Raspberry Pi2 and OpenVPN. Installs, runs, doesnt appear to be working

[bob_mycroft@yahoo.co.uk 0]

So - im a networking noob so bear with me. 

 

Im trying to set up openvpn on a respberry Pi2.

Ive followed the instructions here;- https://airvpn.org/topic/11431-using-airvpn-with-linux-from-terminal/

openvpn installed with no errors. I generated the config file with the config generator.

 

I launch openvpn as below and I dont see any obvious errors;-

 

root@raspberrypi:~/Downloads# openvpn AirVPN_United-Kingdom_TCP-443.ovpn &

[1] 4085

root@raspberrypi:~/Downloads# Thu Jun  2 09:28:58 2016 OpenVPN 2.2.1 arm-linux-gnueabihf [sSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [iPv6 payload 20110424-2 (2.2RC2)] built on Dec  1 2014

Thu Jun  2 09:28:58 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Thu Jun  2 09:28:58 2016 Control Channel Authentication: tls-auth using INLINE static key file

Thu Jun  2 09:28:58 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Thu Jun  2 09:28:58 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Thu Jun  2 09:28:58 2016 LZO compression initialized

Thu Jun  2 09:28:58 2016 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]

Thu Jun  2 09:28:58 2016 Socket Buffers: R=[87380->131072] S=[16384->131072]

Thu Jun  2 09:28:58 2016 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]

Thu Jun  2 09:28:58 2016 Local Options hash (VER=V4): '2f2c6498'

Thu Jun  2 09:28:58 2016 Expected Remote Options hash (VER=V4): '9915e4a2'

Thu Jun  2 09:28:58 2016 Attempting to establish TCP connection with [AF_INET]185.103.96.134:443 [nonblock]

Thu Jun  2 09:28:59 2016 TCP connection established with [AF_INET]185.103.96.134:443

Thu Jun  2 09:28:59 2016 TCPv4_CLIENT link local: [undef]

Thu Jun  2 09:28:59 2016 TCPv4_CLIENT link remote: [AF_INET]185.103.96.134:443

Thu Jun  2 09:28:59 2016 TLS: Initial packet from [AF_INET]185.103.96.134:443, sid=5db823d1 35675c40

Thu Jun  2 09:28:59 2016 VERIFY OK: depth=1, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=airvpn.org_CA/emailAddress=info@airvpn.org

Thu Jun  2 09:28:59 2016 Validating certificate key usage

Thu Jun  2 09:28:59 2016 ++ Certificate has key usage  00a0, expects 00a0

Thu Jun  2 09:28:59 2016 VERIFY KU OK

Thu Jun  2 09:28:59 2016 Validating certificate extended key usage

Thu Jun  2 09:28:59 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

Thu Jun  2 09:28:59 2016 VERIFY EKU OK

Thu Jun  2 09:28:59 2016 VERIFY OK: depth=0, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=server/emailAddress=info@airvpn.org

Thu Jun  2 09:29:05 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Thu Jun  2 09:29:05 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Thu Jun  2 09:29:05 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Thu Jun  2 09:29:05 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Thu Jun  2 09:29:05 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA

Thu Jun  2 09:29:05 2016 [server] Peer Connection Initiated with [AF_INET]185.103.96.134:443

Thu Jun  2 09:29:07 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Thu Jun  2 09:29:07 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.0.120 255.255.0.0'

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: timers and/or timeouts modified

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: LZO parms modified

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: --ifconfig/up options modified

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: route options modified

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: route-related options modified

Thu Jun  2 09:29:07 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Thu Jun  2 09:29:07 2016 ROUTE default_gateway=192.168.0.1

Thu Jun  2 09:29:07 2016 TUN/TAP device tun0 opened

Thu Jun  2 09:29:07 2016 TUN/TAP TX queue length set to 100

Thu Jun  2 09:29:07 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

Thu Jun  2 09:29:07 2016 /sbin/ifconfig tun0 10.5.0.120 netmask 255.255.0.0 mtu 1500 broadcast 10.5.255.255

Thu Jun  2 09:29:13 2016 /sbin/route add -net 185.103.96.134 netmask 255.255.255.255 gw 192.168.0.1

Thu Jun  2 09:29:13 2016 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.5.0.1

Thu Jun  2 09:29:13 2016 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.5.0.1

Thu Jun  2 09:29:13 2016 Initialization Sequence Completed

 

 

 

Now though when I try pinging to see whether its still using my supplier - it looks like its not. DNSLeaktest.com also says that its still using the ISP for DNS etc.

 

root@raspberrypi:~/Downloads# jobs

[1]+  Running                 openvpn AirVPN_United-Kingdom_TCP-443.ovpn &

 

root@raspberrypi:~/Downloads# ping google.com

PING google.com (62.252.232.34) 56(84) bytes of data.

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=1 ttl=57 time=40.5 ms

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=2 ttl=57 time=49.0 ms

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=3 ttl=57 time=46.1 ms

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=4 ttl=57 time=44.0 ms

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=5 ttl=57 time=42.7 ms

64 bytes from 34.232-252-62.static.virginmediabusiness.co.uk (62.252.232.34): icmp_req=6 ttl=57 time=40.1 ms

 

What am I missing? Anyone able to help please?

 

-B

[BSoD 4]

I had the same problem when using it on my router or android.

You can solve it by saying to your device that it has to use the DNS from Air (10.4.0.1 for UDP 443) you can find the IP's at the bottom of the following page https://airvpn.org/specs/

 

I believe you have to change the following file:

 /etc/resolv.conf

And change nameserver=8.8.8.8 (or whatever) to 10.4.0.1 (or whichever you want)

Haven't checked it yet with mine.

 

Also perhaps a nice idea to change the pi in a "VPN router/gateway" for a secure connection on-the-go.

On this github ( https://github.com/martinsauter/WLAN-VPN-Pi ) you have a link to an installer which does everything for you

And a make article ( http://makezine.com/projects/browse-anonymously-with-a-diy-raspberry-pi-vpntor-router/ ) for DIY

 

 

[airvpnclient 13]

The configurator only gives you basic Openvpn connection options and lacks the advanced DNS leak stop and Network lock of the full client.

 

My solution is a bit of a cheat -- see here:

 

https://airvpn.org/topic/18311-raspberry-pi-2-and-airvpn-client-problem/?do=findComment&comment=46158