Lollipop (CM12) - Route rejected by Android (bad address)

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Instal OpenVPN for Android
2. Connect to server

Mobile phone: Oneplus One
System: Cyanogenmod12 nightly (Android 5.0.2)

PROBLEM:
Client throws message: Route rejected by Android (bad address). I can't access 
to my vpn network from mobile phone, I can't even access server ip address. 
Also, my phone is not accessible from my vpn network.

It's confirmed, that problem does not exists on KitKat (Cyanogenmod 11), on the 
same device, with the same configuration and while connection to the same vpn 
server.

Attachments:
- server.conf: my OpenVPN server config file
- client.log: verbose log from Android client
- route.txt: route print on my Android device with OpenVPN connected
- client.ovpn: client configuration used (imported to android app)

Original issue reported on code.google.com by emso...@gmail.com on 25 Jan 2015 at 10:11

• Merged into: #311

Attachments:

• server.conf
• client.log
• route.txt
• client.ovpn

[GoogleCodeExporter]

I believe this fix in the current beta version 
(http://plai.de/android/ics-openvpn-0.6.27pre.apk)

as a workaround you can also do 

push "route 10.8.0.16 255.255.255.255"

Original comment by arne@rfc2549.org on 25 Jan 2015 at 5:55

[GoogleCodeExporter]

Tried beta version, but it does not change anything. About your workaround, how 
will it affect other clients? Other clients will have other ip assigned so I 
can't push route 10.8.0.16, correct me if I'm wrong

Original comment by emso...@gmail.com on 25 Jan 2015 at 6:55

[GoogleCodeExporter]

you can also add this as local route in the client.

Original comment by arne@rfc2549.org on 25 Jan 2015 at 7:00

[GoogleCodeExporter]

How to do this on Android?

Original comment by emso...@gmail.com on 25 Jan 2015 at 7:06

[GoogleCodeExporter]

I'm not sure, what causes this bug? Is it cm or openvpn issue?

Original comment by emso...@gmail.com on 25 Jan 2015 at 7:19

[GoogleCodeExporter]

Original comment by arne@rfc2549.org on 27 Jan 2015 at 1:34

• Changed state: Duplicate

[GoogleCodeExporter]

You closed issue 311 and marked this one as duplicate. However, there is 
nothing fixed, beause I installed your beta version and problem is not fixed!

You should reopen this: 
https://code.google.com/p/ics-openvpn/issues/detail?id=311 because it seems to 
be not fixed, sorry.

Original comment by emso...@gmail.com on 27 Jan 2015 at 6:48

[GoogleCodeExporter]

The error message from your log ("2015-01-01 19:48:58 Route rejected by 
Android10.8.0.16/24 Bad address") should be fixed. Please try again with the 
0.6.27apk. If the bug persists please upload a new log with that version.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 7:22

[GoogleCodeExporter]

http://pastebin.com/P1bNsv14

This is my log from your beta version linked above. As you can see, it's still 
not fixed.

Original comment by emso...@gmail.com on 27 Jan 2015 at 8:13

[GoogleCodeExporter]

2015-01-27 21:08:24 Running on A0001 (MSM8974) oneplus, Android API 21, version 
0.6.26, official build

This still does not say 0.6.27. Please really try 
http://plai.de/android/ics-openvpn-0.6.27.apk

Original comment by arne@rfc2549.org on 27 Jan 2015 at 9:44

[GoogleCodeExporter]

Ok... it can't even connect:
http://pastebin.com/B5tFjWkJ

Original comment by emso...@gmail.com on 27 Jan 2015 at 9:55

[GoogleCodeExporter]

@11 your android does not like the interface configuration for some reason and 
does not even return a fd. 

Original comment by arne@rfc2549.org on 27 Jan 2015 at 10:15

[GoogleCodeExporter]

Any ideas? Was ok on previous openvpn version

Original comment by emso...@gmail.com on 28 Jan 2015 at 5:13

[GoogleCodeExporter]

try to reboot your device. Or look into adb logcat if something is there.

Original comment by arne@rfc2549.org on 28 Jan 2015 at 3:16

[GoogleCodeExporter]

I just upated cm to recent nightly. Now it works, but I was asked again for 
allow vpn to connect. No more routing issues  all works as should

Original comment by emso...@gmail.com on 28 Jan 2015 at 4:20

[GoogleCodeExporter]

The 0.6.27 beta doesn't fix it for me.

My openvpn server needs to push two routes to client devices, for the networks 
10.52.90.x and 10.52.91.x. The client gets an address on the 10.52.91.x network.

With the previous version, I would get routes to the 90 network but not 91, and 
see the route rejected message. With version 0.6.27, the 91 route is installed 
but not the one to the 90 network.

Log attached.

Original comment by tessa....@gmail.com on 7 Feb 2015 at 5:56

Attachments:

• [ICS OpenVPN log file](https://storage.googleapis.com/google-code-attachments/ics-openvpn/issue-322/comment-16/ICS OpenVPN log file)

[GoogleCodeExporter]

You should try 0.6.28.

Original comment by arne@rfc2549.org on 7 Feb 2015 at 8:23

[GoogleCodeExporter]

Thanks, it works in 0.6.28.

Original comment by tessa....@gmail.com on 21 Feb 2015 at 8:25