Problem Connecting through tunnelblick

[NTAGUE Rolland Safort]

Hello, 

For the last few days, I have been having problems connecting to my vpn. It was working normally until early this week. No it almost never connects, when it does(about 0.5% of the time), it takes too long before it connects.

Here is the log i copied from tunnelblick:

*Tunnelblick: macOS 10.15.7 (19H1030); Tunnelblick 3.8.5a (build 5671); prior version 3.8.2 (build 5480); Admin user

git commit 68bef4a4d13edac5d5b6afbd4eec845338fd97fe

The Tunnelblick.app process is not being translated (x86_64)

System Integrity Protection is enabled

Configuration saifu129.211.67.111-openvpn

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/saifu129.211.67.111-openvpn.tblk:

client

proto tcp

dev tun

remote 129.211.67.111 58422

nobind

ca ca.crt

cert saifu.crt

key saifu.key

tls-auth ta.key 1

remote-cert-tls server

persist-tun

persist-key

verb 3

mute-replay-warnings

================================================================================

Files in saifu129.211.67.111-openvpn.tblk:

      Contents/Resources/ta.key

      Contents/Resources/sai….crt

      Contents/Resources/ca.crt

      Contents/Resources/sai….key

      Contents/Resources/config.ovpn

================================================================================

Tunnelblick Kext Policy Data:

================================================================================

Configuration preferences:

-useUpInsteadOfRouteUp = 1

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1

-keepConnected = 1

-doNotDisconnectOnSleep = 1

-changeDNSServersAction = 

-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

allowNonAdminSafeConfigurationReplacement = 1 (forced)

skipWarningThatIPANotFetchedBeforeConnection = 1

buildExpirationTimestamp = 1563896742

launchAtNextLogin = 1

tunnelblickVersionHistory = (

    "3.8.5a (build 5671)",

    "3.8.2 (build 5480)",

    "3.8.5a (build 5671)",

    "3.8.4a (build 5601)",

    "3.7.6a (build 5080)"

)

statusDisplayNumber = 0

lastLaunchTime = 645866616.036256

showConnectedDurations = 1

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 1048576

lastConnectedDisplayName = saifu129.211.67.111-openvpn

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

NSWindow Frame ConnectingWindow = 525 517 389 187 0 0 1440 877 

NSWindow Frame SUUpdateAlert = 410 363 620 392 0 0 1440 877 

detailsWindowFrameVersion = 5671

detailsWindowFrame = {{214, 73}, {920, 548}}

detailsWindowLeftFrame = {{0, 0}, {167, 430}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavOutlineViewExpandedDisplayNames = (

)

leftNavSelectedDisplayName = saifu129.211.67.111-openvpn

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

haveDealtWithAfterDisconnect = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SULastCheckTime = 2021-06-20 08:50:58 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

buildExpirationTimestamp = 1563896742

================================================================================

Forced preferences:

{

    allowNonAdminSafeConfigurationReplacement = 1;

}

================================================================================

Deployed forced preferences:

(None)

================================================================================

Tunnelblick Log:

2021-06-20 09:49:47.592541 *Tunnelblick: macOS 10.15.7 (19H1030); Tunnelblick 3.8.5a (build 5671); prior version 3.8.2 (build 5480)

2021-06-20 09:49:47.750034 *Tunnelblick: Attempting connection with saifu129.211.67.111-openvpn; Set nameserver = 769; monitoring connection

2021-06-20 09:49:47.751167 *Tunnelblick: openvpnstart start saifu129.211.67.111-openvpn.tblk 59951 769 0 3 0 1065264 -ptADGNWradsgnw 2.4.11-openssl-1.1.1k

2021-06-20 09:49:47.776791 *Tunnelblick: openvpnstart starting OpenVPN

2021-06-20 09:49:47.965651 OpenVPN 2.4.11 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Apr 21 2021

2021-06-20 09:49:47.965975 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10

2021-06-20 09:49:47.967736 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:59951

2021-06-20 09:49:47.967806 Need hold release from management interface, waiting...

2021-06-20 09:49:48.377233 *Tunnelblick: openvpnstart log:

     OpenVPN started successfully.

