Не могу подключится к своему серверу через OpenVPN

[Длиннорогий]

Здрасьте.
Первый раз пробую поднять свой сервер VPN на приобретенном хостинге. Соответственно проблемы, которые пока не могу решить с помощью гугла. Товарищи, выручайте.
client.conf

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

client
dev tun
proto tcp
remote IP_SERVERA 1194
tls-client
ca /etc/openvpn/ca.crt
tls-auth /etc/openvpn/ta.key 1
cert /etc/openvpn/vpn-server.crt
key /etc/openvpn/vpn-server.key
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
nobind
resolv-retry infinite


server.conf

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

port 1194
proto tcp
dev tun0
user nobody
dh /etc/openvpn/keys/dh.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/vpn-server.crt
key /etc/openvpn/keys/vpn-server.key
tls-auth /etc/openvpn/keys/ta.key 0
#crl-verify  /etc/openvpn/keys/crl.pem
script-security 2
cipher BF-CBC
tls-server
comp-lzo
mute 10
persist-key
persist-tun
max-clients 5
keepalive 10 900
client-config-dir /etc/openvpn/ccd
ifconfig-pool-persist /etc/openvpn/ccd/ipp.txt
server 10.15.0.0 255.255.255.0
status /var/log/openvpn/openvpn-status.log 1
status-version 3
log-append /var/log/openvpn/openvpn-server.log
verb 3


Логи клиента при подключении:

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

Enter Private Key Password: **************
Fri Nov 11 19:18:01 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Nov 11 19:18:01 2016 Control Channel Authentication: using '/etc/openvpn/ta.key' as a OpenVPN static key file
Fri Nov 11 19:18:01 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 11 19:18:01 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 11 19:18:01 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Fri Nov 11 19:18:01 2016 Attempting to establish TCP connection with [AF_INET]IP_SERVERA:1194 [nonblock]
Fri Nov 11 19:18:02 2016 TCP connection established with [AF_INET]IP_SERVERA:1194
Fri Nov 11 19:18:02 2016 TCPv4_CLIENT link local: [undef]
Fri Nov 11 19:18:02 2016 TCPv4_CLIENT link remote: [AF_INET]IP_SERVERA:1194
Fri Nov 11 19:18:02 2016 TLS: Initial packet from [AF_INET]IP_SERVERA:1194, sid=b0e4308d 4c7ecba4
Fri Nov 11 19:18:03 2016 VERIFY OK: depth=1, CN=Easy-RSA CA
Fri Nov 11 19:18:03 2016 Validating certificate key usage
Fri Nov 11 19:18:03 2016 ++ Certificate has key usage  00a0, expects 00a0
Fri Nov 11 19:18:03 2016 VERIFY KU OK
Fri Nov 11 19:18:03 2016 Validating certificate extended key usage
Fri Nov 11 19:18:03 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Nov 11 19:18:03 2016 VERIFY EKU OK
Fri Nov 11 19:18:03 2016 VERIFY OK: depth=0, CN=vpn-server
Fri Nov 11 19:18:03 2016 Connection reset, restarting [-1]
Fri Nov 11 19:18:03 2016 SIGUSR1[soft,connection-reset] received, process restarting
Fri Nov 11 19:18:03 2016 Restart pause, 5 second(s)
Fri Nov 11 19:18:08 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Fri Nov 11 19:18:08 2016 Attempting to establish TCP connection with [AF_INET]IP_SERVERA:1194 [nonblock]
Fri Nov 11 19:18:09 2016 TCP connection established with [AF_INET]IP_SERVERA:1194
Fri Nov 11 19:18:09 2016 TCPv4_CLIENT link local: [undef]
Fri Nov 11 19:18:09 2016 TCPv4_CLIENT link remote: [AF_INET]IP_SERVERA:1194
Fri Nov 11 19:18:09 2016 TLS: Initial packet from [AF_INET]IP_SERVERA:1194, sid=f180c2ee a5cfffe4
Fri Nov 11 19:18:10 2016 VERIFY OK: depth=1, CN=Easy-RSA CA
Fri Nov 11 19:18:10 2016 Validating certificate key usage
Fri Nov 11 19:18:10 2016 ++ Certificate has key usage  00a0, expects 00a0
Fri Nov 11 19:18:10 2016 VERIFY KU OK
Fri Nov 11 19:18:10 2016 Validating certificate extended key usage
Fri Nov 11 19:18:10 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Nov 11 19:18:10 2016 VERIFY EKU OK
Fri Nov 11 19:18:10 2016 VERIFY OK: depth=0, CN=vpn-server
Fri Nov 11 19:18:11 2016 Connection reset, restarting [-1]
Fri Nov 11 19:18:11 2016 SIGUSR1[soft,connection-reset] received, process restarting
Fri Nov 11 19:18:11 2016 Restart pause, 5 second(s)


