qdm12 / gluetun-wiki

Home to the Markdown Wiki page for Gluetun
MIT License
427 stars 49 forks source link

ProtonVPN: OpenVPN Your credentials might be wrong due to bad server filters? #49

Open Raj1467 opened 9 months ago

Raj1467 commented 9 months ago

glueten log file.txt

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/protonvpn.md

What's missing?

Hi

I have looked through the discussions and found only one other discussion which didn't resolve my issue. The suggestion there was to check the username & password as they could be wrong.

I have done that. The username & password works but only after a few tries. The log shows that after it gets an error, it keeps reattempting multiple times and after like 4-5 attempts, it works.

2024-03-02T14:43:40Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting 2024-03-02T14:43:50Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.107.56.229:1194 2024-03-02T14:43:50Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:43:50Z INFO [openvpn] UDP link remote: [AF_INET]185.107.56.229:1194 2024-03-02T14:43:51Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634' 2024-03-02T14:43:51Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-02T14:43:51Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' 2024-03-02T14:43:51Z INFO [openvpn] [node-nl-168.protonvpn.net] Peer Connection Initiated with [AF_INET]185.107.56.229:1194 2024-03-02T14:43:54Z INFO [healthcheck] program has been unhealthy for 21s: restarting VPN 2024-03-02T14:43:54Z INFO [healthcheck] ๐Ÿ‘‰ See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-03-02T14:43:54Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-03-02T14:43:54Z INFO [vpn] stopping 2024-03-02T14:43:54Z INFO [vpn] starting 2024-03-02T14:43:54Z INFO [firewall] allowing VPN connection... 2024-03-02T14:43:54Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022 2024-03-02T14:43:54Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10 2024-03-02T14:43:54Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.159.158.135:1194 2024-03-02T14:43:54Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:43:54Z INFO [openvpn] UDP link remote: [AF_INET]185.159.158.135:1194 2024-03-02T14:44:21Z INFO [healthcheck] program has been unhealthy for 26s: restarting VPN 2024-03-02T14:44:21Z INFO [healthcheck] ๐Ÿ‘‰ See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-03-02T14:44:21Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-03-02T14:44:21Z INFO [vpn] stopping 2024-03-02T14:44:21Z INFO [vpn] starting 2024-03-02T14:44:21Z INFO [firewall] allowing VPN connection... 2024-03-02T14:44:21Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022 2024-03-02T14:44:21Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10 2024-03-02T14:44:21Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]190.2.132.139:1194 2024-03-02T14:44:21Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:44:21Z INFO [openvpn] UDP link remote: [AF_INET]190.2.132.139:1194 2024-03-02T14:44:22Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634' 2024-03-02T14:44:22Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-02T14:44:22Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' 2024-03-02T14:44:22Z INFO [openvpn] [node-nl-28.protonvpn.net] Peer Connection Initiated with [AF_INET]190.2.132.139:1194 2024-03-02T14:44:29Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED Your credentials might be wrong ๐Ÿคจ 2024-03-02T14:44:29Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting 2024-03-02T14:44:39Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]190.2.132.139:1194 2024-03-02T14:44:39Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:44:39Z INFO [openvpn] UDP link remote: [AF_INET]190.2.132.139:1194 2024-03-02T14:44:40Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634' 2024-03-02T14:44:40Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-02T14:44:40Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' 2024-03-02T14:44:40Z INFO [openvpn] [node-nl-28.protonvpn.net] Peer Connection Initiated with [AF_INET]190.2.132.139:1194 2024-03-02T14:44:47Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED Your credentials might be wrong ๐Ÿคจ 2024-03-02T14:44:47Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting 2024-03-02T14:44:52Z INFO [healthcheck] program has been unhealthy for 31s: restarting VPN 2024-03-02T14:44:52Z INFO [healthcheck] ๐Ÿ‘‰ See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-03-02T14:44:52Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-03-02T14:44:52Z INFO [vpn] stopping 2024-03-02T14:44:52Z INFO [vpn] starting 2024-03-02T14:44:52Z INFO [firewall] allowing VPN connection... 2024-03-02T14:44:52Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022 2024-03-02T14:44:52Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10 2024-03-02T14:44:52Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]192.40.57.231:1194 2024-03-02T14:44:52Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:44:52Z INFO [openvpn] UDP link remote: [AF_INET]192.40.57.231:1194 2024-03-02T14:45:28Z INFO [healthcheck] program has been unhealthy for 36s: restarting VPN 2024-03-02T14:45:28Z INFO [healthcheck] ๐Ÿ‘‰ See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-03-02T14:45:28Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-03-02T14:45:28Z INFO [vpn] stopping 2024-03-02T14:45:28Z INFO [vpn] starting 2024-03-02T14:45:28Z INFO [firewall] allowing VPN connection... 2024-03-02T14:45:28Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022 2024-03-02T14:45:28Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10 2024-03-02T14:45:28Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.177.124.84:1194 2024-03-02T14:45:28Z INFO [openvpn] UDP link local: (not bound) 2024-03-02T14:45:28Z INFO [openvpn] UDP link remote: [AF_INET]185.177.124.84:1194 2024-03-02T14:45:29Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634' 2024-03-02T14:45:29Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-02T14:45:29Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo' 2024-03-02T14:45:29Z INFO [openvpn] [node-nl-108.protonvpn.net] Peer Connection Initiated with [AF_INET]185.177.124.84:1194 2024-03-02T14:45:30Z INFO [openvpn] setsockopt TCP_NODELAY=1 failed 2024-03-02T14:45:30Z INFO [openvpn] TUN/TAP device tun0 opened 2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500 2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip link set dev tun0 up 2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip addr add dev tun0 10.24.0.15/16 2024-03-02T14:45:30Z INFO [openvpn] UID set to nonrootuser 2024-03-02T14:45:30Z INFO [openvpn] Initialization Sequence Completed 2024-03-02T14:45:30Z INFO [dns] downloading DNS over TLS cryptographic files 2024-03-02T14:45:31Z INFO [healthcheck] healthy! 2024-03-02T14:45:35Z INFO [dns] downloading hostnames and IP block lists 2024-03-02T14:45:45Z INFO [dns] init module 0: validator 2024-03-02T14:45:45Z INFO [dns] init module 1: iterator 2024-03-02T14:45:45Z INFO [dns] start of service (unbound 1.19.1). 2024-03-02T14:45:46Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN 2024-03-02T14:45:46Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN 2024-03-02T14:45:48Z INFO [dns] ready 2024-03-02T14:45:48Z INFO [healthcheck] healthy! 2024-03-02T14:45:50Z INFO [vpn] You are running 1 commit behind the most recent latest 2024-03-02T14:45:50Z INFO [ip getter] Public IP address is 185.177.124.97 (Netherlands, South Holland, Naaldwijk)

