[Whonix] Cant connect "Checking routes don't match" (Logs included)

[thebuzz 1]

I have a support ticket open but am in a completely different time zone than the staff so I'm only getting a reply every 24 hours. I'm on the trial version and want to get this working and test out the VPN before my trial ends. Hoping for some extra support here.

 

Using protocol TCP

 

 

I 2017.03.23 23:40:41 - Session starting.
. 2017.03.23 23:40:43 - Unable to understand if IPv6 is active.
I 2017.03.23 23:40:43 - Checking authorization ...
! 2017.03.23 23:40:45 - Connecting to Agena (Canada, Toronto, Ontario)
. 2017.03.23 23:40:45 - OpenVPN > OpenVPN 2.3.4 i586-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 19 2015
. 2017.03.23 23:40:45 - OpenVPN > library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
. 2017.03.23 23:40:45 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.03.23 23:40:45 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file
. 2017.03.23 23:40:45 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.23 23:40:45 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.23 23:40:45 - OpenVPN > Socket Buffers: R=[87380->131072] S=[16384->131072]
. 2017.03.23 23:40:45 - OpenVPN > Attempting to establish TCP connection with [AF_INET]184.75.223.210:443 [nonblock]
. 2017.03.23 23:40:46 - OpenVPN > TCP connection established with [AF_INET]184.75.223.210:443
. 2017.03.23 23:40:46 - OpenVPN > TCPv4_CLIENT link local: [undef]
. 2017.03.23 23:40:46 - OpenVPN > TCPv4_CLIENT link remote: [AF_INET]184.75.223.210:443
. 2017.03.23 23:40:46 - OpenVPN > TLS: Initial packet from [AF_INET]184.75.223.210:443, sid=3a8610ce 35ff0302
. 2017.03.23 23:40:47 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2017.03.23 23:40:47 - OpenVPN > Validating certificate key usage
. 2017.03.23 23:40:47 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0
. 2017.03.23 23:40:47 - OpenVPN > VERIFY KU OK
. 2017.03.23 23:40:47 - OpenVPN > Validating certificate extended key usage
. 2017.03.23 23:40:47 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2017.03.23 23:40:47 - OpenVPN > VERIFY EKU OK
. 2017.03.23 23:40:47 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2017.03.23 23:40:55 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.23 23:40:55 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.23 23:40:55 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.23 23:40:55 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.23 23:40:55 - OpenVPN > Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
. 2017.03.23 23:40:55 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]184.75.223.210:443
. 2017.03.23 23:40:57 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2017.03.23 23:40:58 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.6.12 255.255.0.0'
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: LZO parms modified
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: route options modified
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2017.03.23 23:40:58 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2017.03.23 23:40:58 - OpenVPN > ROUTE_GATEWAY 10.152.152.10/255.255.192.0 IFACE=eth0 HWADDR=08:00:27:1a:db:a9
. 2017.03.23 23:40:58 - OpenVPN > TUN/TAP device tun0 opened
. 2017.03.23 23:40:58 - OpenVPN > TUN/TAP TX queue length set to 100
. 2017.03.23 23:40:58 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
. 2017.03.23 23:40:58 - OpenVPN > /sbin/ip link set dev tun0 up mtu 1500
. 2017.03.23 23:40:58 - OpenVPN > /sbin/ip addr add dev tun0 10.5.6.12/16 broadcast 10.5.255.255
. 2017.03.23 23:41:03 - OpenVPN > /sbin/ip route add 184.75.223.210/32 via 10.152.152.10
. 2017.03.23 23:41:03 - OpenVPN > /sbin/ip route add 0.0.0.0/1 via 10.5.0.1
. 2017.03.23 23:41:03 - OpenVPN > /sbin/ip route add 128.0.0.0/1 via 10.5.0.1
. 2017.03.23 23:41:03 - Starting Management Interface
. 2017.03.23 23:41:03 - OpenVPN > Initialization Sequence Completed
I 2017.03.23 23:41:03 - Checking route
E 2017.03.23 23:41:09 - Checking route don't match
. 2017.03.23 23:41:09 - Checking route (2° try)
E 2017.03.23 23:41:12 - Checking route don't match
. 2017.03.23 23:41:12 - Checking route (3° try)
E 2017.03.23 23:41:16 - Checking route don't match
E 2017.03.23 23:41:16 - Routing checking failed.
. 2017.03.23 23:41:16 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
! 2017.03.23 23:41:16 - Disconnecting
. 2017.03.23 23:41:16 - Management - Send 'signal SIGTERM'
. 2017.03.23 23:41:16 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
. 2017.03.23 23:41:16 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'
. 2017.03.23 23:41:16 - OpenVPN > /sbin/ip route del 184.75.223.210/32
. 2017.03.23 23:41:16 - OpenVPN > /sbin/ip route del 0.0.0.0/1
. 2017.03.23 23:41:16 - OpenVPN > /sbin/ip route del 128.0.0.0/1
. 2017.03.23 23:41:16 - OpenVPN > Closing TUN/TAP interface
. 2017.03.23 23:41:16 - OpenVPN > /sbin/ip addr del dev tun0 10.5.6.12/16
. 2017.03.23 23:41:16 - OpenVPN > SIGTERM[hard,] received, process exiting
. 2017.03.23 23:41:16 - Connection terminated.
I 2017.03.23 23:41:19 - Cancel requested.
! 2017.03.23 23:41:19 - Session terminated.
. 2017.03.23 23:43:52 - Updating systems & servers data ...
. 2017.03.23 23:43:54 - Systems & servers data update completed

[thebuzz 1]

I unchecked "Check if the tunnel works" in Advanced options and it works. What exactly is the downside of unchecking that?

[OpenSourcerer 1441]

I unchecked "Check if the tunnel works" in Advanced options and it works. What exactly is the downside of unchecking that?

 

Tunnel checks work by sending a packet to your external VPN IP. Turning it off obviously does not do this step of confirmation and does not warn you that a problem exists. Check with ipleak.net for example if you really have the VPN server's IP to be sure.