Как уже сказал, ничего не нагуглилось пока.
На сервере при остановленном openvpn по запросу

Код: [Выделить]

openvpn /etc/openvpn/server.confничего не выводит.
Пользователь добавил сообщение 11 Ноября 2016, 19:48:32:Еще немного информации.
tcpdump'ом посмотрел, пакеты доходят до сервера.

[fisher74]

а лог сервера?

[Длиннорогий]

fisher74,

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

Fri Nov 11 23:54:28 2016 us=997330 PID packet_id_free
Fri Nov 11 23:54:28 2016 us=997356 NOTE: --mute triggered...
Fri Nov 11 23:54:30 2016 us=118131 15 variation(s) on previous 10 message(s) suppressed by --mute
Fri Nov 11 23:54:30 2016 us=118222 event_wait : Interrupted system call (code=4)
Fri Nov 11 23:54:30 2016 us=118236 I/O WAIT status=0x0010
Fri Nov 11 23:54:30 2016 us=118278 MULTI: REAP range 0 -> 256
Fri Nov 11 23:54:30 2016 us=118415 PKCS#11: __pkcs11h_openssl_ex_data_free entered - parent=0x7f4fbcc52050, ptr=(nil), ad=0x7f4fbcc520b0, idx=0, argl=0, argp=0x7f4fbade18e3
Fri Nov 11 23:54:30 2016 us=118482 PKCS#11: __pkcs11h_openssl_ex_data_free entered - parent=0x7f4fbcc284d0, ptr=(nil), ad=0x7f4fbcc28530, idx=0, argl=0, argp=0x7f4fbade18e3
Fri Nov 11 23:54:30 2016 us=118510 PKCS#11: __pkcs11h_openssl_ex_data_free entered - parent=0x7f4fbcc288a0, ptr=(nil), ad=0x7f4fbcc28900, idx=0, argl=0, argp=0x7f4fbade18e3
Fri Nov 11 23:54:30 2016 us=118540 TCP/UDP: Closing socket
Fri Nov 11 23:54:30 2016 us=118603 /sbin/ip route del 10.15.0.0/24
Fri Nov 11 23:54:30 2016 us=120397 PKCS#11: __pkcs11h_forkFixup entry pid=6708, activate_slotevent=1
Fri Nov 11 23:54:30 2016 us=120756 PKCS#11: __pkcs11h_forkFixup return
Fri Nov 11 23:54:30 2016 us=123538 Closing TUN/TAP interface
Fri Nov 11 23:54:30 2016 us=123641 /sbin/ip addr del dev tun0 local 10.15.0.1 peer 10.15.0.2
Fri Nov 11 23:54:30 2016 us=125344 PKCS#11: __pkcs11h_forkFixup entry pid=6709, activate_slotevent=1
Fri Nov 11 23:54:30 2016 us=125699 PKCS#11: __pkcs11h_forkFixup return
Fri Nov 11 23:54:30 2016 us=142034 PID packet_id_free
Fri Nov 11 23:54:30 2016 us=142281 SIGINT[hard,] received, process exiting
Fri Nov 11 23:54:30 2016 us=142922 PKCS#11: pkcs11_terminate - entered
Fri Nov 11 23:54:30 2016 us=142962 PKCS#11: pkcs11h_terminate entry
Fri Nov 11 23:54:30 2016 us=142977 PKCS#11: Terminating openssl
Fri Nov 11 23:54:30 2016 us=142990 PKCS#11: _pkcs11h_openssl_terminate
Fri Nov 11 23:54:30 2016 us=143002 PKCS#11: Removing providers
Fri Nov 11 23:54:30 2016 us=143015 PKCS#11: Releasing sessions
Fri Nov 11 23:54:30 2016 us=143028 PKCS#11: Terminating slotevent
Fri Nov 11 23:54:30 2016 us=143041 PKCS#11: _pkcs11h_slotevent_terminate entry
Fri Nov 11 23:54:30 2016 us=143052 PKCS#11: _pkcs11h_slotevent_terminate return
Fri Nov 11 23:54:30 2016 us=143064 PKCS#11: Marking as uninitialized
Fri Nov 11 23:54:30 2016 us=143082 NOTE: --mute triggered...


