OpenVPN connection - No internet access

Pikoh · August 24, 2017 at 7:13 PM

First of all, hi everyone,and sorry if this is not the right place to ask this.

I have a strange problem with OpenVPN and I hope someone could help as I've been searching for hours

I got a free ProtonVPN account, and I have tried to configure it in my Raspberry 3 Libreelec. I have installed the VPN Manager for VPN AddOn and gone through all the configuration process,so far so good.

When I finally connect to the VPN server, it seems to do it fine (no errors, a message of "Connected to VPN" received and External IP seems ok). But the problem is that, when conected to the server, my internet connection does not work ok. Local lan works fine, but when I try, for example, a ping to 8.8.8.8 I get no response.When I disconnect, internet traffic comes back to normal.

I've tried the same VPN from my mobile and desktop PC and work just fine.

Any ideas about what could be the issue?

Thank you all

Pikoh · August 25, 2017 at 6:16 PM

In case it helps,here's the connection log:

Code

Fri Aug 25 19:09:54 2017 WARNING: file '/storage/.kodi/addons/service.vpn.manager/UserDefined/pass.txt' is group or others accessible
Fri Aug 25 19:09:54 2017 OpenVPN 2.4.0 armv7ve-libreelec-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD] built on May 19 2017
Fri Aug 25 19:09:54 2017 library versions: LibreSSL 2.4.4, LZO 2.09
Fri Aug 25 19:09:54 2017 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Fri Aug 25 19:09:54 2017 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Aug 25 19:09:54 2017 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Aug 25 19:09:54 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]192.96.203.72:1194
Fri Aug 25 19:09:54 2017 Socket Buffers: R=[163840->163840] S=[163840->163840]
Fri Aug 25 19:09:54 2017 UDP link local: (not bound)
Fri Aug 25 19:09:54 2017 UDP link remote: [AF_INET]192.96.203.72:1194
Fri Aug 25 19:09:54 2017 TLS: Initial packet from [AF_INET]192.96.203.72:1194, sid=55b068d1 ca3bf3bf
Fri Aug 25 19:09:54 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 25 19:09:55 2017 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Fri Aug 25 19:09:55 2017 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Fri Aug 25 19:09:55 2017 Validating certificate key usage
Fri Aug 25 19:09:55 2017 ++ Certificate has key usage  00a0, expects 00a0
Fri Aug 25 19:09:55 2017 VERIFY KU OK
Fri Aug 25 19:09:55 2017 Validating certificate extended key usage
Fri Aug 25 19:09:55 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Aug 25 19:09:55 2017 VERIFY EKU OK
Fri Aug 25 19:09:55 2017 VERIFY OK: depth=0, CN=us-va-108.protonvpn.com
Fri Aug 25 19:09:55 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Aug 25 19:09:55 2017 [us-va-108.protonvpn.com] Peer Connection Initiated with [AF_INET]192.96.203.72:1194
Fri Aug 25 19:09:56 2017 SENT CONTROL [us-va-108.protonvpn.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 25 19:09:56 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.0.1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,route-gateway 10.8.0.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.0.12 255.255.0.0,peer-id 10,cipher AES-256-GCM'
Fri Aug 25 19:09:56 2017 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: timers and/or timeouts modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Fri Aug 25 19:09:56 2017 Socket Buffers: R=[163840->327680] S=[163840->327680]
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: --ifconfig/up options modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: route options modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: route-related options modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: peer-id set
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: adjusting link_mtu to 1657
Fri Aug 25 19:09:56 2017 OPTIONS IMPORT: data channel crypto options modified
Fri Aug 25 19:09:56 2017 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Aug 25 19:09:56 2017 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Aug 25 19:09:56 2017 TUN/TAP device tun1 opened
Fri Aug 25 19:09:56 2017 TUN/TAP TX queue length set to 100
Fri Aug 25 19:09:56 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Aug 25 19:09:56 2017 /sbin/ip link set dev tun1 up mtu 1500
Fri Aug 25 19:09:56 2017 /sbin/ip addr add dev tun1 10.8.0.12/16 broadcast 10.8.255.255
Fri Aug 25 19:09:56 2017 /sbin/ip route add 192.96.203.72/32 via 192.168.1.1
Fri Aug 25 19:09:56 2017 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Fri Aug 25 19:09:56 2017 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Fri Aug 25 19:09:56 2017 Initialization Sequence Completed

Display More