Answer the question
In order to leave comments, you need to log in
How to set up OpenVPN correctly?
Good night, I'm trying to set up on a fresh VPS from Hetzner. And nothing works. Nothing is written to the logs, and when connected in the interface, it gives only this. For iptables specified.
iptables -A FORWARD -i eth0 -o tun0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
Tue Sep 13 02:11:02 2016 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 23 2016
Tue Sep 13 02:11:02 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Sep 13 02:11:02 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Tue Sep 13 02:11:02 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:02 2016 Need hold release from management interface, waiting...
Tue Sep 13 02:11:03 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'state on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'log all on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold off'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold release'
Tue Sep 13 02:11:03 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Sep 13 02:11:03 2016 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,RESOLVE,,,
Tue Sep 13 02:11:03 2016 UDPv4 link local: [undef]
Tue Sep 13 02:11:03 2016 UDPv4 link remote: [AF_INET]78.47.95.2:1194
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,WAIT,,,
Tue Sep 13 02:11:03 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:05 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:10 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:18 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:34 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
auth SHA512
cipher AES-128-CBC
tls-auth ta.key 0
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1 bypass-dhcp"
client
cipher AES-128-CBC
auth SHA512
dev tun
proto udp
remote discharge.be 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
tls-auth ta.key 1
comp-lzo
verb 3
Answer the question
In order to leave comments, you need to log in
Logs are not written because they are not configured.
There is no option in either client or server configs.
log /var/log/openvpn-udp1194.log
verb 3
setenforce 0
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question