vaibhav-rbs / tunnelblick

Automatically exported from code.google.com/p/tunnelblick
0 stars 0 forks source link

tunnelblick hangs after connection #217

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
NOTE: We suggest that you post on the Tunnelblick Discussion Group before
submitting an "Issue". (http://groups.google.com/group/tunnelblick-discuss)

What steps will reproduce the problem?
1. connect to vpn
2. wait after the ip is assigned
3. tunnelblick disconnects and hangs, the only way to quit tunnelblick is to 
kill the process, the gui not responds

With tunnelblick ver 3.3 beta 18 works without problems

What version of Tunnelblick are you using? On what version of OS X?
3.3. beta 21a
Mountain Lion 10.8.2

Please provide any additional information below. Please include your
configuration file and the contents of the OpenVPN Log window (including
the first few lines with version information), but remember to remove any
sensitive information such as IP addresses.

2012-11-02 13:48:49 OpenVPN 2.3-alpha1 i386-apple-darwin10.8.0 [SSL (OpenSSL)] 
[LZO2] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110522-1 (2.2.0)] built on 
Sep 12 2012
2012-11-02 13:48:49 WARNING: No server certificate verification method has been 
enabled.  See http://openvpn.net/howto.html#mitm for more info.
2012-11-02 13:48:49 NOTE: the current --script-security setting may allow this 
configuration to call user-defined scripts
2012-11-02 13:48:49 Attempting to establish TCP connection with 
[AF_INET]1.2.3.4:1234 [nonblock]
2012-11-02 13:48:49 *Tunnelblick: openvpnstart starting OpenVPN:
                    *                    /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3-alpha1/openvpn --cd /Users/luca/Library/Application Support/Tunnelblick/Configurations --daemon --management 127.0.0.1 1337 --config /Users/luca/Library/Application Support/Tunnelblick/Configurations/phoenix.conf --log /Library/Application Support/Tunnelblick/Logs/-SUsers-Sluca-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sphoenix.conf.1_0_0_0_114.1337.openvpn.log --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -a -atADGNWradsgnw --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -a -atADGNWradsgnw --up-restart --route-pre-down /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -m -w -d -a -atADGNWradsgnw
2012-11-02 13:48:51 TCP connection established with [AF_INET]1.2.3.4:1234
2012-11-02 13:48:51 TCPv4_CLIENT link local: [undef]
2012-11-02 13:48:51 TCPv4_CLIENT link remote: [AF_INET]1.2.3.4:1234
2012-11-02 13:48:51 WARNING: this configuration may cache passwords in memory 
-- use the auth-nocache option to prevent this
2012-11-02 13:48:55 [127.0.0.1] Peer Connection Initiated with 
[AF_INET]1.2.3.4:1234
2012-11-02 13:48:57 TUN/TAP device /dev/tap0 opened
2012-11-02 13:48:57 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2012-11-02 13:48:57 /sbin/ifconfig tap0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2012-11-02 13:48:57 NOTE: Tried to delete pre-existing tun/tap instance -- No 
Problem if failure
2012-11-02 13:48:57 /sbin/ifconfig tap0 1.2.36.5 netmask 255.255.252.0 mtu 1500 
up
2012-11-02 13:48:57 
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w 
-d -a -atADGNWradsgnw tap0 1500 1576 1.2.36.5 255.255.252.0 init
                                        add net 1.2.1.64: gateway 1.2.36.1
                                        add net 1.2.4.0: gateway 1.2.36.1
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: Retrieved name 
server(s) [ 1.2.3.239 1.2.3.238 ], domain name [ it.pippo.com ], and SMB 
server(s) [ ]
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
MAN_DNS_CONFIG = No such key
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
MAN_SMB_CONFIG = <dictionary> { NetBIOSName : MACBOOKPRO-LDS Workgroup : 
WORKGROUP }
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
CUR_DNS_CONFIG = <dictionary> { ServerAddresses : <array> { 192.168.1.1 
192.168.1.1 } }
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
CUR_SMB_CONFIG = <dictionary> { NetBIOSName : MACBOOKPRO-LDS Workgroup : 
WORKGROUP }
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: DYN_DNS_DN = 
it.pippo.com; DYN_DNS_SA = 1.2.3.239 1.2.3.238; DYN_DNS_SD =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: DYN_SMB_NN = 
; DYN_SMB_WG = ; DYN_SMB_WA =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_DNS_DN = 
; MAN_DNS_SA = ; MAN_DNS_SD =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: MAN_SMB_NN = 
MACBOOKPRO-LDS; MAN_SMB_WG = WORKGROUP; MAN_SMB_WA =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_DNS_DN = 
; CUR_DNS_SA = 192.168.1.1 192.168.1.1; CUR_DNS_SD =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: CUR_SMB_NN = 
MACBOOKPRO-LDS; CUR_SMB_WG = WORKGROUP; CUR_SMB_WA =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: ServerAddresses were 