Пользователь добавил сообщение 11 Ноября 2016, 20:04:47:Не уверен, но tun0 вроде должен появлятся после старта openvpn на стороне сервера, однако, я его не наблюдаю...

[fisher74]

VPN на приобретенном хостинге

обратитесь в тех.поддержку, предоставляется ли возможность использовать tun-интерфейса

[Длиннорогий]

С tun'ом разобрался, пересоздал все ключи через easy-rsa из репов. В целом проблемы решил, кроме одной, наверное, последней.
Из лога сервера:

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

Sat Nov 12 21:16:52 2016 us=400413 TUN/TAP device tun0 opened
Sat Nov 12 21:16:52 2016 us=400494 TUN/TAP TX queue length set to 100
Sat Nov 12 21:16:52 2016 us=400562 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 12 21:16:52 2016 us=400637 /sbin/ip link set dev tun0 up mtu 1500
Sat Nov 12 21:16:52 2016 us=412870 /sbin/ip addr add dev tun0 local 172.16.10.1 peer 172.16.10.2
Sat Nov 12 21:16:52 2016 us=417464 /sbin/ip route add 172.16.10.0/24 via 172.16.10.2
Sat Nov 12 21:16:52 2016 us=421599 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov 12 21:16:52 2016 us=422705 GID set to nogroup
Sat Nov 12 21:16:52 2016 us=422746 UID set to nobody
Sat Nov 12 21:16:52 2016 us=422777 Listening for incoming TCP connection on [undef]
Sat Nov 12 21:16:52 2016 us=422803 TCPv4_SERVER link local (bound): [undef]
Sat Nov 12 21:16:52 2016 us=422814 TCPv4_SERVER link remote: [undef]
Sat Nov 12 21:16:52 2016 us=422846 MULTI: multi_init called, r=256 v=256
Sat Nov 12 21:16:52 2016 us=422948 IFCONFIG POOL: base=172.16.10.4 size=62, ipv6=0
Sat Nov 12 21:16:52 2016 us=423111 ifconfig_pool_read(), in='client,10.8.0.4', TODO: IPv6
Sat Nov 12 21:16:52 2016 us=423132 succeeded -> ifconfig_pool_set()
Sat Nov 12 21:16:52 2016 us=423144 IFCONFIG POOL LIST
Sat Nov 12 21:16:52 2016 us=423168 MULTI: TCP INIT maxclients=5 maxevents=9
Sat Nov 12 21:16:52 2016 us=423232 Initialization Sequence Completed
Sat Nov 12 21:17:13 2016 us=987566 MULTI: multi_create_instance called
Sat Nov 12 21:17:13 2016 us=987745 Re-using SSL/TLS context
Sat Nov 12 21:17:13 2016 us=987829 LZO compression initialized
Sat Nov 12 21:17:13 2016 us=988133 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Sat Nov 12 21:17:13 2016 us=988255 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov 12 21:17:13 2016 us=988296 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sat Nov 12 21:17:13 2016 us=988308 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sat Nov 12 21:17:13 2016 us=988385 Local Options hash (VER=V4): 'bd577cd1'
Sat Nov 12 21:17:13 2016 us=988403 Expected Remote Options hash (VER=V4): 'ee93268d'
Sat Nov 12 21:17:13 2016 us=988462 TCP connection established with [AF_INET]IP_CLIENTA:49902
Sat Nov 12 21:17:13 2016 us=988476 TCPv4_SERVER link local: [undef]
Sat Nov 12 21:17:13 2016 us=988488 TCPv4_SERVER link remote: [AF_INET]IP_CLIENTA:49902
RSat Nov 12 21:17:14 2016 us=924138 IP_CLIENTA:49902 TLS: Initial packet from [AF_INET]IP_CLIENTA:49902, sid=ed9dded8 1cab99a6
WRRWWWWRWRWRWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRSat Nov 12 21:17:16 2016 us=849261 IP_CLIENTA:49902 VERIFY OK: depth=1, C=XX, ST=XX, L=XXX, O=XXX, OU=MyOrganizationalUnit, CN=XXX CA, name=EasyRSA, emailAddress=XXX