     Command used to start OpenVPN (one argument per displayed line):

          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.11-openssl-1.1.1k/openvpn

          --daemon

          --log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Ssaifu129.211.67.111--openvpn.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1065264.59951.openvpn.log

          --cd /Library/Application Support/Tunnelblick/Shared/saifu129.211.67.111-openvpn.tblk/Contents/Resources

          --machine-readable-output

          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5671 3.8.5a (build 5671)"

          --verb 3

          --config /Library/Application Support/Tunnelblick/Shared/saifu129.211.67.111-openvpn.tblk/Contents/Resources/config.ovpn

          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/saifu129.211.67.111-openvpn.tblk/Contents/Resources

          --verb 3

          --cd /Library/Application Support/Tunnelblick/Shared/saifu129.211.67.111-openvpn.tblk/Contents/Resources

          --management 127.0.0.1 59951 /Library/Application Support/Tunnelblick/jnfnllldpmbakimhjecdgikdmcichilpackcejlj.mip

          --management-query-passwords

          --management-hold

          --script-security 2

          --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

          --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2021-06-20 09:49:48.393181 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:59951

2021-06-20 09:49:48.448046 MANAGEMENT: CMD 'pid'

2021-06-20 09:49:48.448095 MANAGEMENT: CMD 'auth-retry interact'

2021-06-20 09:49:48.448119 MANAGEMENT: CMD 'state on'

2021-06-20 09:49:48.448133 MANAGEMENT: CMD 'state'

2021-06-20 09:49:48.448159 MANAGEMENT: CMD 'bytecount 1'

2021-06-20 09:49:48.449641 *Tunnelblick: Established communication with OpenVPN

2021-06-20 09:49:48.470179 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info

2021-06-20 09:49:48.472312 MANAGEMENT: CMD 'hold release'

2021-06-20 09:49:48.472518 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-06-20 09:49:48.474408 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2021-06-20 09:49:48.474437 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2021-06-20 09:49:48.474563 TCP/UDP: Preserving recently used remote address: [AF_INET]129.211.67.111:58422

2021-06-20 09:49:48.474616 Socket Buffers: R=[131072->131072] S=[131072->131072]

2021-06-20 09:49:48.474658 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:49:48.474668 MANAGEMENT: >STATE:1624178988,TCP_CONNECT,,,,,,

2021-06-20 09:51:03.930759 TCP: connect to [AF_INET]129.211.67.111:58422 failed: Operation timed out

2021-06-20 09:51:03.931187 SIGUSR1[connection failed(soft),init_instance] received, process restarting

2021-06-20 09:51:03.931277 MANAGEMENT: >STATE:1624179063,RECONNECTING,init_instance,,,,,

2021-06-20 09:51:03.934867 MANAGEMENT: CMD 'hold release'

2021-06-20 09:51:03.935027 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-06-20 09:51:03.935432 TCP/UDP: Preserving recently used remote address: [AF_INET]129.211.67.111:58422

2021-06-20 09:51:03.935585 Socket Buffers: R=[131072->131072] S=[131072->131072]

2021-06-20 09:51:03.935628 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:51:03.935667 MANAGEMENT: >STATE:1624179063,TCP_CONNECT,,,,,,

2021-06-20 09:51:03.936068 MANAGEMENT: CMD 'hold release'

2021-06-20 09:52:19.591800 TCP: connect to [AF_INET]129.211.67.111:58422 failed: Operation timed out

2021-06-20 09:52:19.592092 SIGUSR1[connection failed(soft),init_instance] received, process restarting

2021-06-20 09:52:19.592237 MANAGEMENT: >STATE:1624179139,RECONNECTING,init_instance,,,,,

2021-06-20 09:52:19.594833 MANAGEMENT: CMD 'hold release'

2021-06-20 09:52:19.594939 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-06-20 09:52:19.595148 TCP/UDP: Preserving recently used remote address: [AF_INET]129.211.67.111:58422

2021-06-20 09:52:19.595237 Socket Buffers: R=[131072->131072] S=[131072->131072]

2021-06-20 09:52:19.595267 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:52:19.595295 MANAGEMENT: >STATE:1624179139,TCP_CONNECT,,,,,,

2021-06-20 09:52:19.595574 MANAGEMENT: CMD 'hold release'

2021-06-20 09:53:35.332506 TCP: connect to [AF_INET]129.211.67.111:58422 failed: Operation timed out

2021-06-20 09:53:35.332766 SIGUSR1[connection failed(soft),init_instance] received, process restarting

2021-06-20 09:53:35.332819 MANAGEMENT: >STATE:1624179215,RECONNECTING,init_instance,,,,,

2021-06-20 09:53:35.336359 MANAGEMENT: CMD 'hold release'

2021-06-20 09:53:35.336496 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-06-20 09:53:35.337066 TCP/UDP: Preserving recently used remote address: [AF_INET]129.211.67.111:58422

