my ISP can identify me on one config - but not the other

[stelios 0]

I am new to VPN but I don't understand this at all. I have Win7-64bit on a laptop and a desktop PC. I have installed OpenVPN in, as far as I can tell, the same way on both machines. I have downloaded certs and ovpn files from AirVPN and installed them in the OVPN config folders on both machines. Both connect to AirVPN now without a hitch. However when I test the configurations by trying two tasks my ISP reacts in completely different ways. (1) the desktop PC can start HULU TV programmes without being detected as being in the UK. It can also browse to Pirate Bay without being blocked by my ISP. (2) the laptop is detected as not being in the US and HULU shows the "Sorry" message, also it cannot browse to Pirate Bay and the ISP blocking is effective. I will not, of course, break copyright laws but I am perplexed as to why my desktop VPN connection seems to be hidden but my laptop VPN connection is clearly not hidden. Anyone know how this might happen? What differences have crept in to the two configurations? Thanks for any help.

[stelios 0]

This is the record of the current problematic laptop connection. Seem to be lots of 'fails' here.

 

Fri May 10 00:46:58 2013 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\AirVPN_United Kingdom_UDP-443.log: Access is denied. (errno=5)

Fri May 10 00:46:58 2013 OpenVPN 2.3.1 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Mar 28 2013

Fri May 10 00:46:58 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340

Fri May 10 00:46:58 2013 Need hold release from management interface, waiting...

Fri May 10 00:46:59 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340

Fri May 10 00:46:59 2013 MANAGEMENT: CMD 'state on'

Fri May 10 00:46:59 2013 MANAGEMENT: CMD 'log all on'

Fri May 10 00:46:59 2013 MANAGEMENT: CMD 'hold off'

Fri May 10 00:46:59 2013 MANAGEMENT: CMD 'hold release'

Fri May 10 00:46:59 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Fri May 10 00:46:59 2013 Socket Buffers: R=[8192->8192] S=[64512->64512]

Fri May 10 00:46:59 2013 UDPv4 link local: [undef]

Fri May 10 00:46:59 2013 UDPv4 link remote: [AF_INET]31.193.12.74:443

Fri May 10 00:46:59 2013 MANAGEMENT: >STATE:1368143219,WAIT,,,

Fri May 10 00:46:59 2013 MANAGEMENT: >STATE:1368143219,AUTH,,,

Fri May 10 00:46:59 2013 TLS: Initial packet from [AF_INET]31.193.12.74:443, sid=3a967384 efa46afa

Fri May 10 00:47:00 2013 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Fri May 10 00:47:00 2013 VERIFY OK: nsCertType=SERVER

Fri May 10 00:47:00 2013 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

Fri May 10 00:47:06 2013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Fri May 10 00:47:06 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri May 10 00:47:06 2013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Fri May 10 00:47:06 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri May 10 00:47:06 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

Fri May 10 00:47:06 2013 [server] Peer Connection Initiated with [AF_INET]31.193.12.74:443

Fri May 10 00:47:07 2013 MANAGEMENT: >STATE:1368143227,GET_CONFIG,,,

Fri May 10 00:47:08 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Fri May 10 00:47:08 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.4.0.1,comp-lzo no,route 10.4.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.4.50.50 10.4.50.49'

Fri May 10 00:47:08 2013 OPTIONS IMPORT: timers and/or timeouts modified

Fri May 10 00:47:08 2013 OPTIONS IMPORT: LZO parms modified

Fri May 10 00:47:08 2013 OPTIONS IMPORT: --ifconfig/up options modified

Fri May 10 00:47:08 2013 OPTIONS IMPORT: route options modified

Fri May 10 00:47:08 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Fri May 10 00:47:08 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

Fri May 10 00:47:08 2013 MANAGEMENT: >STATE:1368143228,ASSIGN_IP,,10.4.50.50,

Fri May 10 00:47:08 2013 open_tun, tt->ipv6=0

Fri May 10 00:47:08 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93}.tap

Fri May 10 00:47:08 2013 TAP-Windows Driver Version 9.9

Fri May 10 00:47:08 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.50.50/255.255.255.252 on interface {B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93} [DHCP-serv: 10.4.50.49, lease-time: 31536000]

Fri May 10 00:47:08 2013 NOTE: FlushIpNetTable failed on interface [20] {B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93} (status=5) : Access is denied.

