Ipadmini and OpenVPN

Hello, I'm a new user of Ipad mini. I need to work with openvpn on Windows.
I found openvpn on ipad, and get all needed files from my firm's IT specialist (btw he never worked on ipad, and he doesn't know IOS).
I’ve got 4 files: ca.crt, name.crt, name.key and namenet.ovpn.
When I open in my Ipad OPENvpn netname.ovpn from my gmail it shows me an error loading profile: Inbox/namenet.ovpn
Missing/bad files : ca.crt name.crt, name.key.
How can I add them to my error loading profile?
I’m not particularly good in IT, and how you see in English. Thanks you for answers, and sorry for poor English.

Interesting situation…
I'd suggest: design for iPad mini first (choose the font size which is good for reading on the iPad mini). This might result in "big" fonts on the iPad 1&2.
As far as I know there no way to make a separate design within one InDesign document.

Similar Messages

In my family we have 3IPhones 4S, one IPhone5, one IPad3, one IPadMini and two IPad 4. Is it possible to use the same energieadapter for all of those ?

In my family we have 3IPhones 4S, one IPhone5, one IPad3, one IPadMini and two IPad 4. Is it possible to use the same energieadapter for all of those ?

Yes but the iPhone chargers will struggle to charge the iPads ,they need more power than the iPhone chargers produce and with an iPad will charge VERY slowly
The iPad chargers whether 10w or 12 will happily charge all your devices and Apple confirms the compatibility on the relevant web page.

[SOLVED] Routing problems with ssh server and openvpn client

My current setup is an arch box behind my wireless router. My wireless router is running scripts to update the dynamic dns for my internet connection and forwarding incoming requests to port 22 on the arch box. Simple so far.
Now I'd like to setup OpenVPN on the arch box to connect to a 3rd party vpn service but still listen for ssh connections. This way I can have my arch box always connected to the vpn but be able to access it from anywhere. I believe the problem is that openvpn sets up a default route to send all outgoing traffic out over the tunnel, but I don't know enough about routing to make this work. I saw another solution in the forum was running virtualbox and I find that so inelegant. I'm planning on eventually learning more about ip route and iptables but I was also hoping that a networking guru could help me get this set up quickly in the meantime.
ip route while not connected to vpn
default via 192.168.1.1 dev eth0 metric 202
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.11 metric 202
ip route while connected to vpn
0.0.0.0/1 via 10.120.62.9 dev tun0
default via 192.168.1.1 dev eth0 metric 202
10.120.62.1 via 10.120.62.9 dev tun0
10.120.62.9 dev tun0 proto kernel scope link src 10.120.62.10
23.29.126.102 via 192.168.1.1 dev eth0
128.0.0.0/1 via 10.120.62.9 dev tun0
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.11 metric 202
Last edited by ricka (2012-11-05 17:14:48)

First, meop, thanks for your reply. I did not use that method to solve the issue, but I'm going to do some more research into it (I'll speak to why I went another direction after the solution).
My solution so far has come from this resource http://forum.linode.com/viewtopic.php?t=8737
Since my server is behind a router, I do not have to worry about the public IP address changing and I was able to use the private IP in the route statements. Therefore, in my case, the solution was these three lines:
ip rule add from 192.168.1.11 table 128
ip route add table 128 to 192.168.1.0/24 dev eth0
ip route add table 128 default via 192.168.1.1
Keep in mind, as the article states, that applies to all ports (not just ssh). If you want to block other traffic, you need some extra iptables entries.
This also solves my end goal: Being able to connect to this 3rd party VPN with a simple ssh redirect from my always connected server. I can now ssh -D <port> <myhost>, set up chrome to use <port> as a proxy, and have everything redirecting over this VPN connection without any hassle.
meop, this setup is connecting to a 3rd party VPN service and they provided the config scripts for the client. I considered tinkering with that, but found this solution to work and I'm going to do some more reading about each solution to figure out which is the best overall.
enovak, I grepped dmesg and did not see any entries about martian source.
Now another question that comes to mind: What if this server were actually NOT behind a firewall and it's public IP changed? I think you'd somehow have to have a script to check to see if your Dynamic IP address changed and also have a route that only that script would use (send everything else out the VPN route). Then, if your IP address changed, you'd have to change these routes around. I'll leave that solution to someone else :-)

