Привет. Не подключается vpn. Использую Fruho. Вот логи ~/.fruho/fruho.log
2017-10-23 10:26:59 fruhod>> ctrl: Config loaded
2017-10-23 10:26:59 fruhod>> ctrl: OpenVPN with pid 2053 started
2017-10-23 10:26:59 fruhod>> ovpn: WARNING: file '/etc/fruhod/current/key' is group or others accessible
2017-10-23 10:26:59 fruhod>> ovpn: OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
2017-10-23 10:26:59 fruhod>> ovpn: library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
2017-10-23 10:26:59 fruhod>> ovpn: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:42385
2017-10-23 10:26:59 fruhod>> ovpn: TCP/UDP: Preserving recently used remote address: [AF_INET]31.3.252.5:5353
2017-10-23 10:26:59 fruhod>> ovpn: Socket Buffers: R=[212992->212992] S=[212992->212992]
2017-10-23 10:26:59 fruhod>> ovpn: UDP link local: (not bound)
2017-10-23 10:26:59 fruhod>> ovpn: UDP link remote: [AF_INET]31.3.252.5:5353
2017-10-23 10:26:59 fruhod>> ovpn: TLS: Initial packet from [AF_INET]31.3.252.5:5353, sid=e0fc7b30 a56ff1dd
2017-10-23 10:26:59 fruhod>> ovpn: VERIFY OK: depth=1, C=IE, ST=IE, L=Dublin, O=GL, CN=GL CA
2017-10-23 10:26:59 fruhod>> ovpn: VERIFY OK: nsCertType=SERVER
2017-10-23 10:26:59 fruhod>> ovpn: VERIFY OK: depth=0, C=IE, ST=IE, L=Dublin, O=GL, CN=server
2017-10-23 10:26:59 fruhod>> ovpn: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2017-10-23 10:26:59 fruhod>> ovpn: [server] Peer Connection Initiated with [AF_INET]31.3.252.5:5353
2017-10-23 10:27:00 fruhod>> ovpn: MANAGEMENT: Client connected from [AF_INET]127.0.0.1:42385
2017-10-23 10:27:00 fruhod>> ovpn: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2017-10-23 10:27:00 fruhod>> ovpn: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.13.0.1,route 10.13.0.1,topology net30,ping 5,ping-restart 28,ifconfig 10.13.0.6 10.13.0.5'
2017-10-23 10:27:00 fruhod>> ovpn: OPTIONS IMPORT: timers and/or timeouts modified
2017-10-23 10:27:00 fruhod>> ovpn: OPTIONS IMPORT: --ifconfig/up options modified
2017-10-23 10:27:00 fruhod>> ovpn: OPTIONS IMPORT: route options modified
2017-10-23 10:27:00 fruhod>> ovpn: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-10-23 10:27:00 fruhod>> ovpn: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2017-10-23 10:27:00 fruhod>> ovpn: WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2017-10-23 10:27:00 fruhod>> ovpn: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-10-23 10:27:00 fruhod>> ovpn: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2017-10-23 10:27:00 fruhod>> ovpn: WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2017-10-23 10:27:00 fruhod>> ovpn: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-10-23 10:27:00 fruhod>> ovpn: WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
2017-10-23 10:27:00 fruhod>> ovpn: ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=enp33s0 HWADDR=30:9c:23:46:ca:c4
2017-10-23 10:27:00 fruhod>> ovpn: TUN/TAP device tun0 opened
2017-10-23 10:27:00 fruhod>> ovpn: TUN/TAP TX queue length set to 100
2017-10-23 10:27:00 fruhod>> ovpn: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2017-10-23 10:27:00 fruhod>> ovpn: /sbin/ip link set dev tun0 up mtu 1500
2017-10-23 10:27:00 fruhod>> ovpn: /sbin/ip addr add dev tun0 local 10.13.0.6 peer 10.13.0.5
2017-10-23 10:27:03 fruhod>> ovpn: /sbin/ip route add 31.3.252.5/32 via 192.168.0.1
2017-10-23 10:27:03 fruhod>> ovpn: /sbin/ip route add 0.0.0.0/1 via 10.13.0.5
2017-10-23 10:27:03 fruhod>> ovpn: /sbin/ip route add 128.0.0.0/1 via 10.13.0.5
2017-10-23 10:27:03 fruhod>> ovpn: /sbin/ip route add 10.13.0.1/32 via 10.13.0.5
2017-10-23 10:27:03 fruhod>> ovpn: Initialization Sequence Completed
2017-10-23 10:27:24 fruhod>> ctrl: OpenVPN with pid 2053 stopped
2017-10-23 10:27:24 fruhod>> ovpn: event_wait : Interrupted system call (code=4)
2017-10-23 10:27:24 fruhod>> ovpn: /sbin/ip route del 10.13.0.1/32
2017-10-23 10:27:24 fruhod>> ovpn: /sbin/ip route del 31.3.252.5/32
2017-10-23 10:27:24 fruhod>> ovpn: /sbin/ip route del 0.0.0.0/1
2017-10-23 10:27:24 fruhod>> ovpn: /sbin/ip route del 128.0.0.0/1
