Openvpn initialization problem

[expatmog 0]

I apologize in advance for such a (I hope) simple problem. I'm trying to start Airvpn on Lunix using config file and the terminal per the instructions in the "how to." It runs, then the last line on the terminal is "Initialization sequence completed." It hangs there with internet dead, and never does anything else. If I ctl. C, it continues and terminates whatever it was doing. I've tried this on several systems with the same result.

 

My question is, is there something else I have to do? OpenVPN is installed, is there anything else that has to be there? I'm doing this because there seems to be no other way to start Airvpn on KaOS. Below is the terminal printout. I know this shows that I only gave it less then a minute, but prior attempts on several systems showed that it would never do anything.

 

Thanks,

 

Pete

 

[pete@pete-pc Downloads]$ sudo openvpn vpn.ovpn
Thu Mar 15 16:08:32 2018 OpenVPN 2.4.5 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar  1 2018
Thu Mar 15 16:08:32 2018 library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.10
Thu Mar 15 16:08:32 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 15 16:08:32 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 15 16:08:32 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]104.254.90.234:443
Thu Mar 15 16:08:32 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Mar 15 16:08:32 2018 UDP link local: (not bound)
Thu Mar 15 16:08:32 2018 UDP link remote: [AF_INET]104.254.90.234:443
Thu Mar 15 16:08:32 2018 TLS: Initial packet from [AF_INET]104.254.90.234:443, sid=aa8cd42a 332651f4
Thu Mar 15 16:08:32 2018 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
Thu Mar 15 16:08:32 2018 VERIFY KU OK
Thu Mar 15 16:08:32 2018 Validating certificate extended key usage
Thu Mar 15 16:08:32 2018 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Mar 15 16:08:32 2018 VERIFY EKU OK
Thu Mar 15 16:08:32 2018 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
Thu Mar 15 16:08:33 2018 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Thu Mar 15 16:08:33 2018 [server] Peer Connection Initiated with [AF_INET]104.254.90.234:443
Thu Mar 15 16:08:34 2018 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Mar 15 16:08:34 2018 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.13.251 255.255.0.0'
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: compression parms modified
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: route options modified
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: route-related options modified
Thu Mar 15 16:08:34 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Mar 15 16:08:34 2018 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Mar 15 16:08:34 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 15 16:08:34 2018 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Mar 15 16:08:34 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 15 16:08:34 2018 ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=enp10s0 HWADDR=08:62:66:c7:b0:29
Thu Mar 15 16:08:34 2018 TUN/TAP device tun0 opened
Thu Mar 15 16:08:34 2018 TUN/TAP TX queue length set to 100
Thu Mar 15 16:08:34 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Mar 15 16:08:34 2018 /usr/bin/ip link set dev tun0 up mtu 1500
Thu Mar 15 16:08:34 2018 /usr/bin/ip addr add dev tun0 10.4.13.251/16 broadcast 10.4.255.255
Thu Mar 15 16:08:40 2018 /usr/bin/ip route add 104.254.90.234/32 via 192.168.1.254
Thu Mar 15 16:08:40 2018 /usr/bin/ip route add 0.0.0.0/1 via 10.4.0.1
Thu Mar 15 16:08:40 2018 /usr/bin/ip route add 128.0.0.0/1 via 10.4.0.1
Thu Mar 15 16:08:40 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 15 16:08:40 2018 Initialization Sequence Completed

^CThu Mar 15 16:09:18 2018 event_wait : Interrupted system call (code=4)
Thu Mar 15 16:09:18 2018 SIGTERM received, sending exit notification to peer
Thu Mar 15 16:09:23 2018 /usr/bin/ip route del 104.254.90.234/32
Thu Mar 15 16:09:23 2018 /usr/bin/ip route del 0.0.0.0/1
Thu Mar 15 16:09:23 2018 /usr/bin/ip route del 128.0.0.0/1
Thu Mar 15 16:09:23 2018 Closing TUN/TAP interface
Thu Mar 15 16:09:23 2018 /usr/bin/ip addr del dev tun0 10.4.13.251/16
Thu Mar 15 16:09:23 2018 SIGTERM[soft,exit-with-notification] received, process exiting
 

[Staff 9754]

Hello,

 

the log is fine but shows that you don't take care of DNS push, Under GNU/Linux OpenVPN does not handle the DNS push from the server, so an option to consider is that your system queries DNS servers that are inaccessible from the VPN (typically ISP DNS which accept queries only from inside the ISP network).

 

Please check your /etc/resolv.conf file. Also consider that you can run Eddie, the free and open source Air software: it will take care of the DNS push.

 

Without Eddie, some methods to accept the DNS push under GNU/Linux are described here: https://airvpn.org/topic/9608-how-to-accept-dns-push-on-linux-systems-with-resolvconf

 

Kind regards

[expatmog 0]

Thank you for your reply. Usually I do run Eddie, but was hoping to be able to go directly through openvpn without the app.

 

Pete

[LZ1 662]

Thank you for your reply. Usually I do run Eddie, but was hoping to be able to go directly through openvpn without the app.

 

Pete

Hello!

 

If it makes you feel any better, Eddie is "just" a wrapper for OpenVPN and if you use it, you'll get access to the Network Lock feature too .