2021-06-20 09:53:35.337225 Socket Buffers: R=[131072->131072] S=[131072->131072]

2021-06-20 09:53:35.337277 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:53:35.337317 MANAGEMENT: >STATE:1624179215,TCP_CONNECT,,,,,,

2021-06-20 09:53:35.337784 MANAGEMENT: CMD 'hold release'

2021-06-20 09:54:51.052570 TCP: connect to [AF_INET]129.211.67.111:58422 failed: Operation timed out

2021-06-20 09:54:51.052980 SIGUSR1[connection failed(soft),init_instance] received, process restarting

2021-06-20 09:54:51.053076 MANAGEMENT: >STATE:1624179291,RECONNECTING,init_instance,,,,,

2021-06-20 09:54:51.061523 MANAGEMENT: CMD 'hold release'

2021-06-20 09:54:51.061691 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2021-06-20 09:54:51.062060 TCP/UDP: Preserving recently used remote address: [AF_INET]129.211.67.111:58422

2021-06-20 09:54:51.062285 Socket Buffers: R=[131072->131072] S=[131072->131072]

2021-06-20 09:54:51.062517 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:54:51.062602 MANAGEMENT: >STATE:1624179291,TCP_CONNECT,,,,,,

2021-06-20 09:54:51.062853 MANAGEMENT: CMD 'hold release'

================================================================================

Down log:

02:41:00 *Tunnelblick:  **********************************************

02:41:01 *Tunnelblick:  Start of output from client.down.tunnelblick.sh

02:41:02 *Tunnelblick:  WARNING: Not restoring network settings because no saved Tunnelblick DNS information was found.

02:41:02 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache

02:41:02 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed

02:41:02 *Tunnelblick:  End of output from client.down.tunnelblick.sh

02:41:02 *Tunnelblick:  **********************************************

================================================================================

Previous down log:

21:48:42 *Tunnelblick:  **********************************************

21:48:42 *Tunnelblick:  Start of output from client.down.tunnelblick.sh

21:48:43 *Tunnelblick:  WARNING: Not restoring network settings because no saved Tunnelblick DNS information was found.

21:48:43 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache

21:48:43 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed

21:48:43 *Tunnelblick:  End of output from client.down.tunnelblick.sh

21:48:43 *Tunnelblick:  **********************************************

================================================================================

Network services:

An asterisk (*) denotes that a network service is disabled.

Wi-Fi

Bluetooth PAN

Thunderbolt Bridge

Wi-Fi Power (en0): On

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000 

inet6 ::1 prefixlen 128 

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

en5: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether ac:de:48:00:11:22 

inet6 fe80::aede:48ff:fe00:1122%en5 prefixlen 64 scopeid 0x4 

nd6 options=201<PERFORMNUD,DAD>

media: autoselect (100baseTX <full-duplex>)

status: active

ap1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500

options=400<CHANNEL_IO>

ether 36:7d:da:7a:09:af 

media: autoselect

status: inactive

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=400<CHANNEL_IO>

ether 14:7d:da:7a:09:af 

inet 192.168.38.157 netmask 0xffffff00 broadcast 192.168.38.255

media: autoselect

status: active

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

options=400<CHANNEL_IO>

ether 06:7d:da:7a:09:af 

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

options=400<CHANNEL_IO>

ether f6:16:f6:67:6e:53 

inet6 fe80::f416:f6ff:fe67:6e53%awdl0 prefixlen 64 scopeid 0x8 

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

llw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=400<CHANNEL_IO>

ether f6:16:f6:67:6e:53 

inet6 fe80::f416:f6ff:fe67:6e53%llw0 prefixlen 64 scopeid 0x9 

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=460<TSO4,TSO6,CHANNEL_IO>

ether ee:49:91:80:0c:05 

media: autoselect <full-duplex>

status: inactive

en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=460<TSO4,TSO6,CHANNEL_IO>

ether ee:49:91:80:0c:04 

media: autoselect <full-duplex>

status: inactive

en3: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=460<TSO4,TSO6,CHANNEL_IO>

ether ee:49:91:80:0c:01 

media: autoselect <full-duplex>

status: inactive

en4: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=460<TSO4,TSO6,CHANNEL_IO>