not aggregated because running on OS X 10.6 or higher
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: Setting search 
domains to 'it.pippo.com' because running under OS X 10.6 or higher and the 
search domains were not set manually and 'Prepend domain name to search 
domains' was not selected
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: FIN_DNS_DN = 
it.pippo.com; FIN_DNS_SA = 1.2.3.239 1.2.3.238; FIN_DNS_SD = it.pippo.com
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: FIN_SMB_NN = 
MACBOOKPRO-LDS; FIN_SMB_WG = WORKGROUP; FIN_SMB_WA =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: OS X 10.8 or 
higher, so will modify DNS settings using Setup: in addition to State:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_DNS = ; 
SKP_DNS_SA = ; SKP_DNS_SD = ; SKP_DNS_DN =
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_SETUP_DNS 
=
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG: SKP_SMB = #; 
SKP_SMB_NN = #; SKP_SMB_WG = #; SKP_SMB_WA = #
2012-11-02 13:49:00 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Configuration 
changes:
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: 
ServerAddresses 1.2.3.239 1.2.3.238
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: 
SearchDomains it.pippo.com
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD State: 
DomainName it.pippo.com
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD Setup: 
ServerAddresses 1.2.3.239 1.2.3.238
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD Setup: 
SearchDomains it.pippo.com
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ADD Setup: 
DomainName it.pippo.com
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: 
NetBIOSName MACBOOKPRO-LDS
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: 
Workgroup WORKGROUP
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: ##ADD State: 
WINSAddresses
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:01 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Pause for 
configuration changes to be propagated to State:/Network/Global/DNS and .../SMB
2012-11-02 13:49:02 Initialization Sequence Completed
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
Configurations as read back after changes:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/.../DNS = <dictionary> { DomainName : it.pippo.com SearchDomains : 
<array> { it.pippo.com } ServerAddresses : <array> { 1.2.3.239 1.2.3.238 } }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/.../SMB = No such key
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
Setup:/.../DNS = <dictionary> { DomainName : it.pippo.com SearchDomains : 
<array> { it.pippo.com } ServerAddresses : <array> { 1.2.3.239 1.2.3.238 } }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
Setup:/.../SMB = <dictionary> { NetBIOSName : MACBOOKPRO-LDS Workgroup : 
WORKGROUP }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/Network/Global/DNS = <dictionary> { DomainName : it.pippo.com 
SearchDomains : <array> { it.pippo.com } ServerAddresses : <array> { 1.2.3.239 
1.2.3.238 } }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/Network/Global/SMB = <dictionary> { NetBIOSName : MACBOOKPRO-LDS 
Workgroup : WORKGROUP }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: Expected by 
process-network-changes:
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/Network/OpenVPN/DNS = <dictionary> { DomainName : it.pippo.com 
SearchDomains : <array> { it.pippo.com } ServerAddresses : <array> { 1.2.3.239 
1.2.3.238 } }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: DEBUG: 
State:/Network/OpenVPN/SMB = <dictionary> { NetBIOSName : MACBOOKPRO-LDS 
Workgroup : WORKGROUP }
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: Saved the DNS and 
SMB configurations for later use
2012-11-02 13:49:02 *Tunnelblick client.up.tunnelblick.sh: Set up to monitor 
system configuration with leasewatch
2012-11-02 13:49:03 event_wait : Interrupted system call (code=4)
2012-11-02 13:49:03 
/Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelbli
ck.sh -m -w -d -a -atADGNWradsgnw tap0 1500 1576 1.2.36.5 255.255.252.0 init
                                        delete net 1.2.4.0: gateway 1.2.36.1
                                        delete net 1.2.1.64: gateway 1.2.36.1
2012-11-02 13:49:03 
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m 
-w -d -a -atADGNWradsgnw tap0 1500 1576 1.2.36.5 255.255.252.0 init
                                          No such key
2012-11-02 13:49:03 *Tunnelblick client.down.tunnelblick.sh: Cancelled 
monitoring of system configuration changes
2012-11-02 13:49:04 SIGTERM[hard,] received, process exiting
2012-11-02 13:49:04 *Tunnelblick client.down.tunnelblick.sh: DEBUG: Removing 
'Setup:' DNS key
2012-11-02 13:49:04 *Tunnelblick client.down.tunnelblick.sh: Restored the DNS 
and SMB configurations