Changing IP addresses (and OpenVPN)

I tho't there was a thread on this subject, but it seems to have disappeared. Anyway....
Our network uses 192.168.1.0/24. We are now trying to set up OpenVPN but have "discovered" (what someone must have known) that it will not work from the outside from any location that is also using 192.168.1.0/24. If I had known that prior to setting up the new servers, it would have been somewhat easy to make a transition to another subnet for the internal network. (Why doesn't the documentation explain this a little better?) Now to change internal subnets will also require changing IP address on 2 SBE servers, 5 printers, a Win server, etc. It seems that common opinion about changing IP addresses on Linux is "don't try it."
If anyone has any suggestions, great. If not, then perhaps someone can pass this on to Novell so that others might be aware of this issue.
End of rant #114.

Originally Posted by danareedy
I tho't there was a thread on this subject, but it seems to have disappeared. Anyway....
Our network uses 192.168.1.0/24. We are now trying to set up OpenVPN but have "discovered" (what someone must have known) that it will not work from the outside from any location that is also using 192.168.1.0/24. If I had known that prior to setting up the new servers, it would have been somewhat easy to make a transition to another subnet for the internal network. (Why doesn't the documentation explain this a little better?) Now to change internal subnets will also require changing IP address on 2 SBE servers, 5 printers, a Win server, etc. It seems that common opinion about changing IP addresses on Linux is "don't try it."
If anyone has any suggestions, great. If not, then perhaps someone can pass this on to Novell so that others might be aware of this issue.
End of rant #114.
Here's the thread you were looking for:
http://forums.novell.com/novell-prod...server-ip.html
At this time, the OES2/SP2 script does not know about NOWS SBE. All I can say is Novell NTS is aware of the issue and so far there is no resolution.
You can open a Service Request and I suggest you do so. When several SR's are opened against the same issue it gives it more visibility and will attract more attention relative to other issues.

I cannot start my ipadmini and it seems not charging?

I bought ipadmini two months ago and suddenly it shuts down and after pressing the button it doesn't start up, and it seems it is not charging. I don't know what to do, I think i still holds my warranty?

If it's not charging,
1) it could be the cable (try using a different one),
2) it could be the adapter plug (if you are using it to charge from the wall), try a different adapter,
3) it could be the USB source (if charging from a computer's USB plug), in which case the computer may not be putting out enought power (PCs tend to do this, macs do not).
Since it's not charging, it could be that the device is out of power, hence you can't turn it on.
But try this. press and hold the power and home buttons and wait (keep pressing) until the Apple icon appears. This can take a while.

IPad + iPadmini and iTunes

Is it possible to have an iPad AND an iPadmini without getting into trouble on iTunes on your iMac with syncing? Do they show up as two separate devices? How do you manage both of them from you iMac iTunes?

They will show as different devices and will be treated separately, so you can control which of your content goes on each separately. I sync an old iPad 1 and iPad 3 to the same iTunes and don't have any issues with syncing different content to them

I try to update my ipadmini and it say unable to check for update what i did wrong

i want to update my ipad mini and a message pop up unable to check for update what can i do

Try This...
Close All Open Apps... Sign Out of your Account... Perform a Reset... Try again...
Reset ( No Data will be Lost )
Press and Hold the Sleep/Wake Button and the Home Button at the Same Time...
Wait for the Apple logo to Appear...
Usually takes about 15 - 20 Seconds... ( But can take Longer...)
Release the Buttons...
If no joy... Update using your Computer... See the Using iTunes Section Here...
How to update your iPhone, iPad, or iPod touch
Make sure you have the Latest Version of iTunes (v11) Installed on your computer
iTunes free download from www.itunes.com/download

Numerous duplicats groups listed in my contacts onMacBook Air, iPadMini and iPhone.

I get numerous duplicated groups listed in my Contacts. The group names are listed repeatedly in my Contacts on my MacBook Air(2010) as well as my iPad mini and my iPhone 5C. I have been removing, deleting the duplicate groups one-by-one in my MacBook Air. This is tedious and I think the duplication is continuing. I also checked on iCloud and found that the duplications were there also.
My MacBook Air is 2010, Version 10.10, OS X Yosemite
1.4 GHz Intel Core 2 Duo
Memory:2 GB 1067 MHz DDR3
Storage:26.19GBfreeof120.47GB
2 GB 1067 MHz DDR3
iPad Mini
iPhone 5C

Hi there cam-I-am,
You may find the information in the article below helpful in resolving duplicate contacts.
If you see duplicate contacts after setting up iCloud Contacts
-Griff W.