Sat Nov 12 21:17:16 2016 us=849661 IP_CLIENTA:49902 VERIFY OK: depth=0, C=XX, ST=XX, L=XXX, O=XXX, OU=MyOrganizationalUnit, CN=client, name=EasyRSA, emailAddress=XXX
WRSat Nov 12 21:17:16 2016 us=950640 IP_CLIENTA:49902 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 12 21:17:16 2016 us=950827 IP_CLIENTA:49902 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 12 21:17:16 2016 us=950964 IP_CLIENTA:49902 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 12 21:17:16 2016 us=951049 IP_CLIENTA:49902 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWRRRSat Nov 12 21:17:17 2016 us=188224 IP_CLIENTA:49902 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Nov 12 21:17:17 2016 us=188309 IP_CLIENTA:49902 [client] Peer Connection Initiated with [AF_INET]IP_CLIENTA:49902
Sat Nov 12 21:17:17 2016 us=188371 client/IP_CLIENTA:49902 MULTI_sva: pool returned IPv4=172.16.10.6, IPv6=(Not enabled)
Sat Nov 12 21:17:17 2016 us=188427 client/IP_CLIENTA:49902 MULTI: Learn: 172.16.10.6 -> client/IP_CLIENTA:49902
Sat Nov 12 21:17:17 2016 us=188448 client/IP_CLIENTA:49902 MULTI: primary virtual IP for client/IP_CLIENTA:49902: 172.16.10.6
RSat Nov 12 21:17:19 2016 us=202840 client/IP_CLIENTA:49902 PUSH: Received control message: 'PUSH_REQUEST'
Sat Nov 12 21:17:19 2016 us=202970 client/IP_CLIENTA:49902 send_push_reply(): safe_cap=940
Sat Nov 12 21:17:19 2016 us=203096 client/IP_CLIENTA:49902 SENT CONTROL [client]: 'PUSH_REPLY,route 10.10.10.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.10.10.254,route 172.16.10.1,topology net30,ping 10,ping-restart 120,ifconfig 172.16.10.6 172.16.10.5' (status=1)
WWWWSat Nov 12 21:17:19 2016 us=370735 client/IP_CLIENTA:49902 Connection reset, restarting [0]
Sat Nov 12 21:17:19 2016 us=370992 client/IP_CLIENTA:49902 SIGUSR1[soft,connection-reset] received, client-instance restarting
Sat Nov 12 21:17:19 2016 us=371472 TCP/UDP: Closing socket
Sat Nov 12 21:17:41 2016 us=933972 MULTI: multi_create_instance called
Sat Nov 12 21:17:41 2016 us=934270 Re-using SSL/TLS context
Sat Nov 12 21:17:41 2016 us=934433 LZO compression initialized
Sat Nov 12 21:17:41 2016 us=934666 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Sat Nov 12 21:17:41 2016 us=934767 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov 12 21:17:41 2016 us=934880 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sat Nov 12 21:17:41 2016 us=934953 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sat Nov 12 21:17:41 2016 us=935036 Local Options hash (VER=V4): 'bd577cd1'
Sat Nov 12 21:17:41 2016 us=935108 Expected Remote Options hash (VER=V4): 'ee93268d'
Sat Nov 12 21:17:41 2016 us=935202 TCP connection established with [AF_INET]IP_CLIENTA:49904
Sat Nov 12 21:17:41 2016 us=935270 TCPv4_SERVER link local: [undef]
Sat Nov 12 21:17:41 2016 us=935350 TCPv4_SERVER link remote: [AF_INET]IP_CLIENTA:49904
RSat Nov 12 21:17:42 2016 us=870902 IP_CLIENTA:49904 TLS: Initial packet from [AF_INET]IP_CLIENTA:49904, sid=31505e5c c797499e
WRRWWWWRWRWRWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRSat Nov 12 21:17:44 2016 us=777126 IP_CLIENTA:49904 VERIFY OK: depth=1, C=XX, ST=XX, L=XXX, O=XXX, OU=MyOrganizationalUnit, CN=XXX CA, name=EasyRSA, emailAddress=XXX
Sat Nov 12 21:17:44 2016 us=777427 IP_CLIENTA:49904 VERIFY OK: depth=0, C=XX, ST=XX, L=XXX, O=XXX, OU=MyOrganizationalUnit, CN=client, name=EasyRSA, emailAddress=XXX