Original issue reported on code.google.com by lucadist...@gmail.com on 2 Nov 2012 at 1:04

GoogleCodeExporter commented 9 years ago
Thanks for your report. Please post the _complete_ Tunnelblick log.

And if you can also post the Console log, that would be very helpful. You can 
filter entries using the word Tunnelblick. See

http://code.google.com/p/tunnelblick/wiki/cConsoleLog

Original comment by jkbull...@gmail.com on 2 Nov 2012 at 1:26

GoogleCodeExporter commented 9 years ago
The most common cause of this situation is that there is a Tunnelblick dialog 
window which is open and awaiting your response. It may be covered by other 
windows, so you should minimize all other windows to make sure they are not 
covering it.

Original comment by jkbull...@gmail.com on 4 Nov 2012 at 1:06

GoogleCodeExporter commented 9 years ago
No there is no other dialog shown, I see only the notification dialog thah 
shows the disconnected tunnel in red.

Here the console log relative to the openvpn log of above:

02/11/12 13:48:35,397 Tunnelblick[3074]: Configuration file 
/Users/luca/Library/Application Support/Tunnelblick/Configurations/phoenix.conf 
needs ownership/permissions repair
02/11/12 13:48:48,984 Tunnelblick[3074]: Securing configuration file 
/Users/luca/Library/Application Support/Tunnelblick/Configurations/phoenix.conf
02/11/12 13:48:49,008 authexec[3126]: executing 
/Applications/Tunnelblick.app/Contents/Resources/installer
02/11/12 13:48:49,112 Tunnelblick[3074]: Secured configuration file 
/Users/luca/Library/Application Support/Tunnelblick/Configurations/phoenix.conf
02/11/12 13:48:49,604 Tunnelblick[3074]: Keychain item retrieved successfully 
for service = 'Tunnelblick-Auth-phoenix' account = 'username'
02/11/12 13:48:49,615 Tunnelblick[3074]: Keychain item retrieved successfully 
for service = 'Tunnelblick-Auth-phoenix' account = 'password'
02/11/12 13:49:03,066 Tunnelblick[3074]: Received fatal signal 10.
02/11/12 13:49:03,067 Tunnelblick[3074]: signal_handler: Starting cleanup.
02/11/12 13:49:03,067 Tunnelblick[3074]: DEBUG: Cleanup: Entering cleanup
02/11/12 13:49:03,067 Tunnelblick[3074]: DEBUG: Cleanup: Removing status bar 
item
02/11/12 13:49:03,124 Tunnelblick[3074]: DEBUG: Cleanup: Unregistering 
hotKeyEventHandler
02/11/12 13:49:03,124 Tunnelblick[3074]: DEBUG: Cleanup: Setting 
callDelegateOnNetworkChange: NO
02/11/12 13:49:03,125 Tunnelblick[3074]: DEBUG: Cleanup: Will 
killAllConnectionsIncludingDaemons: NO
02/11/12 13:49:03,125 Tunnelblick[3074]: DEBUG: 
killAllConnectionsIncludingDaemons: has checked for active daemons
02/11/12 13:49:03,125 Tunnelblick[3074]: DEBUG: 
killAllConnectionsIncludingDaemons: will use killAll
02/11/12 13:49:03,133 Tunnelblick[3074]: DEBUG: 
killAllConnectionsIncludingDaemons: requested killAll
02/11/12 13:49:04,078 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
02/11/12 13:49:04,079 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 43864064
02/11/12 13:49:04,079 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
02/11/12 13:49:04,080 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 43864064
02/11/12 13:49:04,080 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
02/11/12 13:49:04,081 Tunnelblick[3074]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 43864064
02/11/12 13:49:20,469 com.apple.launchd.peruser.501[297]: 
([0x0-0x2e62e6].net.tunnelblick.tunnelblick[3074]) Exited: Killed: 9