[SOLVED] Openvpn configuration issues

Hello,
To better illustrate the following here's an overview of my network:
LAN: 10.0.0.0/24; VPN (shall be): 10.0.2.0/24
Alyx: 10.0.0.1 / 10.0.2.1 (i presume) - Is the router and openvpn server (running Debian 5.0)
Praseodym: 10.0.0.4 / 10.0.2.4 (according to ipp.txt) - Is the client (currently local; may connect from internet eventually) (running Archlinux)
When trying to connect praseodym the tun interface gets created properly (according to ifconfig) but it not only get's sent the wrong adress (10.0.2.6) but also the wrong routes (10.0.2.5 as default gateway)
This of course makes it impossible to ping either alyx or any other host in 10.0.0.0/24
I'm sure i misconfigured somewhere but i just don't manage to actually find the error; any help would be greatly appreciated :-D
This is the server.conf on Alyx (with comments removed for length):
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/alyx.crt
key /etc/openvpn/keys/alyx.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.0.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.255.0"
push "redirect-gateway"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
This is the server.conf on Praseodym:
dev tun
remote alyx.lan.k-progs.org
tls-client
pull
ca /etc/openvpn/ca.crt
cert /etc/openvpn/praseodym.crt
key /etc/openvpn/praseodym.key
port 1194
comp-lzo
ping 15
ping-restart 45
ping-timer-rem
verb 3
Also, here are the log files of a connection attempt:
Log of openvpn --config /etc/openvpn/server.conf --verb 6 (On Alyx)
Tue May 3 13:51:49 2011
Tue May 3 13:51:49 2011 us=343679 Current Parameter Settings:
-- the entire config --
Tue May 3 13:51:49 2011 us=399621 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Sep 18 2008
Tue May 3 13:51:49 2011 us=488787 Diffie-Hellman initialized with 1024 bit key
Tue May 3 13:51:49 2011 us=494972 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Tue May 3 13:51:50 2011 us=491474 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 13:51:50 2011 us=532928 TUN/TAP device tun0 opened
Tue May 3 13:51:50 2011 us=533460 TUN/TAP TX queue length set to 100
Tue May 3 13:51:50 2011 us=533981 /sbin/ifconfig tun0 10.0.2.1 pointopoint 10.0.2.2 mtu 1500
Tue May 3 13:51:50 2011 us=539295 /sbin/route add -net 10.0.2.0 netmask 255.255.255.0 gw 10.0.2.2
Tue May 3 13:51:50 2011 us=543053 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 13:51:50 2011 us=543631 Socket Buffers: R=[111616->131072] S=[111616->131072]
Tue May 3 13:51:50 2011 us=544091 UDPv4 link local (bound): [undef]:1194
Tue May 3 13:51:50 2011 us=544469 UDPv4 link remote: [undef]
Tue May 3 13:51:50 2011 us=544868 MULTI: multi_init called, r=256 v=256
Tue May 3 13:51:50 2011 us=545386 IFCONFIG POOL: base=10.0.2.4 size=62
Tue May 3 13:51:50 2011 us=545812 IFCONFIG POOL LIST
Tue May 3 13:51:50 2011 us=546241 Initialization Sequence Completed
Tue May 3 13:52:25 2011 us=915080 MULTI: multi_create_instance called
Tue May 3 13:52:25 2011 us=915641 10.0.0.4:1194 Re-using SSL/TLS context
Tue May 3 13:52:25 2011 us=916094 10.0.0.4:1194 LZO compression initialized
Tue May 3 13:52:25 2011 us=917062 10.0.0.4:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 13:52:25 2011 us=917483 10.0.0.4:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 13:52:25 2011 us=918064 10.0.0.4:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue May 3 13:52:25 2011 us=918525 10.0.0.4:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue May 3 13:52:25 2011 us=919070 10.0.0.4:1194 Local Options hash (VER=V4): '530fdded'
