Feb 24 13:39:03 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 13:41:11 (none) kern.notice openvpn[1201]: TLS: tls_process: killed expiring key Feb 24 13:41:17 (none) kern.notice openvpn[1201]: VERIFY OK: depth=1, /C=DE/ST=Mecklenburg-Vorpommern/L=Rostock/O=OpenNet/OU=user_gateways/CN=User_gateway_CA/emailAddress=admin@opennet-initiative.de Feb 24 13:41:17 (none) kern.notice openvpn[1201]: VERIFY OK: depth=0, /C=DE/ST=Mecklenburg-Vorpommern/O=OpenNet/OU=user_gateways/CN=erina.on/emailAddress=admin@opennet-initiative.de Feb 24 13:41:21 (none) kern.notice openvpn[1201]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 13:41:21 (none) kern.notice openvpn[1201]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 13:41:21 (none) kern.notice openvpn[1201]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 13:41:21 (none) kern.notice openvpn[1201]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 13:41:21 (none) kern.notice openvpn[1201]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Feb 24 13:41:29 (none) kern.notice openvpn[1178]: TLS: tls_process: killed expiring key Feb 24 13:41:35 (none) kern.notice openvpn[1178]: TLS: soft reset sec=0 bytes=9637326/0 pkts=18960/0 Feb 24 13:41:35 (none) kern.notice openvpn[1178]: VERIFY OK: depth=1, /C=DE/ST=Mecklenburg-Vorpommern/L=Rostock/O=OpenNet/OU=user_gateways/CN=User_gateway_CA/emailAddress=admin@opennet-initiative.de Feb 24 13:41:35 (none) kern.notice openvpn[1178]: VERIFY OK: depth=0, /C=DE/ST=Mecklenburg-Vorpommern/O=OpenNet/OU=user_gateways/CN=nagare.on/emailAddress=admin@opennet-initiative.de Feb 24 13:41:40 (none) kern.notice openvpn[1178]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 13:41:40 (none) kern.notice openvpn[1178]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 13:41:40 (none) kern.notice openvpn[1178]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 13:41:40 (none) kern.notice openvpn[1178]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 13:41:40 (none) kern.notice openvpn[1178]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Feb 24 13:42:55 (none) kern.notice openvpn[1312]: [titan.on] Inactivity timeout (--ping-restart), restarting Feb 24 13:42:55 (none) kern.notice openvpn[1312]: SIGUSR1[soft,ping-restart] received, process restarting Feb 24 13:42:57 (none) kern.warn openvpn[1312]: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Feb 24 13:42:57 (none) kern.notice openvpn[1312]: Re-using SSL/TLS context Feb 24 13:42:57 (none) kern.notice openvpn[1312]: LZO compression initialized Feb 24 13:42:57 (none) kern.notice openvpn[1312]: UDPv4 link local: [undef] Feb 24 13:42:57 (none) kern.notice openvpn[1312]: UDPv4 link remote: 192.168.0.254:1600 Feb 24 13:43:14 (none) kern.notice openvpn[1312]: [titan.on] Peer Connection Initiated with 192.168.0.254:1600 Feb 24 13:43:16 (none) kern.notice openvpn[1312]: Preserving previous TUN/TAP instance: tun0 Feb 24 13:43:16 (none) kern.notice openvpn[1312]: Initialization Sequence Completed Feb 24 13:51:19 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 13:54:43 (none) syslog.info -- MARK -- Feb 24 14:14:43 (none) syslog.info -- MARK -- Feb 24 14:16:43 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:16:53 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:20:55 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:21:05 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:21:16 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:21:26 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:21:36 (none) kern.err openvpn[1312]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.254:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:24:03 (none) kern.err openvpn[1312]: read UDPv4 [EHOSTUNREACH]: No route to host (code=148) Feb 24 14:33:01 (none) kern.err