AirVPN on OpenVZ VPS

[anoano 0]

I have VPS based on OpenVZ virtualization (with Ubuntu 10.04 / 32 bit). I have enabled TUN/TAP. I want to connect via TOR to AirVPN. Have installed TOR, OpenVPN and they looks they works. When I'm on root and connect to AirVPN via command openvpn air.ovpn it looks I'm connected (am I right?), but all connections on VPS are out of VPN. What's wrong?

And here's the log:

Sun Jul  8 15:18:29 2012 OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010
Sun Jul  8 15:18:29 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jul  8 15:18:29 2012 WARNING: file 'user.key' is group or others accessible
Sun Jul  8 15:18:29 2012 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Sun Jul  8 15:18:29 2012 LZO compression initialized
Sun Jul  8 15:18:29 2012 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jul  8 15:18:29 2012 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Jul  8 15:18:29 2012 Local Options hash (VER=V4): '958c5492'
Sun Jul  8 15:18:29 2012 Expected Remote Options hash (VER=V4): '79ef4284'
Sun Jul  8 15:18:29 2012 Attempting to establish TCP connection with [AF_INET]127.0.0.1:9050 [nonblock]
Sun Jul  8 15:18:29 2012 TCP connection established with [AF_INET]127.0.0.1:9050
Sun Jul  8 15:18:29 2012 Socket Buffers: R=[87712->131072] S=[50844->131072]
Sun Jul  8 15:18:29 2012 TCPv4_CLIENT link local: [undef]
Sun Jul  8 15:18:29 2012 TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:9050
Sun Jul  8 15:18:29 2012 TLS: Initial packet from [AF_INET]127.0.0.1:9050, sid=6c1356a1 e89df71f
Sun Jul  8 15:18:33 2012 VERIFY OK: depth=1, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=airvpn.org_CA/emailAddress=info@airvpn.org
Sun Jul  8 15:18:33 2012 VERIFY OK: nsCertType=SERVER
Sun Jul  8 15:18:33 2012 VERIFY OK: depth=0, /C=IT/ST=IT/L=Perugia/O=airvpn.org/CN=server/emailAddress=info@airvpn.org
Sun Jul  8 15:18:42 2012 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Jul  8 15:18:42 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul  8 15:18:42 2012 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Jul  8 15:18:42 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul  8 15:18:42 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Jul  8 15:18:42 2012 [server] Peer Connection Initiated with [AF_INET]127.0.0.1:9050
Sun Jul  8 15:18:44 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Jul  8 15:18:44 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.5.0.1,comp-lzo no,route 10.5.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.5.2.18 10.5.2.17'
Sun Jul  8 15:18:44 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jul  8 15:18:44 2012 OPTIONS IMPORT: LZO parms modified
Sun Jul  8 15:18:44 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jul  8 15:18:44 2012 OPTIONS IMPORT: route options modified
Sun Jul  8 15:18:44 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jul  8 15:18:44 2012 ROUTE: default_gateway=UNDEF
Sun Jul  8 15:18:44 2012 TUN/TAP device tun0 opened
Sun Jul  8 15:18:44 2012 TUN/TAP TX queue length set to 100
Sun Jul  8 15:18:44 2012 /sbin/ifconfig tun0 10.5.2.18 pointopoint 10.5.2.17 mtu 1500
Sun Jul  8 15:18:44 2012 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
Sun Jul  8 15:18:44 2012 /sbin/route add -net 10.5.0.1 netmask 255.255.255.255 gw 10.5.2.17
Sun Jul  8 15:18:44 2012 Initialization Sequence Completed

EDIT:

I've noticed that probably I'm not connected due on history page on control panel there's no log about connection. Any suggestions?

[daniele.rossetti 0]

I bumped into the same issue. Did someone manage to fix that?

[mage1982 15]

OP's log mentions "unable to redirect default gateway". Do you see something similar? That error message would explain it.

[Staff 10083]

Hello,

 

that's expected and correct when OpenVZ is not set up correctly, it's not OpenVPN fault. Please see here to solve:

https://community.openvpn.net/openvpn/ticket/324

 

Kind regards