Tue May 3 13:52:25 2011 us=919514 10.0.0.4:1194 Expected Remote Options hash (VER=V4): '41690919'
Tue May 3 13:52:25 2011 us=920072 10.0.0.4:1194 UDPv4 READ [14] from 10.0.0.4:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue May 3 13:52:25 2011 us=920566 10.0.0.4:1194 TLS: Initial packet from 10.0.0.4:1194, sid=665595c2 97acdb17
Tue May 3 13:52:25 2011 us=921066 10.0.0.4:1194 UDPv4 WRITE [26] to 10.0.0.4:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue May 3 13:52:25 2011 us=922376 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 0 ]
Tue May 3 13:52:25 2011 us=923078 10.0.0.4:1194 UDPv4 READ [114] from 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
-- repeats for a while --
Tue May 3 13:52:26 2011 us=144189 10.0.0.4:1194 VERIFY OK: depth=1, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=K-Progs_CA/emailAddress=<censored>
Tue May 3 13:52:26 2011 us=147233 10.0.0.4:1194 VERIFY OK: depth=0, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=praseodym/emailAddress=<censored>
-- continues repeating --
Tue May 3 13:52:26 2011 us=266154 10.0.0.4:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 13:52:26 2011 us=266590 10.0.0.4:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 13:52:26 2011 us=267443 10.0.0.4:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 13:52:26 2011 us=267804 10.0.0.4:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 13:52:26 2011 us=268951 10.0.0.4:1194 UDPv4 WRITE [126] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ 28 ] pid=37 DATA len=100
Tue May 3 13:52:26 2011 us=269516 10.0.0.4:1194 UDPv4 WRITE [114] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=38 DATA len=100
Tue May 3 13:52:26 2011 us=270109 10.0.0.4:1194 UDPv4 WRITE [80] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=39 DATA len=66
Tue May 3 13:52:26 2011 us=270733 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 37 ]
Tue May 3 13:52:26 2011 us=271968 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 38 ]
Tue May 3 13:52:26 2011 us=274646 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 39 ]
Tue May 3 13:52:26 2011 us=275075 10.0.0.4:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 3 13:52:26 2011 us=275567 10.0.0.4:1194 [praseodym] Peer Connection Initiated with 10.0.0.4:1194
Tue May 3 13:52:26 2011 us=276425 praseodym/10.0.0.4:1194 MULTI: Learn: 10.0.2.6 -> praseodym/10.0.0.4:1194
Tue May 3 13:52:26 2011 us=276825 praseodym/10.0.0.4:1194 MULTI: primary virtual IP for praseodym/10.0.0.4:1194: 10.0.2.6
Tue May 3 13:52:30 2011 us=780827 praseodym/10.0.0.4:1194 UDPv4 READ [104] from 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 13:52:30 2011 us=781588 praseodym/10.0.0.4:1194 PUSH: Received control message: 'PUSH_REQUEST'
Tue May 3 13:52:30 2011 us=782566 praseodym/10.0.0.4:1194 SENT CONTROL [praseodym]: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,redirect-gateway,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.2.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.0.2.6 10.0.2.5' (status=1)
Tue May 3 13:52:30 2011 us=783091 praseodym/10.0.0.4:1194 UDPv4 WRITE [22] to 10.0.0.4:1194: P_ACK_V1 kid=0 [ 29 ]
Tue May 3 13:52:30 2011 us=783693 praseodym/10.0.0.4:1194 UDPv4 WRITE [114] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
-- repeats itself --
Tue May 3 13:53:15 2011 us=3722 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:17 2011 us=72864 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:17 2011 us=73807 read UDPv4 [ECONNREFUSED]: Connection refused (code=111) -- This should be about where i killed it on praseodym
