Re: Re (3): error message from openvpn & postmortem.

2010-12-06 Thread Bob Proulx
peasth...@shaw.ca wrote: > Bob Proulx wrote: > > That does look suspicious. But to me it looks suspiciously like > > packets are getting dropped by a firewall and you already checked > > that they weren't. > > * November 15, about 13:30 hrs my ISP inadvertently disconnected the cable. I had not s

Re (3): error message from openvpn & postmortem.

2010-12-06 Thread peasthope
>From my original message. > Nothing obvious, but shouldn't traceroute get a route? From: Bob Proulx Date: Sun, 28 Nov 2010 15:39:20 -0700 > That does look suspicious. But to me it looks suspiciously like > packets are getting dropped by a firewall and you already checked > that they weren't

State of interfaces ; was Re (3): error message from openvpn.

2010-11-29 Thread peasthope
Progress. From: Bob Proulx Date: Sun, 28 Nov 2010 15:39:20 -0700 > You might crank up the verbosity of the openvpn > logging and see if it logs something interesting. r...@dalton:~# grep verb /etc/openvpn/my* verb 9 r...@dalton:~# grep tun0 /var/log/syslog r...@dalton:~# grep tun0 /var/log/k

Re (3): error message from openvpn.

2010-11-28 Thread peasthope
From: Bob Proulx Date: Sun, 28 Nov 2010 15:39:20 -0700 > ... if it were configured to log rejects to the syslog then you should see > logging of > anything shorewall is rejecting to ... /var/log/kern.log syslog vs. kern.log? In any case, yes, kern.log records that Shorewall is dropping UD

Re: Re (2): error message from openvpn.

2010-11-28 Thread Bob Proulx
peasth...@shaw.ca wrote: > Bob Proulx wrote: > > I would look to see that the ports match up on both sides of the > > OpenVPN connection. > > Just checked /etc/openvpn/myvpn.conf again. Yes, both ends aim for > dev tun, udp 1194. Good. > > I would look that it is allowed through the firewall.

Re (2): error message from openvpn.

2010-11-28 Thread peasthope
From: Bob Proulx Date: Sat, 27 Nov 2010 19:24:33 -0700 > I would look to see that the ports match up on both sides of the OpenVPN > connection. Just checked /etc/openvpn/myvpn.conf again. Yes, both ends aim for dev tun, udp 1194. > I would look that it is allowed through the firewall.

Re: error message from openvpn.

2010-11-27 Thread Bob Proulx
peasth...@shaw.ca wrote: > An OpenVPN tunnel is failing and this message is in /var/log/syslog. > Nov 27 16:17:07 joule ovpn-myvpn[1827]: read UDPv4 [ECONNREFUSED]: > Connection refused (code=111) > > Google finds references to some of the words but nothing explains > the meaning of ECONNREFUSED o

error message from openvpn.

2010-11-27 Thread peasthope
Folk, An OpenVPN tunnel is failing and this message is in /var/log/syslog. Nov 27 16:17:07 joule ovpn-myvpn[1827]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111) Google finds references to some of the words but nothing explains the meaning of ECONNREFUSED or of (code=111). Any clues