WRSat Nov 12 21:17:44 2016 us=878322 IP_CLIENTA:49904 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 12 21:17:44 2016 us=878417 IP_CLIENTA:49904 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 12 21:17:44 2016 us=878518 IP_CLIENTA:49904 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 12 21:17:44 2016 us=878539 IP_CLIENTA:49904 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWRRRSat Nov 12 21:17:45 2016 us=108385 IP_CLIENTA:49904 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Nov 12 21:17:45 2016 us=108470 IP_CLIENTA:49904 [client] Peer Connection Initiated with [AF_INET]IP_CLIENTA:49904
Sat Nov 12 21:17:45 2016 us=108521 client/IP_CLIENTA:49904 MULTI_sva: pool returned IPv4=172.16.10.6, IPv6=(Not enabled)
Sat Nov 12 21:17:45 2016 us=108577 client/IP_CLIENTA:49904 MULTI: Learn: 172.16.10.6 -> client/IP_CLIENTA:49904
Sat Nov 12 21:17:45 2016 us=108647 client/IP_CLIENTA:49904 MULTI: primary virtual IP for client/IP_CLIENTA:49904: 172.16.10.6
RSat Nov 12 21:17:47 2016 us=113026 client/IP_CLIENTA:49904 PUSH: Received control message: 'PUSH_REQUEST'
Sat Nov 12 21:17:47 2016 us=113188 client/IP_CLIENTA:49904 send_push_reply(): safe_cap=940
Sat Nov 12 21:17:47 2016 us=113350 client/IP_CLIENTA:49904 SENT CONTROL [client]: 'PUSH_REPLY,route 10.10.10.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.10.10.254,route 172.16.10.1,topology net30,ping 10,ping-restart 120,ifconfig 172.16.10.6 172.16.10.5' (status=1)
WWWWRRRwrWRSat Nov 12 21:17:48 2016 us=486826 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:17:48 2016 us=978750 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:17:49 2016 us=470414 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:17:50 2016 us=454657 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwRwrWrWRSat Nov 12 21:17:52 2016 us=426215 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:17:56 2016 us=366874 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRSat Nov 12 21:17:58 2016 us=487480 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRwrWRwrWRSat Nov 12 21:18:04 2016 us=254328 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRSat Nov 12 21:18:20 2016 us=46490 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRwrWRSat Nov 12 21:18:36 2016 us=4094 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:36 2016 us=218358 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:36 2016 us=434463 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:36 2016 us=866560 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRSat Nov 12 21:18:37 2016 us=730344 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRSat Nov 12 21:18:39 2016 us=462335 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRSat Nov 12 21:18:42 2016 us=926377 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RwrWRwrWRSat Nov 12 21:18:44 2016 us=561760 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:44 2016 us=838515 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:45 2016 us=118596 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:45 2016 us=678577 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped
RSat Nov 12 21:18:46 2016 us=802637 client/IP_CLIENTA:49904 MULTI: bad source address from client [IP_CLIENTA], packet dropped