Tue May 3 13:53:19 2011 us=194021 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:19 2011 us=194842 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
-- repeats --
Tue May 3 13:53:29 2011 us=659866 event_wait : Interrupted system call (code=4)
Tue May 3 13:53:29 2011 us=662316 TCP/UDP: Closing socket
Tue May 3 13:53:29 2011 us=662509 /sbin/route del -net 10.0.2.0 netmask 255.255.255.0
Tue May 3 13:53:29 2011 us=666153 Closing TUN/TAP interface
Tue May 3 13:53:29 2011 us=666297 /sbin/ifconfig tun0 0.0.0.0
Tue May 3 13:53:29 2011 us=687981 SIGINT[hard,] received, process exiting
Log of openvpn --config /etc/openvpn/server.conf --verb 6 (On Praseodym)
Tue May 3 14:06:03 2011
Tue May 3 14:06:03 2011 us=797132 Current Parameter Settings:
-- entire config --
Tue May 3 14:06:03 2011 us=799467 OpenVPN 2.1.4 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Nov 13 2010
Tue May 3 14:06:03 2011 us=799532 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue May 3 14:06:03 2011 us=799543 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue May 3 14:06:03 2011 us=831145 LZO compression initialized
Tue May 3 14:06:03 2011 us=831289 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 14:06:03 2011 us=831353 Socket Buffers: R=[114688->131072] S=[114688->131072]
Tue May 3 14:06:03 2011 us=833330 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 14:06:03 2011 us=833386 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue May 3 14:06:03 2011 us=833398 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue May 3 14:06:03 2011 us=833426 Local Options hash (VER=V4): '41690919'
Tue May 3 14:06:03 2011 us=833443 Expected Remote Options hash (VER=V4): '530fdded'
Tue May 3 14:06:03 2011 us=833466 UDPv4 link local (bound): [undef]:1194
Tue May 3 14:06:03 2011 us=833480 UDPv4 link remote: 10.0.0.1:1194
Tue May 3 14:06:03 2011 us=833551 UDPv4 WRITE [14] to 10.0.0.1:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue May 3 14:06:03 2011 us=840770 UDPv4 READ [26] from 10.0.0.1:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue May 3 14:06:03 2011 us=840831 TLS: Initial packet from 10.0.0.1:1194, sid=a0c0d596 fa3b4a5c
Tue May 3 14:06:03 2011 us=840898 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 0 ]
Tue May 3 14:06:03 2011 us=840991 UDPv4 WRITE [114] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Tue May 3 14:06:03 2011 us=841034 UDPv4 WRITE [114] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Tue May 3 14:06:03 2011 us=841079 UDPv4 WRITE [25] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=11
Tue May 3 14:06:03 2011 us=843441 UDPv4 READ [22] from 10.0.0.1:1194: P_ACK_V1 kid=0 [ 1 ]
-- repeats --
Tue May 3 14:06:03 2011 us=996540 VERIFY OK: depth=1, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=K-Progs_CA/emailAddress=<censored>
Tue May 3 14:06:03 2011 us=996859 VERIFY OK: depth=0, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=alyx/emailAddress=<censored>
Tue May 3 14:06:03 2011 us=996908 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 19 ]
Tue May 3 14:06:03 2011 us=996973 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=20 DATA len=100
-- repeats --
Tue May 3 14:06:04 2011 us=193026 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 14:06:04 2011 us=193041 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 14:06:04 2011 us=193066 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 39 ]