openvpn[1312]: read UDPv4 [EHOSTUNREACH]: No route to host (code=148) Feb 24 14:34:43 (none) syslog.info -- MARK -- Feb 24 14:35:04 (none) kern.notice openvpn[1312]: [titan.on] Inactivity timeout (--ping-restart), restarting Feb 24 14:35:04 (none) kern.notice openvpn[1312]: SIGUSR1[soft,ping-restart] received, process restarting Feb 24 14:35:06 (none) kern.warn openvpn[1312]: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Feb 24 14:35:06 (none) kern.notice openvpn[1312]: Re-using SSL/TLS context Feb 24 14:35:06 (none) kern.notice openvpn[1312]: LZO compression initialized Feb 24 14:35:06 (none) kern.notice openvpn[1312]: UDPv4 link local: [undef] Feb 24 14:35:06 (none) kern.notice openvpn[1312]: UDPv4 link remote: 192.168.0.254:1600 Feb 24 14:35:36 (none) kern.notice openvpn[1312]: [titan.on] Peer Connection Initiated with 192.168.0.254:1600 Feb 24 14:35:47 (none) kern.notice openvpn[1312]: Preserving previous TUN/TAP instance: tun0 Feb 24 14:35:47 (none) kern.notice openvpn[1312]: Initialization Sequence Completed Feb 24 14:40:04 (none) user.notice cron.minutely_ongateway: found a better gateway, changing to 192.168.0.244 Feb 24 14:40:04 (none) kern.err openvpn[1312]: event_wait : Interrupted system call (code=4) Feb 24 14:40:05 (none) kern.notice openvpn[1312]: /etc/openvpn/opennet_user/opennet_down.sh tun0 1500 1542 10.1.5.202 10.1.5.201 init Feb 24 14:40:06 (none) kern.notice openvpn[1312]: SIGTERM[hard,] received, process exiting Feb 24 14:40:06 (none) kern.notice openvpn[16881]: OpenVPN 2.0.8 mipsel-linux [SSL] [LZO] [EPOLL] built on Jan 31 2007 Feb 24 14:40:06 (none) kern.warn openvpn[16881]: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Feb 24 14:40:06 (none) kern.warn openvpn[16881]: WARNING: file 'opennet_user/on_aps.key' is group or others accessible Feb 24 14:40:06 (none) kern.notice openvpn[16881]: LZO compression initialized Feb 24 14:40:06 (none) kern.notice openvpn[16893]: UDPv4 link local: [undef] Feb 24 14:40:06 (none) kern.notice openvpn[16893]: UDPv4 link remote: 192.168.0.244:1600 Feb 24 14:40:13 (none) kern.err openvpn[16893]: TLS Error: Unroutable control packet received from 192.168.0.244:1600 (si=3 op=P_ACK_V1) Feb 24 14:41:06 (none) kern.err openvpn[16893]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Feb 24 14:41:06 (none) kern.err openvpn[16893]: TLS Error: TLS handshake failed Feb 24 14:41:06 (none) kern.notice openvpn[16893]: SIGUSR1[soft,tls-error] received, process restarting Feb 24 14:41:08 (none) kern.warn openvpn[16893]: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Feb 24 14:41:08 (none) kern.notice openvpn[16893]: Re-using SSL/TLS context Feb 24 14:41:08 (none) kern.notice openvpn[16893]: LZO compression initialized Feb 24 14:41:08 (none) kern.notice openvpn[16893]: UDPv4 link local: [undef] Feb 24 14:41:08 (none) kern.notice openvpn[16893]: UDPv4 link remote: 192.168.0.244:1600 Feb 24 14:41:16 (none) kern.notice openvpn[1201]: TLS: tls_process: killed expiring key Feb 24 14:41:21 (none) kern.notice openvpn[1201]: TLS: soft reset sec=0 bytes=8271914/0 pkts=13883/0 Feb 24 14:41:21 (none) kern.notice openvpn[1201]: VERIFY OK: depth=1, /C=DE/ST=Mecklenburg-Vorpommern/L=Rostock/O=OpenNet/OU=user_gateways/CN=User_gateway_CA/emailAddress=admin@opennet-initiative.de Feb 24 14:41:21 (none) kern.notice openvpn[1201]: VERIFY OK: depth=0, /C=DE/ST=Mecklenburg-Vorpommern/O=OpenNet/OU=user_gateways/CN=erina.on/emailAddress=admin@opennet-initiative.de Feb 24 14:41:30 (none) kern.notice openvpn[1201]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 14:41:30 (none) kern.notice openvpn[1201]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 14:41:30 (none) kern.notice openvpn[1201]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 14:41:30 (none) kern.notice