Re: Blocking all non-VPN traffic (Windows)

[PunkinDonuts 0]

I got Comodo installed and it seems I'm thisclose to getting everything working. The one issue I seem to be having is that my VPN network connection and my physical NIC appear to not be "talking" to each other. I know I missed something but I can't figure out what it is.

Here is a pic of my set up, per the instructions posted in the Windows & Comodo - Prevent leaks thread:

http://imgur.com/a/RY7TG

Also, is asking for application access proper for Comodo? It still asks me for permission to allow Chrome to access the Internet when I check my router settings.

Thank you!

[PunkinDonuts 0]

I'm not sure how this became its own topic, but I apologize. Anyway, I forgot to mention that I can successfully connect to the two VPN servers I have listed in the screenshots (Vega and Octantis), but when they are connected no Internet traffic flows. I can connect internally to my router, however.

[Staff 9771]

Hello!

Your Network Zones and Global Rules are just fine. Probably the problem does not lie in Comodo settings. Do you notice any difference if you perform a connection with Comodo Firewall set to "Disabled"?

Also, can you please send us the connection logs of your client pertaining to the issue?

Kind regards

[PunkinDonuts 0]

Success!! I fixed it as I was typing this message, but it was thanks to you, Admin!

After looking at the log (I have posted it below for anyone else that runs into this issue), I noticed a lot of Access Denied issues (as you can see from the first line it couldn't even write the log, I had to copy it from the Show Status message box). I guessed this was the problem, so I closed down OpenVPN and then ran it as Administrator. Bingo, now it all works.

Just to test it, I disconnected from Octantis tried a website, and it was a no go. I then connected to Vega and the site connected fine.

Tue Dec 18 17:33:45 2012 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\AirVPN US Octantis - UDP 443.log: Access is denied. (errno=5)

Tue Dec 18 17:33:45 2012 OpenVPN 2.3_rc1 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Nov 1 2012

Tue Dec 18 17:33:45 2012 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.10:25340

Tue Dec 18 17:33:45 2012 Need hold release from management interface, waiting...

Tue Dec 18 17:33:50 2012 MANAGEMENT: Client connected from [AF_INET]127.0.0.10:25340

Tue Dec 18 17:33:50 2012 MANAGEMENT: CMD 'state on'

Tue Dec 18 17:33:50 2012 MANAGEMENT: CMD 'log all on'

Tue Dec 18 17:33:50 2012 MANAGEMENT: CMD 'hold off'

Tue Dec 18 17:33:50 2012 MANAGEMENT: CMD 'hold release'

Tue Dec 18 17:33:50 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Tue Dec 18 17:33:50 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]

Tue Dec 18 17:33:50 2012 UDPv4 link local: [undef]

Tue Dec 18 17:33:50 2012 UDPv4 link remote: [AF_INET]69.163.36.106:443

Tue Dec 18 17:33:50 2012 MANAGEMENT: >STATE:1355880830,WAIT,,,

Tue Dec 18 17:33:50 2012 MANAGEMENT: >STATE:1355880830,AUTH,,,

Tue Dec 18 17:33:50 2012 TLS: Initial packet from [AF_INET]69.163.36.106:443, sid=8b3513db 52903711

Tue Dec 18 17:33:54 2012 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Tue Dec 18 17:33:54 2012 VERIFY OK: nsCertType=SERVER

Tue Dec 18 17:33:54 2012 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

Tue Dec 18 17:33:54 2012 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Tue Dec 18 17:33:54 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Tue Dec 18 17:33:54 2012 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Tue Dec 18 17:33:54 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Tue Dec 18 17:33:54 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

Tue Dec 18 17:33:54 2012 [server] Peer Connection Initiated with [AF_INET]69.163.36.106:443

Tue Dec 18 17:33:56 2012 MANAGEMENT: >STATE:1355880836,GET_CONFIG,,,

Tue Dec 18 17:33:57 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Tue Dec 18 17:33:59 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.4.0.1,comp-lzo no,route 10.4.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.4.3.174 10.4.3.173'