Tue May 3 14:06:04 2011 us=193113 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 3 14:06:04 2011 us=193140 [alyx] Peer Connection Initiated with 10.0.0.1:1194
Tue May 3 14:06:06 2011 us=525590 SENT CONTROL [alyx]: 'PUSH_REQUEST' (status=1)
Tue May 3 14:06:06 2011 us=525689 UDPv4 WRITE [104] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 14:06:08 2011 us=697435 UDPv4 WRITE [104] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 14:06:08 2011 us=700865 UDPv4 READ [22] from 10.0.0.1:1194: P_ACK_V1 kid=0 [ 29 ]
Tue May 3 14:06:08 2011 us=702337 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
Tue May 3 14:06:08 2011 us=702401 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 40 ]
Tue May 3 14:06:08 2011 us=704448 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Tue May 3 14:06:08 2011 us=704484 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 41 ]
Tue May 3 14:06:08 2011 us=704814 UDPv4 READ [16] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 14:06:08 2011 us=704881 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,redirect-gateway,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.2.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.0.2.6 10.0.2.5'
Tue May 3 14:06:08 2011 us=704976 OPTIONS IMPORT: timers and/or timeouts modified
Tue May 3 14:06:08 2011 us=704989 OPTIONS IMPORT: --ifconfig/up options modified
Tue May 3 14:06:08 2011 us=704999 OPTIONS IMPORT: route options modified
Tue May 3 14:06:08 2011 us=705008 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue May 3 14:06:08 2011 us=705169 ROUTE default_gateway=10.0.0.1
Tue May 3 14:06:08 2011 us=757964 TUN/TAP device tun0 opened
Tue May 3 14:06:08 2011 us=758006 TUN/TAP TX queue length set to 100
Tue May 3 14:06:08 2011 us=758056 /sbin/ifconfig tun0 10.0.2.6 pointopoint 10.0.2.5 mtu 1500
Tue May 3 14:06:08 2011 us=759929 OpenVPN ROUTE: omitted no-op route: 10.0.0.1/255.255.255.255 -> 10.0.0.1
Tue May 3 14:06:08 2011 us=759970 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Tue May 3 14:06:08 2011 us=772882 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=773671 /sbin/route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=774548 WARNING: potential route subnet conflict between local LAN [10.0.2.0/255.255.255.0] and remote VPN [10.0.2.0/255.255.255.0]
Tue May 3 14:06:08 2011 us=774590 /sbin/route add -net 10.0.2.0 netmask 255.255.255.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=775248 Initialization Sequence Completed
Tue May 3 14:06:15 2011 us=480014 TUN READ [1500]
Tue May 3 14:06:15 2011 us=480068 UDPv4 WRITE [1541] to 10.0.0.1:1194: P_DATA_V1 kid=0 DATA len=1540
-- repeats until the logfile is about 80 MB O.o --
Tue May 3 14:06:53 2011 us=371147 TCP/UDP: Closing socket
Tue May 3 14:06:53 2011 us=371194 /sbin/route del -net 10.0.2.0 netmask 255.255.255.0
Tue May 3 14:06:53 2011 us=372114 /sbin/route del -net 10.0.0.0 netmask 255.255.255.0
Tue May 3 14:06:53 2011 us=372807 /sbin/route del -net 10.0.0.1 netmask 255.255.255.255
SIOCDELRT: No such process
Tue May 3 14:06:53 2011 us=373472 ERROR: Linux route delete command failed: external program exited with error status: 7
Tue May 3 14:06:53 2011 us=373511 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Tue May 3 14:06:53 2011 us=374202 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.0.0.1
Tue May 3 14:06:53 2011 us=374869 Closing TUN/TAP interface
Tue May 3 14:06:53 2011 us=374896 /sbin/ifconfig tun0 0.0.0.0
Tue May 3 14:06:53 2011 us=407592 SIGINT[hard,] received, process exiting
Last edited by Greg10 (2011-05-07 06:38:43)

