AirSpider 1 Posted ... Hi All, I tried to use the VPN on my phone this afternoon, a Z5 Compact with 6.0.1 and received the error "write UDP [ECONNREFUSED]: Operation not permitted (code=1)". No traffic is passing and it's been this way for a few hours. This is happening on all the servers I've tested with both Firefox and Chrome. It is normally trouble free and works as expected. Are Air aware of any issues which might be causing this? Log: 2016-06-23 18:59:27 official build 0.6.55 running on Sony E5823 (msm8994), Android 6.0.1 (32.2.A.0.224) API 23, ABI arm64-v8a, (Sony/E5823/E5823:6.0.1/32.2.A.0.224/456768306:user/release-keys)2016-06-23 18:59:27 Building configuration…2016-06-23 18:59:27 started Socket Thread2016-06-23 18:59:27 Current Parameter Settings:2016-06-23 18:59:27 config = '/data/user/0/de.blinkt.openvpn/cache/android.conf'2016-06-23 18:59:27 mode = 02016-06-23 18:59:27 show_ciphers = DISABLED2016-06-23 18:59:27 show_digests = DISABLED2016-06-23 18:59:27 show_engines = DISABLED2016-06-23 18:59:27 genkey = DISABLED2016-06-23 18:59:27 key_pass_file = '[uNDEF]'2016-06-23 18:59:27 show_tls_ciphers = DISABLED2016-06-23 18:59:27 connect_retry_max = 52016-06-23 18:59:27 Connection profiles [0]:2016-06-23 18:59:27 proto = udp2016-06-23 18:59:27 local = '[uNDEF]'2016-06-23 18:59:27 local_port = '[uNDEF]'2016-06-23 18:59:27 remote = 'europe.vpn.airdns.org'2016-06-23 18:59:27 remote_port = '443'2016-06-23 18:59:27 remote_float = DISABLED2016-06-23 18:59:27 bind_defined = DISABLED2016-06-23 18:59:27 bind_local = DISABLED2016-06-23 18:59:27 bind_ipv6_only = DISABLED2016-06-23 18:59:27 connect_retry_seconds = 52016-06-23 18:59:27 connect_timeout = 1202016-06-23 18:59:27 socks_proxy_server = '[uNDEF]'2016-06-23 18:59:27 socks_proxy_port = '[uNDEF]'2016-06-23 18:59:27 socks_proxy_retry = DISABLED2016-06-23 18:59:27 tun_mtu = 15002016-06-23 18:59:27 tun_mtu_defined = ENABLED2016-06-23 18:59:27 link_mtu = 15002016-06-23 18:59:27 link_mtu_defined = DISABLED2016-06-23 18:59:27 tun_mtu_extra = 02016-06-23 18:59:27 tun_mtu_extra_defined = DISABLED2016-06-23 18:59:27 mtu_discover_type = -12016-06-23 18:59:27 fragment = 02016-06-23 18:59:27 mssfix = 14502016-06-23 18:59:27 explicit_exit_notification = 52016-06-23 18:59:27 Connection profiles END2016-06-23 18:59:27 remote_random = DISABLED2016-06-23 18:59:27 ipchange = '[uNDEF]'2016-06-23 18:59:27 dev = 'tun'2016-06-23 18:59:27 dev_type = '[uNDEF]'2016-06-23 18:59:27 dev_node = '[uNDEF]'2016-06-23 18:59:27 lladdr = '[uNDEF]'2016-06-23 18:59:27 topology = 12016-06-23 18:59:27 tun_ipv6 = DISABLED2016-06-23 18:59:27 ifconfig_local = '[uNDEF]'2016-06-23 18:59:27 ifconfig_remote_netmask = '[uNDEF]'2016-06-23 18:59:27 ifconfig_noexec = DISABLED2016-06-23 18:59:27 ifconfig_nowarn = ENABLED2016-06-23 18:59:27 ifconfig_ipv6_local = '[uNDEF]'2016-06-23 18:59:27 ifconfig_ipv6_netbits = 02016-06-23 18:59:27 ifconfig_ipv6_remote = '[uNDEF]'2016-06-23 18:59:27 shaper = 02016-06-23 18:59:27 mtu_test = 02016-06-23 18:59:27 mlock = DISABLED2016-06-23 18:59:27 keepalive_ping = 02016-06-23 18:59:27 keepalive_timeout = 02016-06-23 18:59:27 inactivity_timeout = 02016-06-23 18:59:27 ping_send_timeout = 02016-06-23 18:59:27 ping_rec_timeout = 02016-06-23 18:59:27 ping_rec_timeout_action = 02016-06-23 18:59:27 ping_timer_remote = DISABLED2016-06-23 18:59:27 remap_sigusr1 = 02016-06-23 18:59:27 persist_tun = ENABLED2016-06-23 18:59:27 persist_local_ip = DISABLED2016-06-23 18:59:27 persist_remote_ip = DISABLED2016-06-23 18:59:27 persist_key = DISABLED2016-06-23 18:59:27 passtos = DISABLED2016-06-23 18:59:27 resolve_retry_seconds = 10000000002016-06-23 