Original comment by lucadist...@gmail.com on 5 Nov 2012 at 5:44

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
Encountering same issue on Mountain Lion 10.8.2 and Tunnelblick 3.3beta28 
(build 3153)

Console Log:

11/28/12 2:32:14.566 PM Tunnelblick[27543]: DEBUG: currentIPInfo(Name): 
[63.232.111.128, 25823, 205.233.73.66]
11/28/12 2:32:15.006 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:15.006 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:15.007 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:15.007 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:15.007 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:15.007 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:15.278 PM Tunnelblick[27543]: openvpnstart stderr from 
unloadKexts:
DEBUG: Became root
DEBUG: runAsRoot: Executing /sbin/kextunload -q -b net.tunnelblick.tun
DEBUG: Stopped being root
DEBUG: stdout: 
DEBUG: stderr: 
DEBUG: runAsRoot: Finished execution
11/28/12 2:32:26.318 PM Tunnelblick[27543]: DEBUG: currentIPInfo(Name): IP 
address info was fetched in 386 milliseconds
11/28/12 2:32:26.318 PM Tunnelblick[27543]: DEBUG: currentIPInfo(Name): 
[63.232.111.128, 25823, 205.233.73.66]
11/28/12 2:32:26.750 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:26.751 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:26.751 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:26.751 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:26.751 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: Entered
11/28/12 2:32:26.752 PM Tunnelblick[27543]: DEBUG: 
cancelAllIPCheckThreadsForConnection: No active threads for connection 51496448
11/28/12 2:32:26.994 PM Tunnelblick[27543]: openvpnstart stderr from 
unloadKexts:
DEBUG: Became root
DEBUG: runAsRoot: Executing /sbin/kextunload -q -b net.tunnelblick.tun
DEBUG: Stopped being root
DEBUG: stdout: 
DEBUG: stderr: 
DEBUG: runAsRoot: Finished execution

Original comment by NickForm...@gmail.com on 28 Nov 2012 at 9:35

GoogleCodeExporter commented 9 years ago
Further private emails with NickFormerlyKnownAsPrince resolved his situation, 
which did not hang and has nothing to do with this Issue.

Original comment by jkbull...@gmail.com on 4 Dec 2012 at 9:45

GoogleCodeExporter commented 9 years ago
Same here: upgraded from 3.3beta18 to 3.3beta21a and Tunnelblick stopped 
working. Tunnelblick seems to connect, even gets an IP address, but then the 
GUI (the menubar icon) disappears and a "Tunnelblick" process keeps the CPU 
busy. At this point the tun0 interface is gone and the VPN is not working. As 
there's no GUI part to terminate any more, the only solution is to kill the 
process.