Shouldn't the push "redirect-gateway" directive take care of that?
Also I unfortunatly can only test whether I'm able to connect from the outside on saturday.
I'll see if I can get Praseodym to work in my DMZ (that'd be 10.0.1.0/24) later this day though.
Thanks for the tip :-)
Edit: Thanks a lot indeed;
Having Praseodym be 10.0.1.2 (alyx being 10.0.1.1 in the dmz) actually solved the problems i've been having (for local connectivity that is; i can't really know if it's working unless i test it from the web)
Last edited by Greg10 (2011-05-04 15:27:04)

How to create a persistent network manager profile with openvpn?

After installing networkmanager and openvpn everything works fine except that the networkmanager profile is not persistent and nm creates and selects a new profile with every boot. I followed Persistent configuration on boot using systemd which creates a persistent profile and cuts out the creation of a new profile, but when I build a openvpn connection it won't change the i.p. any longer. I've been searching for a week, read and learned a lot, but without a solution.
My main question is what's creating and selecting a new network profile after booting? I've 2 fresh installations of Arch and Archbang on 2 pc's and with both the same issue/problem.
systemctl --type=service
UNIT LOAD ACTIVE SUB DESCRIPTION
avahi-daemon.service loaded active running Avahi mDNS/DNS-SD Stack
clamd.service loaded active running clamav daemon
colord.service loaded active running Manage, Install and Generate
cups-browsed.service loaded active running Make remote CUPS printers av
dbus.service loaded active running D-Bus System Message Bus
[email protected] loaded active running Getty on tty1
kmod-static-nodes.service loaded active exited Create list of required stat
lvm2-lvmetad.service loaded active running LVM2 metadata daemon
lvm2-pvscan@254:0.service loaded active exited LVM2 PV scan on device 254:0
NetworkManager.service loaded active running Network Manager
nmbd.service loaded active running Samba NetBIOS name server
org.cups.cupsd.service loaded active running CUPS Scheduler
polkit.service loaded active running Authorization Manager
privoxy.service loaded active running Privoxy Web Proxy With Advan
rpcbind.service loaded active running RPC bind service
rtkit-daemon.service loaded active running RealtimeKit Scheduling Polic
smbd.service loaded active running Samba SMB/CIFS server
systemd-fsck-root.service loaded active exited File System Check on Root De
systemd-fsck@dev-disk-by\x2duuid-0e5d72a0\x2de09b\x2d4d0b\x2dba6f\x2d29a25ce04
systemd-fsck@dev-disk-by\x2duuid-567d8960\x2d0ab5\x2d4e3a\x2d8565\x2d32d725fee
systemd-journal-flush.service loaded active exited Trigger Flushing of Journa
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-random-seed.service loaded active exited Load/Save Random Seed
systemd-remount-fs.service loaded active exited Remount Root and Kernel File
[email protected] loaded active exited Load/Save RF Kill Switch
[email protected] loaded active exited Load/Save RF Kill Switch
systemd-sysctl.service loaded active exited Apply Kernel Variables
systemd-tmpfiles-setup-dev.service loaded active exited Create Static Device
systemd-tmpfiles-setup.service loaded active exited Create Volatile Files and
systemd-udev-trigger.service loaded active exited udev Coldplug all Devices
systemd-udevd.service loaded active running udev Kernel Device Manager
systemd-update-utmp.service loaded active exited Update UTMP about System Boo
systemd-user-sessions.service loaded active exited Permit User Sessions
systemd-vconsole-setup.service loaded active exited Setup Virtual Console
tor.service loaded active running Anonymizing Overlay Network
udisks2.service loaded active running Disk Manager
[email protected] loaded active running User Manager for UID 1000
systemctl list-unit-files | grep -i network
dbus-org.freedesktop.NetworkManager.service enabled
[email protected] disabled
NetworkManager-dispatcher.service disabled
NetworkManager-wait-online.service disabled
NetworkManager.service enabled
systemd-networkd-wait-online.service disabled
systemd-networkd.service disabled
network-online.target static
network-pre.target static
network.target static
Last edited by 2arch (2014-12-10 22:54:18)

Open the Sharing pane of System Preferences and enable Internet Sharing over AirPort.
(59391)

[SOLVED] Stopping openvpn@ service on suspend

I'm trying to stop any running openvpn@ service either prior to suspend or immediately after resume. I've got a service file enabled:
[Unit]
Description=Root suspend actions
Before=sleep.target
[Service]
Type=forking
ExecStart=-/home/firecat53/.local/bin/suspend.sh
[Install]
WantedBy=sleep.target
and the helper script suspend.sh:
#!/bin/sh
# Helper script to stop openvpn on suspend
/usr/bin/systemctl stop $(/usr/bin/systemctl | grep openvpn@ | awk '{print $1}')
The helper script works fine when run by itself, but it fails when run from the service file, and openvpn is still running. I've also tried it post-resume, with the same results.
# journalctl
Sep 18 19:56:54 scotty suspend.sh[10544]: Failed to issue method call: Invalid argument
$ systemctl status suspend.sh
suspend.service - Root suspend actions
Loaded: loaded (/etc/systemd/system/suspend.service; enabled)
Active: inactive (dead) since Wed 2013-09-18 19:56:54 PDT; 6min ago
Process: 10544 ExecStart=/home/firecat53/.local/bin/suspend.sh (code=exited, status=1/FAILURE)
Am I doing something wrong here, or is there another way to accomplish this?
Thanks!
Scott
Last edited by firecat53 (2013-09-20 03:52:57)

Thanks for the tip! Solved by extending [email protected] in /etc/systemd/system/[email protected]/suspend_conflict.conf
[Unit]
Conflicts=suspend.target sleep.target
Now it kills the openvpn@ service on suspend and doesn't restart it automatically on resume, which is the behavior I was looking for.
Scott

RAC, openfiler, openvpn

Hi all,
I'm new user in openfiler&RAC environment, I'm going to install openfiler ,oracle RAC and openvpn in one environment, every some one familiar like this work?, is openvpn work probably with oracle RAC (is openvpn certified in oracle certification matrix )?.
Thaks

