Disconnecting due to ping-restart, then fails to connect (mulitple times)

[FancyFancy 0]

Hi

 

I just started using airvpn, and im having some issues

 

 

Wed Apr 19 09:44:52 2017 OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec  1 2014

Wed Apr 19 09:44:52 2017 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Wed Apr 19 09:44:52 2017 Control Channel Authentication: tls-auth using INLINE static key file

Wed Apr 19 09:44:52 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 09:44:52 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 09:44:52 2017 Socket Buffers: R=[212992->131072] S=[212992->131072]

Wed Apr 19 09:44:52 2017 UDPv4 link local: [undef]

Wed Apr 19 09:44:52 2017 UDPv4 link remote: [AF_INET]62.102.148.150:443

Wed Apr 19 09:44:52 2017 TLS: Initial packet from [AF_INET]62.102.148.150:443, sid=5900670c 4e94d716

Wed Apr 19 09:44:52 2017 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Wed Apr 19 09:44:52 2017 Validating certificate key usage

Wed Apr 19 09:44:52 2017 ++ Certificate has key usage  00a0, expects 00a0

Wed Apr 19 09:44:52 2017 VERIFY KU OK

Wed Apr 19 09:44:52 2017 Validating certificate extended key usage

Wed Apr 19 09:44:52 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

Wed Apr 19 09:44:52 2017 VERIFY EKU OK

Wed Apr 19 09:44:52 2017 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

Wed Apr 19 09:44:52 2017 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Wed Apr 19 09:44:52 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 09:44:52 2017 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Wed Apr 19 09:44:52 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 09:44:52 2017 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA

Wed Apr 19 09:44:52 2017 [server] Peer Connection Initiated with [AF_INET]62.102.148.150:443

Wed Apr 19 09:44:54 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Wed Apr 19 09:44:54 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.60.58 255.255.0.0'

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: timers and/or timeouts modified

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: LZO parms modified

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: --ifconfig/up options modified

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: route options modified

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: route-related options modified

Wed Apr 19 09:44:54 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Wed Apr 19 09:44:54 2017 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02

Wed Apr 19 09:44:54 2017 TUN/TAP device tun0 opened

Wed Apr 19 09:44:54 2017 TUN/TAP TX queue length set to 100

Wed Apr 19 09:44:54 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

Wed Apr 19 09:44:54 2017 /sbin/ip link set dev tun0 up mtu 1500

Wed Apr 19 09:44:54 2017 /sbin/ip addr add dev tun0 10.4.60.58/16 broadcast 10.4.255.255

## ONLINE 

 

## Suddently

Wed Apr 19 10:24:03 2017 [server] Inactivity timeout (--ping-restart), restarting

Wed Apr 19 10:24:03 2017 SIGUSR1[soft,ping-restart] received, process restarting

Wed Apr 19 10:24:03 2017 Restart pause, 2 second(s)

Wed Apr 19 10:24:05 2017 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Wed Apr 19 10:24:05 2017 Socket Buffers: R=[212992->131072] S=[212992->131072]

Wed Apr 19 10:24:05 2017 UDPv4 link local: [undef]

Wed Apr 19 10:24:05 2017 UDPv4 link remote: [AF_INET]62.102.148.145:443

Wed Apr 19 10:25:05 2017 [uNDEF] Inactivity timeout (--ping-restart), restarting

Wed Apr 19 10:25:05 2017 SIGUSR1[soft,ping-restart] received, process restarting

Wed Apr 19 10:25:05 2017 Restart pause, 2 second(s)

Wed Apr 19 10:25:07 2017 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Wed Apr 19 10:25:07 2017 Socket Buffers: R=[212992->131072] S=[212992->131072]

 

## 1 hour and 20min later with the same messages about ping restart, im back online

Wed Apr 19 10:49:57 2017 UDPv4 link local: [undef]

Wed Apr 19 10:49:57 2017 UDPv4 link remote: [AF_INET]62.102.148.150:443

Wed Apr 19 10:49:57 2017 TLS: Initial packet from [AF_INET]62.102.148.150:443, sid=e17d1994 85ce156a

Wed Apr 19 10:49:57 2017 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Wed Apr 19 10:49:57 2017 Validating certificate key usage

Wed Apr 19 10:49:57 2017 ++ Certificate has key usage  00a0, expects 00a0

Wed Apr 19 10:49:57 2017 VERIFY KU OK

Wed Apr 19 10:49:57 2017 Validating certificate extended key usage

Wed Apr 19 10:49:57 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

Wed Apr 19 10:49:57 2017 VERIFY EKU OK

Wed Apr 19 10:49:57 2017 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

Wed Apr 19 10:49:57 2017 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Wed Apr 19 10:49:57 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 10:49:57 2017 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Wed Apr 19 10:49:57 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Wed Apr 19 10:49:57 2017 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA

Wed Apr 19 10:49:57 2017 [server] Peer Connection Initiated with [AF_INET]62.102.148.150:443

Wed Apr 19 10:49:59 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Wed Apr 19 10:49:59 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.60.58 255.255.0.0'

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: timers and/or timeouts modified

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: LZO parms modified

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: --ifconfig/up options modified

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: route options modified

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: route-related options modified

Wed Apr 19 10:49:59 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Wed Apr 19 10:49:59 2017 Preserving previous TUN/TAP instance: tun0

Wed Apr 19 10:49:59 2017 Initialization Sequence Completed

Wed Apr 19 11:49:57 2017 TLS: soft reset sec=0 bytes=2292399/0 pkts=15163/0

Wed Apr 19 11:49:57 2017 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Wed Apr 19 11:49:57 2017 Validating certificate key usage

Wed Apr 19 11:49:57 2017 ++ Certificate has key usage  00a0, expects 00a0

Wed Apr 19 11:49:57 2017 VERIFY KU OK

Wed Apr 19 11:49:57 2017 Validating certificate extended key usage

Wed Apr 19 11:49:57 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

Wed Apr 19 11:49:57 2017 VERIFY EKU OK

 

Why is this happening?

Does anyone have any ideas how to fix it?

 

Date is OK

My WAN ip is ping able

ping 10,ping-restart 60

[Novak1571 5]

I am also affected by this problem. It seems to have started when I recently installed a new router. It seems to occur only when uTorrent is running although it can run happily for hours whether or not uTorrent is running.

 

I have reported this in another thread although I've since updated Eddie to the latest version and the problem occurs less.

 

Now, according to the logs, the problem always occurs with a "OpenVPN > [server] Inactivity timeout (--ping-restart), restarting". This is the first log message whenever there's a disconnection. The question is: What within the AirVPN code causes this message to be written to the logs?

[Doesi 3]

I had the same problem some time ago. A workaround was to use TCP instead of UDP.

 

But the final solution was to swap the main router/dsl-modem from Fritz!Box 7390 to 7490. Since then my problems are gone and UDP-connections are stable for many days.

[walkerman 0]

"I had the same problem some time ago. A workaround was to use TCP instead of UDP."

 

 

Where do you specify TCP instead of UDP?  I don't see an option for this in the Eddie client app. Is it in the OpenVPN software?

[Doesi 3]

In eddie open the AirVPN-menu in the upper left corner, select "Preferences" - "Protocols", uncheck "Automatic" and mark e.g. TCP 80, save.

[Novak1571 5]

I can confirm that setting the Protocols to TCP 80 rather than Automatic seems to have resolved the problem for me. Thx.