Лог клиента:

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

Sat Nov 12 17:18:27 2016 us=287293 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:27 2016 us=287334 TUN READ [62]
Sat Nov 12 17:18:27 2016 us=287353 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:27 2016 us=351186 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:27 2016 us=351225 TUN WRITE [90]
Sat Nov 12 17:18:27 2016 us=415561 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:27 2016 us=415595 TUN WRITE [90]
Sat Nov 12 17:18:28 2016 us=474635 TUN READ [71]
Sat Nov 12 17:18:28 2016 us=474697 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:28 2016 us=474734 TUN READ [71]
Sat Nov 12 17:18:28 2016 us=474754 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:28 2016 us=538453 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:28 2016 us=538502 TUN WRITE [99]
Sat Nov 12 17:18:28 2016 us=602270 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:28 2016 us=602321 TUN WRITE [99]
Sat Nov 12 17:18:32 2016 us=292297 TUN READ [62]
Sat Nov 12 17:18:32 2016 us=292361 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:32 2016 us=292400 TUN READ [62]
Sat Nov 12 17:18:32 2016 us=292420 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:32 2016 us=356201 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:32 2016 us=356242 TUN WRITE [90]
Sat Nov 12 17:18:32 2016 us=419953 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:32 2016 us=419989 TUN WRITE [90]
Sat Nov 12 17:18:33 2016 us=479771 TUN READ [71]
Sat Nov 12 17:18:33 2016 us=479845 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:33 2016 us=479888 TUN READ [71]
Sat Nov 12 17:18:33 2016 us=479910 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:33 2016 us=545424 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:33 2016 us=545483 TUN WRITE [99]
Sat Nov 12 17:18:33 2016 us=609260 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:33 2016 us=609298 TUN WRITE [99]
Sat Nov 12 17:18:35 2016 us=967306 TUN READ [90]
Sat Nov 12 17:18:35 2016 us=967370 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:36 2016 us=181584 TUN READ [90]
Sat Nov 12 17:18:36 2016 us=181630 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:36 2016 us=397589 TUN READ [90]
Sat Nov 12 17:18:36 2016 us=397645 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:36 2016 us=829563 TUN READ [90]
Sat Nov 12 17:18:36 2016 us=829621 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:37 2016 us=297440 TUN READ [62]
Sat Nov 12 17:18:37 2016 us=297521 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:37 2016 us=297562 TUN READ [62]
Sat Nov 12 17:18:37 2016 us=297581 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:37 2016 us=361696 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:37 2016 us=361735 TUN WRITE [90]
Sat Nov 12 17:18:37 2016 us=425192 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:37 2016 us=425231 TUN WRITE [90]
Sat Nov 12 17:18:37 2016 us=693534 TUN READ [90]
Sat Nov 12 17:18:37 2016 us=693596 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:38 2016 us=482603 TUN READ [71]
Sat Nov 12 17:18:38 2016 us=482664 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:38 2016 us=482703 TUN READ [71]
Sat Nov 12 17:18:38 2016 us=482723 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:38 2016 us=546751 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:38 2016 us=546791 TUN WRITE [99]
Sat Nov 12 17:18:38 2016 us=610102 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:38 2016 us=610140 TUN WRITE [99]
Sat Nov 12 17:18:39 2016 us=425545 TUN READ [90]
Sat Nov 12 17:18:39 2016 us=425597 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:42 2016 us=301570 TUN READ [62]
Sat Nov 12 17:18:42 2016 us=301643 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:42 2016 us=301688 TUN READ [62]
Sat Nov 12 17:18:42 2016 us=301709 TCPv4_CLIENT WRITE [101] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=100
Sat Nov 12 17:18:42 2016 us=365448 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:42 2016 us=365498 TUN WRITE [90]
Sat Nov 12 17:18:42 2016 us=429257 TCPv4_CLIENT READ [125] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:42 2016 us=429293 TUN WRITE [90]
