Administrace komentářů

Tue Sep 30 21:04:55 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Tue Sep 30 21:04:55 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Tue Sep 30 21:04:55 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 30 21:04:55 2014 Need hold release from management interface, waiting...
Tue Sep 30 21:04:55 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 30 21:04:55 2014 MANAGEMENT: CMD 'state on'
Tue Sep 30 21:04:56 2014 MANAGEMENT: CMD 'log all on'
Tue Sep 30 21:04:56 2014 MANAGEMENT: CMD 'hold off'
Tue Sep 30 21:04:56 2014 MANAGEMENT: CMD 'hold release'
Tue Sep 30 21:04:56 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 30 21:04:56 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 30 21:04:56 2014 UDPv4 link local: [undef]
Tue Sep 30 21:04:56 2014 UDPv4 link remote: [AF_INET]192.168.0.120:1194
Tue Sep 30 21:04:56 2014 MANAGEMENT: >STATE:1412103896,WAIT,,,
Tue Sep 30 21:04:56 2014 MANAGEMENT: >STATE:1412103896,AUTH,,,
Tue Sep 30 21:04:56 2014 TLS: Initial packet from [AF_INET]192.168.0.120:1194, sid=759043b5 15609a3f
Tue Sep 30 21:04:56 2014 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Tue Sep 30 21:04:56 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Tue Sep 30 21:04:56 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 21:04:56 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 21:04:56 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Sep 30 21:04:56 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 30 21:04:56 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Sep 30 21:04:56 2014 [server] Peer Connection Initiated with [AF_INET]192.168.0.120:1194
Tue Sep 30 21:04:58 2014 MANAGEMENT: >STATE:1412103898,GET_CONFIG,,,
Tue Sep 30 21:04:59 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 30 21:04:59 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ifconfig 10.8.0.6 10.8.0.5'
Tue Sep 30 21:04:59 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Sep 30 21:04:59 2014 OPTIONS IMPORT: route options modified
Tue Sep 30 21:04:59 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Sep 30 21:04:59 2014 MANAGEMENT: >STATE:1412103899,ASSIGN_IP,,10.8.0.6,
Tue Sep 30 21:04:59 2014 open_tun, tt->ipv6=0
Tue Sep 30 21:04:59 2014 TAP-WIN32 device [Připojení k místní síti 10] opened: \\.\Global\{4A773341-7779-4457-A2AA-18C272B0C4A7}.tap
Tue Sep 30 21:04:59 2014 TAP-Windows Driver Version 9.9 
Tue Sep 30 21:04:59 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {4A773341-7779-4457-A2AA-18C272B0C4A7} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue Sep 30 21:04:59 2014 Successful ARP Flush on interface [25] {4A773341-7779-4457-A2AA-18C272B0C4A7}
Tue Sep 30 21:05:01 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Sep 30 21:05:01 2014 C:\Windows\system32\route.exe ADD 192.168.0.120 MASK 255.255.255.255 192.168.0.1 IF 12
Tue Sep 30 21:05:01 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 30 21:05:01 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue Sep 30 21:05:01 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 30 21:05:01 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue Sep 30 21:05:01 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 30 21:05:02 2014 MANAGEMENT: >STATE:1412103902,ADD_ROUTES,,,
Tue Sep 30 21:05:02 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Tue Sep 30 21:05:02 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 30 21:05:02 2014 Initialization Sequence Completed
Tue Sep 30 21:05:02 2014 MANAGEMENT: >STATE:1412103902,CONNECTED,SUCCESS,10.8.0.6,192.168.0.120

dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3

push "redirect-gateway def1"

#DNS to googles DNS servers
#push "dhcp-option DNS 10.8.0.1"
#push "dhcp-option DNS 8.8.4.4"
log-append /var/log/openvpn
comp-lzo

dev tun
client
proto udp
remote 192.168.0.120 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3
route-method exe
route-delay 2