openvpn[1201]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 14:41:30 (none) kern.notice openvpn[1201]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Feb 24 14:41:35 (none) kern.notice openvpn[1178]: TLS: tls_process: killed expiring key Feb 24 14:41:36 (none) kern.notice openvpn[16893]: [lohro.on] Peer Connection Initiated with 192.168.0.244:1600 Feb 24 14:41:37 (none) kern.notice openvpn[16893]: TUN/TAP device tun0 opened Feb 24 14:41:37 (none) kern.notice openvpn[16893]: /sbin/ifconfig tun0 10.1.5.202 pointopoint 10.1.5.201 mtu 1500 Feb 24 14:41:38 (none) kern.notice openvpn[16893]: Initialization Sequence Completed Feb 24 14:41:40 (none) kern.notice openvpn[1178]: VERIFY OK: depth=1, /C=DE/ST=Mecklenburg-Vorpommern/L=Rostock/O=OpenNet/OU=user_gateways/CN=User_gateway_CA/emailAddress=admin@opennet-initiative.de Feb 24 14:41:40 (none) kern.notice openvpn[1178]: VERIFY OK: depth=0, /C=DE/ST=Mecklenburg-Vorpommern/O=OpenNet/OU=user_gateways/CN=nagare.on/emailAddress=admin@opennet-initiative.de Feb 24 14:41:45 (none) kern.notice openvpn[1178]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 14:41:45 (none) kern.notice openvpn[1178]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 14:41:45 (none) kern.notice openvpn[1178]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Feb 24 14:41:45 (none) kern.notice openvpn[1178]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Feb 24 14:41:45 (none) kern.notice openvpn[1178]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Feb 24 14:43:47 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:43:57 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:44:08 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:44:18 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:44:28 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:47:19 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:47:59 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:48:19 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:48:40 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:48:50 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:49:00 (none) kern.err openvpn[16893]: TCP/UDP: Incoming packet rejected from 10.2.1.62:1600[2], expected peer address: 192.168.0.244:1600 (allow this incoming source address/port by removing --remote or adding --float) Feb 24 14:51:02 (none) user.notice cron.minutely_ongateway: found a better gateway, changing to 192.168.0.254 Feb 24 14:51:02 (none) kern.err openvpn[16893]: event_wait : Interrupted system call (code=4) Feb 24 14:51:02 (none) kern.notice openvpn[16893]: /etc/openvpn/opennet_user/opennet_down.sh tun0 1500 1542 10.1.5.202 10.1.5.201 init Feb 24 14:51:03 (none) kern.notice openvpn[16893]: SIGTERM[hard,] received, process exiting Feb 24 14:51:04 (none) kern.notice openvpn[19782]: OpenVPN 2.0.8 mipsel-linux [SSL] [LZO] [EPOLL] built on Jan 31 2007 Feb 24 14:51:04 (none) kern.warn openvpn[19782]: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Feb 24 14:51:04 (none) kern.warn openvpn[19782]: WARNING: file 'opennet_user/on_aps.key' is group or others accessible Feb 24 14:51:04 (none) kern.notice openvpn[19782]: LZO compression initialized Feb 24 14:51:04 (none) kern.notice openvpn[19784]: UDPv4 link local: [undef] Feb 24 14:51:04 (none) kern.notice openvpn[19784]: UDPv4 link remote: 192.168.0.254:1600 Feb 24 14:51:34 (none) kern.notice openvpn[19784]: [titan.on] Peer Connection Initiated with 192.168.0.254:1600 Feb 24 14:51:35 (none) kern.notice openvpn[19784]: TUN/TAP device tun0 opened Feb 24 14:51:35 (none) kern.notice openvpn[19784]: /sbin/ifconfig tun0 10.1.5.202 pointopoint 10.1.5.201 mtu 1500 Feb 24 14:51:36 (none) kern.notice openvpn[19784]: Initialization Sequence Completed Feb 24 14:54:43 (none) syslog.info -- MARK --