Fri May 10 00:47:13 2013 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down

Fri May 10 00:47:13 2013 Route: Waiting for TUN/TAP interface to come up...

Fri May 10 00:47:18 2013 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up

Fri May 10 00:47:18 2013 C:\Windows\system32\route.exe ADD 31.193.12.74 MASK 255.255.255.255 192.168.2.1

Fri May 10 00:47:18 2013 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=13]

Fri May 10 00:47:18 2013 Route addition via IPAPI failed [adaptive]

Fri May 10 00:47:18 2013 Route addition fallback to route.exe

Fri May 10 00:47:18 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Fri May 10 00:47:18 2013 ERROR: Windows route add command failed [adaptive]: returned error code 1

Fri May 10 00:47:18 2013 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.50.49

Fri May 10 00:47:18 2013 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Fri May 10 00:47:18 2013 Route addition via IPAPI failed [adaptive]

Fri May 10 00:47:18 2013 Route addition fallback to route.exe

Fri May 10 00:47:18 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Fri May 10 00:47:18 2013 ERROR: Windows route add command failed [adaptive]: returned error code 1

Fri May 10 00:47:18 2013 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.50.49

Fri May 10 00:47:18 2013 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Fri May 10 00:47:18 2013 Route addition via IPAPI failed [adaptive]

Fri May 10 00:47:18 2013 Route addition fallback to route.exe

Fri May 10 00:47:18 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Fri May 10 00:47:18 2013 ERROR: Windows route add command failed [adaptive]: returned error code 1

Fri May 10 00:47:18 2013 MANAGEMENT: >STATE:1368143238,ADD_ROUTES,,,

Fri May 10 00:47:18 2013 C:\Windows\system32\route.exe ADD 10.4.0.1 MASK 255.255.255.255 10.4.50.49

Fri May 10 00:47:18 2013 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]

Fri May 10 00:47:18 2013 Route addition via IPAPI failed [adaptive]

Fri May 10 00:47:18 2013 Route addition fallback to route.exe

Fri May 10 00:47:18 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Fri May 10 00:47:18 2013 ERROR: Windows route add command failed [adaptive]: returned error code 1

Fri May 10 00:47:18 2013 Initialization Sequence Completed

Fri May 10 00:47:18 2013 MANAGEMENT: >STATE:1368143238,CONNECTED,SUCCESS,10.4.50.50,31.193.12.74

[Staff 9761]

Hello!

 

"Access denied" errors like

 

Fri May 10 00:47:08 2013 NOTE: FlushIpNetTable failed on interface [20] {B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93} (status=5) : Access is denied

 

could be caused by the fact that you launch OpenVPN without enough privileges. Can you please check? Try to run OpenVPN GUI with administrator privileges (right-click and select "Run as administrator").

 

Those errors prevent your client to modify the laptop routing table, therefore a connection is established but nothing is tunneled.

 

Kind regards

[Shippy 8]

openvpn needs admin permissons right click your openvpn icon and chosse to run it as admin if you havent allready

[Shippy 8]

openvpn needs admin permissons right click your openvpn icon and chosse to run it as admin if you havent allready

permissions*

choose*

[Shippy 8]

lol

admin posted his/her message when i was writing mine

[stelios 0]

Alright, thanks for that. I ran OpenVPN GUI as administrator and that improved things. So, HULU couldn't tell where I was - but - my ISP is still blocking sites (eg. thepiratebay). Is  tunnelling taking place? How do I tell? Here is the log -

 