Sat Nov 12 17:18:42 2016 us=889567 TUN READ [90]
Sat Nov 12 17:18:42 2016 us=889628 TCPv4_CLIENT WRITE [125] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=124
Sat Nov 12 17:18:43 2016 us=491131 TUN READ [71]
Sat Nov 12 17:18:43 2016 us=491189 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:43 2016 us=491228 TUN READ [71]
Sat Nov 12 17:18:43 2016 us=491250 TCPv4_CLIENT WRITE [109] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=108
Sat Nov 12 17:18:43 2016 us=555013 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:43 2016 us=555056 TUN WRITE [99]
Sat Nov 12 17:18:43 2016 us=619471 TCPv4_CLIENT READ [141] from [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=140
Sat Nov 12 17:18:43 2016 us=619508 TUN WRITE [99]
Sat Nov 12 17:18:44 2016 us=524762 TUN READ [595]
Sat Nov 12 17:18:44 2016 us=524803 TCPv4_CLIENT WRITE [637] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=636
Sat Nov 12 17:18:44 2016 us=801549 TUN READ [595]
Sat Nov 12 17:18:44 2016 us=801617 TCPv4_CLIENT WRITE [637] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=636
Sat Nov 12 17:18:45 2016 us=81547 TUN READ [595]
Sat Nov 12 17:18:45 2016 us=81604 TCPv4_CLIENT WRITE [637] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=636
Sat Nov 12 17:18:45 2016 us=641555 TUN READ [595]
Sat Nov 12 17:18:45 2016 us=641627 TCPv4_CLIENT WRITE [637] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=636
Sat Nov 12 17:18:46 2016 us=765554 TUN READ [595]
Sat Nov 12 17:18:46 2016 us=765624 TCPv4_CLIENT WRITE [637] to [AF_INET]IP_SERVERA:1194: P_DATA_V1 kid=0 DATA len=636
Sat Nov 12 17:18:47 2016 us=454196 Connection reset, restarting [0]
Sat Nov 12 17:18:47 2016 us=454377 TCP/UDP: Closing socket
Sat Nov 12 17:18:47 2016 us=454424 SIGUSR1[soft,connection-reset] received, process restarting
Sat Nov 12 17:18:47 2016 us=454445 Restart pause, 5 second(s)
Sat Nov 12 17:18:52 2016 us=454542 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Nov 12 17:18:52 2016 us=454588 Re-using SSL/TLS context
Sat Nov 12 17:18:52 2016 us=454615 LZO compression initialized
Sat Nov 12 17:18:52 2016 us=454665 Control Channel MTU parms [ L:1544 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Sat Nov 12 17:18:52 2016 us=454693 Socket Buffers: R=[87380->87380] S=[16384->16384]
Sat Nov 12 17:18:52 2016 us=454710 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:143 ET:0 EL:3 AF:3/1 ]
Sat Nov 12 17:18:52 2016 us=454734 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sat Nov 12 17:18:52 2016 us=454745 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sat Nov 12 17:18:52 2016 us=454763 Local Options hash (VER=V4): 'ee93268d'
Sat Nov 12 17:18:52 2016 us=454777 Expected Remote Options hash (VER=V4): 'bd577cd1'
Sat Nov 12 17:18:52 2016 us=454791 Attempting to establish TCP connection with [AF_INET]IP_SERVERA:1194 [nonblock]
Sat Nov 12 17:18:53 2016 us=454969 TCP: connect to [AF_INET]IP_SERVERA:1194 failed, will try again in 5 seconds: Connection refused
Sat Nov 12 17:18:59 2016 us=455311 TCP: connect to [AF_INET]IP_SERVERA:1194 failed, will try again in 5 seconds: Connection refused
Sat Nov 12 17:19:05 2016 us=455584 TCP: connect to [AF_INET]IP_SERVERA:1194 failed, will try again in 5 seconds: Connection refused
Sat Nov 12 17:19:11 2016 us=455927 TCP: connect to [AF_INET]IP_SERVERA:1194 failed, will try again in 5 seconds: Connection refused


Конфиг клиента:

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

client
dev tun
proto tcp
remote IP_SERVERA 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
tls-auth /etc/openvpn/ta.key 1
comp-lzo
verb 6


Конфиг сервера:

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

port 1194
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key  # This file should be kept secret
dh /etc/openvpn/dh2048.pem
tls-auth /etc/openvpn/ta.key 0 # This file is secret
server 172.16.10.0 255.255.255.0

push "route 10.10.10.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.10.10.254"

ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 5

Отделенная часть в конфиге сервера - попытка исправить пложение, подсмотренная здесь. Т.к. в сетях не силен, едва ли можно сказать, что понимаю смысл роутинга и пуша в данном случае. Но с NAT знаком. Буду благодарен за подсказу/решение.