Tue Dec 18 17:33:59 2012 OPTIONS IMPORT: timers and/or timeouts modified

Tue Dec 18 17:33:59 2012 OPTIONS IMPORT: LZO parms modified

Tue Dec 18 17:33:59 2012 OPTIONS IMPORT: --ifconfig/up options modified

Tue Dec 18 17:33:59 2012 OPTIONS IMPORT: route options modified

Tue Dec 18 17:33:59 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Tue Dec 18 17:33:59 2012 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

Tue Dec 18 17:33:59 2012 MANAGEMENT: >STATE:1355880839,ASSIGN_IP,,10.4.3.174,

Tue Dec 18 17:33:59 2012 open_tun, tt->ipv6=0

Tue Dec 18 17:33:59 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{8633B1D0-A3EF-40EC-843F-D75567FD9250}.tap

Tue Dec 18 17:33:59 2012 TAP-Windows Driver Version 9.9

Tue Dec 18 17:33:59 2012 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.3.174/255.255.255.252 on interface {8633B1D0-A3EF-40EC-843F-D75567FD9250} [DHCP-serv: 10.4.3.173, lease-time: 31536000]

Tue Dec 18 17:33:59 2012 NOTE: FlushIpNetTable failed on interface [20] {8633B1D0-A3EF-40EC-843F-D75567FD9250} (status=5) : Access is denied.

Tue Dec 18 17:34:04 2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up

Tue Dec 18 17:34:04 2012 C:\Windows\system32\route.exe ADD 69.163.36.106 MASK 255.255.255.255 192.168.1.2

Tue Dec 18 17:34:04 2012 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=12]

Tue Dec 18 17:34:04 2012 Route addition via IPAPI failed [adaptive]

Tue Dec 18 17:34:04 2012 Route addition fallback to route.exe

Tue Dec 18 17:34:04 2012 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Tue Dec 18 17:34:04 2012 ERROR: Windows route add command failed [adaptive]: returned error code 1

Tue Dec 18 17:34:04 2012 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.3.173

Tue Dec 18 17:34:04 2012 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Tue Dec 18 17:34:04 2012 Route addition via IPAPI failed [adaptive]

Tue Dec 18 17:34:04 2012 Route addition fallback to route.exe

Tue Dec 18 17:34:04 2012 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Tue Dec 18 17:34:04 2012 ERROR: Windows route add command failed [adaptive]: returned error code 1

Tue Dec 18 17:34:04 2012 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.3.173

Tue Dec 18 17:34:04 2012 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Tue Dec 18 17:34:04 2012 Route addition via IPAPI failed [adaptive]

Tue Dec 18 17:34:04 2012 Route addition fallback to route.exe

Tue Dec 18 17:34:04 2012 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Tue Dec 18 17:34:04 2012 ERROR: Windows route add command failed [adaptive]: returned error code 1

Tue Dec 18 17:34:04 2012 MANAGEMENT: >STATE:1355880844,ADD_ROUTES,,,

Tue Dec 18 17:34:04 2012 C:\Windows\system32\route.exe ADD 10.4.0.1 MASK 255.255.255.255 10.4.3.173

Tue Dec 18 17:34:04 2012 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Tue Dec 18 17:34:04 2012 Route addition via IPAPI failed [adaptive]

Tue Dec 18 17:34:04 2012 Route addition fallback to route.exe

Tue Dec 18 17:34:04 2012 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Tue Dec 18 17:34:04 2012 ERROR: Windows route add command failed [adaptive]: returned error code 1

Tue Dec 18 17:34:04 2012 Initialization Sequence Completed

Tue Dec 18 17:34:04 2012 MANAGEMENT: >STATE:1355880844,CONNECTED,SUCCESS,10.4.3.174,69.163.36.106