Connection refused

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Launch Tunnelblick
2. Connect

What is the expected output?
Tunnelblick connects... not sure exactly because this is the first time I'm 
using it.

What do you see instead?
2011-01-24 17:51:31 MANAGEMENT: >STATE:1295862691,TCP_CONNECT,,,
2011-01-24 17:51:32 TCP: connect to XXX.X.X.X:XXXX failed, will try again in 5 
seconds: Connection refused

What version of Tunnelblick are you using? On what version of OS X?
Tunnelblick 3.1 (build 2190) OS X 10.4.11

I previously had two different errors with dev tun/tap and kextstat, which I 
seemed to fix by clearing out comments in air.opvn and uninstalling cisco vpn, 
respectively. Now I'm able to attempt a connection, but these lines just come 
up continuously. I already tried unchecking "monitor connection" and checking 
"do not set nameserver", but the same problem continued.

I realize the fix may be located in the Tunnelblick discussion group, but 
unfortunately I'm located in China so I cannot access google groups. Thus, I 
would greatly appreciate your help here!

Original issue reported on code.google.com by mackenzi...@gmail.com on 24 Jan 2011 at 10:15

[GoogleCodeExporter]

Please post your configuration file and complete log (restart Tunnelblick first 
to clear out old info), X-ing out any sensitive info.

Also, please describe the VPN server/service that you are trying to connect to.

Original comment by jkbull...@gmail.com on 24 Jan 2011 at 12:00

• Changed state: Started

[GoogleCodeExporter]

I'm trying to connect to AirVPN; here's the complete log:

2011-01-24 22:47:23 *Tunnelblick: OS X 10.4.11; Tunnelblick 3.1 (build 2190); 
OpenVPN 2.1.4
2011-01-24 22:47:27 *Tunnelblick: Attempting connection with air; Set 
nameserver = 1; monitoring connection
2011-01-24 22:47:27 *Tunnelblick: 
/Applications/Tunnelblick.app/Contents/Resources/openvpnstart start air.ovpn 
XXXX X X X X XX
2011-01-24 22:47:28 *Tunnelblick: kextload: 
/Applications/Tunnelblick.app/Contents/Resources/tun.kext loaded successfully
2011-01-24 22:47:27 *Tunnelblick: openvpnstart: 
/Applications/Tunnelblick.app/Contents/Resources/openvpn --cd 
/Users/XXX/Library/Application Support/Tunnelblick/Configurations --daemon 
--management XXX.X.X.X XXX --config /Users/XXX/Library/Application 
Support/Tunnelblick/Configurations/air.ovpn --log 
/tmp/tunnelblick/logs/-SUsers-SXXX-SLibrary-SApplication 
Support-STunnelblick-SConfigurations-Sair.ovpn.X_X_X_X_XX.XXXX.openvpn.log 
--management-query-passwords --management-hold --script-security 2 --up 
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w 
-d --down 
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m 
-w -d --up-restart
2011-01-24 22:47:28 OpenVPN 2.1.4 i386-apple-darwin10.5.0 [SSL] [LZO2] [PKCS11] 
built on Dec  3 2010
2011-01-24 22:47:28 MANAGEMENT: TCP Socket listening on XXX.X.X.X XXX
2011-01-24 22:47:28 Need hold release from management interface, waiting...
2011-01-24 22:47:28 MANAGEMENT: Client connected from XXX.X.X.X XXX
2011-01-24 22:47:28 MANAGEMENT: CMD 'pid'
2011-01-24 22:47:28 MANAGEMENT: CMD 'state on'
2011-01-24 22:47:28 MANAGEMENT: CMD 'state'
2011-01-24 22:47:28 MANAGEMENT: CMD 'hold release'
2011-01-24 22:47:28 NOTE: the current --script-security setting may allow this 
configuration to call user-defined scripts
2011-01-24 22:47:28 WARNING: file 'user.key' is group or others accessible
2011-01-24 22:47:28 LZO compression initialized
2011-01-24 22:47:28 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 
EL:0 ]
2011-01-24 22:47:28 Socket Buffers: R=[65535->65536] S=[65535->65536]
2011-01-24 22:47:28 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 
EL:0 AF:3/1 ]
2011-01-24 22:47:28 Local Options hash (VER=V4): '958c5492'
2011-01-24 22:47:28 Expected Remote Options hash (VER=V4): '79ef4284'
2011-01-24 22:47:28 Attempting to establish TCP connection with XXX.X.X.X XXX 
[nonblock]
2011-01-24 22:47:28 MANAGEMENT: >STATE:1295880448,TCP_CONNECT,,,
2011-01-24 22:47:29 TCP: connect to XXX.X.X.X XXX failed, will try again in 5 
seconds: Connection refused
2011-01-24 22:47:34 MANAGEMENT: >STATE:1295880454,TCP_CONNECT,,,
2011-01-24 22:47:35 TCP: connect to XXX.X.X.X XXX failed, will try again in 5 
seconds: Connection refused
2011-01-24 22:47:40 MANAGEMENT: >STATE:1295880460,TCP_CONNECT,,,
2011-01-24 22:47:41 TCP: connect to XXX.X.X.X XXX failed, will try again in 5 
seconds: Connection refused

Original comment by mackenzi...@gmail.com on 24 Jan 2011 at 2:53

[GoogleCodeExporter]

And here's the configuration file (including white space):

client
dev tun
proto tcp
remote XX.XX.XXX.XXX XXX
resolv-retry infinite
nobind
persist-key
persist-tun
ca "ca.crt"
cert "user.crt"
key "user.key"
ns-cert-type server
cipher AES-256-CBC
comp-lzo
verb 3

http-proxy XXX.X.X.X XXX

Original comment by mackenzi...@gmail.com on 24 Jan 2011 at 2:56

[GoogleCodeExporter]

The problem is "Connection refused" -- the server is not accepting your 
connection. If you are using the free service, maybe they are "full" and not 
accepting more connections. Things look OK from Tunnelblick's point of view 
(although you are using an out-of-date version of Tunnelblick that has a 
security vulnerability -- you should update it). (I assume the .ovpn was 
obtained by AirVPN and is correct and complete.)

If you are using the free service, you might try asking in AirVPN's forums. If 
you are paying for it, you should contact their tech support.

For a list of other VPN Service Providers (including a couple  that are free), 
see Tunnelblick's Getting VPN Service page at 
http://code.google.com/p/tunnelblick/wiki/wGettingVPNService

Original comment by jkbull...@gmail.com on 24 Jan 2011 at 4:01

[GoogleCodeExporter]

Original comment by jkbull...@gmail.com on 3 Feb 2011 at 10:19

• Changed state: Abandoned
• Added labels: Type-Other
• Removed labels: Type-Defect