2017-10-23 10:27:24 fruhod>> ovpn: Closing TUN/TAP interface
2017-10-23 10:27:24 fruhod>> ovpn: /sbin/ip addr del dev tun0 local 10.13.0.6 peer 10.13.0.5
2017-10-23 10:27:24 fruhod>> ovpn: SIGTERM[hard,] received, process exiting
2017-10-23 10:27:25 newstatus: disconnected
Рядом есть ноутбук, на нем все работает. Вот его логи
2017-10-23 09:45:08 fruhod>> ctrl: Config loaded
2017-10-23 09:45:08 fruhod>> ctrl: OpenVPN with pid 29443 started
2017-10-23 09:45:08 fruhod>> ovpn: OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015
2017-10-23 09:45:08 fruhod>> ovpn: library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08
2017-10-23 09:45:08 fruhod>> ovpn: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:42385
2017-10-23 09:45:08 fruhod>> ovpn: WARNING: file '/etc/fruhod/current/key' is group or others accessible
2017-10-23 09:45:08 fruhod>> ovpn: Socket Buffers: R=[212992->131072] S=[212992->131072]
2017-10-23 09:45:08 fruhod>> ovpn: UDPv4 link local: [undef]
2017-10-23 09:45:08 fruhod>> ovpn: UDPv4 link remote: [AF_INET]178.255.46.179:5353
2017-10-23 09:45:08 fruhod>> ovpn: TLS: Initial packet from [AF_INET]178.255.46.179:5353, sid=329cd81e bfe8475a
2017-10-23 09:45:08 fruhod>> ovpn: MANAGEMENT: Client connected from [AF_INET]127.0.0.1:42385
2017-10-23 09:45:08 fruhod>> ovpn: VERIFY OK: depth=1, C=IE, ST=IE, L=Dublin, O=GL, CN=GL CA
2017-10-23 09:45:08 fruhod>> ovpn: VERIFY OK: nsCertType=SERVER
2017-10-23 09:45:08 fruhod>> ovpn: VERIFY OK: depth=0, C=IE, ST=IE, L=Dublin, O=GL, CN=server
2017-10-23 09:45:09 fruhod>> ovpn: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2017-10-23 09:45:09 fruhod>> ovpn: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-10-23 09:45:09 fruhod>> ovpn: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2017-10-23 09:45:09 fruhod>> ovpn: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-10-23 09:45:09 fruhod>> ovpn: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2017-10-23 09:45:09 fruhod>> ovpn: [server] Peer Connection Initiated with [AF_INET]178.255.46.179:5353
2017-10-23 09:45:11 fruhod>> ovpn: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2017-10-23 09:45:11 fruhod>> ovpn: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.13.0.1,route 10.13.0.1,topology net30,ping 5,ping-restart 28,ifconfig 10.13.0.10 10.13.0.9'
2017-10-23 09:45:11 fruhod>> ovpn: OPTIONS IMPORT: timers and/or timeouts modified
2017-10-23 09:45:11 fruhod>> ovpn: OPTIONS IMPORT: --ifconfig/up options modified
2017-10-23 09:45:11 fruhod>> ovpn: OPTIONS IMPORT: route options modified
2017-10-23 09:45:11 fruhod>> ovpn: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-10-23 09:45:11 fruhod>> ovpn: ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=70:5a:b6:d2:9f:35
2017-10-23 09:45:11 fruhod>> ovpn: TUN/TAP device tun0 opened
2017-10-23 09:45:11 fruhod>> ovpn: TUN/TAP TX queue length set to 100
2017-10-23 09:45:11 fruhod>> ovpn: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2017-10-23 09:45:11 fruhod>> ovpn: /sbin/ip link set dev tun0 up mtu 1500
2017-10-23 09:45:11 fruhod>> ovpn: /sbin/ip addr add dev tun0 local 10.13.0.10 peer 10.13.0.9
2017-10-23 09:45:14 fruhod>> ovpn: /sbin/ip route add 178.255.46.179/32 via 192.168.0.1
2017-10-23 09:45:14 fruhod>> ovpn: stderr: RTNETLINK answers: File exists
2017-10-23 09:45:14 fruhod>> ovpn: ERROR: Linux route add command failed: external program exited with error status: 2
2017-10-23 09:45:14 fruhod>> ovpn: /sbin/ip route add 0.0.0.0/1 via 10.13.0.9
2017-10-23 09:45:14 fruhod>> ovpn: /sbin/ip route add 128.0.0.0/1 via 10.13.0.9
2017-10-23 09:45:14 fruhod>> ovpn: /sbin/ip route add 10.13.0.1/32 via 10.13.0.9
2017-10-23 09:45:14 fruhod>> ovpn: Initialization Sequence Completed
2017-10-23 09:45:14 newstatus: connected
Прошу прощения за такой формат. Не понял как использовать спойлер.
На обоих компах стоит Debian. На ПК 9.2, На буке 8.8. Версии openvpn, как видите, различаются. Пробовал ставить mtu = 1200. Не помогло. Но на буке и без этого все работало. В чем может быть причина?
