search

acidburn0zzz / ics-openvpn

Automatically exported from code.google.com/p/ics-openvpn
1 stars 0 forks source link

Lollipop (CM12) - Route rejected by Android (bad address) #322

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Instal OpenVPN for Android
2. Connect to server

Mobile phone: Oneplus One
System: Cyanogenmod12 nightly (Android 5.0.2)

PROBLEM:
Client throws message: Route rejected by Android (bad address). I can't access 
to my vpn network from mobile phone, I can't even access server ip address. 
Also, my phone is not accessible from my vpn network.

It's confirmed, that problem does not exists on KitKat (Cyanogenmod 11), on the 
same device, with the same configuration and while connection to the same vpn 
server.

Attachments:
- server.conf: my OpenVPN server config file
- client.log: verbose log from Android client
- route.txt: route print on my Android device with OpenVPN connected
- client.ovpn: client configuration used (imported to android app)

Original issue reported on code.google.com by emso...@gmail.com on 25 Jan 2015 at 10:11

Attachments:

GoogleCodeExporter commented 9 years ago 
I believe this fix in the current beta version 
(http://plai.de/android/ics-openvpn-0.6.27pre.apk)

as a workaround you can also do 

push "route 10.8.0.16 255.255.255.255"

Original comment by arne@rfc2549.org on 25 Jan 2015 at 5:55

GoogleCodeExporter commented 9 years ago 
Tried beta version, but it does not change anything. About your workaround, how 
will it affect other clients? Other clients will have other ip assigned so I 
can't push route 10.8.0.16, correct me if I'm wrong

Original comment by emso...@gmail.com on 25 Jan 2015 at 6:55

GoogleCodeExporter commented 9 years ago 
you can also add this as local route in the client.

Original comment by arne@rfc2549.org on 25 Jan 2015 at 7:00

GoogleCodeExporter commented 9 years ago 
How to do this on Android?

Original comment by emso...@gmail.com on 25 Jan 2015 at 7:06

GoogleCodeExporter commented 9 years ago 
I'm not sure, what causes this bug? Is it cm or openvpn issue?

Original comment by emso...@gmail.com on 25 Jan 2015 at 7:19

GoogleCodeExporter commented 9 years ago

Original comment by arne@rfc2549.org on 27 Jan 2015 at 1:34

GoogleCodeExporter commented 9 years ago 
You closed issue 311 and marked this one as duplicate. However, there is 
nothing fixed, beause I installed your beta version and problem is not fixed!

You should reopen this: 
https://code.google.com/p/ics-openvpn/issues/detail?id=311 because it seems to 
be not fixed, sorry.

Original comment by emso...@gmail.com on 27 Jan 2015 at 6:48

GoogleCodeExporter commented 9 years ago 
The error message from your log ("2015-01-01 19:48:58 Route rejected by 
Android10.8.0.16/24 Bad address") should be fixed. Please try again with the 
0.6.27apk. If the bug persists please upload a new log with that version.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 7:22

GoogleCodeExporter commented 9 years ago 
http://pastebin.com/P1bNsv14

This is my log from your beta version linked above. As you can see, it's still 
not fixed.

Original comment by emso...@gmail.com on 27 Jan 2015 at 8:13

GoogleCodeExporter commented 9 years ago 
2015-01-27 21:08:24 Running on A0001 (MSM8974) oneplus, Android API 21, version 
0.6.26, official build

This still does not say 0.6.27. Please really try 
http://plai.de/android/ics-openvpn-0.6.27.apk

Original comment by arne@rfc2549.org on 27 Jan 2015 at 9:44

GoogleCodeExporter commented 9 years ago 
Ok... it can't even connect:
http://pastebin.com/B5tFjWkJ

Original comment by emso...@gmail.com on 27 Jan 2015 at 9:55

GoogleCodeExporter commented 9 years ago 
@11 your android does not like the interface configuration for some reason and 
does not even return a fd.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 10:15

GoogleCodeExporter commented 9 years ago 
Any ideas? Was ok on previous openvpn version

Original comment by emso...@gmail.com on 28 Jan 2015 at 5:13

GoogleCodeExporter commented 9 years ago 
try to reboot your device. Or look into adb logcat if something is there.

Original comment by arne@rfc2549.org on 28 Jan 2015 at 3:16

GoogleCodeExporter commented 9 years ago 
I just upated cm to recent nightly. Now it works, but I was asked again for 
allow vpn to connect. No more routing issues  all works as should

Original comment by emso...@gmail.com on 28 Jan 2015 at 4:20

GoogleCodeExporter commented 9 years ago 
The 0.6.27 beta doesn't fix it for me.

My openvpn server needs to push two routes to client devices, for the networks 
10.52.90.x and 10.52.91.x. The client gets an address on the 10.52.91.x network.

With the previous version, I would get routes to the 90 network but not 91, and 
see the route rejected message. With version 0.6.27, the 91 route is installed 
but not the one to the 90 network.

Log attached.

Original comment by tessa....@gmail.com on 7 Feb 2015 at 5:56

Attachments:

GoogleCodeExporter commented 9 years ago 
You should try 0.6.28.

Original comment by arne@rfc2549.org on 7 Feb 2015 at 8:23

GoogleCodeExporter commented 9 years ago 
Thanks, it works in 0.6.28.

Original comment by tessa....@gmail.com on 21 Feb 2015 at 8:25