Hi Lisa, First things that come to my mind, are too restrictive settings for apparmor or selinux, but I presume you have checked that...
Hans -----Original Message----- From: Lisa Minogue [mailto:[email protected]] Sent: dinsdag 12 mei 2015 16:50 To: [email protected] Subject: [Openvpn-users] write UDPv4 Operation not permitted (code=1) Hi guys, Under what conditions does the error "write UDPv4 Operation not permitted (code=1)" occur? I've googled for answers and found none that explained the weird behavior. Thanks in advance for your clarification. Lisa Below is the log of the said error: ***************************************************************** Mon March 20 16:30:27 2015 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 2 2014 Mon March 20 16:30:27 2015 WARNING: file 'login.txt' is group or others accessible Mon March 20 16:30:27 2015 Socket Buffers: R=[212992->131072] S=[212992->131072] Mon March 20 16:30:28 2015 UDPv4 link local: [undef] Mon March 20 16:30:28 2015 UDPv4 link remote: [AF_INET]a.b.c.d.:443 Mon March 20 16:30:28 2015 TLS: Initial packet from [AF_INET]a.b.c.d.:443, sid=e181f840 50aa73ec Mon March 20 16:30:30 2015 Validating certificate key usage Mon March 20 16:30:30 2015 ++ Certificate has key usage 00a0, expects 00a0 Mon March 20 16:30:30 2015 VERIFY KU OK Mon March 20 16:30:30 2015 Validating certificate extended key usage Mon March 20 16:30:30 2015 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Mon March 20 16:30:30 2015 VERIFY EKU OK Mon March 20 16:30:30 2015 VERIFY OK: depth=0,blah, blah, bla h......... Mon March 20 16:30:32 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon March 20 16:30:32 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon March 20 16:30:32 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Mon March 20 16:30:32 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon March 20 16:30:32 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Mon March 20 16:30:32 2015 [TG-OVPN-CA] Peer Connection Initiated with [AF_INET]a.b.c.d.:443 Mon March 20 16:30:34 2015 SENT CONTROL [ABC-OVPN]: 'PUSH_REQUEST' (status=1) Mon March 20 16:30:34 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.22 10.8.0.21' Mon March 20 16:30:34 2015 OPTIONS IMPORT: timers and/or timeouts modified Mon March 20 16:30:34 2015 OPTIONS IMPORT: --ifconfig/up options modified Mon March 20 16:30:34 2015 OPTIONS IMPORT: route options modified Mon March 20 16:30:34 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Mon March 20 16:30:34 2015 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=aa:bb:cc:dd:ee:ff Mon March 20 16:30:34 2015 TUN/TAP device tun0 opened Mon March 20 16:30:34 2015 TUN/TAP TX queue length set to 100 Mon March 20 16:30:34 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mon March 20 16:30:34 2015 /sbin/ip link set dev tun0 up mtu 1500 Mon March 20 16:30:34 2015 /sbin/ip addr add dev tun0 local 10.8.0.22 peer 10.8.0.21 Mon March 20 16:30:36 2015 /sbin/ip route add a.b.c.d./32 via 192.168.1.1 Mon March 20 16:30:36 2015 /sbin/ip route add 0.0.0.0/1 via 10.8.0.21 Mon March 20 16:30:36 2015 /sbin/ip route add 128.0.0.0/1 via 10.8.0.21 Mon March 20 16:30:36 2 015 /sbin/ip route add 10.8.0.1/32 via 10.8.0.21 Mon March 20 16:30:36 2015 Initialization Sequence Completed Mon March 20 16:31:50 2015 write UDPv4: Operation not permitted (code=1) Mon March 20 16:31:55 2015 write UDPv4: Operation not permitted (code=1) Mon March 20 16:31:55 2015 write UDPv4: Operation not permitted (code=1) Mon March 20 16:31:58 2015 write UDPv4: Operation not permitted (code=1) ^CMon March 20 16:32:01 2015 event_wait : Interrupted system call (code=4) Mon March 20 16:32:01 2015 /sbin/ip route del 10.8.0.1/32 Mon March 20 16:32:01 2015 /sbin/ip route del 37.221.170.24/32 Mon March 20 16:32:01 2015 /sbin/ip route del 0.0.0.0/1 Mon March 20 16:32:01 2015 /sbin/ip route del 128.0.0.0/1 Mon March 20 16:32:01 2015 Closing TUN/TAP interface Mon March 20 16:32:01 2015 /sbin/ip addr del dev tun0 local 10.8.0.22 peer 10.8.0.21 Mon March 20 16:32:02 2015 SIGINT[hard,] received, process exiting ******************************************************************* ----------------------------------------------------- Mail.be, WebMail and Virtual Office http://www.mail.be ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
