I
I
Ilya2016-09-13 00:16:41
openvpn
Ilya, 2016-09-13 00:16:41

How to set up OpenVPN correctly?

Good night, I'm trying to set up on a fresh VPS from Hetzner. And nothing works. Nothing is written to the logs, and when connected in the interface, it gives only this. For iptables specified.

iptables -A FORWARD -i eth0 -o tun0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

Tue Sep 13 02:11:02 2016 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 23 2016
Tue Sep 13 02:11:02 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Sep 13 02:11:02 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Tue Sep 13 02:11:02 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:02 2016 Need hold release from management interface, waiting...
Tue Sep 13 02:11:03 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'state on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'log all on'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold off'
Tue Sep 13 02:11:03 2016 MANAGEMENT: CMD 'hold release'
Tue Sep 13 02:11:03 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Sep 13 02:11:03 2016 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Sep 13 02:11:03 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,RESOLVE,,,
Tue Sep 13 02:11:03 2016 UDPv4 link local: [undef]
Tue Sep 13 02:11:03 2016 UDPv4 link remote: [AF_INET]78.47.95.2:1194
Tue Sep 13 02:11:03 2016 MANAGEMENT: >STATE:1473714663,WAIT,,,
Tue Sep 13 02:11:03 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:05 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:10 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:18 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Sep 13 02:11:34 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

server.conf
port 1194
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
auth SHA512
cipher AES-128-CBC
tls-auth ta.key 0
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1 bypass-dhcp"

client.conf
client

cipher AES-128-CBC
auth SHA512
dev tun
proto udp

remote discharge.be 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
tls-auth ta.key 1
comp-lzo

verb 3

Answer the question

In order to leave comments, you need to log in

1 answer(s)
Y
younghacker, 2016-09-18
@nuBacuk

Logs are not written because they are not configured.
There is no option in either client or server configs.

log                   /var/log/openvpn-udp1194.log
verb 3

For Windows, another directory where to write logs.
On the server, do 2 things:
1) open UDP port 1194
2) check that SELinux is not blocking anything. Can be temporarily disabled
setenforce 0

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question