ether ee:49:91:80:0c:00 

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether ee:49:91:80:0c:04 

inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255

inet6 fe80::838:d1b5:c2b0:2520%bridge0 prefixlen 64 secured scopeid 0xe 

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x0

member: en1 flags=3<LEARNING,DISCOVER>

        ifmaxaddr 0 port 11 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

        ifmaxaddr 0 port 10 priority 0 path cost 0

member: en3 flags=3<LEARNING,DISCOVER>

        ifmaxaddr 0 port 12 priority 0 path cost 0

member: en4 flags=3<LEARNING,DISCOVER>

        ifmaxaddr 0 port 13 priority 0 path cost 0

nd6 options=201<PERFORMNUD,DAD>

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380

inet6 fe80::abba:8b0c:a51a:3399%utun0 prefixlen 64 scopeid 0xf 

nd6 options=201<PERFORMNUD,DAD>

utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

inet6 fe80::e975:ad4d:dbb1:9c06%utun1 prefixlen 64 scopeid 0x10 

nd6 options=201<PERFORMNUD,DAD>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>

================================================================================

Quit Log:

2021-06-20 02:41:00.293800 applicationShouldTerminate: termination because of logout; delayed until 'shutdownTunnelblick' finishes)

2021-06-20 02:41:00.301965 shutDownTunnelblick: started.

2021-06-20 02:41:00.302419 shutDownTunnelblick: stopping icon animation.

2021-06-20 02:41:00.302787 shutDownTunnelblick: Starting cleanup.

2021-06-20 02:41:00.303186 cleanup: Entering cleanup

2021-06-20 02:41:00.306175 synchronized user defaults

2021-06-20 02:41:02.612083 shutDownTunnelblick: Cleanup finished.

2021-06-20 02:41:02.612624 Finished shutting down Tunnelblick; allowing termination

================================================================================

Console Log:

2021-06-20 08:23:34.117487 Tunnelblick[21348] Tunnelblick: macOS 10.15.7; Tunnelblick 3.8.5a (build 5671)

2021-06-20 09:47:12.688616 Tunnelblick[21348] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Ssaifu129-D211-D67-D111--openvpn-Dtblk-SContents-SResources'

2021-06-20 09:49:47.591849 Tunnelblick[21348] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SShared-Ssaifu129-D211-D67-D111--openvpn-Dtblk-SContents-SResources'

2021-06-20 09:50:55.612161 Tunnelblick[21348] Sparkle: ===== Tunnelblick =====

2021-06-20 09:50:55.612594 Tunnelblick[21348] Sparkle: Verified appcast signature

Please help.
Thank you.

[Tunnelblick developer]

These log entries:

2021-06-20 09:49:48.474658 Attempting to establish TCP connection with [AF_INET]129.211.67.111:58422 [nonblock]

2021-06-20 09:49:48.474668 MANAGEMENT: >STATE:1624178988,TCP_CONNECT,,,,,,

2021-06-20 09:51:03.930759 TCP: connect to [AF_INET]129.211.67.111:58422 failed: Operation timed out

show that the OpenVPN server is not responding. Tunnelblick/OpenVPN sent a request to the OpenVPN server (at 129.211.67.111 port 58422) but the OpenVPN server did not reply within 75 seconds.

Which is in agreement with the behavior your describe (not connecting or taking a long time to connect).

If you were never able to connect, it could be a problem with the ta.key, but since you have sometimes been able to connect, there must be a problem with the OpenVPN server or a firewall between your computer and the server. You need to talk to the organization that runs that server. That is, the organization that set up the VPN and supplied you with the configuration file.

[NTAGUE Rolland Safort]

Thanks very much for your quick response. I'll try to get a knew configuration file. 
I there a way to allow us to manually change the connection timeout? It case of slow network like where I am right now, it might be having lots of timeouts.

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/rKE1ShHDEtI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/tunnelblick-discuss/9fc0ee14-1e1d-4d13-8a51-6acc11d438d5n%40googlegroups.com.

--

Rolland Safort Ntague

email: rollan...@gmail.com

[Tunnelblick developer]

It's unlikely to be a problem with timeouts if you are able to surf the Internet at all. The OpenVPN handshake is not more complicated than getting an https: web page.

Unless the problems started happening only when you changed to a different way of connecting to the Internet, the problem is likely to be a problem with the VPN server.

But one more thing you can try: on Tunnelblick's "Preferences" panel, click "Reset Disabled Warnings", and on the "Settings" tab of the "Configurations" panel, click to select the configuration, then put a check in "Check that IP address changes after connection". After doing those two things, if you get an warning that the IP address could not be obtained before making the connection, then you have some kind of major network problem. Try restarting your computer, and whatever devices (router, cable modem, etc.) that it uses to connect to the Internet.