18:59:27 resolve_in_advance = ENABLED2016-06-23 18:59:27 username = '[uNDEF]'2016-06-23 18:59:27 groupname = '[uNDEF]'2016-06-23 18:59:27 chroot_dir = '[uNDEF]'2016-06-23 18:59:27 cd_dir = '[uNDEF]'2016-06-23 18:59:27 writepid = '[uNDEF]'2016-06-23 18:59:27 up_script = '[uNDEF]'2016-06-23 18:59:27 down_script = '[uNDEF]'2016-06-23 18:59:27 down_pre = DISABLED2016-06-23 18:59:27 up_restart = DISABLED2016-06-23 18:59:27 up_delay = DISABLED2016-06-23 18:59:27 daemon = DISABLED2016-06-23 18:59:27 inetd = 02016-06-23 18:59:27 log = DISABLED2016-06-23 18:59:27 suppress_timestamps = DISABLED2016-06-23 18:59:27 machine_readable_output = ENABLED2016-06-23 18:59:27 nice = 02016-06-23 18:59:27 verbosity = 42016-06-23 18:59:27 mute = 02016-06-23 18:59:27 gremlin = 02016-06-23 18:59:27 status_file = '[uNDEF]'2016-06-23 18:59:27 status_file_version = 12016-06-23 18:59:27 status_file_update_freq = 602016-06-23 18:59:27 occ = ENABLED2016-06-23 18:59:27 rcvbuf = 02016-06-23 18:59:27 sndbuf = 02016-06-23 18:59:27 sockflags = 02016-06-23 18:59:27 fast_io = DISABLED2016-06-23 18:59:27 comp.alg = 22016-06-23 18:59:27 comp.flags = 12016-06-23 18:59:27 route_script = '[uNDEF]'2016-06-23 18:59:27 route_default_gateway = '[uNDEF]'2016-06-23 18:59:27 route_default_metric = 02016-06-23 18:59:27 route_noexec = DISABLED2016-06-23 18:59:27 route_delay = 02016-06-23 18:59:27 route_delay_window = 302016-06-23 18:59:27 route_delay_defined = DISABLED2016-06-23 18:59:27 route_nopull = DISABLED2016-06-23 18:59:27 route_gateway_via_dhcp = DISABLED2016-06-23 18:59:27 allow_pull_fqdn = DISABLED2016-06-23 18:59:27 management_addr = '/data/user/0/de.blinkt.openvpn/cache/mgmtsocket'2016-06-23 18:59:27 management_port = 'unix'2016-06-23 18:59:27 management_user_pass = '[uNDEF]'2016-06-23 18:59:27 management_log_history_cache = 2502016-06-23 18:59:27 management_echo_buffer_size = 1002016-06-23 18:59:27 management_write_peer_info_file = '[uNDEF]'2016-06-23 18:59:27 management_client_user = '[uNDEF]'2016-06-23 18:59:27 management_client_group = '[uNDEF]'2016-06-23 18:59:27 management_flags = 43902016-06-23 18:59:27 shared_secret_file = '[uNDEF]'2016-06-23 18:59:27 key_direction = 22016-06-23 18:59:27 ciphername_defined = ENABLED2016-06-23 18:59:27 ciphername = 'AES-256-CBC'2016-06-23 18:59:27 authname_defined = ENABLED2016-06-23 18:59:27 authname = 'SHA1'2016-06-23 18:59:27 prng_hash = 'SHA1'2016-06-23 18:59:27 prng_nonce_secret_len = 162016-06-23 18:59:27 keysize = 02016-06-23 18:59:27 engine = DISABLED2016-06-23 18:59:27 replay = ENABLED2016-06-23 18:59:27 mute_replay_warnings = DISABLED2016-06-23 18:59:27 replay_window = 642016-06-23 18:59:27 replay_time = 152016-06-23 18:59:27 packet_id_file = '[uNDEF]'2016-06-23 18:59:27 use_iv = ENABLED2016-06-23 18:59:27 test_crypto = DISABLED2016-06-23 18:59:27 tls_server = DISABLED2016-06-23 18:59:27 tls_client = ENABLED2016-06-23 18:59:27 key_method = 22016-06-23 18:59:27 ca_file = '[[iNLINE]]'2016-06-23 18:59:27 ca_path = '[uNDEF]'2016-06-23 18:59:27 dh_file = '[uNDEF]'2016-06-23 18:59:27 cert_file = '[[iNLINE]]'2016-06-23 18:59:27 extra_certs_file = '[uNDEF]'2016-06-23 18:59:27 priv_key_file = '[[iNLINE]]'2016-06-23 18:59:27 pkcs12_file = '[uNDEF]'2016-06-23 18:59:27 cipher_list = '[uNDEF]'2016-06-23 18:59:27 tls_verify = '[uNDEF]'2016-06-23 18:59:27 tls_export_cert = '[uNDEF]'2016-06-23 18:59:27 verify_x509_type = 02016-06-23 18:59:27 verify_x509_name = '[uNDEF]'2016-06-23 18:59:27 crl_file = '[uNDEF]'2016-06-23 18:59:27 ns_cert_type = 02016-06-23 18:59:27 remote_cert_ku = 1602016-06-23 18:59:27 remote_cert_ku = 1362016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_ku = 02016-06-23 18:59:27 remote_cert_eku = 'TLS Web Server Authentication'2016-06-23 18:59:27 ssl_flags = 02016-06-23 18:59:27 tls_timeout = 22016-06-23 18:59:27 renegotiate_bytes = 02016-06-23 18:59:27 renegotiate_packets = 02016-06-23 18:59:27 renegotiate_seconds = 36002016-06-23 18:59:27 handshake_window = 602016-06-23 18:59:27 transition_window = 36002016-06-23 18:59:27 single_session = DISABLED2016-06-23 18:59:27 push_peer_info = DISABLED2016-06-23 18:59:27 tls_exit = DISABLED2016-06-23 18:59:27 tls_auth_file = '[[iNLINE]]'2016-06-23 18:59:27 client = ENABLED2016-06-23 18:59:27 pull = ENABLED2016-06-23 18:59:27 auth_user_pass_file = '[uNDEF]'2016-06-23 18:59:27 OpenVPN 2.4-icsopenvpn [git:icsopenvpn-8c4d6896cff89e57+] android-21-arm64-v8a [sSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH] [iPv6] built on May 5 20162016-06-23 18:59:27 library versions: OpenSSL 1.0.2h 3 May 2016, LZO 2.092016-06-23 18:59:27 MANAGEMENT: Connected to management server at /data/user/0/de.blinkt.openvpn/cache/mgmtsocket2016-06-23 18:59:27 MANAGEMENT: CMD 'hold release'2016-06-23 18:59:28 MANAGEMENT: CMD 'bytecount 2'2016-06-23 18:59:28 MANAGEMENT: CMD 'proxy NONE'2016-06-23 18:59:28 MANAGEMENT: CMD 'state on'2016-06-23 18:59:28 Network Status: CONNECTED to WIFI "REDACTED"2016-06-23 18:59:29 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication2016-06-23 18:59:29 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication2016-06-23 18:59:29 LZO compression initializing2016-06-23 18:59:29 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]2016-06-23 18:59:29 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:395 ET:0 EL:3 ]2016-06-23 18:59:29 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'2016-06-23 18:59:29 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'2016-06-23 18:59:29 TCP/UDP: Preserving recently used remote address: [AF_INET]62.102.148.151:4432016-06-23 18:59:29 Socket Buffers: R=[212992->212992] S=[212992->212992]2016-06-23 18:59:29 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'2016-06-23 18:59:29 UDP link local: (not bound)2016-06-23 18:59:29 UDP link remote: [AF_INET]62.102.148.151:4432016-06-23 18:59:29 MANAGEMENT: >STATE:1466704769,WAIT,,,,,,2016-06-23 18:59:29 MANAGEMENT: >STATE:1466704769,AUTH,,,,,,2016-06-23 18:59:29 TLS: Initial packet from [AF_INET]62.102.148.151:443, sid=e8d53b0c 6a59771f2016-06-23 18:59:30 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org2016-06-23 18:59:30 Validating certificate key usage2016-06-23 18:59:30 ++ Certificate has key usage 00a0, expects 00a02016-06-23 18:59:30 VERIFY KU OK2016-06-23 18:59:30 Validating certificate extended key usage2016-06-23 18:59:30 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication2016-06-23 18:59:30 VERIFY EKU OK2016-06-23 18:59:30 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org2016-06-23 18:59:30 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key2016-06-23 18:59:30 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication2016-06-23 18:59:30 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key2016-06-23 18:59:30 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication2016-06-23 18:59:30 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA2016-06-23 18:59:30 [server] Peer Connection Initiated with [AF_INET]62.102.148.151:4432016-06-23 18:59:31 MANAGEMENT: >STATE:1466704771,GET_CONFIG,,,,,,2016-06-23 18:59:31 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)2016-06-23 18:59:32 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.15.43 255.255.0.0'2016-06-23 18:59:32 OPTIONS IMPORT: timers and/or timeouts modified2016-06-23 18:59:32 OPTIONS IMPORT: compression parms modified2016-06-23 18:59:32 OPTIONS IMPORT: --ifconfig/up options modified2016-06-23 18:59:32 OPTIONS IMPORT: route options modified2016-06-23 18:59:32 OPTIONS IMPORT: route-related options modified2016-06-23 18:59:32 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified2016-06-23 18:59:32 GDG: SIOCGIFHWADDR(lo) failed2016-06-23 18:59:32 ROUTE_GATEWAY 127.100.103.119/255.0.0.0 IFACE=lo2016-06-23 18:59:32 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=02016-06-23 18:59:32 MANAGEMENT: >STATE:1466704772,ASSIGN_IP,,10.4.15.43,,,,2016-06-23 18:59:32 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'2016-06-23 18:59:32 MANAGEMENT: CMD 'needok 'ROUTE' ok'2016-06-23 18:59:32 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'2016-06-23 18:59:32 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'2016-06-23 18:59:32 Opening tun interface:2016-06-23 18:59:32 Ignoring multicast route: 224.0.0.0/32016-06-23 18:59:32 Local IPv4: 10.4.15.43/16 IPv6: null MTU: 15002016-06-23 18:59:32 DNS Server: 10.4.0.1, Domain: null2016-06-23 18:59:32 Routes: 0.0.0.0/0, 10.4.0.0/162016-06-23 18:59:32 Routes excluded: 192.168.0.11/242016-06-23 18:59:32 VpnService routes installed: 0.0.0.0/1, 128.0.0.0/2, 192.0.0.0/9, 192.128.0.0/11, 192.160.0.0/13, 192.168.1.0/24, 192.168.2.0/23, 192.168.4.0/22, 192.168.8.0/21, 192.168.16.0/20, 192.168.32.0/19, 192.168.64.0/18, 192.168.128.0/17, 192.169.0.0/16, 192.170.0.0/15, 192.172.0.0/14, 192.176.0.0/12, 192.192.0.0/10, 193.0.0.0/8, 194.0.0.0/7, 196.0.0.0/6, 200.0.0.0/5, 208.0.0.0/4, 224.0.0.0/32016-06-23 18:59:32 Disallowed VPN apps:2016-06-23 18:59:32 MANAGEMENT: CMD 'needok 'OPENTUN' ok'2016-06-23 18:59:32 Initialization Sequence Completed2016-06-23 18:59:32 MANAGEMENT: >STATE:1466704772,CONNECTED,SUCCESS,10.4.15.43,62.102.148.151,443,,2016-06-23 18:59:35 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:38 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:38 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:38 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:38 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:40 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:43 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:43 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:43 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:45 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1)2016-06-23 18:59:48 write UDP [ECONNREFUSED]: Operation not permitted (code=1) Quote Share this post Link to post
zhang888 1066 Posted ... Generally it means that something is broken in your ROM, there are many reports about such errors in the officialOpenVPN for Android Github:https://github.com/schwabe/ics-openvpn/issues/472 P.S.You have very weird routes set, 196.0.0.0/6 which is half of Africa and 200.0.0.0/5 which is half of South America. Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post
AirSpider 1 Posted ... I am not running a custom ROM, but the stock UK firmware. I can however roll back to 6.0 (which may have been the last time I used the VPN) to see what happens. Excuse my ignorance regards the routing, but I'm not 'setting' any routes. I just downloaded the Europe Config along with a few others from the Air generator and loaded them into the OpenVPN app. Thanks Quote Share this post Link to post
zhang888 1066 Posted ... Any given ROM feature can be broken even without being "custom".Actually the custom ones are usually fixing broken things in the "official" ones Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post