Attached are 3 files:

* tunnelblick-sample-1.txt, a "sample" of the spinning "Tunnelblick", taken via 
"Activity Monitor"
* tunnelblick-consolelog.txt, what syslog captured during all this
* tunnelblick-vpnlog.txt, the log output from the "log" statement in the 
openvpn configuration file, verbose=4.

Original comment by ckujau on 4 Dec 2012 at 9:53

Attachments:

GoogleCodeExporter commented 9 years ago
FWIW, downgrading to 3.3beta18. Upgrading to 3.3beta22 shows the same symptoms 
as beta21. And beta24 requires a .tblk configuration, which I don't have. Also, 
starting openvpn manually (using the version beta24 ships with) seems to work:

$ sudo chown -R root:wheel 
/Applications/Non-Apple/Tunnelblick.app/Contents/Resources/tun.kext
$ sudo kextload 
/Applications/Non-Apple/Tunnelblick.app/Contents/Resources/tun.kext
$ kextstat | grep net.tunnelblick.tun
  146    0 0xffffff7f807cf000 0x6000     0x6000     net.tunnelblick.tun (1.0) <7 5 4 1>

$ cd ~/Library/Application Support/Tunnelblick/Configurations
$ sudo 
/Applications/Non-Apple/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3-a
lpha1/openvpn --config vpn.conf

Original comment by ckujau on 4 Dec 2012 at 10:24

GoogleCodeExporter commented 9 years ago
Ahah! Thank you, ckujau, for providing all those details and trying the 
different versions. I now see at least part of what is going on.

I think this is caused by a bug in the DNS flush logic. That is fixed in 
Tunnelblick 3.3beta28.

(There may be a bug in the error handling logic, too, which is causing the 
hang, and I will look into that, but the error shouldn't have happened in the 
first place.)

You can easily make a Tunnelblick VPN Configuration and try 3.3beta28. See 
http://code.google.com/p/tunnelblick/wiki/cConfigT#Creating_and_Installing_a_Tun
nelblick_VPN_Configuration

Or you can try not flushing DNS for the configuration (using 3.3beta21):
     1. Open the VPN Details… window
     2. Click on a configuration in the left pane to select it
     3. Click on the Settings tab, then on the Advanced button
     4. Un-check "Flush DNS cache after connecting or disconnecting"

Original comment by jkbull...@gmail.com on 4 Dec 2012 at 10:41

GoogleCodeExporter commented 9 years ago
Bingo! Unchecking "Flush DNS cache..." did the trick. I've only tested with 
beta21 now, will test beta28 later on. Thanks!

Original comment by ckujau on 4 Dec 2012 at 11:40

GoogleCodeExporter commented 9 years ago
To clarify: When you try 3.3beta28, you should be able to put back the 
checkmark in "Flush DNS cache..."

I'm leaving this Issue open until I fix the bug in the error handling logic or 
determine that there isn't one.

Original comment by jkbull...@gmail.com on 5 Dec 2012 at 12:14

GoogleCodeExporter commented 9 years ago
Yep, 3.3beta28 works with "Flush DNS cache...". On a side note, I'm not too 
happy about all this .tblk stuff and beta28 forced itself into /Applications 
now, but oh well, it works and it's free so I'll stop whining now :-)

Thanks for fixing this!

Original comment by ckujau on 5 Dec 2012 at 3:15

GoogleCodeExporter commented 9 years ago
Tunnelblick is in /Applications so that it is in a securable place. This is 
necessary to avoid the security issues raised in Issue 212.

Original comment by jkbull...@gmail.com on 16 Dec 2012 at 2:15

GoogleCodeExporter commented 9 years ago
/Applications is just as secure as any other root-controlled location. Issue 
212 is about (getting rid of) SUID code, and rightly so. Unfortunately Apple is 
making use of SUID/SGID binaries too and AFAICS they provide zero documentation 
about alternatives akin to Linux' capabilities(7) or other approaches.

Original comment by ckujau on 17 Dec 2012 at 1:25