelled monitoring system configuration changes
15:11:18 *Tunnelblick:  Restored State:DNS
15:11:18 *Tunnelblick:  Removed Setup:DNS
15:11:18 *Tunnelblick:  Removed State:SMB
15:11:18 *Tunnelblick:  Restored DNS and SMB settings
15:11:18 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache
15:11:19 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
15:11:19 *Tunnelblick:  End of output from client.down.tunnelblick.sh
15:11:19 *Tunnelblick:  **********************************************

================================================================================

Network services:

An asterisk (*) denotes that a network service is disabled.
Ethernet
Wi-Fi
Thunderbolt Bridge

Wi-Fi Power (en1): On

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
XHC20: flags=0<> mtu 0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=50b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV,CHANNEL_IO>
ether 78:7b:8a:c6:66:0e
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (none)
status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether 1c:36:bb:02:66:ce
inet 192.168.1.110 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:15:09:26:a3:40
media: autoselect <full-duplex>
status: inactive
en3: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:15:09:26:a3:41
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 82:15:09:26:a3:40
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x0
member: en2 flags=3<LEARNING,DISCOVER>
        ifmaxaddr 0 port 7 priority 0 path cost 0
member: en3 flags=3<LEARNING,DISCOVER>
        ifmaxaddr 0 port 8 priority 0 path cost 0
nd6 options=201<PERFORMNUD,DAD>
media: <unknown type>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
options=400<CHANNEL_IO>
ether 0e:36:bb:02:66:ce
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
options=400<CHANNEL_IO>
ether f2:a2:40:a2:3f:7d
inet6 fe80::f0a2:40ff:fea2:3f7d%awdl0 prefixlen 64 scopeid 0xb
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
llw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether f2:a2:40:a2:3f:7d
inet6 fe80::f0a2:40ff:fea2:3f7d%llw0 prefixlen 64 scopeid 0xc
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::c839:a36e:d7b9:8080%utun0 prefixlen 64 scopeid 0xd
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::96ff:e06e:9cf1:d25b%utun1 prefixlen 64 scopeid 0xe
nd6 options=201<PERFORMNUD,DAD>
utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1000
inet6 fe80::ce81:b1c:bd2c:69e%utun2 prefixlen 64 scopeid 0xf
nd6 options=201<PERFORMNUD,DAD>
utun3: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::fdd6:b266:df16:a7a1%utun3 prefixlen 64 scopeid 0x10
nd6 options=201<PERFORMNUD,DAD>
utun4: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::968b:71a0:e613:9d56%utun4 prefixlen 64 scopeid 0x11
nd6 options=201<PERFORMNUD,DAD>
utun5: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::c3dd:a04c:5d81:36ec%utun5 prefixlen 64 scopeid 0x12
nd6 options=201<PERFORMNUD,DAD>
utun6: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::c061:1c30:4b5e:e0a0%utun6 prefixlen 64 scopeid 0x13
nd6 options=201<PERFORMNUD,DAD>
utun7: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1000
inet6 fe80::ce81:b1c:bd2c:69e%utun7 prefixlen 64 scopeid 0x14
nd6 options=201<PERFORMNUD,DAD>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>

================================================================================

Quit Log:

2023-09-09 11:55:57.247943 applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes)
2023-09-09 11:55:57.254938 shutDownTunnelblick: started.
2023-09-09 11:55:57.256780 shutDownTunnelblick: Starting cleanup.
2023-09-09 11:55:57.257549 cleanup: Entering cleanup
2023-09-09 11:55:57.267840 synchronized user defaults
2023-09-09 11:56:03.203404 shutDownTunnelblick: Cleanup finished.
2023-09-09 11:56:03.204033 Finished shutting down Tunnelblick; allowing termination

================================================================================

Traces Log:


================================================================================

Console Log:



Tunnelblick developer

unread,
Sep 15, 2023, 8:30:06 AM9/15/23
to tunnelblick-discuss
This:

          2023-09-15 15:20:03.747278 /sbin/route add -net 0.0.0.0 10.1.1.25 0.0.0.0
                    route: writing to routing socket: File exists
                    add net 0.0.0.0: gateway 10.1.1.25: File exists
means that the 0.0.0.0 route was not successfully set.

Try restarting your computer. If that doesn't help, something else (other VPN software? security software?) is setting that route.

I also noticed this:

          2023-09-15 15:19:55.859397 WARNING: file '/Library/Application Support/Tunnelblick/Mips/client.tblk.mip' is group or others accessible
which is odd; these .mip files are internal Tunnelblick files and nothing should have modified its 0600 permissions. So something (perhaps you yourself) has been fiddling with internal Tunnelblick files.
Reply all
Reply to author
Forward
0 new messages