Hi,
I used VPN networks in large networks,openvpn it's best VPN solution.
-RAC Nodes contains Linux redhat RHEL 5 and openvpn.
-openfiler Servers contain openvpn.
in current time,
openfiler servers: I installed openfiler, and going to install openvpn in openfiler, How to do install openvpn?
RAC Nodes: install RHEL 5 ,Oracle RAC 10.2, openvpn. then configure RAC Nodes , How to do that?Now I understand.
You will implement three different technologies that involves three different types of skill.
Storage (OPENFILER)
Database/Cluster (Oracle/Linux)
Network (OPENVPN)
In this forum I believe that we can help with problems (OS, Storage and Network) related to the installation of Oracle, Oracle or related problem.
If somebody here has worked with this technology and can help you will be great, but I believe you can find the answers in these forums that are specific technologies.
So my recommendation is:
You first solve the problem or setup Openvpn/OpenFile of your envoriment in related forums.
When the environment is configured correctly and you are installing Oracle RAC we can help you on this forum.
Regards,
Levi Pereira
Edited by: Levi Pereira on Mar 16, 2011 4:11 PM

Appstore dosent work and Safari dont open Websites

Hi Everybody,
i have update my Ipad Mini to IOS7. After a few days i cant use the appstore and safari anymore. I can not open the Appstore. The Site is loading again and again until this message is viewed "Connection to Appstore is not possible".
Beneath this, safari cant open websites. Only google is working. I can search für some notes, but if i want to open it, its loading again and the sites not viewed.
Some Apps are working. Like Youtube per example. I can watch videos without problems. I already restart the ipadmini and shut it down but nothing helps at the moment.
Also, i have try to recover my ipad mini over itunes but i cant disable "search my ipad" by the icloud category. I get the message "checking failed, timeout by requirement".
I hope my english is not very bad. iam german.
thanx and i hope you guys can help me.
Daniel

Daniel
Your English is fine. Much better than German for sure.
Try a Restart.
Press and hold the Sleep/Wake button for a few seconds until the red "slide to power off" slider appears, and then slide the slider. Press and hold the Sleep/Wake button until the Apple logo appears.
Resetting your settings
You can also try resetting all settings. Settings>General>Reset>Reset All Settings. You will have to enter all of your device settings again.... All of the settings in the settings app will have to be re-entered. You won't lose any data, but it takes time to enter all of the settings again.
Resetting your device
Press and hold the Sleep/Wake button and the Home button together for at least ten seconds, until the Apple logo appears. Apple recommends this only if you are unable to restart it.
Or if this doesn't work and nobody else on the blog doesn't have a better idea you can contact Apple.
Here is a link to their contacts with most of the information below.
http://www.apple.com/contact/

[SOLVED]OpenVPN internet tunneling not working

Hi all,
I am trying to set up and openvpn server such that all internet traffic from the clients is funneled through the server. I am having issues getting that aspect to work. I am able to connect to the vpn server but I don't have web access when I do.
Here are my configs:
Server openvpn: http://pastebin.com/aBMR7y28
Server iptables: http://pastebin.com/LKmvZRjL
Client openvpn: http://pastebin.com/e4vja65q
I made sure to set net.ipv4.ip_forward to 1 and persist it with sysctl. My server's internet access is just fine.
Let me know if I need to provide more information.
Last edited by evana (2013-11-22 00:11:02)

Foucault wrote:
evana wrote:Ahh changing the rule to -P FORWARD DROP worked. Would you mind explaining how that is different than -A FORWARD -j DROP?
The "-P" argument is the policy rule, which means that FORWARDed packets that do not match any rule will be handled by this rule. In this case they will be dropped. The "-A" argument is the append action. -A FORWARD -j DROP means that "DROP any FORWARDed packet". Since DROP is a final rule all packets that reach this rule are discarded. Every other -A FORWARD rule after that is ignored since it is never reached.
That makes sense. Thanks.

My ipadmini is disabled

i bough a new ipadmini and it got disabled .pls help

Hi shigi,
Follow the instructions in this Support Article that best apply to your situation:
iOS: Device Disabled
Cheers,
GB

Ipadmini and OpenVPN

Similar Messages

Maybe you are looking for