Here is my docker-compose.yml

version: '3'

services: gluetun: image: qmcgaw/gluetun container_name: gluetun restart: always cap_add:

  • NET_ADMIN environment:
  • VPN_SERVICE_PROVIDER=protonvpn
  • OPENVPN_USER=xxxxxxxx
  • OPENVPN_PASSWORD=xxxxxxxxxx
  • SERVER_COUNTRIES=Netherlands

    - PORT=443

    - PORT=1194

    volumes:

  • ./config:/gluetun ports:
  • 9117:9117
  • 9696:9696
  • 8191:8191

Since it connected at 3rd attempt, the issue isn't with my credentials.

I also have to restart every other container that depends on this so it they connect successfully.

Smody121 commented 7 months ago

You ever figure this out? I'm having the same problem.

EDIT: I figured it out for anyone who searches in the future - I made the mistake of using my VPN's web browser login credentials instead of logging in first, then getting the username and password directly from the VPN provider. So for Surfshark, it would be under VPN>Manual Setup>Credentials

ismay commented 5 months ago

I've encountered this as well. For me the credentials are correct, so that's not the cause. It also resolved itself, after restarting gluetun twice. I've not been able to narrow down the exact cause. Usually gluetun runs for weeks without issue with this config.

Maybe this issue should be in the main gluetun repo, not the wiki. I can imagine it's maybe related to getting a server that your account doesn't have access to? Which https://github.com/qdm12/gluetun/issues/1103 should resolve.

Or it's this: https://github.com/qdm12/gluetun/issues/1672, or this: https://github.com/qdm12/gluetun/issues/2154 maybe?

qdm12 commented 4 months ago

@Raj1467 are you using the free tier? Or using VPN server side port forwarding? If yes, this is likely due to https://github.com/qdm12/gluetun/issues/1103 as @ismay pointed out, which I'm working on now. Please subscribe to this issue to be notified when this is resolved. Otherwise, did you try updating you servers as mentioned in the healthcheck link given in the logs?

https://github.com/qdm12/gluetun/issues/1672 would definitely help, although not resolve fully this issue. https://github.com/qdm12/gluetun/issues/2154 is a mixed bag of issues, so I would recommend ignoring it mostly ๐Ÿคท I'm keeping it opened AND pinned so hopefully people don't create one duplicate issue per day of that one.

qdm12 commented 3 months ago

Please pull the latest image, I'm sure it's much better now, ProtonVPN server filtering is much better, and it automatically filters p2p only servers if port forwarding is on.

DrTableBasse commented 3 months ago

Hey ! I just pulled the latest image and got the same error :-/ Your credentials might be wrong ๐Ÿคจ

beyondunreal79 commented 2 weeks ago

I have the exact same issue