Tunnelblick not keeping connection with 10.6.1

[lenn]

Ever since updating to 10.6.1 Tunnelblick 3.0b16 has not been able to
keep a connection. Either it doesn't connect at all or it connects and
then 10sec later disconnects. I've tried reinstalling TB. Same thing.
This happens on both my iMacCoreDuo and MBP(4.1).
I just tried running Viscosity and that is working great.

Any ideas?

thx
lenn

[lenn]

Looks like the set nameserver might be the cause of the problem. When
it's unchecked I can connect. When it's checked I either can't connect
or I disconnect immediately.
lenn

[saltsea]

I've been having similar problems – just started recently – not sure
what changed.

Tunnelblick 3.0b16 makes connection and will stay connected until I
open a browser - then it stalls and eventually disconnects, crashing
my YF connection at the same time.

This also happened on an earlier version(< 3.0b16), in fact I just
updated as an attempted fix.

ANy ideas?

[lenn]

See if this info helps you.

http://groups.google.com/group/tunnelblick-discuss/browse_thread/thread/c7368174757db77f/0e41b32ca709b5b1?lnk=gst&q=set+nameserver#0e41b32ca709b5b1

[jkbull...gmail.com]

This is probably not your problem (since you apparently can't connect
with earlier versions of Tunnelblick, but...

Another thing to look out for is if the configuration (client or
pushed from server) includes "redirect-gateway" without any flags
(arguments). Although this is not correct syntax, OpenVPN does not
complain about it, and apparently the OpenVPN version in Tunnelblick
3.0b14 interprets it as if it were "redirect-gateway def1", while the
version in Tunnelblick 3.0b16 interprets it as if it were "redirect-
gateway autolocal", which does not work on Macs (yet). The solution is
to
put the proper "flag" in the line so it is correct syntactically.

See the discussion at
http://code.google.com/p/tunnelblick/issues/detail?id=106#c1
If this isn't your problem, it might help if you posted your config
files (client and server, if possible) and the OpenVPN Log showing
the
disconnect. (Click the Tunnelblick icon, click "Details...", Command-
A
to select all, then Command-C to copy, then you can paste it). If you
do that you should make sure any sensitive IP addresses, etc. are
obfuscated.

The OpenVPN man page does not yet document "autolocal"; documentation
is in the change notes for OpenVPN 2.1_rc19, located at
http://openvpn.net/index.php/open-source/documentation/change-log/71-21-change-log.html

On Sep 10, 10:39 pm, lenn <afadan...@gmail.com> wrote:
> See if this info helps you.
>

> http://groups.google.com/group/tunnelblick-discuss/browse_thread/thre...

[saltsea]

jk & lenn,

thanks for your help. the disconnect is consistent, here's the log
(with my blanks in places):

2009-09-11 22:24:05 Initialization Sequence Completed
2009-09-11 22:24:05 __________
2009-09-11 22:24:55 restarting [0]
2009-09-11 22:24:55 TCP/UDP: Closing socket
2009-09-11 22:24:55 /Applications/Tunnelblick.app/Contents/Resources/
client.down.osx.sh tun0 1500 1544 169.254.0.22 ___________ restart
2009-09-11 22:24:55 process restarting
2009-09-11 22:24:55
2009-09-11 22:24:56 MANAGEMENT: CMD 'hold release'
2009-09-11 22:24:56 SUCCESS: hold release succeeded
2009-09-11 22:24:56 WARNING: No server certificate verification method
has been enabled. See http://openvpn.net/howto.html#mitm for more
info.
2009-09-11 22:24:56 NOTE: the current --script-security setting may
allow this configuration to call user-defined scripts
2009-09-11 22:24:56 Re-using SSL/TLS context
2009-09-11 22:24:56 LZO compression initialized
2009-09-11 22:24:56 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:
0 ET:0 EL:0 ]
2009-09-11 22:24:56
2009-09-11 22:24:56 Data Channel MTU parms [ L:1544 D:1350 EF:44 EB:
135 ET:0 EL:0 AF:3/1 ]
2009-09-11 22:24:56 tls-client'
2009-09-11 22:24:56 tls-server'
2009-09-11 22:24:56 Local Options hash (VER=V4): '_______'
2009-09-11 22:24:56 Expected Remote Options hash (VER=V4): '________'
2009-09-11 22:24:56 Attempting to establish TCP connection with
___________ [nonblock]
2009-09-11 22:24:56
2009-09-11 22:24:56 TCP connection established with __________
2009-09-11 22:24:56 Socket Buffers: R=[538956->262144] S=[146988-
>262144]
2009-09-11 22:24:56 NOTE: setsockopt TCP_NODELAY=1 failed (No kernel
support)
2009-09-11 22:24:56 TCPv4_CLIENT link local: [undef]
2009-09-11 22:24:56 TCPv4_CLIENT link remote: ______________
2009-09-11 22:24:56
2009-09-11 22:25:29 event_wait : Interrupted system call (code=4)

[lenn]

Ever since installing 10.6 and 10.6.1 my vpn connection using
Tunnelblick has been very flaky. Sometimes the connection is ok, other
times it just drops out after 10 minutes. This is getting a little
frustrating.
lenn

On Sep 11, 10:31 pm, saltsea <davidglee...@gmail.com> wrote:
> jk & lenn,
>
> thanks for your help. the disconnect is consistent, here's the log
> (with my blanks in places):
>
> 2009-09-11 22:24:05 Initialization Sequence Completed
> 2009-09-11 22:24:05 __________
> 2009-09-11 22:24:55  restarting [0]
> 2009-09-11 22:24:55 TCP/UDP: Closing socket
> 2009-09-11 22:24:55 /Applications/Tunnelblick.app/Contents/Resources/
> client.down.osx.sh tun0 1500 1544 169.254.0.22 ___________ restart
> 2009-09-11 22:24:55  process restarting
> 2009-09-11 22:24:55
> 2009-09-11 22:24:56 MANAGEMENT: CMD 'hold release'
> 2009-09-11 22:24:56 SUCCESS: hold release succeeded
> 2009-09-11 22:24:56 WARNING: No server certificate verification method

> has been enabled.  Seehttp://openvpn.net/howto.html#mitmfor more

[jkbull...gmail.com]

"Just drops out after ten minutes":

1. Is it always exactly ten minutes?
2. Can you provide a copy of the entire OpenVPN log?