Sat May 11 00:49:30 2013 OpenVPN 2.3.1 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Mar 28 2013
Enter Management Password:
Sat May 11 00:49:30 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat May 11 00:49:30 2013 Need hold release from management interface, waiting...
Sat May 11 00:49:30 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat May 11 00:49:30 2013 MANAGEMENT: CMD 'state on'
Sat May 11 00:49:30 2013 MANAGEMENT: CMD 'log all on'
Sat May 11 00:49:30 2013 MANAGEMENT: CMD 'hold off'
Sat May 11 00:49:30 2013 MANAGEMENT: CMD 'hold release'
Sat May 11 00:49:30 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 11 00:49:31 2013 Socket Buffers: R=[8192->8192] S=[64512->64512]
Sat May 11 00:49:31 2013 UDPv4 link local: [undef]
Sat May 11 00:49:31 2013 UDPv4 link remote: [AF_INET]84.39.116.179:443
Sat May 11 00:49:31 2013 MANAGEMENT: >STATE:1368229771,WAIT,,,
Sat May 11 00:49:31 2013 MANAGEMENT: >STATE:1368229771,AUTH,,,
Sat May 11 00:49:31 2013 TLS: Initial packet from [AF_INET]84.39.116.179:443, sid=79fcc349 ad0aed5a
Sat May 11 00:49:31 2013 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
Sat May 11 00:49:31 2013 VERIFY OK: nsCertType=SERVER
Sat May 11 00:49:31 2013 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
Sat May 11 00:49:32 2013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat May 11 00:49:32 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 11 00:49:32 2013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat May 11 00:49:32 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 11 00:49:32 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat May 11 00:49:32 2013 [server] Peer Connection Initiated with [AF_INET]84.39.116.179:443
Sat May 11 00:49:33 2013 MANAGEMENT: >STATE:1368229773,GET_CONFIG,,,
Sat May 11 00:49:35 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sat May 11 00:49:35 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.4.0.1,comp-lzo no,route 10.4.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.4.5.134 10.4.5.133'
Sat May 11 00:49:35 2013 OPTIONS IMPORT: timers and/or timeouts modified
Sat May 11 00:49:35 2013 OPTIONS IMPORT: LZO parms modified
Sat May 11 00:49:35 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sat May 11 00:49:35 2013 OPTIONS IMPORT: route options modified
Sat May 11 00:49:35 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat May 11 00:49:35 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat May 11 00:49:35 2013 MANAGEMENT: >STATE:1368229775,ASSIGN_IP,,10.4.5.134,
Sat May 11 00:49:35 2013 open_tun, tt->ipv6=0
Sat May 11 00:49:35 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93}.tap
Sat May 11 00:49:35 2013 TAP-Windows Driver Version 9.9
Sat May 11 00:49:35 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.5.134/255.255.255.252 on interface {B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93} [DHCP-serv: 10.4.5.133, lease-time: 31536000]
Sat May 11 00:49:35 2013 Successful ARP Flush on interface [19] {B2DEBB6E-282F-4981-8ADF-8A22A6F8BD93}
Sat May 11 00:49:40 2013 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 11 00:49:40 2013 Route: Waiting for TUN/TAP interface to come up...
Sat May 11 00:49:45 2013 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 11 00:49:45 2013 Route: Waiting for TUN/TAP interface to come up...
Sat May 11 00:49:46 2013 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sat May 11 00:49:46 2013 C:\Windows\system32\route.exe ADD 84.39.116.179 MASK 255.255.255.255 192.168.2.1
Sat May 11 00:49:46 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Sat May 11 00:49:46 2013 Route addition via IPAPI succeeded [adaptive]
Sat May 11 00:49:46 2013 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.5.133
Sat May 11 00:49:46 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 11 00:49:46 2013 Route addition via IPAPI succeeded [adaptive]
Sat May 11 00:49:46 2013 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.5.133
Sat May 11 00:49:46 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 11 00:49:46 2013 Route addition via IPAPI succeeded [adaptive]
Sat May 11 00:49:46 2013 MANAGEMENT: >STATE:1368229786,ADD_ROUTES,,,
Sat May 11 00:49:46 2013 C:\Windows\system32\route.exe ADD 10.4.0.1 MASK 255.255.255.255 10.4.5.133
Sat May 11 00:49:46 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 11 00:49:46 2013 Route addition via IPAPI succeeded [adaptive]
Sat May 11 00:49:46 2013 Initialization Sequence Completed
Sat May 11 00:49:46 2013 MANAGEMENT: >STATE:1368229786,CONNECTED,SUCCESS,10.4.5.134,84.39.116.179

 

Anything more I can do? Thanks for any help.